tunneling L2 tagged traffic over IP

[Victor Sudakov]

Victor Sudakov wrote:
> Nikos Vassiliadis wrote:
> > >
> > > Could you advise a solution for tunneling L2 (Ethernet) traffic over IP?
> > >
> > > There is a solution in bridge(4) using the EtherIP protocol, but it
> > > works with untagged frames only. I need to tunnel 802.1q tagged frames
> > > as well.
> > >
> > > Any ideas?
> > >
> > >
> > You can do this with netgraph. Check this post:
> > 
> > http://lists.freebsd.org/pipermail/freebsd-net/2005-October/008861.html
> > 
> 
> It's a modification of the /usr/share/examples/netgraph/ether.bridge
> script. How do you know that it would pass 802.1q tagged frames? It
> references a "fxp0" interface which passes untagged traffic unless a
> vlan(4) interface is configured on top thereof.

The script does not work. It prints error messages like

+ LINKNUM=1
+ ngctl mkpeer bnet0: ksocket link1 inet/dgram/udp
+ ngctl msg ng0:inet bind inet/10.14.143.136:4028
ngctl: send msg: No such file or directory
+ ngctl msg ng0:inet connect inet/10.14.140.125:4028
ngctl: send msg: No such file or directory
+ expr 1 + 1
+ LINKNUM=2

and does not generate any traffic. Perhaps it needs some debugging. I
am still looking for a solution, thanks in advance to all who has
anything to say.

In the meanwhile, I have tried bridging ethernet NICs and tap(4), and
connected two tap(4) devices with net/vtun. It works, but again, only
for untagged frames.


-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:sudakov at sibptus.tomsk.ru