From nobody Thu Nov 10 14:13:04 2022 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4N7P212X7Sz4dbVt for ; Thu, 10 Nov 2022 14:13:13 +0000 (UTC) (envelope-from lutz@iks-jena.de) Received: from annwfn.iks-jena.de (annwfn.iks-jena.de [IPv6:2001:4bd8::19]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4N7P2059Lyz4HBV for ; Thu, 10 Nov 2022 14:13:12 +0000 (UTC) (envelope-from lutz@iks-jena.de) Authentication-Results: mx1.freebsd.org; dkim=none; spf=pass (mx1.freebsd.org: domain of lutz@iks-jena.de designates 2001:4bd8::19 as permitted sender) smtp.mailfrom=lutz@iks-jena.de; dmarc=none X-SMTP-Sender: IPv6:2001:4bd8:0:666:248:54ff:fe12:ee3f Received: from belenus.iks-jena.de (belenus.iks-jena.de [IPv6:2001:4bd8:0:666:248:54ff:fe12:ee3f]) by annwfn.iks-jena.de (8.15.2/8.15.2) with ESMTPS id 2AAED52m006978 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 10 Nov 2022 15:13:05 +0100 X-MSA-Host: belenus.iks-jena.de Received: (from lutz@localhost) by belenus.iks-jena.de (8.14.3/8.14.1/Submit) id 2AAED4ke001974; Thu, 10 Nov 2022 15:13:04 +0100 Date: Thu, 10 Nov 2022 15:13:04 +0100 From: Lutz Donnerhacke To: =?iso-8859-1?Q?=D6zkan?= KIRIK Cc: FreeBSD Net Subject: Re: Bridging LACP PDUs ? Message-ID: <20221110141304.GA1830@belenus.iks-jena.de> References: <20221110131224.GA308@belenus.iks-jena.de> List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: X-message-flag: Please send plain text messages only. Thank you. User-Agent: Mutt/1.5.17 (2007-11-01) X-Spamd-Bar: -- X-Spamd-Result: default: False [-2.10 / 15.00]; SUBJECT_ENDS_QUESTION(1.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FORGED_SENDER(0.30)[lutz@donnerhacke.de,lutz@iks-jena.de]; R_SPF_ALLOW(-0.20)[+ip6:2001:4bd8::/48:c]; RCVD_IN_DNSWL_LOW(-0.10)[2001:4bd8:0:666:248:54ff:fe12:ee3f:received]; MIME_GOOD(-0.10)[text/plain]; R_DKIM_NA(0.00)[]; MLMMJ_DEST(0.00)[freebsd-net@freebsd.org]; FREEMAIL_TO(0.00)[gmail.com]; ASN(0.00)[asn:15725, ipnet:2001:4bd8::/29, country:DE]; TO_MATCH_ENVRCPT_SOME(0.00)[]; ARC_NA(0.00)[]; FROM_NEQ_ENVFROM(0.00)[lutz@donnerhacke.de,lutz@iks-jena.de]; TAGGED_RCPT(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_TWO(0.00)[2]; DMARC_NA(0.00)[donnerhacke.de]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_THREE(0.00)[3]; TO_DN_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[] X-Rspamd-Queue-Id: 4N7P2059Lyz4HBV X-ThisMailContainsUnwantedMimeParts: N On Thu, Nov 10, 2022 at 04:28:50PM +0300, Özkan KIRIK wrote: > I'm trying to filter traffic through an uplink cable between two > switches. (similar to virtual wire behaviour). > So all broadcast & multicast packages should pass to the other port. > But pf or ipfw should work for L3+ packages. So I'd suggest to set up a cross-connect between the interfaces: # ngctl connect eth0: eth1: lower lower If you like to filter: # ngctl mkpeer eth0: bpf lower left # ngctl connect eth0:lower eth1: right lower Then you can apply any filtering using ng_bpf (by throwing away (non)matching traffic to an unconnected hook)