Re: Xen and VLANs

[Johan Ihren <johani%autonomica.se@localhost>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Manuel,

> > Any ideas anyone?
>
> I tried this too, and this doesn't work. The problem is with the way
> bridge and vlan works, once you have a brige packets will never be
> passed to the vlan interfaces (or the opposite, I don't remember).
>
> My workaround was to bridge the N vlan interface in dom0 (creating N
> xennet interface for each domU) instead of bridging the physical  
> interface
> and creating the vlans in each domU

Ho hum. I see.

I understand your workaround, but unfortunately it doesn't work for  
me because I actually need the physical interface to be bridged  
because that's the way I arrange remote login access to students  
(located at various desktops outside without any VLANs). Yes, I know  
it's messy to mix both tagged and untagged traffic over the same  
infrastructure, but that's the only solution I found.

Another alternative (vastly preferred from my POV) was if there was  
any way to connect to the domUs from the dom0 without involving the  
physical interface at all. I.e. if the dom0 also had one (or several)  
"virtual" xennetN, then everything would work out just fine with a  
cleaner design than both your workaround and my (non-functional)  
attempt.

Would it be possible to add that?

A third alternative in my case would be to create an "admin domU"  
that replaces the dom0 for all communication with other domUs and  
then have the admin domU talk to the dom0 over an untagged  
connection. I knew that before posting in the first place, but that's  
a really, really kludgy solution that I'd like to avoid if at all  
possible.

Johan

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (Darwin)

iQCVAwUBQ75W7votlDfa2H4ZAQKpaAQAmMO+w47V92cBhw32QsFgdX6QZy8mcJhP
oc2HigM0Oya1wqQafehK59WCtw/ljqbONE3vStoBE+3WjtwwKIzUEa7cM5CILmOK
h4GpwveOf8KbXIaf4oWcPgETGwO7zmTji6rnCG6ZvDEEOpBgra9qD8D/CZ2C3gbk
HCS6OzDg9z0=
=I8f3
-----END PGP SIGNATURE-----