[pve-devel] can't add fwpr2004p0 to bridge vmbr0: Unknown error 524

[Alexandre DERUMIER]

>>What is the difference between the normal tap device without firewall -
>>which works fine for me on vmbr0 and vmbr1 and the firewall tap one?

They are not difference.

we just need a dedicated bridge (fwbrxxx) by firewalled tap interface,
and this bridge is plugged to vmbrX through a veth pair( fwprxxxx)



----- Mail original ----- 

De: "Stefan Priebe - Profihost AG" <s.priebe at profihost.ag> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Lundi 16 Juin 2014 11:29:00 
Objet: Re: [pve-devel] can't add fwpr2004p0 to bridge vmbr0: Unknown error 524 

What is the difference between the normal tap device without firewall - 
which works fine for me on vmbr0 and vmbr1 and the firewall tap one? 

Stefan 
Am 16.06.2014 11:10, schrieb Stefan Priebe - Profihost AG: 
> Hi, 
> 
> i get the same problem with the official redhat PVE Kernel. 
> 
> What i don't understand is that it works fine with vmbr1 but not with 
> vmbr0. 
> 
> Interfaces file on host: 
> 
> auto vmbr0 
> iface vmbr0 inet static 
> address XX.XX.XX.XX 
> netmask 255.255.255.128 
> gateway XX.XX.XX.XX 
> bridge_ports bond0 
> bridge_stp off 
> bridge_fd 0 
> 
> auto vmbr1 
> iface vmbr1 inet manual 
> bridge_ports bond1 
> bridge_stp off 
> bridge_fd 0 
> 
> Stefan 
> 
> Am 16.06.2014 09:50, schrieb Alexandre DERUMIER: 
>>>> Do i need a special kernel feature? 
>> I don't think. 
>> It's just create a veth pair, then plug them in bridge. 
>> 
>> I check my logs, I don't have theses 
>> 
>> "netpoll: (null): fwpr2004p0 doesn't support polling, aborting " 
>> 
>> do you use a custom kernel ? 
> 
> Stefan 
>