[PVE-User] VxLAN and tagged frames

[Daniel Berteaud]

----- Le 24 Jan 20, à 8:20, Daniel Berteaud daniel at firewall-services.com a écrit :

> ----- Le 23 Jan 20, à 20:53, Alexandre DERUMIER aderumier at odiso.com a écrit :

>> 
>> I think if you want to do something like a simple vxlan tunnel, with multiple
>> vlan, something like this should work (need to be tested):
>> 
>> auto vxlan2
>> iface vxlan2 inet manual
>>        vxlan-id 2
>>        vxlan_remoteip 192.168.0.2
>>        vxlan_remoteip 192.168.0.3
>> 
>> auto vmbr2
>> iface vmbr2 inet manual
>>        bridge_ports vxlan2
>>        bridge_stp off
>>        bridge_fd 0
>>        bridge-vlan-aware yes
>>        bridge-vids 2-4096
> 
> I'll try something like that. 

Arf. ifupdown2 seems to be needed for vxlan interfaces to be setup. But it somehow breaks my ARP proxy setup on the WAN interface.
Not sure why, everything seems to be correctly setup, but the host doesn't answer to ARP requests anymore. And everything is back to normal as soon as I revert to classic ifupdown.
I'll try to look at this a bit later, when I more some spare time.

++

-- 
[ https://www.firewall-services.com/ ] 	
Daniel Berteaud 
FIREWALL-SERVICES SAS, La sécurité des réseaux 
Société de Services en Logiciels Libres 
Tél : +33.5 56 64 15 32 
Matrix: @dani:fws.fr 
[ https://www.firewall-services.com/ | https://www.firewall-services.com ]