[CentOS] VLAN issue

[Boris Epstein]

And additionally here are the detailed port configs on the switch end:

hq>show interface Gi1/0/3 switchport
Name: Gi1/0/3
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 48 (VLAN0048)
Trunking Native Mode VLAN: 48 (VLAN0048)
Administrative Native VLAN tagging: enabled
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk Native VLAN tagging: enabled
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk associations: none
Administrative private-vlan trunk mappings: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL

Protected: false
Unknown unicast blocked: disabled
Unknown multicast blocked: disabled
Appliance trust: none
hq>show interface Gi1/0/3 trunk

Port        Mode             Encapsulation  Status        Native vlan
Gi1/0/3     on               802.1q         trunking      48

Port        Vlans allowed on trunk
Gi1/0/3     1-4094

Port        Vlans allowed and active in management domain
Gi1/0/3     1-3,7,48-50

Port        Vlans in spanning tree forwarding state and not pruned
Gi1/0/3     1-3,7,48-50
hq>

Boris.

On Sun, Jan 25, 2015 at 7:05 PM, Boris Epstein <borepstein at gmail.com> wrote:

> Thank you everyone.
>
> OK, the mystery deepens, I guess. The machine does need to support several
> VLAN's, it is currently on a trunkport (8021q encapsulated), it made it
> into the ARP table - which I specifically tested for by physically
> unplugging the table, clearing the ARP table and plugging it back in.
>
> The ARP table currently looks like this:
>
> hq#show arp
> Protocol  Address          Age (min)  Hardware Addr   Type   Interface
> Internet  192.168.48.100          0   0025.6440.0301  ARPA   Vlan48
> Internet  192.168.48.101          -   001b.906a.bcc4  ARPA   Vlan48
> Internet  192.168.48.1            0   0025.6440.063f  ARPA   Vlan48
> Internet  192.168.2.52            0   0025.6440.0547  ARPA   Vlan2
> Internet  192.168.3.1             -   001b.906a.bcc2  ARPA   Vlan3
> Internet  192.168.2.1             -   001b.906a.bcc1  ARPA   Vlan2
> Internet  192.168.7.1             -   001b.906a.bcc3  ARPA   Vlan7
> hq#
>
> The network config on the machine currently looks like this: it has
> nothing assigned to eth0, eth0.48 = 192.168.48.100/24, eth0.49 =
> 192.168.49.100/24, eth0.50 = 192.168.50.100/24.
>
> And - even though the ARP table seems to be OK - there is no connectivity!
>
> Boris.
>
>
>
> On Sun, Jan 25, 2015 at 11:42 AM, Les Mikesell <lesmikesell at gmail.com>
> wrote:
>
>> On Sun, Jan 25, 2015 at 8:38 AM, Andrew Holway <andrew.holway at gmail.com>
>> wrote:
>> > On 25 January 2015 at 15:12, Boris Epstein <borepstein at gmail.com>
>> wrote:
>> >
>> >> OK... but why does it need to be a trunk port?
>> >>
>> >
>> > Because a trunk port will "trunk" the vlan.
>> >
>> > A VLAN is basically a 4 byte "tag" that gets injected into the packet
>> > header when the packet enters the VLAN network. When we trunk a VLAN we
>> say
>> > to the switch "pass packets on VLAN x but do not strip the tag out".
>> >
>> > You can either terminate the VLAN at the switch port (untagged) which
>> will
>> > strip out the VLAN tag or you can pass the packet containing the VLAN
>> tag
>> > to the computer or other device(tagged/trunk). This device can then pull
>> > out the tag. On linux this mechanism is done by an 8021q VLAN interface.
>> >
>> > Hope this is useful.
>> >
>>
>> Just to add to that - normally if a host only needs to be on one
>> subnet you would use an access port on the switch to select a single
>> vlan and deliver those packets untagged so the host does not need to
>> care about tags or vlan numbers.   And to that end, switches default
>> to treating everything as access ports on native/untagged vlan 0
>> unless configured otherwise.   However, if the host needs interfaces
>> on multiple subnets, you can do it on a single network connection by
>> giving it a trunk connection from the switch and letting it split out
>> the vlan interfaces internally.
>>
>> --
>>    Les Mikesell
>>       lesmikesell at gmail.com
>> _______________________________________________
>> CentOS mailing list
>> CentOS at centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>>
>
>