|
Posted by Wrolf on March 14, 2007, 9:58 pm
If you were Registered and logged in, you could reply and use other advanced thread options
> I have setup two VLANs on a laptop with an PRO/100VE compatible
> onboard adapter (latest proset/driver): 99 tagged and one untagged. It
> connects to a switch port which is setup for VLAN 99 tagged and VLAN
> 10 untagged, default VLAN 10. The untagged VLAN connection works fine:
> it gets an IP address via DHCP and can send and receive. The 99 tagged
> connection however does not work. The packet counts on the connection
> status shows that the connection does not receive any packets.
>
> I have looked into what is happening with ethereal. The laptop
> successfully sends the DHCP request through the 99 VLAN but the DHCP
> offer comes in on the untagged connection only although it went
> through the 99 VLAN and came from the 99 VLAN DHCP server. I turned on
> monitormode on the adapter to capture the VLAN tags in ethereal:
> ethereal shows that the DHCP offer received on the physical interface
> does have the 99 VLAN tag. However, still the packet ends up on the
> untagged virtual interface and not on the 99 VLAN connection.
>
> I have a Linux box with the same VLAN setup, same port configuration
> and it connects fine on both VLANs.
>
> What else can cause this? Has anyone setup two or more VLANs with one
> untagged and does it work properly? I get it to work only if I
> configured both VLANs tagged on the laptop and the switch but then I
> cannot plug in the laptop into a unmanaged switch without
> reconfiguring it...
>
> Thanks a lot,
>
> Gerald
You have the correct idea of how 802.1q VLANs work, and how tagged and
untagged can be in principle mixed on the same port.
Unfortunately, the real world does not comply. E.g. Cisco
configurations use VLAN 1 to mean untagged - they cannot really handle
tagged VLAN 1. Etc. and so on. Lots of weirdness in different
implementations.
Punch line: for port based VLANs, set ports up for untagged (in a
given VLAN), or tagged.
And make sure that your switches have the same idea about spanning
tree being one tree per VLAN, or one for all. And be extremely careful
if trying to prune VLANs (having some VLANs only be on a subset of
your switches).
Wrolf
|