ovs vlan隔離實驗

ovs-vsctl add-br br0
ifconfig br0 up
ovs-vsctl add-port br0 eth0
ovs-vsctl set port eth0 tag=1


ovs-vsctl add-br br1
ifconfig br1 up
ovs-vsctl add-port br1 eth1
ovs-vsctl add-port br1 eth2
ovs-vsctl set port eth1 tag=1
ovs-vsctl set port eth2 tag=2

ovs-vsctl add-port br0 patch_to_br1 -- set interface patch_to_br1 type=patch options:peer=patch_to_br0
ovs-vsctl add-port br1 patch_to_br0 -- set interface patch_to_br0 type=patch options:peer=patch_to_br1

ovs-vsctl set port patch_to_br1 VLAN_mode=trunk
ovs-vsctl set port patch_to_br0 VLAN_mode=trunk

ovs-vsctl set port patch_to_br1 trunk=1,2
ovs-vsctl set port patch_to_br0 trunk=1,2


connect eth0 eth1 eth2 with pc or ixia 1, 2, 3. ip is 192.168.2.12,192.168.2.13,192.168.2.14.


send one pkt from ixia to eth0, tcpdump -i br0/br1 -xxxx can see packet with vlan tag 1, pkt vlan tag1 is removed when captured on ixia2(eth1 output), pkt can not captured on ixia3
(pkt with vlan tag1 is dropped by eth2).

on pc1, ping 192.168.2.13 is ok, ping 192.168.2.14 is fail. tcpdump eth0 and eth1 can see pkts without vlan tag,tcpdump eth2 none pkt.
tcpdump br0/br1 can see none pkt. because fdb has learn and pkt will not go to bridge.
ovs-vsctl set bridge br0 flood-vlans=1,2
ovs-vsctl set bridge br1 flood-vlans=1,2

will dump vlan tag pkts on br0/br1 again.

 

 

 

ps: other command

ovs-vsctl set port eth2 trunk=1,2
ovs-vsctl remove port eth2 trunk 1,2
ovs-vsctl remove port eth2 tag 2
ovs-vsctl set bridge br0 flood-vlans=1,2
ovs-vsctl set bridge br1 flood-vlans=1,2

發佈了9 篇原創文章 · 獲贊 1 · 訪問量 1093
發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章