Good day.
I have had no issues with routing in jails; it all works fine.
I have had no issues with tagged VLANs; works as expected.
I cannot however figure out how to get tagged VLANs working within jails.
My configuration is as such:
The output is as such:
From the jail, I can ping itself, and the default gateway. I cannot ping further. The default gateway is a Juniper SRX running NAT, and it's been running fine with basically the same configuration for the past decade (I've upgraded devices, but pretty much dropped code from the older device into the newer device, as needed).
When listing jails, I see the correct IP listed:
No issues pinging itself:
No issues pinging the host's default gateway (I realize that this is in the same broadcast domain, so it doesn't tell us much, other than the rest of the broadcast domain can at least see it, and confirms the switch port configuration is correct):
I cannot however ping the host's default gateway:
I feel like the issue lies here, so I setup the bridge, per a few blogs I read, but that hasn't fixed the issue.
Here's a bit more information:
Switch port config for good measure:
Wireless is VLAN 255, and Unifi is VLAN 240.
Anyone have any suggestions?
Thanks in advance!
I have had no issues with routing in jails; it all works fine.
I have had no issues with tagged VLANs; works as expected.
I cannot however figure out how to get tagged VLANs working within jails.
My configuration is as such:
Code:
ifconfig_em0="inet 10.0.253.7 netmask 255.255.255.0"
ifconfig_em1="up"
cloned_interfaces="vlan0 vlan1 bridge0"
ifconfig_vlan0="inet 10.0.240.7 netmask 255.255.255.0 vlan 240 vlandev em1"
ifconfig_vlan1="inet 10.0.255.7 netmask 255.255.255.0 vlan 255 vlandev em1"
ifconfig_bridge0="addm vlan1 up"
defaultrouter="10.0.253.1"The output is as such:
Code:
em0: flags=8863<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=481249b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,LRO,WOL_MAGIC,VLAN_HWFILTER,NOMAP>
ether 00:25:90:dc:ca:47
inet 10.0.253.7 netmask 0xffffff00 broadcast 10.0.253.255
media: Ethernet autoselect (1000baseT <full-duplex>)
status: active
nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
em1: flags=8963<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=481249b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,LRO,WOL_MAGIC,VLAN_HWFILTER,NOMAP>
ether 00:25:90:dc:ca:46
media: Ethernet autoselect (1000baseT <full-duplex>)
status: active
nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
inet 127.0.0.1 netmask 0xff000000
groups: lo
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
vlan0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=4000403<RXCSUM,TXCSUM,LRO,NOMAP>
ether 00:25:90:dc:ca:46
inet 10.0.240.7 netmask 0xffffff00 broadcast 10.0.240.255
groups: vlan
vlan: 240 vlanproto: 802.1q vlanpcp: 0 parent interface: em1
media: Ethernet autoselect (1000baseT <full-duplex>)
status: active
nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
vlan1: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=4000403<RXCSUM,TXCSUM,LRO,NOMAP>
ether 00:25:90:dc:ca:46
inet 10.0.255.7 netmask 0xffffff00 broadcast 10.0.255.255
groups: vlan
vlan: 255 vlanproto: 802.1q vlanpcp: 0 parent interface: em1
media: Ethernet autoselect (1000baseT <full-duplex>)
status: active
nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
bridge0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
ether 58:9c:fc:10:c8:13
id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200
root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0
member: vlan1 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
ifmaxaddr 0 port 5 priority 128 path cost 2000000
groups: bridge
nd6 options=9<PERFORMNUD,IFDISABLED>From the jail, I can ping itself, and the default gateway. I cannot ping further. The default gateway is a Juniper SRX running NAT, and it's been running fine with basically the same configuration for the past decade (I've upgraded devices, but pretty much dropped code from the older device into the newer device, as needed).
When listing jails, I see the correct IP listed:
Code:
[root@server01 /home/thatchrisp]# jls
JID IP Address Hostname Path
1 10.0.255.7 plex /usr/jails/plexNo issues pinging itself:
Code:
# ping 10.0.255.7
PING 10.0.255.7 (10.0.255.7): 56 data bytes
64 bytes from 10.0.255.7: icmp_seq=0 ttl=64 time=0.020 ms
64 bytes from 10.0.255.7: icmp_seq=1 ttl=64 time=0.022 ms
64 bytes from 10.0.255.7: icmp_seq=2 ttl=64 time=0.027 ms
64 bytes from 10.0.255.7: icmp_seq=3 ttl=64 time=0.020 ms
^C
--- 10.0.255.7 ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.020/0.022/0.027/0.003 ms
#No issues pinging the host's default gateway (I realize that this is in the same broadcast domain, so it doesn't tell us much, other than the rest of the broadcast domain can at least see it, and confirms the switch port configuration is correct):
Code:
# ping 10.0.255.1
PING 10.0.255.1 (10.0.255.1): 56 data bytes
64 bytes from 10.0.255.1: icmp_seq=0 ttl=64 time=0.542 ms
64 bytes from 10.0.255.1: icmp_seq=1 ttl=64 time=0.579 ms
64 bytes from 10.0.255.1: icmp_seq=2 ttl=64 time=0.547 ms
64 bytes from 10.0.255.1: icmp_seq=3 ttl=64 time=0.508 ms
^C
--- 10.0.255.1 ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.508/0.544/0.579/0.025 msI cannot however ping the host's default gateway:
Code:
# ping 10.0.253.1
PING 10.0.253.1 (10.0.253.1): 56 data bytes
^C
--- 10.0.253.1 ping statistics ---
4 packets transmitted, 0 packets received, 100.0% packet lossI feel like the issue lies here, so I setup the bridge, per a few blogs I read, but that hasn't fixed the issue.
Here's a bit more information:
Code:
FreeBSD server01 13.2-RELEASE-p3 FreeBSD 13.2-RELEASE-p3 GENERIC amd64Switch port config for good measure:
Code:
show interfaces ge-0/0/8
description "SERVER01: IGB1";
gratuitous-arp-reply;
ether-options {
auto-negotiation;
link-mode full-duplex;
speed {
1g;
}
}
unit 0 {
family ethernet-switching {
port-mode trunk;
vlan {
members [ WIRELESS UNIFI ];
}
}
}Wireless is VLAN 255, and Unifi is VLAN 240.
Anyone have any suggestions?
Thanks in advance!
