Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: Better way to do VLAN in Linux |
|---|---|
| Date: | 26 Aug 2004 02:18:31 +0200 |
El jue, 26 de 08 de 2004 a las 00:52, Cedric Blancher escribiÃ:
I don't exactly get what you want to achieve. Especially, I don't get the link between VLAN support and IP/MAC changing... Maybe you can be more specific.
Ok. Now I understand it. The work with the MACs/IPs it's done at the switch with the kernel module, so Linux can't be fooled changing the MACs.
By the way, Linux supports 802.1q VLAN encapsulation. This means you can connect a Linux box to a VLAN aware switch using a 802.1q trunk to one of its interfaces, say eth0. Then you can add logical interfaces to each VLAN carried by your trunk, sau eth0.1, eth0.2, etc. (naming can be changed to vlan1, vlan2, or more, you have 4 different naming schemes, see documentation). Once your logicial interfaces are created, you can see regular trafic through them, 801.2q traffic being seen through native interface (eth0). Then you only have to provide routing and filtering between your interfaces and you're done. If you feel brave, you can use interface bonding to provide your trunk additionnal bandwidth or high availibility feature.
That was what I wanted to do. It was less problematic than I believed it was. I have read some documentation about the 8021q module for the kernel and now it all seams clearer. Thanks for your help. -- Jose Maria Lopez Hernandez Director Tecnico de bgSEC jkerouac@bgsec.com bgSEC Seguridad y Consultoria de Sistemas Informaticos http://www.bgsec.com ESPAÃA The only people for me are the mad ones -- the ones who are mad to live, mad to talk, mad to be saved, desirous of everything at the same time, the ones who never yawn or say a commonplace thing, but burn, burn, burn like fabulous yellow Roman candles. -- Jack Kerouac, "On the Road"
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | RE: IDS & NetProwler, Chad |
|---|---|
| Next by Date: | auditing the Symantec Enterprise Firewall, Stafford, Grant |
| Previous by Thread: | Re: Better way to do VLAN in Linux, Cedric Blancher |
| Next by Thread: | Re: Better way to do VLAN in Linux, Robert Hajime Lanning |
| Indexes: | [Date] [Thread] [Top] [All Lists] |