Configure VLAN interface (802.1Q)
We can use one mBox to support multiple VLANs on one physical interface using standard 802.1Q, which is the networking standard that supports virtual LANs (VLANs) on an Ethernet network.
In other words, we can “split” a physical interface into multiple logical interface and assign/tag each logical interface into a virtual network (VLAN). Each logical VLAN interface is also called sub-interface.
When configuring bridging interfaces, following conditions apply:
Each VLAN interface is a layer 3 logical interface, assign IP address to VLAN interface.
By default physical interface is in VLAN 1
Connected peer (eg. switch port) must be enabled with 802.1q trunking and the configured VLANs must be allowed by the switch trunk port
CONFIGURATION STEPS
enable physical interface (to be splitted)
configure and each VLAN interface
configuration interface settings for each interface
SUMMARY STEPS
enableconfigureinterface ethnumberinterface vlan ethernet_port_number vlan_idip address ip_address/prefix (no ip address ip_address/prefix)CONFIGURATION EXAMPLES
mbox> enablembox#mbox# configurembox(config-if)# interface eth1mbox(config-if)# enablembox(config-if)# exitmbox(config)#mbox(config-if)# interface vlan 1 20mbox(config-if)# enablembox(config-if)# ip address 20.20.20.254/24mbox(config-if)# exitmbox(config)#mbox(config-if)# interface vlan 1 30mbox(config-if)# enablembox(config-if)# ip address 30.30.30.254/24mbox(config-if)# exitmbox(config)#mbox(config-if)# interface vlan 1 40mbox(config-if)# enablembox(config-if)# ip address 40.40.40.254/24mbox(config-if)# exitmbox(config)# exitmbox# show interface bridge 0 ::::::::::::::vlan20::::::::::::::vlan20 VID: 20 REORDER_HDR: 1 dev->priv_flags: 1 total frames received 1040301492 total bytes received 165514203278 Broadcast/Multicast Rcvd 8051501 total frames transmitted 1269343075 total bytes transmitted 1424771774634Device: eth1INGRESS priority mappings: 0:0 1:0 2:0 3:0 4:0 5:0 6:0 7:0EGRESS priority mappings:::::::::::::::vlan30::::::::::::::vlan30 VID: 30 REORDER_HDR: 1 dev->priv_flags: 1 total frames received 68183057 total bytes received 13575428876 Broadcast/Multicast Rcvd 1042707 total frames transmitted 56711123 total bytes transmitted 3067186418Device: eth1INGRESS priority mappings: 0:0 1:0 2:0 3:0 4:0 5:0 6:0 7:0EGRESS priority mappings:::::::::::::::vlan40::::::::::::::vlan40 VID: 40 REORDER_HDR: 1 dev->priv_flags: 1 total frames received 33654959 total bytes received 3658452458 Broadcast/Multicast Rcvd 8299469 total frames transmitted 4620100 total bytes transmitted 888000713Device: eth1INGRESS priority mappings: 0:0 1:0 2:0 3:0 4:0 5:0 6:0 7:0EGRESS priority mappings:Attached sample config showing vlans on bonding interfaces
eth2 & eth3 are placed into a bonding group 1, running LACP with core switch
VLAN900 & 901 are tagged to bond1
VLAN900 runs hotspot services, bandwidth control is done within hotspot instance
VLAN901 provides direct connection, bandwidth control is done by firewall-limit rules