vlan

diff --git a/README.md b/README.md
index 5404c14b3903aecc8541b0046ef39a4bfb107d64..d81efda48dc3657ca0870212266b910d56a347c2 100644 (file)
--- a/README.md
+++ b/README.md
@@ -2403,6 +2403,99 @@ sudo ip netns exec net1 ip route add 192.168.64.0/24 via 192.168.64.2 dev br0 pr
 
 ```
 
+```shell
+
+# gateway - bridge vlan trunk scenario
+
+
+sudo ip netns add net1
+
+sudo ip link add dev veth1 type veth peer name veth2 netns net1
+
+sudo ip link set up veth1
+
+sudo ip netns exec net1 ip link set up lo
+
+sudo ip addr add 192.168.64.1/24 dev veth1
+
+sudo ip route add 192.168.64.0/24 dev veth1
+
+sudo ip netns add net2
+
+sudo ip link add dev veth3 type veth peer name veth4 netns net2
+
+sudo ip link set veth3 netns net1
+
+sudo ip netns exec net2 ip link set up veth4
+
+sudo ip netns exec net2 ip addr add 192.168.64.6/24 dev veth4
+
+sudo ip netns exec net2 ip route add default via 192.168.64.1 dev veth4
+
+sudo ip netns exec net1 sysctl -w net.ipv4.ip_forward=1
+
+
+sudo ip netns exec net1 ip link add br0 type bridge stp_state 0
+
+sudo ip netns exec net1 ip link set br0 address 12:34:56:78:9a:bc
+
+sudo ip netns exec net1 ip link set veth2 master br0 
+
+sudo ip netns exec net1 ip link set veth3 master br0
+
+sudo ip netns exec net1 ip addr add 192.168.64.2/24 dev br0
+
+sudo ip netns exec net1 ip link set br0 up
+
+sudo ip netns exec net1 ip link set veth2 up 
+
+sudo ip netns exec net1 ip link set veth3 up
+
+#sudo ip netns exec net1 ip route add default via 192.168.64.1 dev br0
+
+sudo ip netns exec net1 ip route add default dev br0
+
+sudo ip netns exec net1 ip route add 192.168.64.0/24 dev br0 proto static
+
+
+# 
+
+sudo ip netns exec net1 ip link set br0 type bridge vlan_filtering 1
+
+sudo ip netns add net3
+
+sudo ip link add dev veth5 type veth peer name veth6 netns net3
+
+sudo ip link set veth5 netns net1
+
+sudo ip netns exec net1 ip link set veth5 master br0
+
+sudo ip netns exec net1 ip link set veth5 up
+
+sudo ip netns exec net3 ip link set up veth6
+
+sudo ip netns exec net3 ip addr add 192.168.66.6/24 dev veth6
+
+sudo ip netns exec net3 ip link set dev veth6 up
+
+sudo ip netns exec net3 ip route add default via 192.168.66.1 dev veth6
+
+sudo ip netns exec net1 bridge vlan add dev veth5 vid 5 pvid untagged master
+
+sudo ip netns exec net1 bridge vlan add dev veth2 vid 5 master
+
+sudo ip netns exec net1 ip route add 192.168.66.0/24 dev br0 proto static
+
+
+#
+
+sudo ip link add link veth1 name veth1.5 type vlan id 5
+
+sudo ip addr add 192.168.66.1/24 dev veth1.5
+
+sudo ip link set veth1.5 up
+
+```
 
 
 ```shell

diff --git a/ip/bridgevlan-construct.sh b/ip/bridgevlan-construct.sh
new file mode 100755 (executable)
index 0000000..4305433
--- /dev/null
+++ b/ip/bridgevlan-construct.sh
@@ -0,0 +1,89 @@
+#!/bin/bash
+
+
+sudo ip netns add net1
+
+sudo ip link add dev veth1 type veth peer name veth2 netns net1
+
+sudo ip link set up veth1
+
+sudo ip netns exec net1 ip link set up lo
+
+sudo ip addr add 192.168.64.1/24 dev veth1
+
+sudo ip route add 192.168.64.0/24 dev veth1
+
+sudo ip netns add net2
+
+sudo ip link add dev veth3 type veth peer name veth4 netns net2
+
+sudo ip link set veth3 netns net1
+
+sudo ip netns exec net2 ip link set up veth4
+
+sudo ip netns exec net2 ip addr add 192.168.64.6/24 dev veth4
+
+sudo ip netns exec net2 ip route add default via 192.168.64.1 dev veth4
+
+sudo ip netns exec net1 sysctl -w net.ipv4.ip_forward=1
+
+
+sudo ip netns exec net1 ip link add br0 type bridge stp_state 0
+
+sudo ip netns exec net1 ip link set br0 address 12:34:56:78:9a:bc
+
+sudo ip netns exec net1 ip link set veth2 master br0 
+
+sudo ip netns exec net1 ip link set veth3 master br0
+
+sudo ip netns exec net1 ip addr add 192.168.64.2/24 dev br0
+
+sudo ip netns exec net1 ip link set br0 up
+
+sudo ip netns exec net1 ip link set veth2 up 
+
+sudo ip netns exec net1 ip link set veth3 up
+
+#sudo ip netns exec net1 ip route add default via 192.168.64.1 dev br0
+
+sudo ip netns exec net1 ip route add default dev br0
+
+sudo ip netns exec net1 ip route add 192.168.64.0/24 dev br0 proto static
+
+
+# 
+
+sudo ip netns exec net1 ip link set br0 type bridge vlan_filtering 1
+
+sudo ip netns add net3
+
+sudo ip link add dev veth5 type veth peer name veth6 netns net3
+
+sudo ip link set veth5 netns net1
+
+sudo ip netns exec net1 ip link set veth5 master br0
+
+sudo ip netns exec net1 ip link set veth5 up
+
+sudo ip netns exec net3 ip link set up veth6
+
+sudo ip netns exec net3 ip addr add 192.168.66.6/24 dev veth6
+
+sudo ip netns exec net3 ip link set dev veth6 up
+
+sudo ip netns exec net3 ip route add default via 192.168.66.1 dev veth6
+
+sudo ip netns exec net1 bridge vlan add dev veth5 vid 5 pvid untagged master
+
+sudo ip netns exec net1 bridge vlan add dev veth2 vid 5 master
+
+sudo ip netns exec net1 ip route add 192.168.66.0/24 dev br0 proto static
+
+
+#
+
+sudo ip link add link veth1 name veth1.5 type vlan id 5
+
+sudo ip addr add 192.168.66.1/24 dev veth1.5
+
+sudo ip link set veth1.5 up
\ No newline at end of file

diff --git a/ip/bridgevlan-destroy.sh b/ip/bridgevlan-destroy.sh
new file mode 100755 (executable)
index 0000000..bf751ac
--- /dev/null
+++ b/ip/bridgevlan-destroy.sh
@@ -0,0 +1,14 @@
+#!/bin/bash
+
+
+# delete rules 
+
+sudo iptables -F 
+
+sudo iptables -t nat -F
+
+sudo ip netns del net3
+
+sudo ip netns del net2
+
+sudo ip netns del net1
\ No newline at end of file