Page MenuHomeVyOS Platform
Create Task
Maniphest T6698

Bridge firewall - Add vlan type option
Closed, ResolvedPublicFEATURE REQUEST
Actions

Description

So far, we can match arp and 802.1a types:

vyos@bri# set firewall bridge forward filter rule 10 ethernet-type 
Possible completions:
   802.1q               Customer VLAN tag type
   802.1ad              Service VLAN tag type
   arp                  Adress Resolution Protocol
   ipv4                 Internet Protocol version 4
   ipv6                 Internet Protocol version 6
                        

      
[edit]
vyos@bri# set firewall bridge forward filter rule 10 ethernet-type

And on vlan data/header:

vyos@bri# set firewall bridge forward filter rule 10 vlan
Possible completions:
   id                   Vlan id
   priority             Vlan priority(pcp)

      
[edit]
vyos@bri#

If we want to catch arp requests on bridge using vlans, we need to add type under vlan.
References: https://www.netfilter.org/projects/nftables/manpage.html#lbCF

Details

Difficulty level
Unknown (require assessment)
Version
1.5-rolling-202409010615
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)

Event Timeline

n.fort created this task.Tue, Sep 3, 3:38 PM
n.fort changed the task status from Open to Confirmed.
n.fort claimed this task.
n.fort triaged this task as Low priority.
n.fort changed Version from - to 1.5-rolling-202409010615.
pasik subscribed.Tue, Sep 3, 3:45 PM
n.fort closed this task as Resolved.Tue, Sep 17, 3:49 PM