Subject: Problems with 2.0.1 vlan interfaces
To: None <netbsd-users@netbsd.org>
From: Chris Ross <cross+netbsd@distal.com>
List: netbsd-users
Date: 01/22/2005 13:09:35
   Hi there.  I have an i386 machine I've set up, running a build of the 
2.0.1
RELEASE tag, with a single wm interface which itself has no IP 
address(es)
on it, but it has 6 vlan interfaces configured onto it.

   Most traffic seems to flow properly.  However, I get the occasional 
"Permission
denied" error when trying to send packets.  As an exmaple:

vlan5: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
         vlan: 27 parent: wm0
         address: 00:08:c7:16:84:bb
         inet 192.168.118.60 netmask 0xffffffc0 broadcast 192.168.118.63
         inet6 fe80::208:c7ff:fe16:84bb%vlan5 prefixlen 64 scopeid 0xb
borderguard# ping 192.168.118.20
PING 192.168.118.20 (192.168.118.20): 56 data bytes
ping: sendto: Permission denied
ping: sendto: Permission denied
^C
----192.168.118.20 PING Statistics----
2 packets transmitted, 0 packets received, 100.0% packet loss

   Now, another host on this same network can ping that address 
successfully
(the other host is not NetBSD, it's BSD/OS).  And, that other host can 
ping
this NetBSD host (192.168.118.60).  It seems to get an arp answer for 
it,
and if I tcpdump the vlan5 interface on the NetBSD host, I see the echo
requests on the wire.  But, the kernel appears not to see them, or at 
least
is not able to respond.

   Also, a telnet to 192.168.118.20 (which works from the BSD/OS machine)
fails as so on this NetBSD machine:

borderguard# telnet 192.168.118.20
Trying 192.168.118.20...
telnet: Unable to connect to remote host: Permission denied

   I see something similar when I try to run rtadvd, but for all 
interfaces
I try to send to (which doesn't include vlan5, just coincidentally):

borderguard# rtadvd -df vlan1 vlan2 vlan3 vlan4
rtadvd[2334]: <ra_output> sendmsg on vlan4: Permission denied
rtadvd[2334]: <ra_output> sendmsg on vlan3: Permission denied
rtadvd[2334]: <ra_output> sendmsg on vlan2: Permission denied
rtadvd[2334]: <ra_output> sendmsg on vlan1: Permission denied
^C


   Can anyone give me a hand on what's causing this, and what I might
do to correct it?

   Thanks much...

                                - Chris