Subject: Re: vlans and routing (i386)
To: None <>
From: Chuck Yerkes <>
List: current-users
Date: 03/09/2003 15:28:03
Sounds like a forwarding issue, perhaps.

This may help you start to debug:

ping from the inside to the outside.
Run tcpdump on the outside?  See anything?
Run tcpdump on the inside?  See anything?

(too much traffic, then don't ping, but "telnet $INET_HOST 22222"
and sniff for tcp port 22222 (or whatever)).

Quoting Peter A Eisch (
> I have plenty more info for full detail, but thump me if this is simple:
> Dell 350 (1U Celeron) with dual fxp's
> NetBSD 1.6 Release
> fxp0 to Internet
> fxp1 with 5 vlans to inside
> no  nat/ipf enabled (yet)
> gateway enabled, kernel is slightly modified GENERIC
> - the dell can see everybody just fine, inside and out
> - subnets on the vlans can see the other vlans just fine
> - none of the vlans can get to the Internet
> - traceroutes to the address on the vlans do NOT get ack'd by the dell
> does this smell like something obvious?
> I put together a different box with -current (as of two weeks ago or so)
> and get a similar result though it exhibited some other odd things, but
> I'd rather get the dell working first.
> Thanks,
> peter