Subject: Re: Firewall between VLAN interfaces
To: None <netbsd-users@netbsd.org>
From: Manuel Bouyer <bouyer@antioche.eu.org>
List: netbsd-users
Date: 06/28/2004 23:16:46
On Mon, Jun 28, 2004 at 10:34:15AM +0200, Christoph Kaegi wrote:
> 
> Where I work, we are successfully using several NetBSD systems 
> as firewalls.
> Now we are planning a firewall with more than 4 connected networks
> and we'd like to implement this with a trunk connection from one 
> physical network interface to a cisco switch, carrying several 
> 802.1q VLANs and IPFilter filtering between them.
> 
> The machines will most likely be Supermicro systems with 
> Intel i82546EB NICs (wm driver).
> 
> While I'm sure, that this "should work", I am interested in
> reports from people who actually did ipfilter between VLANs.
> I don't want to buy the hardware and then find out, there is a 
> subtle limitation or buglet nobody has time to fix.
> (me not beeing capable of fixing kernel things myself)

This works. I'm doing this on similar hardware (intel gigabit nics).

> 
> I also guess, I'd have to run NetBSD 2.0 on it, wouldn't I?

Works with 1.6.2 too (but then, you may not take advantage of the
hardware checksumming of the wm).

-- 
Manuel Bouyer <bouyer@antioche.eu.org>
     NetBSD: 26 ans d'experience feront toujours la difference
--