уже более года работает схема:
[ Unifi контроллер + шлюз ] - < L2-сеть > - [DES-3200-10/C1] - <qinq role uni> - [Unifi-LR WLAN vlanid 30]
В итоге беспроводные клиенты прилетают как qinq на роутер, а управление точками как простое 802.1q
недели 3 назад началась магия:
коммутатор заворачивает в 2 тэга (один приходит с Unifi, а второй навешивает коммутатор) все пакеты кроме ipv4 DHCP.
Код:
11:17:45.871747 68:a3:c4:ce:2c:a0 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 64: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype ARP, Request who-has 192.168.1.1 tell 192.168.1.212, length 42
11:17:45.886513 68:a3:c4:ce:2c:a0 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 64: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype ARP, Request who-has 192.168.1.1 tell 192.168.1.212, length 42
11:17:45.939277 68:a3:c4:ce:2c:a0 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 64: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype ARP, Request who-has 192.168.1.1 tell 192.168.1.212, length 42
11:17:45.940731 68:a3:c4:ce:2c:a0 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 64: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype ARP, Request who-has 192.168.1.1 tell 192.168.1.212, length 42
11:17:45.941380 68:a3:c4:ce:2c:a0 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 64: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype ARP, Request who-has 192.168.1.1 tell 192.168.1.212, length 42
11:17:46.102626 68:a3:c4:ce:2c:a0 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 346: vlan 1903, p 0, ethertype IPv4, 192.168.1.212.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 68:a3:c4:ce:2c:a0, length 300
11:17:46.102868 fa:f1:80:1f:26:83 > 68:a3:c4:ce:2c:a0, ethertype 802.1Q (0x8100), length 346: vlan 1903, p 0, ethertype IPv4, 192.168.1.1.67 > 192.168.1.212.68: BOOTP/DHCP, Reply, length 300
11:17:46.470787 fa:f1:80:1f:26:83 > 68:a3:c4:ce:2c:a0, ethertype 802.1Q (0x8100), length 46: vlan 1903, p 0, ethertype ARP, Request who-has 192.168.1.212 tell 192.168.1.1, length 28
11:17:46.907957 68:a3:c4:ce:2c:a0 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 64: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype ARP, Request who-has 192.168.1.1 tell 192.168.1.212, length 42
11:17:47.906336 68:a3:c4:ce:2c:a0 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 64: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype ARP, Request who-has 192.168.1.1 tell 192.168.1.212, length 42
11:17:49.018170 68:a3:c4:ce:2c:a0 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 64: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype ARP, Request who-has 192.168.1.1 tell 192.168.1.212, length 42
11:17:49.060856 68:a3:c4:ce:2c:a0 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 64: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype ARP, Request who-has 192.168.1.1 tell 192.168.1.212, length 42
11:17:49.690787 68:a3:c4:ce:2c:a0 > 33:33:00:01:00:02, ethertype 802.1Q (0x8100), length 160: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype IPv6, fe80::f1f8:5362:fc03:35c6.546 > ff02::1:2.547: dhcp6 solicit
11:19:48.923590 68:a3:c4:ce:2c:a0 > 33:33:00:00:00:16, ethertype 802.1Q (0x8100), length 98: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype IPv6, fe80::f1f8:5362:fc03:35c6 > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28
11:19:48.924096 68:a3:c4:ce:2c:a0 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 64: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype ARP, Request who-has 192.168.1.1 tell 192.168.1.212, length 42
11:19:48.935783 68:a3:c4:ce:2c:a0 > 33:33:00:00:00:16, ethertype 802.1Q (0x8100), length 98: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype IPv6, fe80::f1f8:5362:fc03:35c6 > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28
11:19:48.942817 68:a3:c4:ce:2c:a0 > 33:33:00:00:00:0c, ethertype 802.1Q (0x8100), length 1063: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype IPv6, fe80::f1f8:5362:fc03:35c6.56984 > ff02::c.3702: UDP, length 993
11:19:49.153135 68:a3:c4:ce:2c:a0 > 33:33:00:00:00:0c, ethertype 802.1Q (0x8100), length 1063: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype IPv6, fe80::f1f8:5362:fc03:35c6.56984 > ff02::c.3702: UDP, length 993
11:19:49.417611 68:a3:c4:ce:2c:a0 > 33:33:00:00:00:16, ethertype 802.1Q (0x8100), length 98: vlan 1903, p 0, ethertype 802.1Q, vlan 30, p 0, ethertype IPv6, fe80::f1f8:5362:fc03:35c6 > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28
На unifi tcpdump показавет, что в сторону коммутатора пакет уходит с тэгом 30
на L2-сети, через 2 других коммутатора DES-3200, стоит DGS-3120-24SC, на котором сделал mirror rspan и там также видно, что dhcp-пакеты идут без второго тэга. делал сброс этого коммутатора и настраивал только vlan + qinq. тоже самое... включал dhcp_local_realy - он добавляет в эти пакеты опцию. точку меняли, проблема возникла еще со старым софтом Unifi - с того момента обновились.
Код:
Device Type : DES-3200-10 Fast Ethernet Switch
VLAN Name : default
Boot PROM Version : Build 4.00.002
Firmware Version : Build 4.35.B011
Command: show config current_config include "qinq"
enable qinq
config qinq inner_tpid 0x8100
config qinq ports 1-5,9-10 role nni missdrop disable outer_tpid 0x8100
config qinq ports 1-10 add_inner_tag disable
config qinq ports 6-8 role uni missdrop disable outer_tpid 0x8100
Command: show config current_config include "1903"
create vlan 1903 tag 1903
config vlan 1903 add tagged 9
config vlan 1903 add untagged 6-8 advertisement disable
disable dhcp_local_relay
config dhcp_local_relay option_82 remote_id default
config dhcp_local_relay option_82 circuit_id default
config dhcp_local_relay option_82 ports 1-10 policy keep
disable dhcp_relay
config dhcp_relay hops 4 time 0
config dhcp_relay option_82 state disable
config dhcp_relay option_82 check disable
config dhcp_relay option_82 policy replace
config dhcp_relay option_82 remote_id default
config dhcp_relay option_82 circuit_id default
config dhcp_relay option_60 state disable
config dhcp_relay option_61 state disable
config dhcp_relay option_60 default mode drop
config dhcp_relay option_61 default drop
config dhcp_relay ports 1-10 state enable
Вход
Регистрация
FAQ
Поиск
