{"id":3312,"date":"2022-12-20T17:02:18","date_gmt":"2022-12-20T20:02:18","guid":{"rendered":"http:\/\/lode.uno\/linux-man\/index.php\/2022\/12\/20\/vlan-manipulation-action-in-tc-man8\/"},"modified":"2022-12-20T17:02:18","modified_gmt":"2022-12-20T20:02:18","slug":"vlan-manipulation-action-in-tc-man8","status":"publish","type":"post","link":"https:\/\/lode.uno\/linux-man\/2022\/12\/20\/vlan-manipulation-action-in-tc-man8\/","title":{"rendered":"VLAN manipulation action in tc (man8)"},"content":{"rendered":"

VLAN manipulation action in tc<\/h1>\n

NAME<\/a>
SYNOPSIS<\/a>
DESCRIPTION<\/a>
OPTIONS<\/a>
EXAMPLES<\/a>
SEE ALSO<\/a> <\/p>\n

\n

NAME <\/a> <\/h2>\n

vlan – vlan manipulation module<\/p>\n

SYNOPSIS <\/a> <\/h2>\n

tc<\/b> … action vlan<\/b> { pop<\/b> | pop_eth<\/b> | PUSH<\/i> | MODIFY<\/i> | PUSH_ETH<\/i> } [ CONTROL<\/i> ]<\/p>\n

PUSH<\/i> := push<\/b> [ protocol<\/b> VLANPROTO<\/i> ] [<\/b> priority VLANPRIO<\/i> ] id<\/b> VLANID<\/i><\/p>\n

MODIFY<\/i> := modify<\/b> [ protocol<\/b> VLANPROTO<\/i> ] [<\/b> priority VLANPRIO<\/i> ] id<\/b> VLANID<\/i><\/p>\n

PUSH_ETH<\/i> := push_eth dst_mac<\/b> LLADDR<\/i> src_mac<\/b> LLADDR<\/i><\/p>\n

CONTROL<\/i> := { reclassify<\/b> | pipe<\/b> | drop<\/b> | continue<\/b> | pass<\/b> | goto chain CHAIN_INDEX<\/b> }<\/p>\n

DESCRIPTION <\/a> <\/h2>\n

The vlan<\/b> action allows to perform 802.1Q en- or decapsulation on a packet, reflected by the operation modes POP<\/i>, PUSH<\/i> and MODIFY<\/i>. The POP<\/i> mode is simple, as no further information is required to just drop the outer-most VLAN encapsulation. The PUSH<\/i> and MODIFY<\/i> modes require at least a VLANID<\/i> and allow to optionally choose the VLANPROTO<\/i> to use.<\/p>\n

The vlan<\/b> action can also be used to add or remove the base Ethernet header. The pop_eth<\/b> mode, which takes no argument, is used to remove the base Ethernet header. All existing VLANs must have been previously dropped. The opposite operation, adding a base Ethernet header, is done with the push_eth<\/b> mode. In that case, the packet must have no MAC header (stacking MAC headers is not permitted). This mode is mostly useful when a previous action has encapsulated the whole original frame behind a network header and one needs to prepend an Ethernet header before forwarding the resulting packet.<\/p>\n

OPTIONS <\/a> <\/h2>\n\n\n\n\n
<\/td>\n\n

pop<\/b><\/p>\n<\/td>\n

<\/td>\n\n

Decapsulation mode, no further arguments allowed.<\/p>\n<\/td>\n<\/tr>\n

<\/td>\n\n

push<\/b><\/p>\n<\/td>\n

<\/td>\n\n

Encapsulation mode. Requires at least id<\/b> option.<\/p>\n<\/td>\n<\/tr>\n

<\/td>\n\n

modify<\/b><\/p>\n<\/td>\n

<\/td>\n\n

Replace mode. Existing 802.1Q tag is replaced. Requires at least id<\/b> option.<\/p>\n<\/td>\n<\/tr>\n<\/table>\n

pop_eth<\/b><\/p>\n

Ethernet header decapsulation mode. Only works on a plain Ethernet header: VLANs, if any, must be removed first.<\/p>\n

push_eth<\/b><\/p>\n

Ethernet header encapsulation mode. The Ethertype is automatically set using the network header type. Chaining Ethernet headers is not allowed: the packet must have no MAC header when using this mode. Requires the dst_mac<\/b> and src_mac<\/b> options.<\/p>\n

id<\/b> VLANID<\/i><\/p>\n

Specify the VLAN ID to encapsulate into. VLANID<\/i> is an unsigned 16bit integer, the format is detected automatically (e.g. prefix with \u20190x<\/b>\u2019 for hexadecimal interpretation, etc.).<\/p>\n

protocol<\/b> VLANPROTO<\/i><\/p>\n

Choose the VLAN protocol to use. At the time of writing, the kernel accepts only 802.1Q<\/b> or 802.1ad<\/b>.<\/p>\n

priority<\/b> VLANPRIO<\/i><\/p>\n

Choose the VLAN priority to use. Decimal number in range of 0-7.<\/p>\n

dst_mac<\/b> LLADDR<\/i><\/p>\n

Choose the destination MAC address to use.<\/p>\n

src_mac<\/b> LLADDR<\/i><\/p>\n

Choose the source MAC address to use.<\/p>\n

CONTROL<\/i><\/p>\n

How to continue after executing this action.
reclassify<\/b><\/p>\n

Restarts classification by jumping back to the first filter attached to this action\u2019s parent.<\/p>\n\n\n\n
<\/td>\n\n

pipe<\/b><\/p>\n<\/td>\n

<\/td>\n\n

Continue with the next action, this is the default.<\/p>\n<\/td>\n<\/tr>\n

<\/td>\n\n

drop<\/b><\/p>\n<\/td>\n

<\/td>\n\n

Packet will be dropped without running further actions.<\/p>\n<\/td>\n<\/tr>\n<\/table>\n

continue<\/b><\/p>\n

Continue classification with next filter in line.<\/p>\n\n\n
<\/td>\n\n

pass<\/b><\/p>\n<\/td>\n

<\/td>\n\n

Return to calling qdisc for packet processing. This ends the classification process.<\/p>\n<\/td>\n<\/tr>\n<\/table>\n

EXAMPLES <\/a> <\/h2>\n

The following example encapsulates incoming ICMP packets on eth0 from 10.0.0.2 into VLAN ID 123:<\/p>\n

#tc qdisc add dev eth0 handle ffff: ingress
#tc filter add dev eth0 parent ffff: pref 11 protocol ip <\/p>\n\n\n\n\n
<\/td>\n\n

u32 match ip protocol 1 0xff flowid 1:1 <\/p>\n<\/td>\n<\/tr>\n

<\/td>\n\n

match ip src 10.0.0.2 flowid 1:1 <\/p>\n<\/td>\n<\/tr>\n

<\/td>\n\n

action vlan push id 123<\/p>\n<\/td>\n<\/tr>\n<\/table>\n

Here is an example of the pop<\/b> function: Incoming VLAN packets on eth0 are decapsulated and the classification process then restarted for the plain packet:<\/p>\n

#tc qdisc add dev eth0 handle ffff: ingress
#tc filter add dev $ETH parent ffff: pref 1 protocol 802.1Q <\/p>\n\n\n\n
<\/td>\n\n

u32 match u32 0 0 flowid 1:1 <\/p>\n<\/td>\n<\/tr>\n

<\/td>\n\n

action vlan pop reclassify<\/p>\n<\/td>\n<\/tr>\n<\/table>\n

For an example of the pop_eth<\/b> and push_eth<\/b> modes, see tc-mpls<\/b>(8).<\/p>\n

SEE ALSO <\/a> <\/h2>\n

tc<\/b>(8), tc-mpls<\/b>(8)<\/p>\n

\n","protected":false},"excerpt":{"rendered":"

vlan – vlan manipulation module <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[5,52,4,442],"class_list":["post-3312","post","type-post","status-publish","format-standard","hentry","category-8-administracion-del-sistema","tag-5","tag-administracion","tag-man8","tag-tc-vlan"],"gutentor_comment":0,"_links":{"self":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/3312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/comments?post=3312"}],"version-history":[{"count":0,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/3312\/revisions"}],"wp:attachment":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/media?parent=3312"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/categories?post=3312"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/tags?post=3312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}