[pve-devel] [PATCH] support QinQ / vlan stacking

[Dietmar Maurer]

> On March 3, 2015 at 9:48 AM Stefan Priebe - Profihost AG
> <s.priebe at profihost.ag> wrote:
> 
> 
> @dietmar
> I think this is a big problem and i never noticed it. Currently a guest
> attached to the bridge see all frames. I thought it sees only untagged
> frames.
> 
> This means i cannot isolate a guest to only untagged frames. What's your
> opinion?

The purpose of vlans is to filter tagged frames (not untagged frames) ...
Maybe you can ask (or write a feature request) on the kernel/network list?
Maybe OVS supports that?