[pve-devel] [PATCH] support QinQ / vlan stacking

Stefan Priebe - Profihost AG s.priebe at profihost.ag
Tue Mar 3 13:50:48 CET 2015


Am 03.03.2015 um 13:42 schrieb Dietmar Maurer:
>> Sure but a VM attached to a bridge should not see per default tagged
>> frames. It should only see unttaged frames until we allow to see it
>> tagged Frames from different VLANs.
> 
> Why? AFAIK this is the default behavior from the beginning.

I think it's better to be more secure by default. Also i know no switch
nor vendor who does it this way.

Normally you won't see tagged traffic on a port by default. So most
users are not used to this behaviour? No?

Stefan




More information about the pve-devel mailing list