Hello,
I have problem with pf+bridge+vlan (multicast traffic) and I googled a lot, read the manuals and so on - no help.
Maybe here in forum somebody can give some hints or something which helps a little bit.
Following setup is made for multicast traffic separation from one lan to multiple vlans.
Setup:
Two physical interfaces
bnx0
bnx1
interfaces bnx0 and bnx1 has vlans:
bnx0
vlan1100
bnx1
vlan1101
vlan1102
vlan1103
vlan1104
vlan1105
vlan1106
vlan1107
vlan1108
Bridge setup: bridge0 has all vlans as bridge members (vlan1100, vlan1101 ... vlan1108)
PF config:
block out on bnx1 all
block out on vlan1100 all
block out on vlan1101 all
block out on vlan1102 all
block out on vlan1103 all
block out on vlan1104 all
block out on vlan1105 all
block out on vlan1106 all
block out on vlan1107 all
block out on vlan1108 all
pass out quick on vlan1101 proto udp from any to 239.16.1.1
pass out quick on vlan1102 proto udp from any to 239.16.1.2
pass out quick on vlan1103 proto udp from any to 239.16.1.3
Wishful thinking, what the result should be:
All multicast streams are available on vlan1100 and recieved via "bnx0/vlan1100". Bridge should stream the multicast packets to what ever vlan - its the place where pf should help. Strem: 239.16.1.1 should be available only on vlan1101, and 239.16.1.2 avialable on vlan1102 and so on.
.
Real Result:
Stream 239.16.1.1 is available on all three vlans: 11101,1102,1103 - same thing happens with other two streams (239.16.1.2, 239.16.1.3)
It's really weird what's going on or did I understood something wrong and configuration is wrong.