Open BSD has for some while supported 802.1q Virtual LANs (VLAN). This allow you to have a server using only one Network Card\/Cable to be a part of multiple distinct network ranges. Now in order to do this you need to be connected to a network switch that understands VLANS (most decent smart switches do), and you need to configure the port that is attached to your server as a trunk port, and optionally supply a list of VLAN identifiers that will pass down that trunk.<\/p>\n
Configuring the switch side is an exercise for the reader, since every switch maker has a ‘slightly’ different way to do it, but on a Cisco switch for example<\/p>\n
interface FastEthernet0\/1<\/pre>\ndescription Trunk link to OpenBSD Server<\/pre>\nswitchport mode trunks<\/pre>\nswitchport allowed vlan 1,7,9<\/pre>\nspeed 100<\/pre>\nduplex full<\/pre>\n<\/p>\n
would allow access to the Virtual LANs 1, 7, and 9 to be sent towards the server.<\/p>\n
<\/p>\n
On the server side, the setup is amazingly simple, thanks to the built in support for the vlan<\/strong> device<\/p>\n
First, we need to bring up the master interface (say xl0) but we do not give it an ip address<\/p>\n
ifconfig xl0 up<\/strong><\/pre>\nwe can then add the required vlans as virtual network interfaces<\/p>\n
<\/p>\n
ifconfig vlan1 create<\/pre>\nifconfig vlan7 create<\/pre>\nifconfig vlan9 create<\/pre>\nifconfig vlan1 vlan 1 vlandev xl0<\/pre>\nifconfig vlan7 vlan 7 vlandev xl0<\/pre>\nifconfig vlan9 vlan 9 vlandev xl0<\/pre>\n<\/p>\n
In the above examples I have kept the name of the interfaces the same as the vlan they are attached to, but there is no reason why you cannot call them something different if you want to, the important bit is that the number after the vlan keyword must match the vlan definition on the switches<\/p>\n
Now that we have our vlan interfaces, we can configure them in the normal way for networking<\/p>\n
ifconfig vlan1 inet 10.10.10.1 netmask 255.255.255.0<\/pre>\nifconfig vlan7 inet 10.20.30.1 netmask 255.255.255.0<\/pre>\nifconfig vlan9 inet 10.30.40.1 netmask 255.255.255.0<\/pre>\n<\/p>\n
Of course, in order to make this persis after you next reboot the box, we need to configure the \/etc\/hostname.xxx files in the normal way, this configuration would look like<\/p>\n
\/etc\/hostname.xl0<\/p>\n
up<\/pre>\n<\/p>\n
\/etc\/hostname.vlan1<\/p>\n
inet 10.10.10.1 255.255.255.0 10.10.10.255 vlandev xl0 description \"VLAN1-Net1\"<\/pre>\n<\/p>\n
\/etc\/hostname.vlan7<\/p>\n
inet 10.20.30.1 255.255.255.0 10.20.30.255 vlandev xl0 description \"VLAN7-Net2\"<\/pre>\n<\/p>\n
and so on<\/p>\n","protected":false},"excerpt":{"rendered":"
Open BSD has for some while supported 802.1q Virtual LANs (VLAN). This allow you to have a server using only one Network Card\/Cable to be a part of multiple distinct network ranges. Now in order to do this you need to be connected to a network switch that understands VLANS (most decent smart switches do), […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[14,12,13],"class_list":["post-22","post","type-post","status-publish","format-standard","hentry","category-networking","tag-dot1q","tag-network","tag-vlan"],"_links":{"self":[{"href":"http:\/\/openbsd.g7obs.com\/index.php?rest_route=\/wp\/v2\/posts\/22","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/openbsd.g7obs.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/openbsd.g7obs.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/openbsd.g7obs.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/openbsd.g7obs.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=22"}],"version-history":[{"count":4,"href":"http:\/\/openbsd.g7obs.com\/index.php?rest_route=\/wp\/v2\/posts\/22\/revisions"}],"predecessor-version":[{"id":26,"href":"http:\/\/openbsd.g7obs.com\/index.php?rest_route=\/wp\/v2\/posts\/22\/revisions\/26"}],"wp:attachment":[{"href":"http:\/\/openbsd.g7obs.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=22"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/openbsd.g7obs.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=22"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/openbsd.g7obs.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=22"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}