linux bridge - untaged ethernet port

[Tobias.F]

Hello,

Since my workstation and PVE home lab server are located next to each other, I would like to eliminate my "overengineered" physical switch between them and replace it with a Linux switch on PVE that takes advantage of unused Ethernet ports.

My main question:
How can I connect physical ethernet ports with untagged vlan to the vlan aware linux bridge?

My current set-up

• vmbr0 is a vlan-aware brige where all physical nics are connected
• eno2 is a trunk port with all vlans, connected to a physical vlan aware switch
• ens1f0 is a trunk port with where only some vlans are required, connected to the workstation (Windows with Hyper-V)

So far, it is running as expected. For pve guests the selection of the vlan is done in the pve hardware configuration and the connected workstation can make use of the vlans via the Hyper-V network switch.

What I want to achieve
I want to connect devices to the physical nics with "vlan filter" and with untagged vlan.

• eno3: only default vlan 1 and all tagged vlan traffic filtered out
• eno4: only vlan 30 as untagged traffic
• ens1f0: trunk port as configured, but some vlan traffic filtered out

 

[Tobias.F]

I guess I can answer my question by myself.
I am not sure if this is best practice or if there are any unwanted side effects, but it looks like this is working.

• eno3: only default vlan 1 and all tagged vlan traffic filtered out
  (vlan 2 is default vlan in my configuration)

auto eno3
iface eno3 inet manual
    bridge_vids 2
#innen-oben, printer

• eno4: only vlan 30 as untagged traffic

iface eno4 inet manual
    bridge-access 30
#innen-unten, guest, bridge-access 30

• ens1f0: trunk port as configured, but some vlan traffic filtered out

auto ens1f0
iface ens1f0 inet manual
    bridge_vids 2, 10
#Intel X710-BM2, außen

Any comments or advice?