VLAN Configuration for Linux Bridge

[spetrillo]

Hello all,

I had been using vlan 1 in my Linux bridge configs, but now I am noticing that the VLAN IDs section is in red, and it says the VLANs are 2-4094. With 8.3 is this being enforced? Do I need to migrate all vlan 1 configs to vlan 2?

Thanks,
Steve

 

[shanreich]

I would strongly recommend migrating this, since VLAN 1 is usually the Native VLAN of the bridge and of many switches (= untagged traffic enters VLAN 1, traffic in VLAN 1 exits untagged).

 

[dmgeurts]

I would strongly recommend migrating this, since VLAN 1 is usually the Native VLAN of the bridge and of many switches (= untagged traffic enters VLAN 1, traffic in VLAN 1 exits untagged).

My thinking too. Though the RFC doesn't dictate this, it is how many vendors have implemented it. Using VLAN1 is discouraged as it's the default VLAN and so a security risk as far as corporate networking is considered.

 

[spetrillo]

I am using vlan 1 for mgmt of devices on my network...no user networks.

 

[twei]

I am using vlan 1 for mgmt of devices on my network...no user networks.

Can't you leave it out of the Proxmox interface config then?

 

[spetrillo]

Does it default to allow vlan 1 traffic then and I do not need to explicitly call it out?