SYNOPSIS
tc ... action vlan { pop | PUSH } [ CONTROL ]
PUSH :=
push [ protocol
VLANPROTO ]
id VLANID
CONTROL := {
reclassify | pipe | drop | continue | pass }
DESCRIPTION
The vlan action allows to perform 802.1Q en- or decapsulation on a packet, reflected by the two operation modes POP and PUSH. The POP mode is simple, as no further information is required to just drop the outer-most VLAN encapsulation. The PUSH mode on the other hand requires at least a VLANID and allows to optionally choose the VLANPROTO to use.OPTIONS
- pop
- Decapsulation mode, no further arguments allowed.
- push
- Encapsulation mode. Requires at least id option.
- id VLANID
- Specify the VLAN ID to encapsulate into. VLANID is an unsigned 16bit integer, the format is detected automatically (e.g. prefix with '0x' for hexadecimal interpretation, etc.).
- protocol VLANPROTO
- Choose the VLAN protocol to use. At the time of writing, the kernel accepts only 802.1Q or 802.1ad.
- CONTROL
-
How to continue after executing this action.
-
- reclassify
- Restarts classification by jumping back to the first filter attached to this action's parent.
- pipe
- Continue with the next action, this is the default.
- drop
- Packet will be dropped without running further actions.
- continue
- Continue classification with next filter in line.
- pass
- Return to calling qdisc for packet processing. This ends the classification process.
-
EXAMPLES
The following example encapsulates incoming ICMP packets on eth0 from 10.0.0.2 into VLAN ID 123:
-
#tc qdisc add dev eth0 handle ffff: ingress
#tc filter add dev eth0 parent ffff: pref 11 protocol ip \
u32 match ip protocol 1 0xff flowid 1:1 \
u32 match ip src 10.0.0.2 flowid 1:1 \
action vlan push id 123
Here is an example of the pop function: Incoming VLAN packets on eth0 are decapsulated and the classification process then restarted for the plain packet:
-
#tc qdisc add dev eth0 handle ffff: ingress
#tc filter add dev $ETH parent ffff: pref 1 protocol 802.1Q \
u32 match u32 0 0 flowid 1:1 \
action vlan pop reclassify