Policy based VLAN tagging

Question

HTML

Greetings, please tell me if there are devices in nature that are able to mark incoming packets with certain VLAN tags, depending on the destination IP address?

Answer 1

I would try something like this.

#создаём виртуальные интерфейсы с закреплённым за ним vlan id
for i in `seq 0..$n`; 
do
   /sbin/vconfig add eth0 $i
   /sbin/ip addr add eth0.$i 192.168.0.$i
done
#а теперь собственно тегируем трафик
ip route add 192.168.0.0/24 via 192.168.0.1
ip route add 192.168.1.0/24 via 192.168.0.2

If it’s not right at all, please don’t kick your feet, it’s lazy to conduct experiments at such a late hour.

Answer 2

Stump3 at 2 Mpps? He will grunt without even realizing what happened (if the topikstarter didn’t mix up Mbps with Mpps of course)
If the traffic is really in millions of packets per second, then it probably makes sense to put some kind of cat and filter it on asics.
If you really want a software solution, then I think iproute2 + hashes will help without these crutches.

Answer 3

Why don't you like PBR? In essence, marking with a specific tag is routing to the desired interface. Oh yes - cisco + route map to help you.

Answer 4

PBR is the 3rd level, vlan is the second.
So that? don't force you to change the vlan id with the set command, you are redirecting your packet to the layer 3 virtual interface.
If you just want to change the vid package on the fly, then in my opinion this is not solvable.
well, other cases, you can look at private vlan (again, you didn’t set a task, you described your vision for solving the problem, so I could be wrong)

Answer 5

But isn't it worth looking in the direction of MPLS, since you really want something so strange?