I’m trying to make a simple IPoE setup, but have some problems in ip unnumbered realisation.
CCR-1036
i have N vlans on some trunk interface
sfp-1
vlan-1 —
vlan-2 —+ bridge CLIENTS (192.168.7.1/24)
…+
vlan-X —/
one vlan equals one subscriber on access-level.
I’ve tried to combine vlans into bridge named ‘clients’, assigned IP 192.168.7.1/24.
DHCP + Radius on bridge works very well, all clients are recieving their IPs from 192.168.7.x/24. After that, they are unable to ping 7.1 or make anything, all packets are dropped. ARP record for every client appears in ARP table, pointing to BRIDGE (maybe that is the problem, i need ARP pointing to VLAN-X instead of bridge?). When i move IP address to one of the vlans - all is just perfect for that user, who’s vlan is. But, as i think, bridge must forward all the packets, including ARPs? I tried proxy-arp on both vlans and bridge - nothing helped.
I had the same problem on the cisco router, and solution was to use a DHCP-snooping for all needed vlans. So, when router saw a DHCP-reply to some VLAN interface, it adds ‘ip route XX.XX.XX.XX YY.YY.YY.YY Vlan 123’ into the routing table, so router able to find subscriber directly on vlan. Can same or simular mechanics be reached in RotuerOS?
Thank you for any advises!