Hi
For a VM migration i need to create three EoIP tunnels between two sites, but the vlan’s at both sites have different ID’s
site-a - vlan 344 ← eoip → site-b vlan 684
site-a - vlan 345 ← eoip → site-b vlan 685
site-a - vlan 346 ← eoip → site-b vlan 686
At both sites the vlans are configured at the SFP+ port leading to a cisco switch that also has the hosts in vmware
I activated promiscues mode in vm ware as well as MAC addres changes and forged transmits
Started step by step to build for one vlan …
Site-a
/interface eoip add name=eoip-tunnel-a remote-address=<ip-b> tunnel-id=344
/interface bridge add name=bridge-a vlan-filtering=yes
/interface bridge vlan add bridge=bridge-a tagged=sfp-sfpplus1 vlan-ids=344
/interface bridge port add bridge=bridge-a interface=sfp-sfpplus1
/interface bridge port add bridge=bridge-a interface=eoip-tunnel-a pvid=344
and on
Site-b
/interface eoip add name=eoip-tunnel-b remote-address=<ip-a> tunnel-id=344
/ip address add address=10.10.10.11/24 interface=eoip-tunnel-b
I took a host at site A in vlan 344 (IP=10.10.10.10/24) and had it ping IP (10.10.10.11) and that works
then changed site b to:
/interface eoip add name=eoip-tunnel-b remote-address=<ip-a> tunnel-id=344
/interface bridge add name=bridge-b
/interface bridge port add bridge=bridge-b interface=eoip-tunnel-b
/ip address add address=10.10.10.11/24 interface=bridge-b
and the host could still ping 10.10.10.11
Then on to the final stage at Site-b (I removed the ip 10.10.10.11)
/interface eoip add name=eoip-tunnel-b remote-address=<ip-a> tunnel-id=344
/interface bridge add name=bridge-b vlan-filtering=yes
/interface bridge vlan add bridge=bridge-b tagged=sfp-sfpplus1 vlan-ids=684
/interface bridge port add bridge=bridge-b interface=sfp-sfpplus1
/interface bridge port add bridge=bridge-b interface=eoip-tunnel-a pvid=684
Looking at both sites at the bridge/vlan status it shows the eoip active as untagged and the sfp+1 active as tagged, but still I’m unable to ping any host on site B.
I did try the reversed process to verify site b is okay too, but it has the same issue.
In the latest test I did see a message in the switch stating “Blocking Ethernet1/6 on VLAN684. Inconsistent local vlan.”
What should be the right bridge config in this situation?