Hello,
How to create virtual interface on ether interface (like vlan, but without tag)?
You can use vlan or some kind of tunnel. How would you distinguish virtual interface traffic if there were no tag or any other encapsulation?
>>You can use vlan or some kind of tunnel.
No
>>How would you distinguish virtual interface traffic if there were no tag or any other encapsulation?
by MAC address
Can you explain how exactly you intend to use this?..
>>Can you explain how exactly you intend to use this?
Currently, if add ether interfaces to bridge, not possible to use ether interfaces in Mangle rules.
I need add ether interfaces to bridge, then create virtual interfaces on ether interfaces, and use it in Mangle rules.
You should enable “Use IP Firewall” in the Bridge Settings. Then you can use mangle with the interfaces. I don’t think there is a way to make virtual interfaces like you want to.
>>You should enable “Use IP Firewall” in the Bridge Settings. Then you can use mangle with the interfaces.
You are wrong. The error continues to appear:
“in/out-interface matcher not possible when interface (ether-gw) is slave - use master instead (bridge-gw)”
Correct… because you should be using in-bridge-port and out-bridge-port… not in and out interface.
>>you should be using in-bridge-port and out-bridge-port
when i set:
set “Use IP Firewall” on bridge
set IP1 to ether1
set Out.BridgePort=ether1 on Firewall Filter Rules forward rule
set Out.BridgePort=ether1 on Firewall NAT masquerade rule
i cannot communicate from LAN to Internet!
(communication work only when i set IP1 to bridge_wan and change Out.BridgePort=ether1 to OutInterface=bridge_wan, but i need IP1/IP2 on ether1/ether2)
You should not have the interfaces in common bridge if you do natting between them. They should belong to different networks (other L2 domains) and you should route between them instead bridging.
>>You should not have the interfaces in common bridge if you do natting between them
I do not NATting between interfaces in bridge!
If you want us to be able to help you need to post your full configuration and a network diagram of what your trying to do. Beyond that I can’t for the life of me figure out what your trying to do and why…
I advise you to take some generic networking study or leave the matter to someone who understands
a bit better what they are doing.
You are asking for new things all the time, but you keep rejecting the good solutions that expert people
(e.g. ZeroByte) are giving you.
It appears that you are trying to solve the problem the wrong way and thus you hit limitations all the time.