Google
  Web www.spinics.net

[VLAN] 802.1Q - MAC Spoofing

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]


Hi, 
 
I am posting my question again in this forum. 
I sincerely appreciate if you could help on this regard. Currently I am stuck here.. 
 
My Requirement :
1. On a single Linux RedHat machine with a single interface card, spoof the multiple MAC addresses. 
2. This card will be connected to (2950 cisco ) L2 switch. 
3. On the switch tag the frames based on the Vlan tag id (802.1Q).
 
 
Understanding :
1. MAC spoofing on Linux can be done using vconfig.
2. We do not have to confiugre linux for anything else.
3. Configure the port on the switch in the trunk mode. 
 
--- This should work.
 
 
What I have Done :
1. On Linux host created multiple logical interfaces using vconfig and assigned different MAC and IP address on the same subnet as the primary interface was. 
 
vconfig add eth0 100
ifconfig eth0.100 inet  192.2.84.210 hw ether 00:11:11:29:78:11 netmask  255.255.255.0 ifconfig eth0.100 down
ifconfig eth0.100 up 
 
P.S. => The new ip address for eth0.100 is on the same subnet as primary eth0 interface's subnet. 
 
2. On the Cisco L2 Catalyst (9250 series) switch :
conf t 
interface Fa0/32 
switchport mode trunk
switchport trunk allowed vlan add 100
 
What is not happening :
1. The spoofed MAC addresses are not visible outside. 
 
 
Observation :
1. The arp reply from this machine this new "192.2.84.210" IP address contains the promary interface's MAC address. (I tried to ping this new IP address from other host)
2. Routing table on linux host is :
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
192.2.84.0      0.0.0.0         255.255.255.0   U         0 0          0 eth0
192.2.84.0      0.0.0.0         255.255.255.0   U         0 0          0 eth0.100 
 
What should I do :
 1. Do I need to configure the Linux to send Vlan tags in the ethernet frames (in    802.1Q format)?
2. Do I need to change the subnets at linux for the spoofed MAC addresses ?
3. Anything else ??????
 
Thank you so much for the help.
 
Regards,
Chaitra

________________________________

From: vlan-bounces@xxxxxxxxxxxxxxx on behalf of Stephen Weyland
Sent: Tue 26-Sep-06 20:22
To: vlan@xxxxxxxxxxxxxxx
Subject: [VLAN] 802.1p queuing



Hi

 I am new to the list and I apologize if this question has been asked
before but I cannot seem to find a search method for the archives. I
would be happy for some enlightenment there.

Overview of what I am trying to do:
- I am setting up 3 vlans on an 802.1q trunk from a switch into a router
that runs CentOS 4.3.
- I am a little confused as to how and if 802.1p priority is set from
the Linux side.
- I would like to set one of the vlans on the router to have priority
above the others. It is a voice vlan. I can do this for outbound traffic
from the switch but for outbound from the router I'm not sure.
- I am wondering if I have to do anything to add 802.1p bits to a given
vlan or is there a certain amount of priority queuing/mapping that takes
place out of the box with the presence of IP ToS bits?

Thanks
Stephen
_______________________________________________
Vlan mailing list
Vlan@xxxxxxxxxxxxxxx
http://www.candelatech.com/mailman/listinfo/vlan


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://ns2.lanforge.com/pipermail/vlan/attachments/20060926/8651c735/attachment.html

[Netdev]     [Ethernet Bridging]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Bugtraq]     [Photo]     [Yosemite]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux Admin]     [Samba]     [Video 4 Linux]     [Linux Resources]

Powered by Linux