[RFC PATCH v2 0/1] Introduce UCI support for configuring DSA VLAN filter rules
Jo-Philipp Wich
jo at mein.io
Wed Jul 15 03:56:53 EDT 2020
Hi,
> Changes:
> - The device is created as a netifd bridge
> - Bridge vlan sections should always refer to the bridge instead of
> automatically be applied to the first one
> - Use = instead of . to mark tagging modifiers. "." is already used
> for vlan interface names and reusing it here creates ambiguity.
> - Allow specifing pvid as a modifier instead of needing to create a
> separate port section.
>
> The section names are optional, I chose to put them in to make it easier
> to modify the sections from scripts
>
> What do you think?
First of all, I was reworking dsaconfig into a very similar direction for a v3
so overall I do like your proposal and I think it makes sense.
Specific points from my side:
- I dislike the equal sign syntax, colon would fit better imho
- For denoting pvid I used a trailing asterisk, like the old roboswitch config
- The bridge-vlan sections should be anonymous
- Bridge vlan filtering will be implicitely enabled as soon as at least one
bridge-vlan section references a bridge device?
So my preferred configuration would look like (choosing list over option
notation for ports but that should have no code impact):
config device
option name switch0
option type bridge
config bridge-vlan
option device switch0
option vlan 1
list ports 'lan1'
list ports 'lan2:t'
config bridge-vlan
option device switch0
option vlan 2
list ports 'wan:u' # I think we also should support an explicit
# untag which is equivalent to no suffix
config bridge-vlan
option device switch0
option vlan 5
list ports 'lan2:t*' # The "*" denotes a PVID
list ports 'lan3'
config bridge-vlan
option device switch0
option vlan 8
list ports 'lan2:t'
list ports 'lan4'
config bridge-vlan
option device switch0
option vlan 11
list ports 'lan2:t'
list ports 'lan4:t'
~ Jo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.openwrt.org/pipermail/openwrt-devel/attachments/20200715/a8a339ca/attachment.sig>
More information about the openwrt-devel
mailing list