Benutzer-Werkzeuge

Webseiten-Werkzeuge


l2gre-notizen

Hier sammle ich nur Aufzeichnungen aus meinen Tests mit L2GRE vom Stellar AP/OmniSwitch. Das fließt hoffentlich irgendwann mal in einen offiziellen Artikel ein … :)

Those are my notes to document this kind of weird stuff.

OmniSwitch as Guest-Edge

VPINID: 68888
hex: 0x10D18

Originating from the OmniSwitch ...

0x010d1800 for IPv6 / DHCPv6 (Multicast, DHCPv6, with local IPv6 src / LLMNR)
  0x010d1800 for IPv4 / LLMNR /Multicast 
0x010d1801 for IPv6 / ICMPv6 (Multicast, Neighbour Solicitation without source ::)
  0x010d1801 for IPv4 / DHCPv4 Discover (L2 bcast, L3 bcast)
0x010d1802 for ARP who-has xyz
0x010d1805 for IPv6 / ICMPv6 (Multicast, Multicast Listener Report v2 with local IPv6 src)
0x010d1806 for IPv6 / mDNS (Multicast, Standard Query)
0x010d1807 for IPv4 / mDNS (Multicast, Standard Query or Response)
0x010d1809 for IPv6 / ICMPv6 (Multicast, Router Solicitation with local IPv6 src)
  0x010d1809 for IPv4 / IGMPv3 (Multicast, Membership Report, Join 224.0.0.252)
  0x010d1809 for IPv4 / IGMPv3 (Multicast, Membership Report, Join 224.0.0.251)
0x010d180a for IPv6 / ICMPv6 (Multicast, Neighbour Advertisement with local IPv6 src)
0x010d180b for IPv4 / UDP Data (looks like the NBNS v6 x0f below)
0x010d180f for IPv4 / NBNS (subnet broadcast)
  0x010d180f for IPv6 / looks like NBNS V6 as Multicast UDP
  

os6860e-l2gre.pcap.zip

Stellar AP as Guest-Edge

VPINID: 64050
hex: 0xFA32

0x00FA3226 for all packets, entropy is the last byte of the encapsulated src MAC address (of the client)
This has been validated by me 60:f8:1d:ce:5e:26 ends up as 0xFA3226, another device ending in :FC is 0xFA32FC

The dotted-quad is moved one octet to the left, so 0xFA32 which would be 0.0.250.50 as dotted-quad
becomes 0.250.50.0, likely to make place for the "entropy".

l2gre-1.pcap.zip

l2gre-notizen.txt · Zuletzt geändert: 2018/06/24 13:30 von benny

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki