Hier sammle ich nur Aufzeichnungen aus meinen Tests mit L2GRE vom Stellar AP/OmniSwitch. Das fließt hoffentlich irgendwann mal in einen offiziellen Artikel ein ... :) Those are my notes to document this kind of weird stuff. ===== OmniSwitch as Guest-Edge ===== VPINID: 68888 hex: 0x10D18 Originating from the OmniSwitch ... 0x010d1800 for IPv6 / DHCPv6 (Multicast, DHCPv6, with local IPv6 src / LLMNR) 0x010d1800 for IPv4 / LLMNR /Multicast 0x010d1801 for IPv6 / ICMPv6 (Multicast, Neighbour Solicitation without source ::) 0x010d1801 for IPv4 / DHCPv4 Discover (L2 bcast, L3 bcast) 0x010d1802 for ARP who-has xyz 0x010d1805 for IPv6 / ICMPv6 (Multicast, Multicast Listener Report v2 with local IPv6 src) 0x010d1806 for IPv6 / mDNS (Multicast, Standard Query) 0x010d1807 for IPv4 / mDNS (Multicast, Standard Query or Response) 0x010d1809 for IPv6 / ICMPv6 (Multicast, Router Solicitation with local IPv6 src) 0x010d1809 for IPv4 / IGMPv3 (Multicast, Membership Report, Join 224.0.0.252) 0x010d1809 for IPv4 / IGMPv3 (Multicast, Membership Report, Join 224.0.0.251) 0x010d180a for IPv6 / ICMPv6 (Multicast, Neighbour Advertisement with local IPv6 src) 0x010d180b for IPv4 / UDP Data (looks like the NBNS v6 x0f below) 0x010d180f for IPv4 / NBNS (subnet broadcast) 0x010d180f for IPv6 / looks like NBNS V6 as Multicast UDP {{ ::os6860e-l2gre.pcap.zip |}} ===== Stellar AP as Guest-Edge ===== VPINID: 64050 hex: 0xFA32 0x00FA3226 for all packets, entropy is the last byte of the encapsulated src MAC address (of the client) This has been validated by me 60:f8:1d:ce:5e:26 ends up as 0xFA3226, another device ending in :FC is 0xFA32FC The dotted-quad is moved one octet to the left, so 0xFA32 which would be 0.0.250.50 as dotted-quad becomes 0.250.50.0, likely to make place for the "entropy". {{ ::l2gre-1.pcap.zip |}}