Tagged VLANs over aggregated link

[mvn23]

Hi all,

I have been fiddling around with my N66U over the past couple of days, trying to get it to play nice with my new network setup.
Basically what I am trying to achieve is to have an aggregated link (bond0, set up according to the asuswrt-merlin wiki) with multiple tagged vlans on it. At the moment the bond interface is working only for untagged packets and I seem to be unable to get the tagged connections going.

My current config is as follows:
-ports 1 and 2 connected to managed switch
-vlan4 and vlan5 linked to ports 1 and 2 respectively (robocfg)
-vlan4 and vlan5 enslaved to bond0
-bond0 added to br0

This works for standard connectivity. Now I tried to set up vlan253 on bond0 and give the new vlan interface an IP address in the 192.168.253.0/24 subnet (I use this range for testing) but I am unable to make it work, even after removing bond0 from br0 it still won't play along. I have accepted all traffic to and from vlan253 in the firewall and if I link vlan253 directly to one of the ports on the router it works without any problem.

Ultimately I would like to have all the vlans between the router and the switch tagged, but I found this to be a bit more difficult than expected. I might look into this once I get at least one tagged vlan across the link.

 

[mvn23]

OK, time for some more details. I have the following setup:

(actually, I just noticed a small mistake, 192.168.23.1/20 is assigned to br0 on the router, not to bond0)

the relevant config of my RT-N66U is as follows:

# robocfg show
Switch: enabled gigabit
Port 0: 1000FD enabled stp: none vlan: 2 jumbo: on mac: 02:00:00:00:00:02
Port 1: 1000FD enabled stp: none vlan: 4 jumbo: on mac: e8:de:27:77:f7:5a
Port 2: 1000FD enabled stp: none vlan: 5 jumbo: on mac: 56:b3:0f:76:0b:53
Port 3:  10FD enabled stp: none vlan: 1 jumbo: on mac: d0:50:99:39:03:db
Port 4: 1000FD enabled stp: none vlan: 1 jumbo: on mac: 34:31:c4:3b:a3:79
Port 8: 1000FD enabled stp: none vlan: 1 jumbo: off mac: 60:a4:4c:8c:e3:50
VLANs: BCM53115 enabled mac_check mac_hash
  1: vlan1: 3 4 8t
  2: vlan2: 0 8u
  4: vlan4: 1 8t
  5: vlan5: 2 8t

# cat /proc/net/bonding/bond0
Ethernet Channel Bonding Driver: v3.1.3 (June 13, 2007)

Bonding Mode: IEEE 802.3ad Dynamic link aggregation
Transmit Hash Policy: layer3+4 (1)
MII Status: up
MII Polling Interval (ms): 50
Up Delay (ms): 0
Down Delay (ms): 0

802.3ad info
LACP rate: fast
Active Aggregator Info:
   Aggregator ID: 1
   Number of ports: 2
   Actor Key: 5
   Partner Key: 297
   Partner Mac Address: e8:de:27:77:f7:5a

Slave Interface: vlan4
MII Status: up
Link Failure Count: 0
Permanent HW addr: 60:a4:4c:8c:e3:50
Aggregator ID: 1

Slave Interface: vlan5
MII Status: up
Link Failure Count: 0
Permanent HW addr: 60:a4:4c:8c:e3:50
Aggregator ID: 1

# brctl show
bridge name   bridge id     STP enabled   interfaces
br0     8000.60a44c8ce350   yes     vlan1
               eth1
               eth2
               bond0

# cat /proc/net/vlan/config
VLAN Dev name    | VLAN ID
Name-Type: VLAN_NAME_TYPE_PLUS_VID_NO_PAD
vlan1  | 1  | eth0
vlan2  | 2  | eth0
vlan4  | 4  | eth0
vlan5  | 5  | eth0
vlan253  | 253  | bond0

On the default vlan everything works as expected.
On vlan 253, traffic between my laptop and server works without any problems, but no traffic is forwarded to or from the router.
Does anybody have any idea why this does not work? Could this be a limitation of the chipset? (Sending tagged frames out of a set of untagged ports?)