vlan_filter_demo.sh

#!/bin/bash
brctl addbr br0
ip netns add t1
ip netns add t2
ip netns add t3

ip link add t1 type veth peer name t11
ip link add t2 type veth peer name t22
ip link add t3 type veth peer name t33

ip link set t11 netns t1
ip link set t22 netns t2
ip link set t33 netns t3


ip netns exec t1 ip link set t11 up
ip netns exec t2 ip link set t22 up
ip netns exec t3 ip link set t33 up


ip link set t1 up
ip link set t2 up
ip link set t3 up
ip link set t1 master br0
ip link set t2 master br0
ip link set t3 master br0
ip link set br0 up

ip netns exec t1 ip addr add 1.1.1.2/30 dev t11
ip netns exec t1 ip route add default via 1.1.1.1

ip netns exec t2 ip addr add 1.1.1.6/30 dev t22
ip netns exec t2 ip route add default via 1.1.1.5

ip netns exec t3 ip link add link t33 name vlan2 type vlan id 2
ip netns exec t3 ip link add link t33 name vlan3 type vlan id 3
ip netns exec t3 ip link set vlan2 up
ip netns exec t3 ip link set vlan3 up

ip netns exec t3 ip addr add 1.1.1.1/30 dev vlan2
ip netns exec t3 ip addr add 1.1.1.5/30 dev vlan3


ip link set br0 type bridge vlan_filtering 1
bridge vlan add dev t1 vid 2 pvid untagged master
bridge vlan add dev t2 vid 3 pvid untagged master

bridge vlan add dev t3 vid 2 master
bridge vlan add dev t3 vid 3 master

ip netns del t1
ip netns del t2
ip netns del t3
ip link del br0