mirror of
https://github.com/openwrt/openwrt.git
synced 2026-10-22 02:24:54 +04:00
Julius Bairaktaris
9fcbcffc3d
On a VLAN-filtering port, a frame whose VLAN matches no translation rule is redirected to the CPU, so every frame in a VLAN the port is not a member of reaches the bridge only to be dropped there. Every member VLAN and the PVID have a rule naming the port, so drop the misses in hardware instead. The link-local trap bypasses the ingress VLAN filter, as the bridge takes those frames before filtering. On IPQ8074 frames in a non-member VLAN are dropped with drop code 109, and frames in a member VLAN pass. Assisted-by: Claude:claude-opus-5-5 Signed-off-by: Julius Bairaktaris <julius@bairaktaris.de> Link: https://github.com/openwrt/openwrt/pull/25700 Signed-off-by: Robert Marko <robimarko@gmail.com>