Description
Describe the issue
When creating guest and assigning its network mode to bridged that is attached to VLAN tagged interface, the ingress packets towards the guest contain additional bytes before the IP packet header. I suspect this is a bug on Apple's side, but reporting here, in case there is something you can amend from UTM side.
In my example I will be using vlan3 interface, same problem happens regardless of having one or multiple vlan interfaces.
Steps to reproduce:
- Create VLAN interface from Network settings and assign it to some physical IF (in my case, VLAN 130 to bridge vlan3 using Physical interface USB-C to LAN adapter)
- Create guest and assign network mode to 'Bridged' - Bridged Interface 'vlan3'
- Start the guest and wait until it attempts to obtain network information (doesn't matter if static or DHCP) and see that packets are broken
I 5D33 have three packet captures, can provide if needed:
- TCPDUMP from en4 (the physical interface) - scope of packets limited to those that are VLAN tagged with VLAN-ID 130, packets are all ok
- TCPDUMP from vlan3 (the vlan interface) - packets are all ok
- TCPDUMP from bridge100 - DHCP Reply packets are broken, before IP header there are the additional "00 82 08 00" bytes
Configuration
- UTM Version: 3.1.5 (53)
- OS Version: 12.3.1
- Apple Silicon
Ifconfig of the auto-created bridge100:
bridge100: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500 options=3<RXCSUM,TXCSUM> ether be:d0:74:24:13:64 Configuration: id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0 maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200 root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0 ipfilter disabled flags 0x0 member: vlan3 flags=3<LEARNING,DISCOVER> ifmaxaddr 0 port 30 priority 0 path cost 0 member: vmenet0 flags=3<LEARNING,DISCOVER> ifmaxaddr 0 port 25 priority 0 path cost 0 media: autoselect status: active
ifconfig of the vlan3 interface:
vlan3: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500 options=6063<RXCSUM,TXCSUM,TSO4,TSO6,PARTIAL_CSUM,ZEROINVERT_CSUM> ether 3c:18:a0:51:01:4c inet6 fe80::c10:aa25:72d2:eacf%vlan3 prefixlen 64 secured scopeid 0x1e nd6 options=201<PERFORMNUD,DAD> vlan: 130 parent interface: en4 media: autoselect (1000baseT <full-duplex>) status: active
Attaching screenshot of two wireshark windows (left vlan3 interface, ok, right bridge100 interface, broken packet)