On Wed, May 13, 2020 at 05:55:11PM +0000, Zsolt Bicskey wrote:
> > The thing is, you simply refuse to give us any of the detail that might be
> There is nothing I am refusing. Please, let me know what you need and I'll 
> provide it. 
> 
> 
> > useful here - you don't identify the NICs (may be relevant), you don't
> > tell us what configuration you have set on the VLAN, and (crucially)
> > what configuration you have set on the NIC.
> I am not sure what you mean. Tell me where to look or what command you run 
> and I'll give you the output. 
> 
> The NIC is an Intel Gigabit Onboard NIC
> VLAN config on the pfsense is simply tagged with the VLAN ID and passed on 
> the LAN interface. The switch has a dedicated port that only allows that tag 
> through. Pfsense also has a DHCP server running on the VLAN's subnet.
> 
> > When you used the live Fedora, did you connect both NICs to the ports?
> YES
> 
> > I accept some reluctance to give out identifying data, but you
> > cant expect help without this.
> There is absolutely no reluctance. Ask specifically for something and I'll 
> provide it
> 
> 
> >     under Fedora Live we can rule out problems with the NIC itself.)
> >     The fact that Fedora Live autoconfigures, but the Fedora template based
> >     qube does not, may indicate that there's some crucial package missing.
> >     Test this by creating an HVM, assigning the NIC, and booting from Fedora
> >     Live.
> I supposed those would be two separate tasks. What do I do once the HVM boots 
> up with the NIC assigned? 
> 
> 
> 
> > Just for fun, can you run `lsmod|grep 8021q` in pentest-gw?
> Did not give any output

And, THERE is your problem.
Dot1q is the networking standard that defines use of VLANs - formally,
IEEE 802.1Q.
To make use of it in Linux there is a kernel module that has to be loaded.
It's called 8021q. In many Fedora systems it is automatically loaded - in
your Fedora Live, for example. In the Fedora qube it isn't - you need to
load it manually.
You do this using the command, `modprobe 8021q`

Then you should be able to configure the VLAN, and connect. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200514012627.GA12298%40thirdeyesecurity.org.

Reply via email to