Okey. So if I understand you correctly we need to change our router (firewall) to be a GSW and not a GW when it's not a Cisco router? And then it needs to show all router port as Vl## or Vlan###.
Our firewall is a Sophos UTM9 and is the only router on all prefixes. It now shows the router port as eth0, eth1 and so on in NAV. It's not possible to change the interface names in UTM. I now have entered in the UTM's interface description field the guidelines that's described here: https://nav.uninett.no/wiki/subnetsandvlans#guide_lines_for_configuring_rout... Don't know how to get the information from it. (I have no knowledge about MIBs and SNMP) The VLAN information that's inserted now in NAV must come from some switches (Management interface). They have the VLAN tag as router port.
The missing information I was trying to enter is the VLAN, Organization and Usage in SeedDB that you can manually insert for VLAN. But it's getting deleted...
/Mattias
----- Ursprungligt meddelande ----- Från: "Morten Brekkevold" morten.brekkevold@uninett.no Till: "Mattias Söderholm" mattias.soderholm@malax.fi Kopia: nav-users@uninett.no Skickat: torsdag, 12 mar 2015 10:48:39 Ämne: Re: NAV and VLAN with Virtualized firewall
On Tue, 10 Mar 2015 07:41:50 +0200 Mattias Söderholm mattias.soderholm@malax.fi wrote:
Two prefixes have VLAN tag showing but the rest is missing it. But all now have one gateway (gwcount), so that's good. And all is of network type LAN.
The two VLAN that it finds is having at least one "better" switch with IPs on both VLANS. We have switches on other VLANs to, but those are cheap ones. So maybe NAV can't get the VLAN info for those management interfaces.
I skimmed some of the code again now, and NAV's way of associating prefixes and VLANs seems a tad simple-minded.
For any non-Cisco router, it will only work if it is a routing switch (GSW) that uses virtual router ports with interface names of the pattern Vl## or Vlan### (which at least holds true for Cisco routing switches). For plain L3 Cisco routers (GW), there is a proprietary MIB that gets us the VLAN tags.
Which model router routes these un-identified prefixes of yours, and is there any obvious way to get VLAN tag numbers from it?
I shall try to add the missing info from SeedDB and see if it's being deleted or not now.
What, exactly, are you adding?