# man > vlan(8)

_VLAN_ _manipulation_ _action_ _in_ [_tc_(8)](https://www.chedong.com/phpMan.php/man/tc/8/markdown)               Linux              _VLAN_ _manipulation_ _action_ _in_ [_tc_(8)](https://www.chedong.com/phpMan.php/man/tc/8/markdown)

## NAME
       vlan - vlan manipulation module

## SYNOPSIS
       **tc **... **action vlan **{ **pop **| **pop_eth **| _PUSH_ | _MODIFY_ | _PUSH_ETH_ } [ _CONTROL_ ]

       _PUSH_ := **push **[ **protocol _**VLANPROTO_ ]  **[ **priority _VLANPRIO_ ] **id _**VLANID_

       _MODIFY_ := **modify **[ **protocol _**VLANPROTO_ ]  **[ **priority _VLANPRIO_ ] **id _**VLANID_

       _PUSH_ETH_ := **push_eth dst_mac _**LLADDR_ **src_mac _**LLADDR_

       _CONTROL_ := { **reclassify **| **pipe **| **drop **| **continue **| **pass **| **goto chain CHAIN_INDEX **}

## DESCRIPTION
       The  **vlan  **action allows one to perform 802.1Q en- or decapsulation on a packet, reflected by
       the operation modes _POP_, _PUSH_ and _MODIFY_.  The _POP_ mode is simple, as no further  information
       is required to just drop the outer-most VLAN encapsulation. The _PUSH_ and _MODIFY_ modes require
       at least a _VLANID_ and allow one to optionally choose the _VLANPROTO_ to use.

       The **vlan **action can also be used to add or remove the base Ethernet header. The **pop_eth **mode,
       which  takes no argument, is used to remove the base Ethernet header. All existing VLANs must
       have been previously dropped. The opposite operation, adding a base Ethernet header, is  done
       with  the **push_eth **mode. In that case, the packet must have no MAC header (stacking MAC head‐
       ers is not permitted). This mode is mostly useful when a previous action has encapsulated the
       whole original frame behind a network header and one needs to prepend an Ethernet header  be‐
       fore forwarding the resulting packet.


## OPTIONS
       **pop    **Decapsulation mode, no further arguments allowed.

       **push   **Encapsulation mode. Requires at least **id **option.

       **modify **Replace mode. Existing 802.1Q tag is replaced. Requires at least **id **option.

### pop_eth
              Ethernet  header  decapsulation mode. Only works on a plain Ethernet header: VLANs, if
              any, must be removed first.

### push_eth
              Ethernet header encapsulation mode. The Ethertype is automatically set using the  net‐
              work  header  type.  Chaining Ethernet headers is not allowed: the packet must have no
              MAC header when using this mode. Requires the **dst_mac **and **src_mac **options.

       **id _**VLANID_
              Specify the VLAN ID to encapsulate into.  _VLANID_ is an  unsigned  16bit  integer,  the
              format  is  detected  automatically (e.g. prefix with '**0x**' for hexadecimal interpreta‐
              tion, etc.).

       **protocol _**VLANPROTO_
              Choose the VLAN protocol to use. At the time  of  writing,  the  kernel  accepts  only
              **802.1Q **or **802.1ad**.

       **priority _**VLANPRIO_
              Choose the VLAN priority to use. Decimal number in range of 0-7.

       **dst_mac _**LLADDR_
              Choose the destination MAC address to use.

       **src_mac _**LLADDR_
              Choose the source MAC address to use.

       _CONTROL_
              How to continue after executing this action.

              **reclassify**
                     Restarts  classification  by  jumping back to the first filter attached to this
                     action's parent.

              **pipe   **Continue with the next action, this is the default.

              **drop   **Packet will be dropped without running further actions.

              **continue**
                     Continue classification with next filter in line.

              **pass   **Return to calling qdisc for packet processing.  This  ends  the  classification
                     process.

## EXAMPLES
       The  following  example encapsulates incoming ICMP packets on eth0 from 10.0.0.2 into VLAN ID
       123:

              #tc qdisc add dev eth0 handle ffff: ingress
              #tc filter add dev eth0 parent ffff: pref 11 protocol ip \
                   u32 match ip protocol 1 0xff flowid 1:1 \
                       match ip src 10.0.0.2 flowid 1:1 \
                   action vlan push id 123

       Here is an example of the **pop **function: Incoming VLAN packets on eth0  are  decapsulated  and
       the classification process then restarted for the plain packet:

              #tc qdisc add dev eth0 handle ffff: ingress
              #tc filter add dev $ETH parent ffff: pref 1 protocol 802.1Q \
                   u32 match u32 0 0 flowid 1:1 \
                   action vlan pop reclassify

       For an example of the **pop_eth **and **push_eth **modes, see [**tc-mpls**(8)](https://www.chedong.com/phpMan.php/man/tc-mpls/8/markdown).


## SEE ALSO
       [**tc**(8)](https://www.chedong.com/phpMan.php/man/tc/8/markdown), [**tc-mpls**(8)](https://www.chedong.com/phpMan.php/man/tc-mpls/8/markdown)

iproute2                                     12 Jan 2015           _VLAN_ _manipulation_ _action_ _in_ [_tc_(8)](https://www.chedong.com/phpMan.php/man/tc/8/markdown)