inter netns container connection problem
 

Hello.

I have a problem using "ip netns" containers.

I made two netns containers with different vlans on one Linux machine. And I'd like to communicate two netns container through L2SW.

L2SW and host Linux machine is connected as follows:
Host[eno1] - L2SW[0/0] (vlan trunk connection)
In host:
eno1 - br0 (br0 is bridge)
br0 - veth00 (veth00 is one of the veth pair of veth00 and veth01)
br0 - veth10 (veth10 is one of the veth pair of veth10 and veth11)
In container1:
veth01 has vlan 4001
In container2:
veth11 has vlan 4011
In L2SW:
L2SW[0/1] - L2SW[0/2] (0/1 is access vlan 4001 and 0/2 is access vlan 4011)

In this connection setting, I'd like to execute ping/curl/... from container1 to container2.
But it failed.
The container1 learned container2's veth11 MAC address. But the container2's arp table is "container1's IP address: incomplete".

The commands of L2SW and Linux machine are following.
Does anyone have any idea?

L2SW:
vlan:
vlan 4001,4011
0/0:
mode trunk
allowed vlan 4001,4011
0/1:
mode access
vlan 4001
0/2:
mode access
vlan 4011

Host:
Version:
uname -a
Linux pi 3.10.0-123.20.1.el7.x86_64 #1 SMP Thu Jan 29 18:05:33 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

Command:

ip link add name br0 type bridge
ip link set dev br0 up
ip link set dev eno1 master br0

ip netns add ns4001
ip netns exec ns4001 ip link set dev lo up
ip link add name veth00 type veth peer name veth01
ip link set dev veth00 up
ip link set dev veth01 netns ns4001
ip netns exec ns4001 ip link add name veth01.4001 link veth01 type vlan id 4001
ip netns exec ns4001 ip addr add 192.168.20.2/24 dev veth01.4001
ip netns exec ns4001 ip link set dev veth01 up
ip netns exec ns4001 ip link set dev veth01.4001 up
ip link set dev veth00 master br0

ip netns add ns4011
ip netns exec ns4011 ip link set dev lo up
ip link add name veth10 type veth peer name veth11
ip link set dev veth10 up
ip link set dev veth11 netns ns4011
ip netns exec ns4011 ip link add name veth11.4011 link veth11 type vlan id 4011
ip netns exec ns4011 ip addr add 192.168.20.3/24 dev veth11.4011
ip netns exec ns4011 ip link set dev veth11 up
ip netns exec ns4011 ip link set dev veth11.4011 up
ip link set dev veth10 master br0

ip netns exec ns4001 ping 192.168.20.3
...failed...