to answer my own question, i did figure it out.  although several google hits suggested that it was necessary to run vconfig and set up special bridges in the dom0, the way i got it working was to leave the dom0 totally alone and simply run vconfig in the domU, then assign an ip to the vlan interface.

the other gotcha is that you *must* change the domU vlan interface mtu to 1496.  otherwise small packets like pings will work, large packets will hang the connection.

jason

---------- Forwarded message ----------
From: Jason Tower <jtower@gmail.com>
Date: Aug 13, 2006 12:21 PM
Subject: vlan in a domU
To: fedora-xen@redhat.com

is it possible to do 802.1q vlan tagging in a domU?  i have it working fine in the dom0:

  # vconfig add eth0 560 (creates eth0.560 interface)
  # ifconfig eth0.560 10.10.10.140/24 (a subnet on vlan 560)
  # ping 10.10.10.100 (success)

but have been unsuccessful assigning 10.10.10.141 to a domU and getting it to communicate with vlan 560.  i've tried a wide variety of combinations of bridges, vconfigs, and xen domU vif settings, so far nothing has worked.  is it even possible to do what i'm trying to do?  or am i simply missing the secret sauce?

jason