$ 0 0 re-reading config, probably unrelated:On eth2 , all settings for vlan1 are under VIF1, but not its modify rule.