diff options
| author |   Damjan Marion <damarion@cisco.com> | 2019-06-12 22:41:21 +0200 |
|---|---|---|
| committer |   Florin Coras <florin.coras@gmail.com> | 2019-06-12 21:58:43 +0000 |
| commit | b59eb8f3e3a37eacd875d3321975072830034075 (patch) | |
| tree | 6c5f15fc6ac282c69377ed5ca2c5c233cc9f661b | |
| parent | f35a07273f252b98f65126c747bfb1eb435f0ace (diff) | |
avf: add README.md section about spoofing check
Type: docs
Change-Id: I4ae65ed22275abf0d15045f3b09625d6aaa3b67b
Signed-off-by: Damjan Marion <damarion@cisco.com>
| -rw-r--r-- | src/plugins/avf/README.md | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/src/plugins/avf/README.md b/src/plugins/avf/README.md index 0c7d555775e..40e4f0cd040 100644 --- a/src/plugins/avf/README.md +++ b/src/plugins/avf/README.md @@ -82,6 +82,16 @@ trust needs to be set to "on" using the linux "ip link" utility. ip link set dev <PF inteface name> vf <VF id> trust on ``` +### L2 spoofing check +By default Virtual Function is not allowed to send ethernet frames which +have source MAC address different than address assigned to the VF. +In some cases it is expected that VPP will send such frames (e.g. L2 bridging, +bonding, l2 cross-connect) and in such cases spoof chack needs to be turned +off by issuing following command: +``` +ip link set dev <PF inteface name> vf <VF id> spoofchk off +``` + ### Interface Creation Interfaces can be dynamically created by using following CLI: ``` |