From 56912c896ae803fad01af390ade921be68ea5ba2 Mon Sep 17 00:00:00 2001 From: John Lo Date: Thu, 8 Dec 2016 16:10:02 -0500 Subject: Add extra validation for VXLAN packets and tunnels - On VXLAN packet decap, validate its DIP against VXLAN tunnel. - Add extra logic to validate and handle creation of multicast VXLAN tunnels. Change-Id: I6abdddd7be4cd9f1bcfc88d9970ba681fdd72f7c Signed-off-by: John Lo --- vpp-api-test/vat/api_format.c | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'vpp-api-test/vat') diff --git a/vpp-api-test/vat/api_format.c b/vpp-api-test/vat/api_format.c index 85821ee287b..258c67f8e0c 100644 --- a/vpp-api-test/vat/api_format.c +++ b/vpp-api-test/vat/api_format.c @@ -10372,6 +10372,11 @@ api_vxlan_add_del_tunnel (vat_main_t * vam) errmsg ("tunnel nonexistent multicast device\n"); return -99; } + if (grp_set == 0 && ip46_address_is_multicast (&dst)) + { + errmsg ("tunnel dst address must be unicast\n"); + return -99; + } if (ipv4_set && ipv6_set) -- cgit 1.2.3-korg