From: Damjan Marion <damarion@cisco.com>
Date: Wed, 12 Jun 2019 20:41:21 +0000 (+0200)
Subject: avf: add README.md section about spoofing check
X-Git-Url: https://gerrit.fd.io/r/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F01%2F20101%2F2;p=vpp.git

avf: add README.md section about spoofing check

Type: docs
Change-Id: I4ae65ed22275abf0d15045f3b09625d6aaa3b67b
Signed-off-by: Damjan Marion <damarion@cisco.com>
---

diff --git a/src/plugins/avf/README.md b/src/plugins/avf/README.md
index 0c7d555775e..40e4f0cd040 100644
--- a/src/plugins/avf/README.md
+++ b/src/plugins/avf/README.md
@@ -82,6 +82,16 @@ trust needs to be set to "on" using the linux "ip link" utility.
 ip link set dev <PF inteface name> vf <VF id> trust on
 ```
 
+### L2 spoofing check
+By default Virtual Function is not allowed to send ethernet frames which
+have source MAC address different than address assigned to the VF.
+In some cases it is expected that VPP will send such frames (e.g. L2 bridging,
+bonding, l2 cross-connect) and in such cases spoof chack needs to be turned
+off by issuing following command:
+```
+ip link set dev <PF inteface name> vf <VF id> spoofchk off
+```
+
 ### Interface Creation
 Interfaces can be dynamically created by using following CLI:
 ```