From b59eb8f3e3a37eacd875d3321975072830034075 Mon Sep 17 00:00:00 2001 From: Damjan Marion Date: Wed, 12 Jun 2019 22:41:21 +0200 Subject: [PATCH] avf: add README.md section about spoofing check Type: docs Change-Id: I4ae65ed22275abf0d15045f3b09625d6aaa3b67b Signed-off-by: Damjan Marion --- src/plugins/avf/README.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/src/plugins/avf/README.md b/src/plugins/avf/README.md index 0c7d555775e..40e4f0cd040 100644 --- a/src/plugins/avf/README.md +++ b/src/plugins/avf/README.md @@ -82,6 +82,16 @@ trust needs to be set to "on" using the linux "ip link" utility. ip link set dev vf trust on ``` +### L2 spoofing check +By default Virtual Function is not allowed to send ethernet frames which +have source MAC address different than address assigned to the VF. +In some cases it is expected that VPP will send such frames (e.g. L2 bridging, +bonding, l2 cross-connect) and in such cases spoof chack needs to be turned +off by issuing following command: +``` +ip link set dev vf spoofchk off +``` + ### Interface Creation Interfaces can be dynamically created by using following CLI: ``` -- 2.16.6