diff options
| author | Mohamad Haj Yahia <mohamad@mellanox.com> | 2016-05-03 17:13:57 +0300 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2016-05-04 14:04:47 -0400 |
| commit | 5742df0f7dbe54728145bf1136540c09c7fcb0d1 (patch) | |
| tree | e84e59b2021231a73122c58c5f0a4728799d0dcf /drivers/net/ethernet/smsc/smc91x.c | |
| parent | 761e205b559be52852d85e0db4a034c9f57965f9 (diff) | |
net/mlx5: E-Switch, Introduce VST vport ingress/egress ACLs
Create egress/ingress ACLs per VF vport at vport enable.
Ingress ACL:
- one flow group to drop all tagged traffic in VST mode.
Egress ACL:
- one flow group that allows only untagged traffic with
smac that is equals to the original mac (anti-spoofing).
- one flow group that allows only untagged traffic.
- one flow group that allows only smac that is equals
to the original mac (anti-spoofing).
(note: only one of the above group has active rule)
- star rule will be used to drop all other traffic.
By default no rules are generated, unless VST is explicitly requested.
Signed-off-by: Mohamad Haj Yahia <mohamad@mellanox.com>
Signed-off-by: Saeed Mahameed <saeedm@mellanox.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/net/ethernet/smsc/smc91x.c')
0 files changed, 0 insertions, 0 deletions