topic Re: Disabling anti-spoofing protection on a VF (NIC 82576) in Ethernet Products

Disabling anti-spoofing protection on a VF (NIC 82576)

SPasq1 — Tue, 30 Apr 2013 13:13:09 GMT

Hello,

I have a 82576 NIC for which I enabled SR-IOV support. All seems to work fine except I want to disable the anti-spoofing proctection (as described here [1]) and the command fails:

# ip link set dev eth0 vf 0 spoofchk off

RTNETLINK answers: Operation not supported

Anybody having a clue for this?

Distribution: Ubuntu 12.10

Kernel: 3.5.0-27-generic

igb:

igbvf driver: 2.0.1-k

[1] /message/151022# 151022 http://communities.intel.com/message/151022# 151022

Re: Disabling anti-spoofing protection on a VF (NIC 82576)

Patrick_K_Intel1 — Tue, 30 Apr 2013 14:55:13 GMT

Hi Simon,

Thanx for visiting our forum.

The antispoof configuration is part of the latest release of the iproute2 tool, driver and kernel (they all work together). If you update each of these to the latest I think you will get the results you are looking for. What you currently have is not the latest iproute2 nor driver for sure.

Good luck!

- Patrick

Re: Disabling anti-spoofing protection on a VF (NIC 82576)

SPasq1 — Tue, 30 Apr 2013 15:17:59 GMT

Thanks for the reply! I'll try your suggestions and report back the result.

Re: Disabling anti-spoofing protection on a VF (NIC 82576)

SPasq1 — Thu, 02 May 2013 08:51:50 GMT

Back with some news. I've upgraded kernel, igbvf and iproute2 to pretty decent versions (see below) and I have still no luck with the spoofchk flag.

iproute2: iproute2-ss130430

kernel: 3.8.8

igb: 4.1.2-k (module from kernel)

igbvf: 2.0.2-k (module from kernel)

I couldn't recompile the out-of-tree igbvf driver, I hit the same problem as described http://sourceforge.net/mailarchive/message.php?msg_id=30198721 here and I'm not sure that it ever got fixed...

Could you tell me the exact minimal versions of kernel, igbvf and iproute2 required for it to work?

Regards,

Simon

Re: Disabling anti-spoofing protection on a VF (NIC 82576)

Patrick_K_Intel1 — Thu, 02 May 2013 17:39:32 GMT

Per my expert, the following are the minimum version requiremensts for spoofchk capability:

iproute2: version 3.3.0 and newer
kernel: 3.0.0 and newer
igb: 4.1.2-k (module from kernel)
igbvf: 2.0.4 (from Source forge site).

Hope this helps.

- Patrick

Re: Disabling anti-spoofing protection on a VF (NIC 82576)

SPasq1 — Mon, 22 Jul 2013 15:25:00 GMT

I tested again with the latest igbvf module which compiles fine on my Ubuntu system but I'm still hitting the same issue.

igb: 4.1.2-k

igbvf: 2.3.2

kernel: 3.8.0-26

iproute2: iproute2-ss130716

$ ip link set p5p2 vf 1 spoofchk off

RTNETLINK answers: Operation not supported

Any hint?

Thanks!

Re: Disabling anti-spoofing protection on a VF (NIC 82576)

Patrick_K_Intel1 — Tue, 23 Jul 2013 17:19:10 GMT

Hi Simon,

Thanks for posting to our site. We took your reproduction information (a big thanx for that!) and were able to reproduce your issue. There seems to definately be a bug somewhere - we are actively investigating it.

While I don't have an ETA on a fix, or even know if it is a problem in the kernel, the tool or the Intel driver, I will keep you aprised as I get updates.

thanx,

Patrick

Re: Disabling anti-spoofing protection on a VF (NIC 82576)

SPasq1 — Wed, 24 Jul 2013 07:37:59 GMT

Thanks for the reply! Ping me if you want me to test something.

Re: Disabling anti-spoofing protection on a VF (NIC 82576)

PK3 — Wed, 16 Oct 2013 12:53:18 GMT

Hi Patrick,

do you have any update if there is bug in kernel, driver or tool and if it was fixed already?

Thanks Pavol