Community
cancel
Showing results for 
Search instead for 
Did you mean: 
AFary
Beginner
1,388 Views

Re: SR-IOV with IXGBE - Vlan packets getting spoofed-kernal 4.4.77 ixgbe 5.2.1

I have the same problem with kernel 4.4.77, ixgbe driver version 5.2.1 and ixgbevf 4.2.1. OS ALT Linux.

Spoof cheking was disabled, but no ping in two VM with the same vlan.

dmesg host:

[162311.173561] ixgbe 0000:05:00.1 eth0: 2 Spoofed packets detected

[162313.177679] ixgbe 0000:05:00.1 eth0: 1 Spoofed packets detected

[162315.181748] ixgbe 0000:05:00.1 eth0: 2 Spoofed packets detected

[162333.211099] ixgbe 0000:05:00.1 eth0: 1 Spoofed packets detected

[162337.217085] ixgbe 0000:05:00.1 eth0: 1 Spoofed packets detected

[162339.220074] ixgbe 0000:05:00.1 eth0: 2 Spoofed packets detected

# ip li show eth0

7: eth0: mtu 9000 qdisc mq master ovs-system state UP mode DEFAULT group default qlen 1000

link/ether a0:36:9f:25:80:5e brd ff:ff:ff:ff:ff:ff

vf 0 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 1 MAC da:55:a4:db:0f:d5, spoof checking off, link-state auto, trust off, query_rss off

vf 2 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 3 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 4 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 5 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 6 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 7 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 8 MAC 9a:1f:86:df:b1:d8, spoof checking off, link-state auto, trust off, query_rss off

vf 9 MAC aa:b7:85:e1:1b:06, spoof checking off, link-state auto, trust off, query_rss off

vf 10 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 11 MAC 9a:1f:86:df:b1:d8, spoof checking off, link-state auto, trust off, query_rss off

vf 12 MAC aa:b7:85:e1:1b:06, spoof checking off, link-state auto, trust off, query_rss off

vf 13 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

0 Kudos
8 Replies
idata
Community Manager
127 Views

Hi Rider_Alt,

Thank you for posting at Wired Communities. We are investigating on this, can you share also what is the network adapter model?

regards,

 

sharon
idata
Community Manager
127 Views

Hi Rider_Alt,

 

 

Please share the network adapter model for us to better check on this.

 

 

regards,

 

sharon

 

AFary
Beginner
127 Views

05:00.0 Ethernet controller: Intel Corporation Ethernet Controller 10-Gigabit X540-AT2 (rev 01)

Subsystem: Intel Corporation Ethernet Converged Network Adapter X540-T2

Flags: bus master, fast devsel, latency 0, IRQ 33, NUMA node 0

Memory at ddc00000 (64-bit, prefetchable) [size=2M]

Memory at dde04000 (64-bit, prefetchable) [size=16K]

Expansion ROM at df180000 [disabled] [size=512K]

Capabilities: [40] Power Management version 3

Capabilities: [50] MSI: Enable- Count=1/1 Maskable+ 64bit+

Capabilities: [70] MSI-X: Enable+ Count=64 Masked-

Capabilities: [a0] Express Endpoint, MSI 00

Capabilities: [100] Advanced Error Reporting

Capabilities: [140] Device Serial Number a0-36-9f-ff-ff-26-b4-ac

Capabilities: [150] Alternative Routing-ID Interpretation (ARI)

Capabilities: [160] Single Root I/O Virtualization (SR-IOV)

Capabilities: [1d0] Access Control Services

Kernel driver in use: ixgbe

idata
Community Manager
127 Views

Hi Rider_Alt,

 

 

Thank you for the information. I will check on this.

 

 

regards,

 

sharon

 

idata
Community Manager
127 Views

Hi Rider_Alt,

 

 

Further checking, the double Vlan is not supported on X540 network adapter.

 

 

Regards,

 

AFary
Beginner
127 Views

Hello Intel.

I did not use Double VLAN (and any implementation of Q-in-Q) on my configuration.

Very simple test, in order to reproduce it - linux bond in VM with type balance-alb and two ixgbevf interfaces.

 

idata
Community Manager
127 Views

Hi Rider_Alt,

 

 

You may refer to our README file regarding the known issue "MAC address of Virtual Function changes unexpectedly" at https://downloadmirror.intel.com/18700/eng/readme.txt

 

 

Please try using command - ip link set vf mac (xx:xx:xx:xx:xx:xx) to set the mac address.

 

 

Thanks,

 

sharon

 

idata
Community Manager
127 Views

Hi Rider_Alt,

 

 

Please feel free to update me if further assistance needed.

 

 

Thanks,

 

sharon
Reply