SR-IOV does not work with QinQ on vmware 6.5

[DMiha3]

Hello, I need your help! 

The network card Intel 82599ES da 2 and server CISCO UCS C220 - all with support sr-iov. I have successfully turned on and implemented the sr-iov, and the guest os works fine with it. But sr-iov does not want to work with the QinQ.I was installed latest driver for Intel 82599ES da2 - "ixgbevf-4.5.1". On the vSwitch I was turned off: Promiscuous Mode, MAC Address Change and Forged Transmit but its not help. 

Esxi 6.5 logs constantly writes the following when QinQ is enabled:

2018-12-25T16: 24: 10.849Z cpu43: 66164) <4> ixgbe 0000: 06: 00.0: vmnic0: 1 Spoofed packets detected

2018-12-25T00: 00: 34.491Z cpu10: 66044) <4> ixgbe 0000: 06: 00.0: vmnic0: MACVLANs not supported

[VincentT_Intel]

Hi DMiha3, Thank you for posting in Intel® Ethernet Community. There's another thread within the forum that talks about QinQ and 82599ES, please refer to the link below: https://forums.intel.com/s/question/0D50P0000490POuSAM/re-sriov-with-ixgbe-vlan-packets-getting-spoofedusing-82599es-in-mirantis-fuel-92?language=en_US Let me check internally if there's new information regarding QinQ in 82599ES. Best Regards, Vince Intel Customer Support Under contract to Intel Corporation

[VincentT_Intel]

Hi DMiha3, After further verification, 82599ES does not support QinQ. Let us know if there's other assistance needed. Best Regards, Vince Intel Customer Support Under contract to Intel Corporation

[DMiha3]

Hi, thank you for your answer. Is qinq support planned for the future? and why now there is no support for qinq ? this is a very important thing now...

[VincentT_Intel]

Hi DMiha3, There's no plan to support QinQ for 82599ES. We have Intel® Ethernet Converged Network Adapter X710-DA2 that supports QinQ with SR-IOV in Linux but not in VMWare. Please refer to details below from the X710 driver readme file - https://downloadmirror.intel.com/24411/eng/readme.txt IEEE 802.1ad (QinQ) Support --------------------------- The IEEE 802.1ad standard, informally known as QinQ, allows for multiple VLAN IDs within a single Ethernet frame. VLAN IDs are sometimes referred to as "tags," and multiple VLAN IDs are thus referred to as a "tag stack." Tag stacks allow L2 tunneling and the ability to segregate traffic within a particular VLAN ID, among other uses. The following are examples of how to configure 802.1ad (QinQ): ip link add link eth0 eth0.24 type vlan proto 802.1ad id 24 ip link add link eth0.24 eth0.24.371 type vlan proto 802.1Q id 371 Where "24" and "371" are example VLAN IDs. NOTES: - 802.1ad (QinQ)is supported in 3.19 and later kernels. - Receive checksum offloads, cloud filters, and VLAN acceleration are not supported for 802.1ad (QinQ) packets. Best Regards, Vince Intel Customer Support Under Contract to Intel Corporation

[Malibr]

Hi 

what Intel NIC card does support 802.1ad,SR-IOV and preferrably vxlan on Vpshere ( not linux)

thanks in advance for your response

[VincentT_Intel]

Hi DMiha3, Please let us know if there's other assistance needed. Best Regards, Vince Intel Customer Support Under Contract to Intel Corporation