On 6/7/16 1:44 , Alexander Pyhalov wrote:
> On 06/ 7/16 11:33 AM, Alexander Pyhalov wrote:
>> Hi.
> 
>> Now the question - what am I doing wrong?????
>>
> 
> At least
> 
> dladm set-linkprop -p secondary-macs=VM_MAC oivm0
> 
> helped...

This has nothing to do with VLANs and in fact everything to do with MAC
addresses and how they work.

So when you're using a VNIC, a VNIC can only receive traffic to it that
is one of the following:

* Broadcast
* Multicast
* Unicast traffic that matches its MAC Address

Note, this is also true in promiscuous mode. A VNIC is treated as though
it was plugged into its own switch port without learning. Hence why when
you enable promiscuous mode on its own, you don't see anything.

So the reason that you can send from the other mac addresses is due to a
lack of antispoof protection on the device. The reason that you don't
receive is due to the above. The VLAN is a red herring, it's only
relevant because of the MAC addresses. I suspect that if you snoop for
the arp relies, you'll see they reach the physical host, but do not
reach the vnic.

Robert


-------------------------------------------
illumos-discuss
Archives: https://www.listbox.com/member/archive/182180/=now
RSS Feed: https://www.listbox.com/member/archive/rss/182180/21175430-2e6923be
Modify Your Subscription: 
https://www.listbox.com/member/?member_id=21175430&id_secret=21175430-6a77cda4
Powered by Listbox: http://www.listbox.com

Reply via email to