On 6/7/16 1:44 , Alexander Pyhalov wrote: > On 06/ 7/16 11:33 AM, Alexander Pyhalov wrote: >> Hi. > >> Now the question - what am I doing wrong????? >> > > At least > > dladm set-linkprop -p secondary-macs=VM_MAC oivm0 > > helped...
This has nothing to do with VLANs and in fact everything to do with MAC addresses and how they work. So when you're using a VNIC, a VNIC can only receive traffic to it that is one of the following: * Broadcast * Multicast * Unicast traffic that matches its MAC Address Note, this is also true in promiscuous mode. A VNIC is treated as though it was plugged into its own switch port without learning. Hence why when you enable promiscuous mode on its own, you don't see anything. So the reason that you can send from the other mac addresses is due to a lack of antispoof protection on the device. The reason that you don't receive is due to the above. The VLAN is a red herring, it's only relevant because of the MAC addresses. I suspect that if you snoop for the arp relies, you'll see they reach the physical host, but do not reach the vnic. Robert ------------------------------------------- illumos-discuss Archives: https://www.listbox.com/member/archive/182180/=now RSS Feed: https://www.listbox.com/member/archive/rss/182180/21175430-2e6923be Modify Your Subscription: https://www.listbox.com/member/?member_id=21175430&id_secret=21175430-6a77cda4 Powered by Listbox: http://www.listbox.com