Have you read the ovs-ofctl man page? It describes how to match on icmp and arp. Search for "icmp" and "arp".
--Justin On Dec 13, 2013, at 6:35 AM, Suresh <[email protected]> wrote: > > Hi, > I want implement following scenario add same flow, but don't know how to add > ARP and ICMP flow > can any one let me know what will be ARP and ICMP flow for following scenario. > > I have OpenvSwitch installed in a computer that has > a quad port. eth3, eth4 and eth5 are connected to br0 with respective open > flow port numbers as 3,2,1 and the respective IP addresses of the machines > connected to the ports are 10.6.3.2, 10.6.1.2 and 10.6.2.2 > > I use eth3 and eth4 i.e ports 2 and 3 as input port and eth5 (port 1) as > output port of OvS. I created 2 queues at eth5 using the following command: > > I then added the following flows in the flow table: > > ovs-ofctl add-flow br0 > "in_port=2,dl_type=0x0800,nw_proto=6,nw_src=10.6.1.2,nw_dst=10.6.2.2,tp_dst=6000,priority=7,actions=enqueue:1:0" > ovs-ofctl add-flow br0 > "in_port=3,dl_type=0x0800,nw_proto=6,nw_src=10.6.3.2,nw_dst=10.6.2.2,tp_dst=6005,priority=7,actions=enqueue:1:1" > ovs-ofctl add-flow br0 > "in_port=1,dl_type=0x0800,nw_proto=6,nw_dst=10.6.1.2,nw_src=10.6.2.2,tp_src=6000,priority=5,actions=output:2" > ovs-ofctl add-flow br0 > "in_port=1,dl_type=0x0800,nw_proto=6,nw_dst=10.6.3.2,nw_src=10.6.2.2,tp_src=6005,priority=5,actions=output:3" > ovs-ofctl add-flow br0 > "in_port=2,dl_type=0x0800,nw_src=10.6.1.2,priority=0,actions=output:1" > ovs-ofctl add-flow br0 > "in_port=3,dl_type=0x0800,,nw_src=10.6.3.2,priority=0,actions=output:1" > > Thanks suresh > > From: [email protected] > To: [email protected] > Subject: RE: [ovs-discuss] Flows based on IP address and port numbers in > mininet topology using floodlight controller. > Date: Fri, 13 Dec 2013 19:55:51 +0530 > > Please can give me example like what will be in output ? > > > curl -d '{"switch": "00:00:00:00:00:00:00:01", "name":"ICMP", "cookie":"0", > "priority":"1", "ether-type":"0x800", "active":"true", "actions":"output= > ????"}' http://10.222.41.37:8085/wm/staticflowentrypusher/json > curl -d '{"switch": "00:00:00:00:00:00:00:01", "name":"ARP", "cookie":"0", > "priority":"1", "ether-type":"0x806", "active":"true", "actions":"output= > ???"}' http://10.222.41.37:8085/wm/staticflowentrypusher/json > > curl -d '{"switch": "00:00:00:00:00:00:00:01", "name":"port", "cookie":"0", > "ether-type":"0x0800" ,"dest-ip":"10.0.0.1", "protocol":"6", > "active":"true","dst-port":"8888", > "actions":"output=1"}'http://10.222.41.37:8085/wm/staticflowentrypusher/json > > Suresh > > > Date: Fri, 13 Dec 2013 07:33:50 -0600 > Subject: Re: [ovs-discuss] Flows based on IP address and port numbers in > mininet topology using floodlight controller. > From: [email protected] > To: [email protected] > > Hi Suresh, > > You could try by pushing flows for first ARP, where dl_type is 0x806 and for > IP second. I mean before pushing the flows for IP as you told, try pushing > flows for ARP first. > > Best > Gandhi > > > On 13 December 2013 02:37, Suresh <[email protected]> wrote: > > > can any one tell me what will be match case and action for ARP AND ICMP > packet. for following senario h1-s1-h2 > > > h1(10.0.0.1 running server on port 8888) -s1-h2(10.0.0.2 running one client) > > > Subject: Re: [ovs-discuss] Flows based on IP address and port numbers in > > mininet topology using floodlight controller. > > From: [email protected] > > Date: Wed, 11 Dec 2013 08:33:30 -0800 > > CC: [email protected] > > To: [email protected] > > > > > > On Dec 11, 2013, at 7:11 AM, Suresh <[email protected]> wrote: > > > > > I have added > > > {"switch":"00:00:00:00:00:00:00:01", "name":"ICMP", "active":"true", > > > "actions":"output=FLOOD","ether-type":"0x800"} > > > > It looks like you're just flooding all IP traffic, since you didn't limit > > it to ICMP--you need to set the "protocol" properly. Also, if you really > > want to just block ping, you can do that by matching on the ICMP type and > > code. > > > > > I what to block ping but if I not added ICMP flow then my server client > > > traffic also got blocked .. > > > can u help out about this > > > how I can block ICMP traffic > > > but my client server(8888) traffic work bet h1 to h2. > > > > I don't understand what you're trying to do, since it seems at odds with > > the flow that you appeared to be trying to push. > > > > --Justin > > > > > > _______________________________________________ > discuss mailing list > [email protected] > http://openvswitch.org/mailman/listinfo/discuss > > > > > -- > Thanks. > > Gandhimathi Velusamy > Graduate Research Assistant > College of Technology > University of Houston > [email protected] _______________________________________________ discuss mailing list [email protected] http://openvswitch.org/mailman/listinfo/discuss
