On 4/2/2014 4:11 PM, Eric Blake wrote:
On 04/02/2014 01:56 PM, Eric Blake wrote:
On 04/02/2014 01:40 PM, Brian Rak wrote:
Currently, adding any sort of IPv6 nwfilter rules is rather difficult.  There 
are no standard rules,
Also worth an example of what this will contain (such as
fe80::5254:00ff:fe1a:0a6d).
+            parsedMac.addr[0] ^= 2;
Oh, and forgot to mention, should this be |= instead of ^=, since by
default, libvirt assigns MAC addresses with bit 2 already set?  My
understanding is that bit 2 is the locally-administered bit, and that
the V6LOCAL address always wants it set (^= only works if the MAC
address is not also locally administered, but libvirt's generated MAC
addresses of 52:54:00:xx:yy:zz fall foul of that)

For link-local addresses, you want to invert the bit, not ensure that it's always set. This matches what linux is doing doing: http://lxr.free-electrons.com/source/net/ipv6/addrconf.c#L1724

--
libvir-list mailing list
libvir-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list

Reply via email to