On Wednesday, 02/26/2014 at 08:44 EST, "Pavelka, Tomas" <tomas.pave...@ca.com> wrote: > The dbf trace shows that the l2 qeth driver code gets exercised and leads to a > command called IPA_CMD_SETVMAC. The user mode call succeeds but I have found > this error message in /sys/kernel/debug/s390dbf/qeth_msg/sprintf > > 00 01393420032:989799 2 - 00 000003c00092471e IPA: setvmac(x21) for > 0.0.a100/eth7 returned x200C "L2 mac not authorized by hypervisor" > > This is where we are stuck again. Is the secondary unicast address what I think > it is? Are there any restrictions on in what situations secondary MAC addresses > can be added to a virtual NIC?
I gave up and looked at some code. :-) The x200C is generated when you try to register a universal MAC address or one that potentially conflicts with a MAC address CP might create. That means you can only register additional MAC addresses that have MAC prefixes that are outside the range of the SYSTEM or USER MACPREFIX identified in SYSTEM CONFIG. This opens a dangerous door because it means that the non-bridge guests must also have MACPROTECT OFF on their NICs. Further, you can't manage the MAC addresses in CP; the MAC address has to appear in the Linux configuration (hwaddr). The core design points you are bumping into are: 1. CP's requirement that MAC addresses be unique within an LPAR, while network devices only require that they be unique within a LAN segment or VLAN. 2. The inability to specify "outlander" MAC addresses in their 6-byte entirety on NICDEF & Co., which would enable MACPROTECT ON to be engaged. I think I would raise a PMR to discuss this with z/VM Development. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
