Re: [Bridge] [PATCH v4 net-next 0/6] Extend locked port feature with FDB locked flag (MAC-Auth/MAB)

2022-08-10 Thread Benjamin Poirier
On 2022-07-07 17:29 +0200, Hans Schultz wrote: > This patch set extends the locked port feature for devices > that are behind a locked port, but do not have the ability to > authorize themselves as a supplicant using IEEE 802.1X. > Such devices can be printers, meters or anything related to > fixed

[Bridge] [PATCH net] bridge: Do not send empty IFLA_AF_SPEC attribute

2022-07-24 Thread Benjamin Poirier via Bridge
the attribute if no AF_SPEC data was added. Fixes: b6c02ef54913 ("bridge: Netlink interface fix.") Reviewed-by: Ido Schimmel Signed-off-by: Benjamin Poirier --- net/bridge/br_netlink.c | 8 ++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/net/bridge/br_netlink.c b

[Bridge] [PATCH net] net: bridge: vlan: Fix dumping with ifindex

2022-01-29 Thread Benjamin Poirier via Bridge
dump support") Signed-off-by: Benjamin Poirier --- net/bridge/br_vlan.c | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) The problem can be reproduced by using the following iproute2 patch and running: ip link add br0 type bridge ip link add dummy0 master br0 type dummy bridge vl

Re: [Bridge] [PATCH net] net: bridge: vlan: Fix dumping with ifindex

2022-01-29 Thread Benjamin Poirier via Bridge
On 2022-01-25 11:51 +0200, Nikolay Aleksandrov wrote: > On 25/01/2022 10:24, Nikolay Aleksandrov wrote: > > On 25/01/2022 08:19, Benjamin Poirier wrote: > >> Specifying ifindex in a RTM_GETVLAN dump leads to an infinite repetition > >> of the same entries. netlink_dum

[Bridge] [PATCH] bridge: Forward reserved group addresses if !STP

2010-10-20 Thread Benjamin Poirier
Make all frames sent to reserved group MAC addresses (01:80:c2:00:00:00 to 01:80:c2:00:00:0f) be forwarded if STP is disabled. This enables forwarding EAPOL frames, among other things. Signed-off-by: Benjamin Poirier --- net/bridge/br_input.c |2 +- 1 files changed, 1 insertions(+), 1

[Bridge] EAPOL bridging

2010-10-18 Thread Benjamin Poirier
Hello, I have some trouble bridging EAPOL frames. I'd like to do this to allow wired 802.1x authentication from within a kvm virtual machine. I have the following setup: kvm -- tap0 -- br0 -- eth1 -- 802.1x authenticator (switch) -- more network and it doesn't work. I've added a few logging ru