Ethernet Products
Determine ramifications of Intel® Ethernet products and technologies
4811 Discussions

Re: SR-IOV with IXGBE - Vlan packets getting spoofed-kernal 4.4.77 ixgbe 5.2.1

AFary
Beginner
2,118 Views

I have the same problem with kernel 4.4.77, ixgbe driver version 5.2.1 and ixgbevf 4.2.1. OS ALT Linux.

Spoof cheking was disabled, but no ping in two VM with the same vlan.

dmesg host:

[162311.173561] ixgbe 0000:05:00.1 eth0: 2 Spoofed packets detected

[162313.177679] ixgbe 0000:05:00.1 eth0: 1 Spoofed packets detected

[162315.181748] ixgbe 0000:05:00.1 eth0: 2 Spoofed packets detected

[162333.211099] ixgbe 0000:05:00.1 eth0: 1 Spoofed packets detected

[162337.217085] ixgbe 0000:05:00.1 eth0: 1 Spoofed packets detected

[162339.220074] ixgbe 0000:05:00.1 eth0: 2 Spoofed packets detected

# ip li show eth0

7: eth0: mtu 9000 qdisc mq master ovs-system state UP mode DEFAULT group default qlen 1000

link/ether a0:36:9f:25:80:5e brd ff:ff:ff:ff:ff:ff

vf 0 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 1 MAC da:55:a4:db:0f:d5, spoof checking off, link-state auto, trust off, query_rss off

vf 2 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 3 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 4 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 5 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 6 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 7 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 8 MAC 9a:1f:86:df:b1:d8, spoof checking off, link-state auto, trust off, query_rss off

vf 9 MAC aa:b7:85:e1:1b:06, spoof checking off, link-state auto, trust off, query_rss off

vf 10 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

vf 11 MAC 9a:1f:86:df:b1:d8, spoof checking off, link-state auto, trust off, query_rss off

vf 12 MAC aa:b7:85:e1:1b:06, spoof checking off, link-state auto, trust off, query_rss off

vf 13 MAC 00:00:00:00:00:00, spoof checking off, link-state auto, trust off, query_rss off

0 Kudos
8 Replies
idata
Employee
857 Views

Hi Rider_Alt,

Thank you for posting at Wired Communities. We are investigating on this, can you share also what is the network adapter model?

regards,

 

sharon
0 Kudos
idata
Employee
857 Views

Hi Rider_Alt,

 

 

Please share the network adapter model for us to better check on this.

 

 

regards,

 

sharon

 

0 Kudos
AFary
Beginner
857 Views

05:00.0 Ethernet controller: Intel Corporation Ethernet Controller 10-Gigabit X540-AT2 (rev 01)

Subsystem: Intel Corporation Ethernet Converged Network Adapter X540-T2

Flags: bus master, fast devsel, latency 0, IRQ 33, NUMA node 0

Memory at ddc00000 (64-bit, prefetchable) [size=2M]

Memory at dde04000 (64-bit, prefetchable) [size=16K]

Expansion ROM at df180000 [disabled] [size=512K]

Capabilities: [40] Power Management version 3

Capabilities: [50] MSI: Enable- Count=1/1 Maskable+ 64bit+

Capabilities: [70] MSI-X: Enable+ Count=64 Masked-

Capabilities: [a0] Express Endpoint, MSI 00

Capabilities: [100] Advanced Error Reporting

Capabilities: [140] Device Serial Number a0-36-9f-ff-ff-26-b4-ac

Capabilities: [150] Alternative Routing-ID Interpretation (ARI)

Capabilities: [160] Single Root I/O Virtualization (SR-IOV)

Capabilities: [1d0] Access Control Services

Kernel driver in use: ixgbe

0 Kudos
idata
Employee
857 Views

Hi Rider_Alt,

 

 

Thank you for the information. I will check on this.

 

 

regards,

 

sharon

 

0 Kudos
idata
Employee
857 Views

Hi Rider_Alt,

 

 

Further checking, the double Vlan is not supported on X540 network adapter.

 

 

Regards,

 

0 Kudos
AFary
Beginner
857 Views

Hello Intel.

I did not use Double VLAN (and any implementation of Q-in-Q) on my configuration.

Very simple test, in order to reproduce it - linux bond in VM with type balance-alb and two ixgbevf interfaces.

 

0 Kudos
idata
Employee
857 Views

Hi Rider_Alt,

 

 

You may refer to our README file regarding the known issue "MAC address of Virtual Function changes unexpectedly" at https://downloadmirror.intel.com/18700/eng/readme.txt

 

 

Please try using command - ip link set vf mac (xx:xx:xx:xx:xx:xx) to set the mac address.

 

 

Thanks,

 

sharon

 

0 Kudos
idata
Employee
857 Views

Hi Rider_Alt,

 

 

Please feel free to update me if further assistance needed.

 

 

Thanks,

 

sharon
0 Kudos
Reply