]> git.baikalelectronics.ru Git - kernel.git/commit
bridge: allow forwarding some link local frames
authorstephen hemminger <shemminger@vyatta.com>
Mon, 3 Oct 2011 18:14:46 +0000 (18:14 +0000)
committerDavid S. Miller <davem@davemloft.net>
Thu, 6 Oct 2011 19:27:56 +0000 (15:27 -0400)
commita04d8c628828174b351f8009856360bbda32bade
treeddd361a7bacb3d37a95f6101ef541af91c01d9ba
parent848b93e3885f63d89941374f2cb4a9bf9e5fd59e
bridge: allow forwarding some link local frames

This is based on an earlier patch by Nick Carter with comments
by David Lamparter but with some refinements. Thanks for their patience
this is a confusing area with overlap of standards, user requirements,
and compatibility with earlier releases.

It adds a new sysfs attribute
   /sys/class/net/brX/bridge/group_fwd_mask
that controls forwarding of frames with address of: 01-80-C2-00-00-0X
The default setting has no forwarding to retain compatibility.

One change from earlier releases is that forwarding of group
addresses is not dependent on STP being enabled or disabled. This
choice was made based on interpretation of tie 802.1 standards.
I expect complaints will arise because of this, but better to follow
the standard than continue acting incorrectly by default.

The filtering mask is writeable, but only values that don't forward
known control frames are allowed. It intentionally blocks attempts
to filter control protocols. For example: writing a 8 allows
forwarding 802.1X PAE addresses which is the most common request.

Reported-by: David Lamparter <equinox@diac24.net>
Original-patch-by: Nick Carter <ncarter100@gmail.com>
Signed-off-by: Stephen Hemminger <shemminger@vyatta.com>
Tested-by: Benjamin Poirier <benjamin.poirier@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/bridge/br_device.c
net/bridge/br_input.c
net/bridge/br_private.h
net/bridge/br_sysfs_br.c