netdev - Re: [PATCH 5/6] e1000: Secondary unicast address support

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 14 Nov 2007 01:48:21 +0100 (CET)
From:	Krzysztof Oledzki <olel@....pl>
To:	Ben Greear <greearb@...delatech.com>
cc:	Auke Kok <auke-jan.h.kok@...el.com>, davem@...emloft.net,
	jeff@...zik.org, netdev@...r.kernel.org, jesse.brandeburg@...el.com
Subject: Re: [PATCH 5/6] e1000: Secondary unicast address support



On Tue, 13 Nov 2007, Ben Greear wrote:

> Krzysztof Oledzki wrote:
>> 
>> 
>> On Tue, 13 Nov 2007, Auke Kok wrote:
>> 
>>> From: Patrick McHardy <kaber@...sh.net>
>>> 
>>> Add support for configuring secondary unicast addresses. Unicast
>>> addresses take precendece over multicast addresses when filling
>>> the exact address filters to avoid going to promiscous mode.
>>> When more unicast addresses are present than filter slots,
>>> unicast filtering is disabled and all slots can be used for
>>> multicast addresses.
>> 
>> Is there any easy way to use it for VRRP? It would be really great to have 
>> two IP addresses on the same interface, each with a different hw address.
>
> mac-vlans should do this for you..with our without the driver patch.

I'm afraid mac-vlans is not a solution here. Having 2x more interfaces 
(ex. 2000 instead of 1000) makes everything (especially routing, 
firewalling and QoS) much more complicated. It would be nice to have 
something like "ip addr add a.b.c.d/24 dev vlan32 hwaddress 
aa:bb:cc:dd:ee:ff".

BTW: is it possible to stack mac-vlans ontop of .1Q vlans?

Best regards,

 				Krzysztof Olędzki