[ovs-discuss] filtering macs/ip

Jesse Gross jesse at nicira.com
Wed Apr 28 01:20:05 UTC 2010


On Tue, Apr 27, 2010 at 7:37 AM, George Shuklin <nge at narod.ru> wrote:

> Good day.
>
> Is any way to filter with ovs VM's traffic (like mac spoofing or ip
> usurpation)?
>
> I was tried to find any, but found none.


There isn't currently a specific MAC/IP anti-spoofing feature.  You can,
however, add flow entries that allows traffic from a given port, MAC, and IP
and drops everything else.  The ovs-ofctl man page describes how to add
flows.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://openvswitch.org/pipermail/ovs-discuss/attachments/20100427/3abb6332/attachment-0001.html>


More information about the discuss mailing list