Re: [vpp-dev] Port security

2018-02-12 Thread Andrew Yourtchenko
bout dropping of > those frames. > > Thanks​, > Mohsin > From: Andrew Yourtchenko > Sent: Monday, February 12, 2018 11:23 PM > To: Mohsin Kazmi (sykazmi) > Cc: vpp-dev@lists.fd.io > Subject: Re: [vpp-dev] Port security > > Mohsin, > > Not really, macip ac

Re: [vpp-dev] Port security

2018-02-12 Thread Mohsin Kazmi
those frames. Thanks?, Mohsin From: Andrew Yourtchenko Sent: Monday, February 12, 2018 11:23 PM To: Mohsin Kazmi (sykazmi) Cc: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Port security Mohsin, Not really, macip acl only nails down the predefined known addr

Re: [vpp-dev] Port security

2018-02-12 Thread Andrew Yourtchenko
Mohsin, Not really, macip acl only nails down the predefined known addresses. Mostafa, To implement the functionality you are looking for, you would need to write new code. --a > On 12 Feb 2018, at 23:20, Mohsin Kazmi wrote: > > Hi Mostafa, > > Port Security functional can be implemented u

Re: [vpp-dev] Port security

2018-02-12 Thread Mohsin Kazmi
Hi Mostafa, Port Security functional can be implemented using ACL plugin MACIP feature. On a given interface, ACLs are applied on input traffic to permit using a mix of MAC and IP. Here you will find more detail about it: https://wiki.fd.io/view/VPP/SecurityGroups#MACIP_.28formerly_.22L2.22