Re: [net-next PATCH] net: RFC3069, private VLAN proxy arp support

[David Miller <davem@davemloft.net>]

From: Jesper Dangaard Brouer <hawk@comx.dk>
Date: Tue, 05 Jan 2010 16:50:47 +0100

> This is to be used together with switch technologies, like RFC3069,
> that where the individual ports are not allowed to communicate with
> each other, but they are allowed to talk to the upstream router.  As
> described in RFC 3069, it is possible to allow these hosts to
> communicate through the upstream router by proxy_arp'ing.
> 
> This patch basically allow proxy arp replies back to the same
> interface (from which the ARP request/solicitation was received).
> 
> Tunable per device via proc "proxy_arp_pvlan":
>   /proc/sys/net/ipv4/conf/*/proxy_arp_pvlan
> 
> This switch technology is known by different vendor names:
>  - In RFC 3069 it is called VLAN Aggregation.
>  - Cisco and Allied Telesyn call it Private VLAN.
>  - Hewlett-Packard call it Source-Port filtering or port-isolation.
>  - Ericsson call it MAC-Forced Forwarding (RFC Draft).
> 
> Signed-off-by: Jesper Dangaard Brouer <hawk@comx.dk>

Applied.