Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Pascal Hambourg <pascal.mail@plouf.fr.eu.org>
To: Bart De Schuymer <bdschuym@pandora.be>
Cc: netfilter@vger.kernel.org, Jan Engelhardt <jengelh@medozas.de>
Subject: Re: Forced lladdr change with bridge - or not?
Date: Mon, 23 Aug 2010 10:13:48 +0200	[thread overview]
Message-ID: <4C722DBC.6060000@plouf.fr.eu.org> (raw)
In-Reply-To: <632287680.1437041282547640257.JavaMail.root@tendai.telenet-ops.be>

bdschuym@telenet.be a écrit :
> You're right. The Linux bridge does just what the 802.1D standard
> recommends
> (http://standards.ieee.org/getieee802/download/802.1D-2004.pdf):
> "7.12.5 Unique identification of a bridge
> A unique 48-bit Universally Administered MAC Address, termed the Bridge
> Address, shall be assigned to each Bridge. The Bridge Address may be
> the individual MAC Address of a Bridge Port, in which case, use of the
> address of the lowest numbered Bridge Port (Port 1) is recommended."

Thanks for the explanation.

> Apparently you can get around this problem, see (I didn't verify):
> http://backreference.org/2010/07/28/linux-bridge-mac-addresses-and-dynamic-ports/

"if the bridge's MAC address is forced to a specific value, the bridge
"remembers" that and makes the address permanent. But there's a caveat:
the address must belong to one of the devices enslaved to the bridge"

Hmm, I remember I had a similar idea, but it didn't work : the address
was not permanent and could still be replaced if an interface with a
lower MAC address was added. Maybe I didn't do things right, I will try
again, thanks.

I had the idea that maybe it was a kernel change, so looking at the
kernel changelogs, I found this in ChangeLog-2.6.27 :

> commit 92c0574f11598c8036f81e27d2e8bdd6eed7d76d
> Author: Stephen Hemminger <shemminger@vyatta.com>
> Date:   Tue Jun 17 16:10:06 2008 -0700
> 
>     bridge: make bridge address settings sticky
> 
>     Normally, the bridge just chooses the smallest mac address as the
>     bridge id and mac address of bridge device. But if the administrator
>     has explictly set the interface address then don't change it.

At the time I tried to force a permanent MAC address to the bridge I
used a kernel older than 2.6.27, this explains why it didn't work.

  reply	other threads:[~2010-08-23  8:13 UTC|newest]

Thread overview: 10+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <835126759.1436781282547490956.JavaMail.root@tendai.telenet-ops.be>
2010-08-23  7:14 ` Forced lladdr change with bridge - or not? bdschuym
2010-08-23  8:13   ` Pascal Hambourg [this message]
2010-08-24 11:21     ` Pascal Hambourg
2010-08-22 16:12 Jan Engelhardt
2010-08-22 16:55 ` Bart De Schuymer
2010-08-22 17:28   ` Jan Engelhardt
2010-08-22 20:53     ` Pascal Hambourg
2010-08-22 21:24       ` Jan Engelhardt
2010-08-23  8:21         ` Pascal Hambourg
2010-08-23 11:23           ` Jan Engelhardt

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4C722DBC.6060000@plouf.fr.eu.org \
    --to=pascal.mail@plouf.fr.eu.org \
    --cc=bdschuym@pandora.be \
    --cc=jengelh@medozas.de \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox