Редактирование: Link


{{#drawio:tree}}

ovs-ofctl -O OpenFlow13 add-flow br0 priority=55557,in_port=3,actions=push_vlan:0x8100,set_field:4099->vlan_vid,output:54
ovs-ofctl add-flow br0 priority=55557,in_port=54,dl_vlan=3,actions=pop_vlan,output:3

ovs-ofctl -O OpenFlow13 add-flow br0 priority=55557,in_port=1,actions=push_vlan:0x8100,set_field:4097->vlan_vid,output:54
ovs-ofctl add-flow br0 priority=55557,in_port=54,dl_vlan=1,actions=pop_vlan,output:1


create sub FortyGigabitEthernet81/0/1 3
set interface state FortyGigabitEthernet81/0/1.3 up


create bridge-domain 12 flood=0 uu-flood=0

bvi create 
set interface l2 bridge bvi0 12 bvi
set interface l2 bridge FortyGigabitEthernet81/0/1.3 12
set interface ip address bvi0 10.255.253.1/24



set interface state FortyGigabitEthernet81/0/1 up
set interface state FortyGigabitEthernet81/0/1.3 up
set interface state bvi0 up

Настройка vpp:

В хосте:

ip link set enp1s0f0 down

ip link set enp1s0f1 down

cd /home/entcor/Downloads/dpdk-23.07/usertools

sudo modprobe vfio-pci

echo 1 > /sys/module/vfio/parameters/enable_unsafe_noiommu_mode

Задание ip: 

set int ip address  TenGigabitEthernet1/0/1 192.168.3.83/24  

set int ip address  TenGigabitEthernet1/0/0 192.168.2.83/24  

Удаление ip:

set interface ip address del TenGigabitEthernet1/0/1 192.168.3.81/24

Посмотреть ip адреса на интерфейсах:

show int addr

Создание виртуального интерфейса Tap:

'''create tap id 0'''

'''set int state tap0 up'''

Создание маршрута:

sudo ip route add 192.168.4.83 dev ens18 proto static

задание ip linux на интерфейс:

sudo ip addr add 192.168.4.83/255.255.255.0 broadcast 192.168.2.254 dev tap0


Удаление tap:

delete tap tap1


SPAN:

set int span TenGigabitEthernet1/0/0 destination tap1

set int span TenGigabitEthernet1/0/1 destination tap1

show interface span 

удаление SPAN:

set int span tap4 disable

tcpdump:

sudo tcpdump -i tap1 icmp -vv


ACL:

Задание правил:

set acl-plugin acl permit src 192.168.2.82/24 dst 192.168.3.82/24 proto 6 sport 0-65535 dport 22-22

set acl-plugin acl deny src 192.168.2.82/24 dst 192.168.3.82/24 proto 6 sport 0-65535 dport 22-22

Привязка правил на интерфейс:

set acl-plugin interface TenGigabitEthernet1/0/0 acl 5 

Показать все правила:

show acl-plugin acl 

Удалить правило:

delete acl-plugin acl index 0

Отвязка правил от интерфейса:

set acl-plugin interface TenGigabitEthernet1/0/0 acl 5 del