linux_dsm_epyc7002/drivers/net/dsa/microchip
Tristram Ha 962ad710f7 net: dsa: microchip: fix unicast frame leak
Port partitioning is done by enabling UNICAST_VLAN_BOUNDARY and changing
the default port membership of 0x7f to other values such that there is
no communication between ports.  In KSZ9477 the member for port 1 is
0x41; port 2, 0x42; port 3, 0x44; port 4, 0x48; port 5, 0x50; and port 7,
0x60.  Port 6 is the host port.

Setting a zero value can be used to stop port from receiving.

However, when UNICAST_VLAN_BOUNDARY is disabled and the unicast addresses
are already learned in the dynamic MAC table, setting zero still allows
devices connected to those ports to communicate.  This does not apply to
multicast and broadcast addresses though.  To prevent these leaks and
make the function of port membership consistent UNICAST_VLAN_BOUNDARY
should never be disabled.

Note that UNICAST_VLAN_BOUNDARY is enabled by default in KSZ9477.

Fixes: b987e98e50 ("dsa: add DSA switch driver for Microchip KSZ9477")
Signed-off-by: Tristram Ha <Tristram.Ha@microchip.com>
Reviewed-by: Florian Fainelli <f.fainelli@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2018-12-20 16:19:29 -08:00
..
Kconfig net: dsa: ksz: Rename NET_DSA_TAG_KSZ to _KSZ9477 2018-12-16 14:23:33 -08:00
ksz9477_reg.h net: dsa: microchip: rename ksz_9477_reg.h to ksz9477_reg.h 2018-11-20 20:57:12 -08:00
ksz9477_spi.c net: dsa: microchip: break KSZ9477 DSA driver into two files 2018-11-20 20:57:12 -08:00
ksz9477.c net: dsa: microchip: fix unicast frame leak 2018-12-20 16:19:29 -08:00
ksz_common.c net: dsa: ksz: Add reset GPIO handling 2018-12-10 12:07:56 -08:00
ksz_common.h net: dsa: microchip: break KSZ9477 DSA driver into two files 2018-11-20 20:57:12 -08:00
ksz_priv.h net: dsa: ksz: Add reset GPIO handling 2018-12-10 12:07:56 -08:00
ksz_spi.h net: dsa: microchip: break KSZ9477 DSA driver into two files 2018-11-20 20:57:12 -08:00
Makefile net: dsa: microchip: break KSZ9477 DSA driver into two files 2018-11-20 20:57:12 -08:00