Re: [ovs-discuss] Traffic Isolation with OVS

2017-08-30 Thread Joo Yong-Seok
\ > br-ex br-in > / \ > eth0eth1 > > Thank you, > > Gibran > > > > -- > *From:* Joo Yong-Seok > *To:* N F > *Cc:* "ovs-discuss@openvswitch.org" > *Sent:

Re: [ovs-discuss] Traffic Isolation with OVS

2017-08-29 Thread Joo Yong-Seok
How about this? ovs-vsctl set port eth0 tag=100 vlan_mode=native-untagged ovs-vsctl set port eth1 tag=200 vlan_mode=native-untagged eth0 and eth1 is on br0. Best regards, On Tue, Aug 29, 2017 at 4:27 PM, N F via discuss < ovs-discuss@openvswitch.org> wrote: > Greetings all, > > I have a little

Re: [ovs-discuss] Multiple Virtual Wireless Ports

2017-07-27 Thread Joo Yong-Seok
you mean that you have > multiple radios? Because we only have two and are only using one. > > > -- > *From:* Joo Yong-Seok > *Sent:* Thursday, July 27, 2017 1:33 PM > *To:* Michael Williams > *Cc:* Ben Pfaff; ovs-discuss@openvswitch.org > &g

Re: [ovs-discuss] Multiple Virtual Wireless Ports

2017-07-27 Thread Joo Yong-Seok
When you say, "wifi interface", do you mean wlan interface (which is VAP) at AP? or low-level wifi interface? I don't know rate-limit since I've never tried but it works well for regular OVS rules. - Drop everything - Allow ARP - Allow DHCP - Allow DNS I applied the rule in one of ovs bridge and

Re: [ovs-discuss] Multiple Virtual Wireless Ports

2017-07-27 Thread Joo Yong-Seok
I have tried to add wireless ports to OVS bridge and created GRE tunnel or some sort of drop/allow rules on top of it. Everything works for me. I used Qualcomm's reference platform - which is arm based. Also, bridge is already "vritual port" if it has multiple wireless interfaces. Best regards,

Re: [ovs-discuss] OvS on ARM

2017-04-13 Thread Joo Yong-Seok
Yes, I tried and built it successfully. Also basic L2 functions are working ok. Used Linux kernel 3.14 + openvswitch 2.3.9 and openwrt chaos calmer. As an experiment, I also tried openvswitch 2.6.1 and basic things are working ok. No performance test data though. Best regards, On Apr 13, 2017

[ovs-discuss] How to read multicast snooping table

2017-03-06 Thread Joo Yong-Seok
Hi, Quick question in regard of multicast snoop. I am considering to use multicast snooping feature in OVS. Eventually, I want to get snoop table entries from OVS and not sure how we can get it. I tried ovs-vsctl command to enable the snooping and other options and dumped config table by using ov

Re: [ovs-discuss] selective packet mirror

2017-02-03 Thread Joo Yong-Seok
, 2017 at 1:40 PM, Ben Pfaff wrote: > On Thu, Feb 02, 2017 at 01:12:02PM -0800, Joo Yong-Seok wrote: > > Hi, > > > > I am wondering is it possible to do "selective" packet mirroring. From > > previous question, I learnt how to enable port mirror on OVS port but I &

[ovs-discuss] selective packet mirror

2017-02-02 Thread Joo Yong-Seok
Hi, I am wondering is it possible to do "selective" packet mirroring. From previous question, I learnt how to enable port mirror on OVS port but I think that I should do "selective" packet mirroring since performance issue. So, basically, I want to enable some sort of "filter" and want to mirror

Re: [ovs-discuss] Regarding on VLAN

2017-02-01 Thread Joo Yong-Seok
frame “tcpdump -i br0 -e” > > > > Sent from Mail <https://go.microsoft.com/fwlink/?LinkId=550986> for > Windows 10 > > > > *From: *Joo Yong-Seok > *Sent: *Wednesday, February 1, 2017 9:30 PM > *To: *ovs-discuss@openvswitch.org > *Subject: *[ovs-discuss] Regar

[ovs-discuss] Regarding on VLAN

2017-02-01 Thread Joo Yong-Seok
Hi, Quick questions in regard of VLANs 1) Are we able to assign VLAN to local-port? (not sure whether it is really required...) If so, how? (without using "fake-bridge"). 2) If not, I have following situation. - br0(ovs-bridge) has p1, p2, p3 and p4 as a bridge port. > p1 - tag 10 > p2 -

Re: [ovs-discuss] packet copy action?

2017-01-13 Thread Joo Yong-Seok
You mean, one action is normal and the other action is output:? Thank you! Best regards, On Fri, Jan 13, 2017 at 11:04 AM, Ben Pfaff wrote: > On Fri, Jan 13, 2017 at 10:44:10AM -0800, Joo Yong-Seok wrote: > > Very quick question. Is there any action like "copying pack

[ovs-discuss] packet copy action?

2017-01-13 Thread Joo Yong-Seok
Hello, Very quick question. Is there any action like "copying packet" or "packet monitoring" n openvswitch flow rule? I want to send an original packet to the network but maintain packet copy for the monitoring purpose - (kind of "clone" or "copy" concept in skb.) Best regards, - yongseok _

Re: [ovs-discuss] Looking for good examples of conntrack / NAT in openvswitch

2017-01-04 Thread Joo Yong-Seok
017 at 08:37, Joo Yong-Seok wrote: > >> Happy New Year! >> >> I am urgently looking for the conntrack / NAT flow examples - anything >> would be good and I googled it but other than manual page - I didn't see >> many things - I specially want to find some D-NAT

[ovs-discuss] Looking for good examples of conntrack / NAT in openvswitch

2017-01-04 Thread Joo Yong-Seok
Happy New Year! I am urgently looking for the conntrack / NAT flow examples - anything would be good and I googled it but other than manual page - I didn't see many things - I specially want to find some D-NAT implementation with conntrack and NAT flows. Could you share your examples? or let me k

Re: [ovs-discuss] D-NAT rule

2016-12-14 Thread Joo Yong-Seok
Dec 14, 2016 at 05:12:12PM -0800, Joo Yong-Seok wrote: > > Is it possible to configure D-NAT rule in this version of ovs-ofctl? > > > > # ovs-ofctl --version > > ovs-ofctl (Open vSwitch) 2.3.90 > > Compiled Dec 12 2016 23:20:48 > > OpenFlow versions 0x1:0x4 >

[ovs-discuss] D-NAT rule

2016-12-14 Thread Joo Yong-Seok
Is it possible to configure D-NAT rule in this version of ovs-ofctl? # ovs-ofctl --version ovs-ofctl (Open vSwitch) 2.3.90 Compiled Dec 12 2016 23:20:48 OpenFlow versions 0x1:0x4 It seems that openvswitch is 2.3.90 and openflow is 1.1 to 1.3. Somehow, I am hitting following errors wit this versi

[ovs-discuss] Openvswitch flow(or rule) to implement CAPTIVE-PORTAL (or HTTP redirect)

2016-12-06 Thread Joo Yong-Seok
Hello, Is there any good example for openvswitch flow/rules for captive-portal? Which means, - We should perform DNAT (with captive-portal web server IP) for outbound HTTP traffic - When responses are back, we should do proper NAT again. The issue, is, http packets' DIP from client, it's not fix