]> git.ipfire.org Git - thirdparty/systemd.git/commit
network: bridge: add support for IFLA_BRPORT_MAB 36150/head
authorJonas Gorski <jonas.gorski@bisdn.de>
Fri, 24 Jan 2025 12:15:06 +0000 (13:15 +0100)
committerJonas Gorski <jonas.gorski@bisdn.de>
Tue, 28 Jan 2025 11:22:26 +0000 (12:22 +0100)
commit08a26ecc4733a04fcd763cebd889da1c49672e0e
treed2902b78b9c49f0d048e5004b52158f1dd5d4df1
parenta434de60568b0f34c07de4f97af6cdc33d4fd2a2
network: bridge: add support for IFLA_BRPORT_MAB

Since linux commit a35ec8e38cdd1766f29924ca391a01de20163931 ("bridge:
Add MAC Authentication Bypass (MAB) support"), included since v6.2, it
is possible to enable MAC Authentication Bypass for bridge ports. In
this mode the locked port learns again, but the learned fdb entries are
locked, allowing user space to unlock hosts based seen MAC addresses.

This requires learning to be enabled on the port, and link-local
learning disabled for the bridge.

Add support to systemd-network for setting the new attribute for bridge
ports.
man/systemd.network.xml
src/libsystemd/sd-netlink/netlink-types-rtnl.c
src/network/networkd-network-gperf.gperf
src/network/networkd-network.c
src/network/networkd-network.h
src/network/networkd-setlink.c
test/test-network/conf/26-bridge-slave-interface-2.network
test/test-network/systemd-networkd-tests.py