From patchwork Mon Feb 28 13:36:47 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Hans S X-Patchwork-Id: 12763305 X-Patchwork-Delegate: dsahern@gmail.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 43D49C433EF for ; Mon, 28 Feb 2022 13:37:28 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S236261AbiB1Nhu (ORCPT ); Mon, 28 Feb 2022 08:37:50 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:48662 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S235604AbiB1Nhr (ORCPT ); Mon, 28 Feb 2022 08:37:47 -0500 Received: from mail-lj1-x232.google.com (mail-lj1-x232.google.com [IPv6:2a00:1450:4864:20::232]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id B7BF67A9A4; Mon, 28 Feb 2022 05:37:08 -0800 (PST) Received: by mail-lj1-x232.google.com with SMTP id l12so5538875ljh.12; Mon, 28 Feb 2022 05:37:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:organization:content-transfer-encoding; bh=xXj2/f+qvoC8XO/wzynFMId5J1aWTkWLoQHGmpvRGhE=; b=RmDwxl2xzi0WHVsau0s4wrcEkmbPNa1mYJcPoUHdwKRSP0LTWAGpzIVQLRI/d8uDqv u6WpTVZSUZqLr26sD+PySzmOY4/NTZ8yY/2B/6wGJt3Xb/EV7C2VIaeLhTrN1fEz/wGz JvBvoEl01jxmHS/jWpo3VSvtcTEmIl3xzXTfnP8L+zU170gkknkEKfbdDV8/sZ/J16uC 2YSn1VE2DfrejqTCHGImRRGV9fbaCO/uXip3VcGYn40qN8G6igvh1VuV5oL4OnS6WJlB 1fRfqPXzWarM0XJWLG919lMgGwiNsj8EzBKP3nYB4/sCkOCt/OFg0HbCEabuV3gWtK8S /uMg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:organization:content-transfer-encoding; bh=xXj2/f+qvoC8XO/wzynFMId5J1aWTkWLoQHGmpvRGhE=; b=fMUdBqKUWXzOXQsdjbeKgeyG1ZotsYAbb2ypYCJA/n0+Z/mIi+Io1xMUN1pCLhp9Ub iEtfzqAtFQ+gJIHAHgqU57yVny8c2tEPIhitsweUSR6dY1HzjEjEuXxT3wH9M8bVH+83 htKujoAKgy/oLlsDqDHO6O6wI/z41iv19VrPJDeoWA5k0we6XFA1pRTpf8yHugkVlj8A 93Ewg9WIf/Nh/prnZDN/Hap6/p8yX/SWOFb5JgVopuK/kag5uhg7AR/z/LSBDmrmO25u bCUCPtWb1wbq4e6Y1aUB/C0BmLGhl1dEEuac/tJXOGgZgGYSGVj0VbxF1do+JQ3C7Rrw +Ywg== X-Gm-Message-State: AOAM530brsyJO15fTLCTP6bwndrUkCTEkiLN3LLGTaGM7pTBO/QIiowf d9blq/1uNPIcvmRrvZ+HEBM= X-Google-Smtp-Source: ABdhPJyqnrFPptURF8sqTAcicGqTOv80lDSCynEfiZ/iFNOCU0F5rafKKgTdzvGFJwaBgCe7y73PdA== X-Received: by 2002:a2e:9247:0:b0:244:d4bf:58fc with SMTP id v7-20020a2e9247000000b00244d4bf58fcmr14429906ljg.309.1646055426963; Mon, 28 Feb 2022 05:37:06 -0800 (PST) Received: from wse-c0127.beijerelectronics.com ([208.127.141.29]) by smtp.gmail.com with ESMTPSA id i16-20020a2e5410000000b0024647722a4asm1326640ljb.29.2022.02.28.05.37.06 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 28 Feb 2022 05:37:06 -0800 (PST) From: Hans Schultz X-Google-Original-From: Hans Schultz To: davem@davemloft.net, kuba@kernel.org Cc: netdev@vger.kernel.org, Hans Schultz , Stephen Hemminger , linux-kernel@vger.kernel.org Subject: [PATCH iproute2-next V2 1/4] bridge: link: add command to set port in locked mode Date: Mon, 28 Feb 2022 14:36:47 +0100 Message-Id: <20220228133650.31358-2-schultz.hans+netdev@gmail.com> X-Mailer: git-send-email 2.30.2 In-Reply-To: <20220228133650.31358-1-schultz.hans+netdev@gmail.com> References: <20220228133650.31358-1-schultz.hans+netdev@gmail.com> MIME-Version: 1.0 Organization: Westermo Network Technologies AB Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org X-Patchwork-Delegate: dsahern@gmail.com Add support for setting a bridge port in locked mode to use with 802.1X, so that only authorized clients are allowed access through the port. Syntax: bridge link set dev DEV locked {on, off} Signed-off-by: Hans Schultz --- bridge/link.c | 13 +++++++++++++ include/uapi/linux/if_link.h | 1 + 2 files changed, 14 insertions(+) diff --git a/bridge/link.c b/bridge/link.c index 205a2fe7..bb4f0b2d 100644 --- a/bridge/link.c +++ b/bridge/link.c @@ -175,6 +175,9 @@ static void print_protinfo(FILE *fp, struct rtattr *attr) if (prtb[IFLA_BRPORT_ISOLATED]) print_on_off(PRINT_ANY, "isolated", "isolated %s ", rta_getattr_u8(prtb[IFLA_BRPORT_ISOLATED])); + if (prtb[IFLA_BRPORT_LOCKED]) + print_on_off(PRINT_ANY, "locked", "locked %s ", + rta_getattr_u8(prtb[IFLA_BRPORT_LOCKED])); } else print_stp_state(rta_getattr_u8(attr)); } @@ -275,6 +278,7 @@ static void usage(void) " [ neigh_suppress {on | off} ]\n" " [ vlan_tunnel {on | off} ]\n" " [ isolated {on | off} ]\n" + " [ locked {on | off} ]\n" " [ hwmode {vepa | veb} ]\n" " [ backup_port DEVICE ] [ nobackup_port ]\n" " [ self ] [ master ]\n" @@ -303,6 +307,7 @@ static int brlink_modify(int argc, char **argv) __s8 vlan_tunnel = -1; __s8 mcast_flood = -1; __s8 mcast_to_unicast = -1; + __s8 locked = -1; __s8 isolated = -1; __s8 hairpin = -1; __s8 bpdu_guard = -1; @@ -415,6 +420,11 @@ static int brlink_modify(int argc, char **argv) isolated = parse_on_off("isolated", *argv, &ret); if (ret) return ret; + } else if (strcmp(*argv, "locked") == 0) { + NEXT_ARG(); + locked = parse_on_off("locked", *argv, &ret); + if (ret) + return ret; } else if (strcmp(*argv, "backup_port") == 0) { NEXT_ARG(); backup_port_idx = ll_name_to_index(*argv); @@ -489,6 +499,9 @@ static int brlink_modify(int argc, char **argv) if (isolated != -1) addattr8(&req.n, sizeof(req), IFLA_BRPORT_ISOLATED, isolated); + if (locked >= 0) + addattr8(&req.n, sizeof(req), IFLA_BRPORT_LOCKED, locked); + if (backup_port_idx != -1) addattr32(&req.n, sizeof(req), IFLA_BRPORT_BACKUP_PORT, backup_port_idx); diff --git a/include/uapi/linux/if_link.h b/include/uapi/linux/if_link.h index 1d4ed60b..637623bb 100644 --- a/include/uapi/linux/if_link.h +++ b/include/uapi/linux/if_link.h @@ -534,6 +534,7 @@ enum { IFLA_BRPORT_MRP_IN_OPEN, IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT, IFLA_BRPORT_MCAST_EHT_HOSTS_CNT, + IFLA_BRPORT_LOCKED, __IFLA_BRPORT_MAX }; #define IFLA_BRPORT_MAX (__IFLA_BRPORT_MAX - 1) From patchwork Mon Feb 28 13:36:48 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Hans S X-Patchwork-Id: 12763306 X-Patchwork-Delegate: dsahern@gmail.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 35D1CC433F5 for ; Mon, 28 Feb 2022 13:37:31 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S235873AbiB1NiG (ORCPT ); Mon, 28 Feb 2022 08:38:06 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:48770 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S235794AbiB1Nht (ORCPT ); Mon, 28 Feb 2022 08:37:49 -0500 Received: from mail-lf1-x12b.google.com (mail-lf1-x12b.google.com [IPv6:2a00:1450:4864:20::12b]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 9366C7B57A; Mon, 28 Feb 2022 05:37:10 -0800 (PST) Received: by mail-lf1-x12b.google.com with SMTP id j7so21389365lfu.6; Mon, 28 Feb 2022 05:37:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:organization:content-transfer-encoding; bh=fCS8NJ1f4o3pcOzQ2HFVShBXhNj/eZkbyzRnMyoDoqM=; b=iQuNR3RTtSq4bagn13GPmxueF5CMO2/LAduE5LAjkj7bMEhGCrfeoQo8Xydc0cPJsr TL/nDl0eIb5cpSBsuWgBN4Aobnt6tNTKvsAyyG77OOmMXwwdOtPgPEHm+MJt1czGsWFW rG/5S3k9KKST1UBfMDCtNn0nbQXVJb8owaunrEt/M8v9r0SnIT0UygB354Fq740Ko6Hc IuutkNM1pkvl8H1XQyaquq93wOSO28j+TV2ba33Ej8qDtOaQKgPjvXgxD+/I9JMkDZl8 6BCYGmmXjrKGM74CB5E5TPbpKK4oP5vu8DMRY9CD5HYZAE6dmtgQ2EWsNQKTiGR1bH5o lFFQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:organization:content-transfer-encoding; bh=fCS8NJ1f4o3pcOzQ2HFVShBXhNj/eZkbyzRnMyoDoqM=; b=cvWPA/hlfB0gi+KSF/5qV+nc8aO77A0tudiZLoBAdJvvJVnYTbjpwHHyQFEUFIjGHX +l+16ZcfGwwvpiSDT6YUVU5JvgoPV6MM8TEKzqIV0Ol/YH8HL5IMgttGfTN0InrAZQIa 7nlcP7pINKAkgJT20vDsxGdAnKDrq/Y+b112Vegz8E9xJI3BJaNxWgGBufSwq+u3ylhN kwPM+ATkN9YNb/2dLqtjrsAVIPFaWbi8a/h8TnXtkYE8oIuKaK2UCh140tVF0HMFbxfN KdVtA8R6PxhPOir3FDuXHietZx58MRIZO32zIgaHD+U9KJ9NsTuaIkFWdqIs2YNNCsYB ZKwQ== X-Gm-Message-State: AOAM532VmvkfQ7raCMZcuaiVdBAZtNlFgxWxjwco++8nO9zYy9sODPVf VF3izc7XQMbv9qSurxDTcgs= X-Google-Smtp-Source: ABdhPJxAnD2C4QWM4ryQtpQGbdXIhF5shie2JCY2jCGcsrF4nLTuFBYHAam/0oiMfJXaJRiOWmmx8g== X-Received: by 2002:a05:6512:22cb:b0:42e:f15f:7282 with SMTP id g11-20020a05651222cb00b0042ef15f7282mr12911915lfu.530.1646055428992; Mon, 28 Feb 2022 05:37:08 -0800 (PST) Received: from wse-c0127.beijerelectronics.com ([208.127.141.29]) by smtp.gmail.com with ESMTPSA id i16-20020a2e5410000000b0024647722a4asm1326640ljb.29.2022.02.28.05.37.08 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 28 Feb 2022 05:37:08 -0800 (PST) From: Hans Schultz X-Google-Original-From: Hans Schultz To: davem@davemloft.net, kuba@kernel.org Cc: netdev@vger.kernel.org, Hans Schultz , Stephen Hemminger , linux-kernel@vger.kernel.org Subject: [PATCH iproute2-next V2 2/4] ip: iplink_bridge_slave: add locked port flag support Date: Mon, 28 Feb 2022 14:36:48 +0100 Message-Id: <20220228133650.31358-3-schultz.hans+netdev@gmail.com> X-Mailer: git-send-email 2.30.2 In-Reply-To: <20220228133650.31358-1-schultz.hans+netdev@gmail.com> References: <20220228133650.31358-1-schultz.hans+netdev@gmail.com> MIME-Version: 1.0 Organization: Westermo Network Technologies AB Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org X-Patchwork-Delegate: dsahern@gmail.com Syntax: ip link set dev DEV type bridge_slave locked {on | off} Signed-off-by: Hans Schultz --- ip/iplink_bridge_slave.c | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/ip/iplink_bridge_slave.c b/ip/iplink_bridge_slave.c index 71787586..da14a95e 100644 --- a/ip/iplink_bridge_slave.c +++ b/ip/iplink_bridge_slave.c @@ -42,6 +42,7 @@ static void print_explain(FILE *f) " [ neigh_suppress {on | off} ]\n" " [ vlan_tunnel {on | off} ]\n" " [ isolated {on | off} ]\n" + " [ locked {on | off} ]\n" " [ backup_port DEVICE ] [ nobackup_port ]\n" ); } @@ -278,6 +279,10 @@ static void bridge_slave_print_opt(struct link_util *lu, FILE *f, print_on_off(PRINT_ANY, "isolated", "isolated %s ", rta_getattr_u8(tb[IFLA_BRPORT_ISOLATED])); + if (tb[IFLA_BRPORT_LOCKED]) + print_on_off(PRINT_ANY, "locked", "locked %s ", + rta_getattr_u8(tb[IFLA_BRPORT_LOCKED])); + if (tb[IFLA_BRPORT_BACKUP_PORT]) { int backup_p = rta_getattr_u32(tb[IFLA_BRPORT_BACKUP_PORT]); @@ -393,6 +398,10 @@ static int bridge_slave_parse_opt(struct link_util *lu, int argc, char **argv, NEXT_ARG(); bridge_slave_parse_on_off("isolated", *argv, n, IFLA_BRPORT_ISOLATED); + } else if (matches(*argv, "locked") == 0) { + NEXT_ARG(); + bridge_slave_parse_on_off("locked", *argv, n, + IFLA_BRPORT_LOCKED); } else if (matches(*argv, "backup_port") == 0) { int ifindex; From patchwork Mon Feb 28 13:36:49 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Hans S X-Patchwork-Id: 12763312 X-Patchwork-Delegate: dsahern@gmail.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id D6300C433EF for ; Mon, 28 Feb 2022 13:39:10 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S236501AbiB1Njq (ORCPT ); Mon, 28 Feb 2022 08:39:46 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:48690 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S236502AbiB1Nhw (ORCPT ); Mon, 28 Feb 2022 08:37:52 -0500 Received: from mail-lf1-x132.google.com (mail-lf1-x132.google.com [IPv6:2a00:1450:4864:20::132]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id BD1747C168; Mon, 28 Feb 2022 05:37:12 -0800 (PST) Received: by mail-lf1-x132.google.com with SMTP id d23so21341118lfv.13; Mon, 28 Feb 2022 05:37:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:organization:content-transfer-encoding; bh=sl3SNWw/iEwHgcBhjPIPKrVhXnVmwmOVqS06iT8fRQs=; b=j6vJNGX4m6/chkpMUR5/XAxHBIUz2GXLgRZIhZW2yC1svIDugBWA5H7bYlbP+vcgVf a+AvTjEVOlqHNceUKbGSk7BUL8dM50ZPVwYjJ/4mPtimCapkxefC5ZDlH4BkCkm1JshY p4/VhI4r+5+V0hUpUOyBN7ZpPFIV+MW8tHv7bD6yfSrSJ6jXbqArYo9uyECa+ySEn97M th9Ed1f1Vy1nfhiccE8Q7B+jIB8oHOidVo6wgXLuYU7Ozxe5lvSbEgPuXpbnfqpOM/IZ uno8geFTtvQ6NymmCdfFCEOKPs020DWoxGVFufQv7HiwtJlkKahwuCg9hnW1otydosPx NBcA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:organization:content-transfer-encoding; bh=sl3SNWw/iEwHgcBhjPIPKrVhXnVmwmOVqS06iT8fRQs=; b=hKXkLFzy7erYN+mK4x0HAYCjyVK/nnZSBzYdjHZAadAw6/2StajtsjT2RW8y2YN+h+ 3sYhk/IjMKlXJRu+FAexGGT1cKXJhoiBO+PXtrLoM015uWCcXupaZYZIIBfraH9mIgJ0 vRhxoqMlRMvu7Mq3OELydEpIjbugcpyxZHzJYV4cI9OMmJltGNM+l5TvpCUd3H6fIc2D fjM8HaUPr669gDdeUPvy2Y1rk51d20RhOO1R7N1IOJNLaJso+1pPtXiybTCdz5CeCHXQ SzxnEs67fbugydGOESTd6gd92ZU851donSoF0q4E8pt/EPYeT7gALYcSQritIle7YSpd oj/Q== X-Gm-Message-State: AOAM530aY7O0gaH0C7Lay8Vdf4acf7M8wf1TMUfPGVqqCdWd3WdAz9kK 1KDCtg5LxtoT+sjiqH8MO90= X-Google-Smtp-Source: ABdhPJy+aqzQxUvFD8+nnFUg7+O0UWXkXjTkI2fIPjK+pUPAq6RzxAzdA2opC7b3eUl5UlwJMx6n9g== X-Received: by 2002:ac2:5c48:0:b0:442:eada:dc45 with SMTP id s8-20020ac25c48000000b00442eadadc45mr12421182lfp.640.1646055431090; Mon, 28 Feb 2022 05:37:11 -0800 (PST) Received: from wse-c0127.beijerelectronics.com ([208.127.141.29]) by smtp.gmail.com with ESMTPSA id i16-20020a2e5410000000b0024647722a4asm1326640ljb.29.2022.02.28.05.37.10 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 28 Feb 2022 05:37:10 -0800 (PST) From: Hans Schultz X-Google-Original-From: Hans Schultz To: davem@davemloft.net, kuba@kernel.org Cc: netdev@vger.kernel.org, Hans Schultz , Stephen Hemminger , linux-kernel@vger.kernel.org Subject: [PATCH iproute2-next V2 3/4] man8/bridge.8: add locked port feature description and cmd syntax Date: Mon, 28 Feb 2022 14:36:49 +0100 Message-Id: <20220228133650.31358-4-schultz.hans+netdev@gmail.com> X-Mailer: git-send-email 2.30.2 In-Reply-To: <20220228133650.31358-1-schultz.hans+netdev@gmail.com> References: <20220228133650.31358-1-schultz.hans+netdev@gmail.com> MIME-Version: 1.0 Organization: Westermo Network Technologies AB Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org X-Patchwork-Delegate: dsahern@gmail.com Signed-off-by: Hans Schultz --- man/man8/bridge.8 | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/man/man8/bridge.8 b/man/man8/bridge.8 index 81ce9e6f..cb0ffc16 100644 --- a/man/man8/bridge.8 +++ b/man/man8/bridge.8 @@ -50,6 +50,7 @@ bridge \- show / manipulate bridge addresses and devices .BR neigh_suppress " { " on " | " off " } ] [ " .BR vlan_tunnel " { " on " | " off " } ] [ " .BR isolated " { " on " | " off " } ] [ " +.BR locked " { " on " | " off " } ] [ " .B backup_port .IR DEVICE " ] [" .BR nobackup_port " ] [ " @@ -513,6 +514,16 @@ Controls whether a given port will be isolated, which means it will be able to communicate with non-isolated ports only. By default this flag is off. +.TP +.BR "locked on " or " locked off " +Controls whether a port will be locked, meaning that hosts behind the +port will not be able to communicate through the port unless an FDB +entry with the units MAC address is in the FDB. +The common use is that hosts are allowed access through authentication +with the IEEE 802.1X protocol or based on whitelists or like setups. +By default this flag is off. + + .TP .BI backup_port " DEVICE" If the port loses carrier all traffic will be redirected to the From patchwork Mon Feb 28 13:36:50 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Hans S X-Patchwork-Id: 12763311 X-Patchwork-Delegate: dsahern@gmail.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id BF2EEC433F5 for ; Mon, 28 Feb 2022 13:39:08 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S235484AbiB1Njp (ORCPT ); Mon, 28 Feb 2022 08:39:45 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:48788 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S236535AbiB1Nhx (ORCPT ); Mon, 28 Feb 2022 08:37:53 -0500 Received: from mail-lj1-x22b.google.com (mail-lj1-x22b.google.com [IPv6:2a00:1450:4864:20::22b]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id ECCDF75C13; Mon, 28 Feb 2022 05:37:14 -0800 (PST) Received: by mail-lj1-x22b.google.com with SMTP id l12so5539296ljh.12; Mon, 28 Feb 2022 05:37:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:organization:content-transfer-encoding; bh=aj6KUOaZOqE3uq2D8cyeXlngR1zSjmAmzoWF1U7pslM=; b=VA3iZPMwP59jluFEBQuvoGvxhFeX9+DFwf7UEk5RHYeS5EAn8lp0aTqES853r9OZsY sEWlPl5U9HjC4jnuU2eYUWgKN3A5isMa/3Xb+W66TkLp/MQSbW2/Rt0cQulEGelx5CTM weFtVatykpJMFpdNW0hXJVFynYnalYkxSGEIleFx8wL3cQ8O13BwL8++wR3HgG2Jrsm9 fDcuiB19M2VWoefvxdRMLqruIphLf1Nx2+TZ2Lrqvgnxj0LA8/BMO0u/InSH30ENTGzJ rysbDyxln1A58UYG4sNP/w+EDWwHDJ6dKCNOsrA3lMFFEqNxceXLKxCcwvA+hsUy+2gB PkKw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:organization:content-transfer-encoding; bh=aj6KUOaZOqE3uq2D8cyeXlngR1zSjmAmzoWF1U7pslM=; b=yLpmjZAy41TQfUJ6cs8e7Ta+iCMdUw+85cOaeq0m4sCZmItkoC++rFymGKmyc/5mu7 EVqV3zKHVqF1s7HcVw4bvaiC0lyLC3LhGHvtGYUvK3AcLs64TgHDWiE1FfrmNfzdJDAh +m5Ywq+ju6w7wUsEWjvNuRoDxIgl/95BGVKQD4X9eJsz3NSlmmUrJ7EIVzcvdXtn84zS CsMXrLLT0LDibSl1qiP9rJo0WRJ5jATCf/8O4ReZ/6MZYIo+IJSV/07oJgS8CvOYG5/J 0T0WcCb6m+d+Mp4nrK34hMQ6p9BWHKjpdpXKTsNm3FdRU4ZM2SHcJC0h1Zv6dxIpN1Bz aadA== X-Gm-Message-State: AOAM531zlDwEa/dCL6QzB2huGLmQbfpQp1h3puqIgUSd+25HgD3ewamw NKlCmAy6axnJPwaI702y6hE= X-Google-Smtp-Source: ABdhPJyxEhstvlkyxzKUhjRORgnKa/8C4Gtif3HPn8db0OHuxbl+3L5vfG80QePxi9c8+v7OBbkQcA== X-Received: by 2002:a2e:808b:0:b0:238:ea7c:faf8 with SMTP id i11-20020a2e808b000000b00238ea7cfaf8mr14255323ljg.513.1646055433276; Mon, 28 Feb 2022 05:37:13 -0800 (PST) Received: from wse-c0127.beijerelectronics.com ([208.127.141.29]) by smtp.gmail.com with ESMTPSA id i16-20020a2e5410000000b0024647722a4asm1326640ljb.29.2022.02.28.05.37.12 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 28 Feb 2022 05:37:13 -0800 (PST) From: Hans Schultz X-Google-Original-From: Hans Schultz To: davem@davemloft.net, kuba@kernel.org Cc: netdev@vger.kernel.org, Hans Schultz , Stephen Hemminger , linux-kernel@vger.kernel.org Subject: [PATCH iproute2-next V2 4/4] man8/ip-link.8: add locked port feature description and cmd syntax Date: Mon, 28 Feb 2022 14:36:50 +0100 Message-Id: <20220228133650.31358-5-schultz.hans+netdev@gmail.com> X-Mailer: git-send-email 2.30.2 In-Reply-To: <20220228133650.31358-1-schultz.hans+netdev@gmail.com> References: <20220228133650.31358-1-schultz.hans+netdev@gmail.com> MIME-Version: 1.0 Organization: Westermo Network Technologies AB Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org X-Patchwork-Delegate: dsahern@gmail.com Signed-off-by: Hans Schultz --- man/man8/ip-link.8.in | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/man/man8/ip-link.8.in b/man/man8/ip-link.8.in index 19a0c9ca..800ef278 100644 --- a/man/man8/ip-link.8.in +++ b/man/man8/ip-link.8.in @@ -2376,6 +2376,7 @@ the following additional arguments are supported: ] [ .BR isolated " { " on " | " off " }" ] [ +.BR locked " { " on " | " off " }" .BR backup_port " DEVICE" ] [ .BR nobackup_port " ]" @@ -2473,6 +2474,11 @@ is enabled on the port. By default this flag is off. - controls whether vlan to tunnel mapping is enabled on the port. By default this flag is off. +.BR locked " { " on " | " off " }" +- sets or unsets a port in locked mode, so that when enabled, hosts +behind the port cannot communicate through the port unless a FDB entry +representing the host is in the FDB. By default this flag is off. + .BI backup_port " DEVICE" - if the port loses carrier all traffic will be redirected to the configured backup port