• Vladimir Oltean's avatar
    net: dsa: sja1105: deny more than one VLAN-aware bridge · 19fa937a
    Vladimir Oltean authored
    With tag_sja1105.c's only ability being to perform an imprecise RX
    procedure and identify whether a packet comes from a VLAN-aware bridge
    or not, we have no way to determine whether a packet with VLAN ID 5
    comes from, say, br0 or br1. Actually we could, but it would mean that
    we need to restrict all VLANs from br0 to be different from all VLANs
    from br1, and this includes the default_pvid, which makes a setup with 2
    VLAN-aware bridges highly imprectical.
    
    The fact of the matter is that this isn't even that big of a practical
    limitation, since even with a single VLAN-aware bridge we can pretty
    much enforce forwarding isolation based on the VLAN port membership.
    
    So in the end, tell the user that they need to model their setup using a
    single VLAN-aware bridge.
    Signed-off-by: default avatarVladimir Oltean <vladimir.oltean@nxp.com>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    19fa937a
sja1105_main.c 88 KB