• Vladimir Oltean's avatar
    net: dsa: sja1105: enforce FDB isolation · 219827ef
    Vladimir Oltean authored
    For sja1105, to enforce FDB isolation simply means to turn on
    Independent VLAN Learning unconditionally, and to remap VLAN-unaware FDB
    and MDB entries towards the private VLAN allocated by tag_8021q for each
    bridge.
    
    Standalone ports each have their own standalone tag_8021q VLAN. No
    learning happens in that VLAN due to:
    - learning being disabled on standalone user ports
    - learning being disabled on the CPU port (we use
      assisted_learning_on_cpu_port which only installs bridge FDBs)
    
    VLAN-aware ports learn FDB entries with the bridge VLANs.
    
    VLAN-unaware bridge ports learn with the tag_8021q VLAN for bridging.
    Signed-off-by: default avatarVladimir Oltean <vladimir.oltean@nxp.com>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    219827ef
sja1105_main.c 95.4 KB