047b098840
For allowed address pairs to be functional on NSXv3 plugin, we need to enforce both Spoof Guard and MAC Learning switching profile. MAC Learning is used to learning the mac address and spoof guard is used for switch security to ensure only added allowed address pairs to be allowed on this port. Moreover, during fix bug #1631540, we removed the parameter "mac_change_allowed". After further discussion with NSX team, it doesn't have negative effect to add it back. The value it can bring is to support guest VM on ESX host to change MAC address ( the mac_address still needs to be in allowed address pairs) on the interface. (Cherry picked from: I2c725df74835165587170f6136c06494d1bfcf7b) Closes-Bug: #1631539 Change-Id: I1bd8b8e78d955d0f5d2e5a846dfa25c0a7312e47 |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| client.py | ||
| cluster.py | ||
| config.py | ||
| exceptions.py | ||
| native_dhcp.py | ||
| ns_group_manager.py | ||
| nsx_constants.py | ||
| resources.py | ||
| router.py | ||
| security.py | ||
| utils.py | ||