Skip to main content
Solved

single VM in promiscuous mode on AHV

  • January 11, 2018
  • 8 replies
  • 5515 views

Forum|alt.badge.img+7

How to enable promiscuous mode on AHV ?

 

Best answer by EladRosen

Hi
i was able to make it work with this commands

$ ovs-vsctl add-br br0$ ovs-vsctl add-port br0 eth0$ ovs-vsctl add-port br0 tap0$ ovs-vsctl add-port br0 tap1 -- --id=@p get port tap1 -- --id=@m create mirror name=m0 select-all=true output-port=@p -- set bridge br0 mirrors=@m
This topic has been closed for replies.

8 replies

Forum|alt.badge.img+13
  • Nutanix Employee
  • 44 replies
  • January 11, 2018
Are you looking to sniff only packets destined/originating from vm's running on AHV? or do you want to sniff packets from physical devices outside the host?

Forum|alt.badge.img+7
  • Author
  • Adventurer
  • 6 replies
  • January 12, 2018
Sniff packets from physical devices outside the host

Forum|alt.badge.img+7
  • Author
  • Adventurer
  • 6 replies
  • January 14, 2018
any news?

Forum|alt.badge.img+13
  • Nutanix Employee
  • 44 replies
  • January 14, 2018
As of now it is not possible to sniff packets from physical devices external to Nutanis. There is a feature request logged for this capability. You can only sniff packets that are originating or destined to AHV vm's by using the network chain functionality.

Forum|alt.badge.img+7
  • Author
  • Adventurer
  • 6 replies
  • Answer
  • January 18, 2018
Hi
i was able to make it work with this commands

$ ovs-vsctl add-br br0$ ovs-vsctl add-port br0 eth0$ ovs-vsctl add-port br0 tap0$ ovs-vsctl add-port br0 tap1 -- --id=@p get port tap1 -- --id=@m create mirror name=m0 select-all=true output-port=@p -- set bridge br0 mirrors=@m

Forum|alt.badge.img+13
  • Nutanix Employee
  • 44 replies
  • January 18, 2018
EladRosen We don't recommend doing it directly from OVS for the following reason,

1. Acropolis service doesn't have any control on the config done directly on OVS so a host reboot will lose the config
2. When the vm gets shutdown and started the config is lost.
3. When the vm is moved to another host the config is lost.

The feature request logged is to support this as a acropolis feature as OVS supports it already.

Forum|alt.badge.img+7
  • Author
  • Adventurer
  • 6 replies
  • January 18, 2018
I know all this ( a lot of testing )Thank you for making it clear.But still, until you'll release the support of this it's a valid work around for my customer,Instead off not working at all.We will use affinity rule for that VM or the agent vm feature.While AHV upgrades will be Handled carefully.Hope this RFE will be available ASAP.

Forum|alt.badge.img+13
  • Nutanix Employee
  • 44 replies
  • January 18, 2018
Thanks EladRosen just wanted to clarify the limitations of the config if any one else refers to this post in the future.