Hello,

I have two kind of hosts:

• some with default ovirt node 4.4 kernel settings
• some with custom kernel settings including intel_iommu=on kvm-intel.nested=1

I can't open vm console from the second category host when binding from a different vlan because the host is unreacheable

But if I set sysctl -w net.ipv4.conf.all.rp_filter=2, I can bind the host and open a vm console.

I didn't test if this behaviour is because of Hostdev Passthrough & SR-IOV or Nested Virtualization.

Is it an expected behaviour or a bug?

-- 
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5 	
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanchet@abes.fr