[Users] disable EnableMACAntiSpoofingFilterRules per VM

Moti Asayag masayag at redhat.com
Wed Dec 25 21:25:00 UTC 2013

----- Original Message -----
> From: "Kapetanakis Giannis" <bilias at edu.physics.uoc.gr>
> To: "users at oVirt.org" <users at ovirt.org>
> Sent: Wednesday, December 25, 2013 1:19:23 PM
> Subject: [Users] disable EnableMACAntiSpoofingFilterRules per VM
> Hi,
> Trying to move a VM with CARP/VRRP on oVirt 3.3.2 I got bitten by this.
> http://www.ovirt.org/Features/Design/Network/NetworkFiltering
> http://lists.ovirt.org/pipermail/users/2013-October/017217.html
> Is there a way to disable mac filtering only for a specific VM
> and not for the entire cluster?

The EnableMACAntiSpoofingFilterRules config value is defined on cluster level,
therefore this isn't a way from engine side to disable it for a specific vm/nic.

Perhaps using the "custom properties" and a vdsm hook which omits the filter rule
from the vm configuration it will be achievable.

Adding Dan to see if it is feasible or if there is a better alternative.

> I've tried giving MAC addresses in the form of
> 00-00-5E-00-01-XX
> but it didn't work.
> Best regards,
> G
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

More information about the Users mailing list