Vlanmgr and Fdborch changes for PAC #3143
Conversation
Added Vlanmgr and Fdborch changes to support PAC.
|
The following PR needs to be merged to resolve the compilation error: |
| @@ -1410,7 +1416,9 @@ bool FdbOrch::addFdbEntry(const FdbEntry& entry, const string& port_name, | |||
| attrs.push_back(attr); | |||
| } | |||
| } | |||
|
|
|||
| attr.id = SAI_FDB_ENTRY_ATTR_PACKET_ACTION; | |||
There was a problem hiding this comment.
Should there be changes in fdborch to push the packet to PACD socket? https://github.com/sonic-net/SONiC/blob/master/doc/pac/Port%20Access%20Control.md#313-mab-packet-receive-flow. How are the packets delivered for authentication when MAB is enabled on the interface please?
There was a problem hiding this comment.
These packets that come to CPU are received by PACD as it registers socket for the same. If MAB is enabled, then PACD informs , the information that is required for authentication, such as mac address and the interface to MAB process. The communication between the PACD and MABD uses simple client-server socket communication.
Added Vlanmgr and Fdborch changes to support PAC.
|
@sutharsansr pls review and sign off if you have no further comments |
|
/azpw run Azure.sonic-swss |
|
/AzurePipelines run Azure.sonic-swss |
|
Azure Pipelines successfully started running 1 pipeline(s). |
|
@prsunny please help review and signoff, this is planned for 202411 |
|
vstest failing after rebasing with latest upstream/master |
|
/azpw run Azure.sonic-swss |
|
/AzurePipelines run Azure.sonic-swss |
|
Azure Pipelines successfully started running 1 pipeline(s). |
|
@prsunny, can you please check and approve the PR for merge for 202411? |
|
/azpw run Azure.sonic-swss |
|
/AzurePipelines run Azure.sonic-swss |
|
Azure Pipelines successfully started running 1 pipeline(s). |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
Added Vlanmgr and Fdborch changes to support PAC.
The following PAC operations are supported to be passed down from Vlanmgr to OA for updating the ASIC DB:
PAC HLD: https://github.com/sonic-net/SONiC/blob/master/doc/pac/Port%20Access%20Control.md