[openib-general] IPv6oIB neighbour discover broken when MCGs overflow

[Shirley Ma]

Roland Dreier <rdreier at cisco.com> wrote on 02/16/2007 10:10:55 AM:

>  > > But what if the full-member join fails on node A for node A's
>  > > solicited node group, but then node B succeeds in joining that group
>  > > as a send-only member (perhaps because some other nodes have dropped
>  > > off the fabric in the meantime).  Then node B will send the ND
message
>  > > on a MCG that A is not a member of.
>
>  > Yes. B can send ND to A, and A responds without being a member so IPv6
ND
>  > works. Is there any security or other problems here?
>
> Node A is not a member of the group B is sending on, so SM does not
> have to set up any routes for the messages to even reach node A.  So
> it doesn't see the messages and doesn't respond to ND.
>
>  - R.

Two MCGs groups must be establised before IPoIB link up, one is broadcast
for IPv4, one is all hosts multicast for IPv6. So Node A is a member of all
hosts address, the patch directs ND sends to all hosts, so node A responses
it.

Thanks
Shirley Ma


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openfabrics.org/pipermail/general/attachments/20070216/fbf1ca6f/attachment.html>