search

Bairdo / gasket

Gasket is a system that provides authentication and authorisation to the https://github.com/faucetsdn/faucet network controller.
3 stars 3 forks source link

Consider tunnel instead of mac rewrite. #58

Open Bairdo opened 6 years ago

Bairdo commented 6 years ago

MAC rewrite becomes dodgy when multiple switches are managed by a single gasket. switch must know how to forward the rewritten address or else a broadcast occurs.

Another option could be use of action output port. but this means the controller will not learn the client MAC, which is useful for forwarding the reply to only the client's port, and knowing where to put the new rules.

Bairdo commented 6 years ago

faucetsdn/faucet issue#1754 may add learning on output port actions.

Bairdo commented 6 years ago

faucetsdn/faucet PR#2003 will not flood the reserved group mac address.

This means we can do an output to hostapd port action, and allow through pipeline (so it gets learnt then dropped).