禁用内部 Intel X710 LLDP 代理

Question 1

好的。Google 帮了我大忙。下面介绍如何解决此问题。

事实证明，要使用调试文件系统，首先需要将其挂载。我们使用 memfs OS 在我们正在调整的机器上运行命令，默认情况下我们不挂载 debugfs。所以这个脚本给了我所需的答案。

...并且对于我的用例，以下步骤有效：

root@host (~)# mount -t debugfs none /sys/kernel/debug
root@host (~)# echo lldp stop > /sys/kernel/debug/i40e/0000:01:00.2/command

得到：

root@host (~)# lldptool -i eth2 stat
Total Frames Transmitted        = 1834
Total Discarded Frames Received = 0
Total Error Frames Received     = 0
Total Frames Received           = 1
Total Discarded TLVs            = 0
Total Unrecognized TLVs         = 0
Total Ageouts                   = 0
root@host (~)# lldptool -t -n -i eth2
Chassis ID TLV
    MAC: ec:13:db:41:63:00
Port ID TLV
    Local: 508
Time to Live TLV
    120
System Name TLV
    sw1
System Description TLV
    Juniper Networks, Inc. qfx5100-48s-6q Ethernet Switch, kernel JUNOS 13.2X51-D38, Build date: 2015-06-12 02:33:47 UTC Copyright (c) 1996-2015 Juniper Networks, Inc.
System Capabilities TLV
    System capabilities:  Bridge, Router
    Enabled capabilities: Bridge, Router
Port Description TLV
    xe-0/0/0
MAC/PHY Configuration Status TLV
    Auto-negotiation not supported and not enabled
    PMD auto-negotiation capabilities: 0x8000
    MAU type: Unknown [0x0000]
Link Aggregation TLV
    Aggregation capable
    Currently not aggregated
    Aggregated Port ID: 0
Maximum Frame Size TLV
    1514
Port VLAN ID TLV
    PVID: 1
Unidentified Org Specific TLV
    OUI: 0x009069, Subtype: 1, Info: 564633373136303530303437
VLAN Name TLV
    VID 1: Name vlan-1
LLDP-MED Capabilities TLV
    Device Type:  netcon
    Capabilities: LLDP-MED, Network Policy, Location Identification, Extended Power via MDI-PSE
End of LLDPDU TLV

其他有用链接：

http://comments.gmane.org/gmane.linux.network/408868 https://communities.intel.com/thread/87759 https://sourceforge.net/p/e1000/mailman/message/34129092/

还有我的谷歌搜索

Answer

好的。Google 帮了我大忙。下面介绍如何解决此问题。

事实证明，要使用调试文件系统，首先需要将其挂载。我们使用 memfs OS 在我们正在调整的机器上运行命令，默认情况下我们不挂载 debugfs。所以这个脚本给了我所需的答案。

...并且对于我的用例，以下步骤有效：

root@host (~)# mount -t debugfs none /sys/kernel/debug
root@host (~)# echo lldp stop > /sys/kernel/debug/i40e/0000:01:00.2/command

得到：

root@host (~)# lldptool -i eth2 stat
Total Frames Transmitted        = 1834
Total Discarded Frames Received = 0
Total Error Frames Received     = 0
Total Frames Received           = 1
Total Discarded TLVs            = 0
Total Unrecognized TLVs         = 0
Total Ageouts                   = 0
root@host (~)# lldptool -t -n -i eth2
Chassis ID TLV
    MAC: ec:13:db:41:63:00
Port ID TLV
    Local: 508
Time to Live TLV
    120
System Name TLV
    sw1
System Description TLV
    Juniper Networks, Inc. qfx5100-48s-6q Ethernet Switch, kernel JUNOS 13.2X51-D38, Build date: 2015-06-12 02:33:47 UTC Copyright (c) 1996-2015 Juniper Networks, Inc.
System Capabilities TLV
    System capabilities:  Bridge, Router
    Enabled capabilities: Bridge, Router
Port Description TLV
    xe-0/0/0
MAC/PHY Configuration Status TLV
    Auto-negotiation not supported and not enabled
    PMD auto-negotiation capabilities: 0x8000
    MAU type: Unknown [0x0000]
Link Aggregation TLV
    Aggregation capable
    Currently not aggregated
    Aggregated Port ID: 0
Maximum Frame Size TLV
    1514
Port VLAN ID TLV
    PVID: 1
Unidentified Org Specific TLV
    OUI: 0x009069, Subtype: 1, Info: 564633373136303530303437
VLAN Name TLV
    VID 1: Name vlan-1
LLDP-MED Capabilities TLV
    Device Type:  netcon
    Capabilities: LLDP-MED, Network Policy, Location Identification, Extended Power via MDI-PSE
End of LLDPDU TLV

其他有用链接：

http://comments.gmane.org/gmane.linux.network/408868 https://communities.intel.com/thread/87759 https://sourceforge.net/p/e1000/mailman/message/34129092/

还有我的谷歌搜索

Question 2

这是固件功能，可以关闭

自 2017 年 10 月 13 日起英特尔发布了其驱动程序的一个版本2.3.6支持关闭 LLDP 处理使用私有标志。这可以通过执行以下命令来完成：

sudo ethtool --set-priv-flags <interface name> disable-fw-lldp on

替换<interface name>为您的接口名称。（例如- eth0）

下载英特尔 i40e 驱动程序（适用于 X710/XL710 版本 2.3.6）

安装说明（来源）

1. Move the base driver tar file to the directory of your choice. For
   example, use '/home/username/i40e' or '/usr/local/src/i40e'.

2. Untar/unzip the archive, where <x.x.x> is the version number for the
   driver tar file:
   tar zxf i40e-<x.x.x>.tar.gz

3. Change to the driver src directory, where <x.x.x> is the version number
   for the driver tar:
   cd i40e-<x.x.x>/src/

4. Compile the driver module:
   # make install
   The binary will be installed as:
   /lib/modules/<KERNEL VERSION>/updates/drivers/net/ethernet/intel/i40e/i40e.ko

   The install location listed above is the default location. This may differ
   for various Linux distributions.
   NOTE:Â To compile the driver on some kernel/arch combinations, a
   package with the development version of libelf (e.g. libelf-dev,
   libelf-devel, elfutilsl-libelf-devel) may need to be installed.

  NOTE: To gather and display additional statistics, use the
  I40E_ADD_PROBES pre-processor macro:
  #make CFLAGS_EXTRA=-DI40E_ADD_PROBES
  Please note that this additional statistics gathering can impact
  performance.

5. Load the module using the modprobe command:
   modprobe <i40e> [parameter=port1_value,port2_value]

   Make sure that any older i40e drivers are removed from the kernel before
   loading the new module:
   rmmod i40e; modprobe i40e

6. Assign an IP address to the interface by entering the following,
   where ethX is the interface name that was shown in dmesg after modprobe:

   ip address add <IP_address>/<netmask bits> dev ethX

7. Verify that the interface works. Enter the following, where IP_address
   is the IP address for another machine on the same subnet as the interface
   that is being tested:
   ping <IP_address>

这是来自英特尔的承诺：

来自：戴夫·埃特曼

为 ethtool 实现私有标志 disable-fw-lldp，以禁用 FW 对 LLDP 数据包的处理。这将阻止 FW 使用 LLDPDU 并使其向上发送到堆栈。

FW 也被配置为在链接时应用默认 DCB 配置。

切换此标志的值也会导致 PF 重置。

禁用 FW DCB 也将禁用 DCBx。

Answer

这是固件功能，可以关闭

自 2017 年 10 月 13 日起英特尔发布了其驱动程序的一个版本2.3.6支持关闭 LLDP 处理使用私有标志。这可以通过执行以下命令来完成：

sudo ethtool --set-priv-flags <interface name> disable-fw-lldp on

替换<interface name>为您的接口名称。（例如- eth0）

下载英特尔 i40e 驱动程序（适用于 X710/XL710 版本 2.3.6）

安装说明（来源）

1. Move the base driver tar file to the directory of your choice. For
   example, use '/home/username/i40e' or '/usr/local/src/i40e'.

2. Untar/unzip the archive, where <x.x.x> is the version number for the
   driver tar file:
   tar zxf i40e-<x.x.x>.tar.gz

3. Change to the driver src directory, where <x.x.x> is the version number
   for the driver tar:
   cd i40e-<x.x.x>/src/

4. Compile the driver module:
   # make install
   The binary will be installed as:
   /lib/modules/<KERNEL VERSION>/updates/drivers/net/ethernet/intel/i40e/i40e.ko

   The install location listed above is the default location. This may differ
   for various Linux distributions.
   NOTE:Â To compile the driver on some kernel/arch combinations, a
   package with the development version of libelf (e.g. libelf-dev,
   libelf-devel, elfutilsl-libelf-devel) may need to be installed.

  NOTE: To gather and display additional statistics, use the
  I40E_ADD_PROBES pre-processor macro:
  #make CFLAGS_EXTRA=-DI40E_ADD_PROBES
  Please note that this additional statistics gathering can impact
  performance.

5. Load the module using the modprobe command:
   modprobe <i40e> [parameter=port1_value,port2_value]

   Make sure that any older i40e drivers are removed from the kernel before
   loading the new module:
   rmmod i40e; modprobe i40e

6. Assign an IP address to the interface by entering the following,
   where ethX is the interface name that was shown in dmesg after modprobe:

   ip address add <IP_address>/<netmask bits> dev ethX

7. Verify that the interface works. Enter the following, where IP_address
   is the IP address for another machine on the same subnet as the interface
   that is being tested:
   ping <IP_address>

这是来自英特尔的承诺：

来自：戴夫·埃特曼

为 ethtool 实现私有标志 disable-fw-lldp，以禁用 FW 对 LLDP 数据包的处理。这将阻止 FW 使用 LLDPDU 并使其向上发送到堆栈。

FW 也被配置为在链接时应用默认 DCB 配置。

切换此标志的值也会导致 PF 重置。

禁用 FW DCB 也将禁用 DCBx。

Question 3

创建了一个初始化脚本，在机器启动时执行此操作。欢迎任何请求。

如果有人知道如何判断嵌入式 lldp 代理的状态，我将不胜感激。这可以适用于 systemd，并提供一些更好的退出代码。

https://github.com/timhughes/i40e-lldp-agent/

Answer

创建了一个初始化脚本，在机器启动时执行此操作。欢迎任何请求。

如果有人知道如何判断嵌入式 lldp 代理的状态，我将不胜感激。这可以适用于 systemd，并提供一些更好的退出代码。

https://github.com/timhughes/i40e-lldp-agent/

Question 4

由于 ethtool 切换似乎在重启后不会持久，因此我们设置了以下 udev 规则。

/etc/udev/rules.d/10-disable-fw-lldp.rules：

ACTION=="add", SUBSYSTEM=="net", ENV{INTERFACE}=="*", DRIVERS=="i40e", PROGRAM="/usr/sbin/ethtool --set-priv-flags $name disable-fw-lldp on"

Answer

由于 ethtool 切换似乎在重启后不会持久，因此我们设置了以下 udev 规则。

/etc/udev/rules.d/10-disable-fw-lldp.rules：

ACTION=="add", SUBSYSTEM=="net", ENV{INTERFACE}=="*", DRIVERS=="i40e", PROGRAM="/usr/sbin/ethtool --set-priv-flags $name disable-fw-lldp on"

禁用内部 Intel X710 LLDP 代理

答案1

答案2

这是固件功能，可以关闭

答案3

答案4

相关内容