Using Ethernet SR-IOV Virtual Functions
You can use both the static and dynamic SR-IOV methods to manage Ethernet SR-IOV devices.
| Caution - When using some Intel network adapters that support SR-IOV, a virtual function might be the target of malicious behavior. Unexpected software-generated frames can throttle traffic between the host and the virtual switch, which might negatively affect performance.
Configure all SR-IOV-enabled ports to use VLAN tagging to drop unexpected and potentially malicious frames.
- To configure VLAN tagging on a physical function and its associated virtual functions, use the following command:
ldm create-vf [pvid=pvid] [vid=vid1,vid2,...>] net-pf-name
- To configure VLAN tagging on an existing virtual function, use the following command:
ldm set-io [pvid=[pvid]] [vid=[vid1,vid2,...]] net-vf-name
For information about creating the VLAN interface in the I/O domain, see Using VLAN Tagging in Oracle VM Server for SPARC 3.4 Administration Guide. |