Using Ethernet SR-IOV Virtual Functions

You can use both the static and dynamic SR-IOV methods to manage Ethernet SR-IOV devices.

Caution:

When using some Intel network adapters that support SR-IOV, a virtual function might be the target of malicious behavior. Unexpected software-generated frames can throttle traffic between the host and the virtual switch, which might negatively affect performance. Configure all SR-IOV-enabled ports to use VLAN tagging to drop unexpected and potentially malicious frames.
  • To configure VLAN tagging on a physical function and its associated virtual functions, use the following command:

    ldm create-vf [pvid=pvid] [vid=vid1,vid2,...>] net-pf-name
  • To configure VLAN tagging on an existing virtual function, use the following command:

    ldm set-io [pvid=[pvid]] [vid=[vid1,vid2,...]] net-vf-name
For information about creating the VLAN interface in the I/O domain, see Using VLAN Tagging.