summaryrefslogtreecommitdiff
path: root/meta-google/recipes-google/ncsi
diff options
context:
space:
mode:
authorWilliam A. Kennington III <wak@google.com>2021-11-05 08:57:43 +0300
committerWilliam A. Kennington III <wak@google.com>2021-11-06 02:40:16 +0300
commita22b4458fe6d64b5dcd60e00acaa0ff083f6f056 (patch)
tree5fd005c626d3ac57ff93ebd2cb01ee6b143ab7ab /meta-google/recipes-google/ncsi
parent60a33d67f938e70844e06faaf33baf3ee06e1728 (diff)
downloadopenbmc-a22b4458fe6d64b5dcd60e00acaa0ff083f6f056.tar.xz
meta-google: gbmc-bridge: Restrict network from /72 to /76
We can have multiple gBMC networks within one "machine". This allows us to have multiple address sets. Change-Id: I5b18b7822f50bb0570e1aa5a70ac47036694d922 Signed-off-by: William A. Kennington III <wak@google.com>
Diffstat (limited to 'meta-google/recipes-google/ncsi')
-rw-r--r--meta-google/recipes-google/ncsi/files/gbmc-ncsi-br-pub-addr.sh.in2
-rw-r--r--meta-google/recipes-google/ncsi/files/gbmc-ncsi-nft.sh.in6
2 files changed, 4 insertions, 4 deletions
diff --git a/meta-google/recipes-google/ncsi/files/gbmc-ncsi-br-pub-addr.sh.in b/meta-google/recipes-google/ncsi/files/gbmc-ncsi-br-pub-addr.sh.in
index 961da5095..b04f2aa8f 100644
--- a/meta-google/recipes-google/ncsi/files/gbmc-ncsi-br-pub-addr.sh.in
+++ b/meta-google/recipes-google/ncsi/files/gbmc-ncsi-br-pub-addr.sh.in
@@ -56,7 +56,7 @@ ValidLifetimeSec=60
Route=$ncsi_pfx/80
LifetimeSec=60
[Route]
-Destination=$stateless_pfx/72
+Destination=$stateless_pfx/76
Type=unreachable
Metric=1024
EOF
diff --git a/meta-google/recipes-google/ncsi/files/gbmc-ncsi-nft.sh.in b/meta-google/recipes-google/ncsi/files/gbmc-ncsi-nft.sh.in
index d07b9e2f0..fc8e8198a 100644
--- a/meta-google/recipes-google/ncsi/files/gbmc-ncsi-nft.sh.in
+++ b/meta-google/recipes-google/ncsi/files/gbmc-ncsi-nft.sh.in
@@ -54,15 +54,15 @@ gbmc_ncsi_nft_update() {
if (( ${#ip_bytes[@]} != 0 )); then
ip_bytes[8]=0xfd
pfx="$(ip_bytes_to_str ip_bytes)"
- contents+=" ip6 saddr != $pfx/72 ip6 daddr"
- contents+=" $pfx/72 goto ncsi_gbmc_br_pub_input"$'\n'
+ contents+=" ip6 saddr != $pfx/76 ip6 daddr"
+ contents+=" $pfx/76 goto ncsi_gbmc_br_pub_input"$'\n'
fi
fi
contents+=' }'$'\n'
contents+=' chain ncsi_forward {'$'\n'
if [ -n "$pfx" ]; then
- contents+=" ip6 saddr != $pfx/72 ip6 daddr $pfx/72 accept"$'\n'
+ contents+=" ip6 saddr != $pfx/76 ip6 daddr $pfx/76 accept"$'\n'
fi
contents+=' }'$'\n'
contents+='}'$'\n'