Configuring Macvlan and Ipvlan Linux Networking
http://networkstatic.net/configuring-macvlan-ipvlan-linux-networking/
[root@evpn2 ~]# lsmod | grep -i macvlan
macvlan 262144 0
创建两个macvlan设备
[root@evpn2 ~]# ip link add link enp1s0 name macv1 type macvlan mode bridge [root@evpn2 ~]# ip link add link enp1s0 name macv2 type macvlan mode bridge
创建两个namespace
[root@evpn2 ~]# ip netns add macv_net1
[root@evpn2 ~]# ip netns add macv_net2
设备加入namespace
[root@evpn2 ~]# ip link set macv1 netns macv_net1
[root@evpn2 ~]# ip link set macv2 netns macv_net2
[root@evpn2 ~]# ip netns exec macv_net1 ip addr add 10.1.1.151/24 dev macv1
[root@evpn2 ~]# ip netns exec macv_net2 ip addr add 10.1.1.152/24 dev macv2
[root@evpn2 ~]# ip netns exec macv_net2 ping 10.1.1.152
[root@evpn2 ~]# ip netns exec macv_net2 ip a 1: lo: <LOOPBACK> mtu 65536 qdisc noop state DOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 35: macv2@if2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000 link/ether ba:df:2c:8b:96:72 brd ff:ff:ff:ff:ff:ff link-netnsid 0 inet 10.1.1.152/24 scope global macv2 valid_lft forever preferred_lft forever
[root@evpn2 ~]# ip netns exec macv_net2 ping 10.1.1.152
PING 10.1.1.152 (10.1.1.152) 56(84) bytes of data.
^C
--- 10.1.1.152 ping statistics ---
2 packets transmitted, 0 received, 100% packet loss, time 37ms
ping 不通
将lo up
[root@evpn2 ~]# ip netns exec macv_net2 ifconfig lo up
[root@evpn2 ~]# ip netns exec macv_net2 ping 10.1.1.152
PING 10.1.1.152 (10.1.1.152) 56(84) bytes of data.
64 bytes from 10.1.1.152: icmp_seq=1 ttl=64 time=0.032 ms
64 bytes from 10.1.1.152: icmp_seq=2 ttl=64 time=0.034 ms
^C
--- 10.1.1.152 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 48ms
rtt min/avg/max/mdev = 0.032/0.033/0.034/0.001 ms
[root@evpn2 ~]# ip netns exec macv_net2 ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
35: macv2@if2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether ba:df:2c:8b:96:72 brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet 10.1.1.152/24 scope global macv2
valid_lft forever preferred_lft forever
ping 宿主机和10.1.1.151都无法ping通
[root@evpn2 ~]# ip netns exec macv_net2 ping 10.1.1.151
connect: Network is unreachable
[root@evpn2 ~]# ip netns exec macv_net2 ping 10.10.18.213
connect: Network is unreachable
[root@evpn2 ~]# ip netns exec macv_net2 ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
35: macv2@if2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether ba:df:2c:8b:96:72 brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet 10.1.1.152/24 scope global macv2
valid_lft forever preferred_lft forever
[root@evpn2 ~]# ip netns exec macv_net1 ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
34: macv1@if2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 8e:a5:5c:b3:0f:1d brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet 10.1.1.151/24 scope global macv1
valid_lft forever preferred_lft forever
[root@evpn2 ~]# ip netns exec macv_net2 route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
多处于down状态
[root@evpn2 ~]# ip netns exec macv_net1 ip link set dev macv1 up
[root@evpn2 ~]# ip netns exec macv_net2 ip link set dev macv2 up
[root@evpn2 ~]# ip netns exec macv_net2 ping 10.1.1.151
PING 10.1.1.151 (10.1.1.151) 56(84) bytes of data.
64 bytes from 10.1.1.151: icmp_seq=1 ttl=64 time=0.105 ms
64 bytes from 10.1.1.151: icmp_seq=2 ttl=64 time=0.044 ms
^C
--- 10.1.1.151 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 39ms
rtt min/avg/max/mdev = 0.044/0.074/0.105/0.031 ms
[root@evpn2 ~]# ip netns exec macv_net1 ping 10.10.18.213
connect: Network is unreachable
[root@evpn2 ~]# ip netns exec macv_net1 ping 10.1.1.151
PING 10.1.1.151 (10.1.1.151) 56(84) bytes of data.
64 bytes from 10.1.1.151: icmp_seq=1 ttl=64 time=0.032 ms
64 bytes from 10.1.1.151: icmp_seq=2 ttl=64 time=0.042 ms
64 bytes from 10.1.1.151: icmp_seq=3 ttl=64 time=0.045 ms
^C
--- 10.1.1.151 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 90ms
rtt min/avg/max/mdev = 0.032/0.039/0.045/0.009 ms
[root@evpn2 ~]# ip netns exec macv_net1 route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.1.1.0 0.0.0.0 255.255.255.0 U 0 0 0 macv1
[root@evpn2 ~]# ip netns exec macv_net2 route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.1.1.0 0.0.0.0 255.255.255.0 U 0 0 0 macv2
