Configuring Openflow Instances To Enable Mac Group Matching; Mac Group Matching; Switches That Support Mac Group Tables And Mac Group Matching; Configuration Rules For Openflow Instances And Mac Groups - HP HPE VAN SDN Controller 2.7 Administrator's Manual

Configuring OpenFlow instances to enable MAC group matching

MAC group matching

By supporting MAC group matching and MAC group tables, an OpenFlow instance can store
flow entries that match MAC groups instead individual MAC IDs, freeing up space in the policy
(TCAM) table of the physical switch for other flow entries. The list of the MAC addresses in the
MAC group are defined in other tables (40 for source and 41 for destination).
For example, to use MAC addresses to block access to the network for 10 devices owned by a
particular group of users:
Without support for MAC group matching, you would have to create a flow entry in the policy
table of the switch for each MAC address, for a total of 10 flow entries.
With support for MAC group matching and MAC group tables, you can create a MAC group,
add the MAC addresses to the MAC group, and then create a single flow entry in the policy
table to match that MAC group ID. The list of the MAC addresses in the MAC group are
defined in other tables (40 for source and 41 for destination).
For more information about programming flow entries for OpenFlow instances, see the following
documents:
HPE VAN SDN Controller Programming Guide
HPE VAN SDN Controller REST API Reference

Switches that support MAC group tables and MAC group matching

Beginning with version 2.6, the HPE VAN SDN Controller supports the use of MAC groups and
MAC tables for OpenFlow v1.3 instances on ProVision-based switches running release
K/KA/KB/WB 15.18 or later with the following restrictions:
Support is provided for V2 and V3 modules only. MAC group tables are not supported when
the switch is in V1 module compatible mode.
The 2920 switch does not support destination MAC address matching or destination MAC
group matching.

Configuration rules for OpenFlow instances and MAC groups

By default, MAC group tables are disabled. You must enable MAC group tables to use them.
MAC group matching is supported in the standard match mode default pipeline only.
Exactly one OpenFlow instance per physical switch can be enabled with MAC group match
support.
All OpenFlow instances on the physical switch must be disabled before you can enable the
MAC group feature.
MAC group tables do not support counters or idle-timeout metering. For example, if you
want to count the number packets that match a MAC group, you must create a separate
flow entry.
The policy table cannot match on a source MAC and destination MAC address separately
when MAC group tables are part of the pipeline.

Enabling or disabling MAC group matching on an OpenFlow instance

Prerequisites

You must be logged into the command line interface of the switch.
All OpenFlow instances on the physical switch must be disabled.
132 Configuring OpenFlow instances