[Qemu-devel] Re: TODO item: guest programmable mac/vlan filtering with macvtap

[Michael S. Tsirkin]

On Mon, Nov 01, 2010 at 11:48:23AM +0100, Dragos Tatulea wrote:
> > 1. add a secondary mac (or third, etc) address to the guest virtio-net
> > interface.
> Maybe I misunderstood this. Is it just setting another mac on the
> guest virtio-net interface?

Well, yes, that's also not possible at the moment.  Or e.g. set more
than one mac per virtio-net device using macvlan.

> >
> > 4. the above stuff must be controllable by host admin
> >  - Well, for this there are a few options:
> >    > admin switch that allows the guest user to add macs
> >    > preconfig allowed MAC's in mactap (or qemu config) for the guest user
> >    > allow/disallow command for user in qemu (although this doesn't
> > seem to be supported)
> >
> Well, on a second thought, qemu capabilities should be just fine, right?
> 
> -- Dragos

At some level, although I think we also want a way to disable
access that qemu can't override unless it has net admin capability.

-- 
MST