<div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">Louis,<br><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">   Typical L2 IDS devices mostly work in transparent/TAP mode which means traffic is diverted to these devices without manipulating any packet header. Interfaces/Ports of these devices are in promiscuous mode. Based on the filtering rules , these devices take action on packets, most commonly drop if found malicious otherwise sent out through outgoing interface.<br><br><br><br><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sat, Jan 21, 2017 at 12:04 AM, Henry Fourie <span dir="ltr"><<a href="mailto:louis.fourie@huawei.com" target="_blank">louis.fourie@huawei.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">





<div link="blue" vlink="purple" lang="EN-US">
<div class="m_-3737909435680247501WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Vikash,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">   Unclear what you mean by SFC spinning an L2 IDS?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">What is the behavior of L2 IDS devices?<u></u><u></u></span></p>
<p class="m_-3737909435680247501MsoListParagraph" style="margin-left:20.4pt">
<u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><span>-<span style="font:7.0pt "Times New Roman"">       
</span></span></span><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Louis<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Vikash Kumar [mailto:<a href="mailto:vikash.kumar@oneconvergence.com" target="_blank">vikash.kumar@<wbr>oneconvergence.com</a>]
<br>
<b>Sent:</b> Wednesday, January 18, 2017 10:49 PM<br>
<b>To:</b> openstack-dev<br>
<b>Subject:</b> [openstack-dev] [networking-sfc] Does SFC support chaining of Layer 2 devices?<u></u><u></u></span></p>
</div><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:"Verdana","sans-serif"">All,<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Verdana","sans-serif"">   I am exploring SFC for chaining an IDS device (strictly in L2 mode). As of now, it looks SFC default supports only L3 devices. SFC APIs doesn't have any way to specify the nature of device
 and without that, it seems there is no way an operator can spin any device/VNF except L3 mode VNFs. Is anything I am missing here ? Can one still spin a L2 IDS with SFC ?<br>
<br>
   <u></u><u></u></span></p>
</div>
<p class="MsoNormal">-- <u></u><u></u></p>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-family:"Trebuchet MS","sans-serif"">Regards,</span><u></u><u></u></p>
</div>
<p class="MsoNormal"><span style="font-family:"Trebuchet MS","sans-serif"">Vikash</span><u></u><u></u></p>
</div>
</div>
</div>
</div></div></div>
</div>

<br>______________________________<wbr>______________________________<wbr>______________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.<wbr>openstack.org?subject:<wbr>unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack-dev</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><span style="font-family:trebuchet ms,sans-serif">Regards,<br></span></div><span style="font-family:trebuchet ms,sans-serif">Vikash</span><br></div></div>
</div>