set failstate

  • 1 Replies
  • 1256 Views
*

Lexo

  • Newbie
  • *
  • 9
    • View Profile
set failstate
« on: March 02, 2016, 09:01:08 AM »
Hi There

I am trying to setup a network tap and have what i think is a working configuration.

Port 1 <--> host 1
Port 2 <--> Internet
Port 3 -> wireshare monitor
Port 4 <-> POX Controller


The flows are added as expected and displayed (but register no hits) however the switch seems to be acting like a conventional switch/hub and ports 1,2 and 3 can all communicate with or without the controller attached. I have tried setting them up on different vlans but this has not made a difference. The only command which seems to affect this behaviour is the set failstate command which block all traffic. Could you please clarify the purpose of this command?

Many thanks

*

Paul Zanna

  • Moderator
  • Sr. Member
  • *****
  • 370
    • View Profile
    • Northbound Networks
Re: set failstate
« Reply #1 on: March 03, 2016, 01:38:42 AM »
Ports 1,2,3 all need to be part of the OpenFlow VLAN, best thing to do is run the "factory reset" command to restore the default settings which should work fine for what you want to do (change the IP addresses if required).

You should only need 2 flows which it looks like you already have:
In Port  1, out Port 2 & 3
In Port 2, out Port 1 & 3

If the failstate is set to "secure" then all traffic is blocked when there is no contact with the controller, if it is set to "safe" then it will continue to process existing flows until they timeout.

Regards,
Paul
« Last Edit: March 03, 2016, 01:43:29 AM by Paul Zanna »