I have a ubuntu VM running in an ESXi5.5 host. I attached two SR-IOV NICs to the VM, and inside VM I create a bond with the two NICs. The issue is that mac address of packets will be the same no matter which slave they are transmitting. However, when a packets is transmitting through the slave with different mac, it is considered as spoofing packets.
On the host I can see the following messages in vmkernel.log. I guess it is because the bonding changes the MAC of a packet, and the anti-spoofing on the host physical NIC does not allow it.
2016-02-16T19:46:37.162Z cpu4:33541)<4>ixgbe 0000:02:00.1: vmnic1: 1 Spoofed packets detected
2016-02-16T19:46:39.348Z cpu22:33551)<4>ixgbe 0000:02:00.1: vmnic1: 2 Spoofed packets detected
In linux, we can do following, but how to do it in ESXi? Does setting the corrsponding portgroup security policy to promiscuous mode do the trick?
ip link set eth2 vf 1 spoofchk on
Thanks,
Toby