Received: by 2002:a05:6a10:9848:0:0:0:0 with SMTP id x8csp2019239pxf; Sat, 3 Apr 2021 08:10:05 -0700 (PDT) X-Google-Smtp-Source: ABdhPJzjasiRN5mvdSsOh8P4sqKtSW3+EujpjIuSqhaMU2f4uIryuVZE5ADFdCYtopgnYZ+2jjPT X-Received: by 2002:a02:a889:: with SMTP id l9mr16921805jam.1.1617462605500; Sat, 03 Apr 2021 08:10:05 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1617462605; cv=none; d=google.com; s=arc-20160816; b=wN8CqKTJKsexVWll/8pugTH0hFkGVCq+RAEEt+T9ug5uPCMZftlfhb8uy8oG3i4MMd F+Lu/mb+fqh6EzzdJTjMABkWP5C7SbUU1Kz/v3+d0+wRCW9L+69balIImGq1FDg8zM/p 085/jJbhjh/Cqq4BdoGnQfXAMQU9TZURy1gdCaCxmg7r9zndkKN58F/fCs1kUiLI7FH0 tx2hDnSsRx/GfpaQQM7eqYae2Z/BlHv07PR/leZLB3TiGu+fC7ukmbCj+AC411KjubXy jLNx6NTNRc/fxwkjG5uOdPraMkxF1jQxbOTQLnUy9VbcV+Wf5xA9iFsRfvRh9H+8sT5h ofvA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date; bh=1okgY1eg6drJdmWjDLph85Klit12XVNSGvfqI1BBzzU=; b=wGndi+r4/DgJwaqNbA0n3tzKGx4tatdUdXqtGYX+g3p41qIAKwlj0Mrvg+nTsv+xvG idpkV2Es5CohE0yv+GCCKZVfw2fjz70bjU9Aq6+0j2OBN260OgiM42vrMLNiGxFPKGwN 7fgl6fQPIljQ8ItmOf2F2jYKvAz4Ogm+1zUOE3B/VqF2e9NGzvxSnc8jeNSJX+ffLFQq wyhDwHdvgc6xlozS8DG3e+rQ4mezHknUeL3s9AwCQGB/8nRYkBbZrlyx6HZes9F3SxyZ 7nHC8oAQKlbCv94iTHIp/12l7L7BxshGCtdkw7b+i+7LLqAXivKUVsoKxBKUaLdrlMaw 4APw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id s190si10719068ios.22.2021.04.03.08.09.51; Sat, 03 Apr 2021 08:10:05 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S236694AbhDCPIQ (ORCPT + 99 others); Sat, 3 Apr 2021 11:08:16 -0400 Received: from vps0.lunn.ch ([185.16.172.187]:32832 "EHLO vps0.lunn.ch" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231821AbhDCPIP (ORCPT ); Sat, 3 Apr 2021 11:08:15 -0400 Received: from andrew by vps0.lunn.ch with local (Exim 4.94) (envelope-from ) id 1lShsd-00Ee7e-Vu; Sat, 03 Apr 2021 17:08:07 +0200 Date: Sat, 3 Apr 2021 17:08:07 +0200 From: Andrew Lunn To: Oleksij Rempel Cc: Vivien Didelot , Florian Fainelli , Vladimir Oltean , "David S. Miller" , Jakub Kicinski , Russell King , Pengutronix Kernel Team , netdev@vger.kernel.org, linux-kernel@vger.kernel.org, linux-mips@vger.kernel.org Subject: Re: [PATCH net-next v1 4/9] net: dsa: qca: ar9331: make proper initial port defaults Message-ID: References: <20210403114848.30528-1-o.rempel@pengutronix.de> <20210403114848.30528-5-o.rempel@pengutronix.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20210403114848.30528-5-o.rempel@pengutronix.de> Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sat, Apr 03, 2021 at 01:48:43PM +0200, Oleksij Rempel wrote: > Make sure that all external port are actually isolated from each other, > so no packets are leaked. > > Signed-off-by: Oleksij Rempel > --- > drivers/net/dsa/qca/ar9331.c | 145 ++++++++++++++++++++++++++++++++++- > 1 file changed, 143 insertions(+), 2 deletions(-) > > diff --git a/drivers/net/dsa/qca/ar9331.c b/drivers/net/dsa/qca/ar9331.c > index 9a5035b2f0ff..a3de3598fbf5 100644 > --- a/drivers/net/dsa/qca/ar9331.c > +++ b/drivers/net/dsa/qca/ar9331.c > @@ -60,10 +60,19 @@ > > #define AR9331_SW_REG_FLOOD_MASK 0x2c > #define AR9331_SW_FLOOD_MASK_BROAD_TO_CPU BIT(26) > +#define AR9331_SW_FLOOD_MASK_MULTI_FLOOD_DP GENMASK(20, 16) > +#define AR9331_SW_FLOOD_MASK_UNI_FLOOD_DP GENMASK(4, 0) > > #define AR9331_SW_REG_GLOBAL_CTRL 0x30 > #define AR9331_SW_GLOBAL_CTRL_MFS_M GENMASK(13, 0) > > +#define AR9331_SW_REG_ADDR_TABLE_CTRL 0x5c > +#define AR9331_SW_AT_ARP_EN BIT(20) > +#define AR9331_SW_AT_LEARN_CHANGE_EN BIT(18) > +#define AR9331_SW_AT_AGE_EN BIT(17) > +#define AR9331_SW_AT_AGE_TIME GENMASK(15, 0) > +#define AR9331_SW_AT_AGE_TIME_COEF 6900 /* Not documented */ > + > #define AR9331_SW_REG_MDIO_CTRL 0x98 > #define AR9331_SW_MDIO_CTRL_BUSY BIT(31) > #define AR9331_SW_MDIO_CTRL_MASTER_EN BIT(30) > @@ -101,6 +110,46 @@ > AR9331_SW_PORT_STATUS_RX_FLOW_EN | AR9331_SW_PORT_STATUS_TX_FLOW_EN | \ > AR9331_SW_PORT_STATUS_SPEED_M) > > +#define AR9331_SW_REG_PORT_CTRL(_port) (0x104 + (_port) * 0x100) > +#define AR9331_SW_PORT_CTRL_ING_MIRROR_EN BIT(17) > +#define AR9331_SW_PORT_CTRL_EG_MIRROR_EN BIT(16) > +#define AR9331_SW_PORT_CTRL_DOUBLE_TAG_VLAN BIT(15) > +#define AR9331_SW_PORT_CTRL_LEARN_EN BIT(14) > +#define AR9331_SW_PORT_CTRL_SINGLE_VLAN_EN BIT(13) > +#define AR9331_SW_PORT_CTRL_MAC_LOOP_BACK BIT(12) > +#define AR9331_SW_PORT_CTRL_HEAD_EN BIT(11) > +#define AR9331_SW_PORT_CTRL_IGMP_MLD_EN BIT(10) > +#define AR9331_SW_PORT_CTRL_EG_VLAN_MODE GENMASK(9, 8) > +#define AR9331_SW_PORT_CTRL_EG_VLAN_MODE_KEEP 0 > +#define AR9331_SW_PORT_CTRL_EG_VLAN_MODE_STRIP 1 > +#define AR9331_SW_PORT_CTRL_EG_VLAN_MODE_ADD 2 > +#define AR9331_SW_PORT_CTRL_EG_VLAN_MODE_DOUBLE 3 > +#define AR9331_SW_PORT_CTRL_LEARN_ONE_LOCK BIT(7) > +#define AR9331_SW_PORT_CTRL_PORT_LOCK_EN BIT(6) > +#define AR9331_SW_PORT_CTRL_LOCK_DROP_EN BIT(5) > +#define AR9331_SW_PORT_CTRL_PORT_STATE GENMASK(2, 0) > +#define AR9331_SW_PORT_CTRL_PORT_STATE_DISABLED 0 > +#define AR9331_SW_PORT_CTRL_PORT_STATE_BLOCKING 1 > +#define AR9331_SW_PORT_CTRL_PORT_STATE_LISTENING 2 > +#define AR9331_SW_PORT_CTRL_PORT_STATE_LEARNING 3 > +#define AR9331_SW_PORT_CTRL_PORT_STATE_FORWARD 4 > + > +#define AR9331_SW_REG_PORT_VLAN(_port) (0x108 + (_port) * 0x100) > +#define AR9331_SW_PORT_VLAN_8021Q_MODE GENMASK(31, 30) > +#define AR9331_SW_8021Q_MODE_SECURE 3 > +#define AR9331_SW_8021Q_MODE_CHECK 2 > +#define AR9331_SW_8021Q_MODE_FALLBACK 1 > +#define AR9331_SW_8021Q_MODE_NONE 0 > +#define AR9331_SW_PORT_VLAN_ING_PORT_PRI GENMASK(29, 27) > +#define AR9331_SW_PORT_VLAN_FORCE_PORT_VLAN_EN BIT(26) > +#define AR9331_SW_PORT_VLAN_PORT_VID_MEMBER GENMASK(25, 16) > +#define AR9331_SW_PORT_VLAN_ARP_LEAKY_EN BIT(15) > +#define AR9331_SW_PORT_VLAN_UNI_LEAKY_EN BIT(14) > +#define AR9331_SW_PORT_VLAN_MULTI_LEAKY_EN BIT(13) > +#define AR9331_SW_PORT_VLAN_FORCE_DEFALUT_VID_EN BIT(12) > +#define AR9331_SW_PORT_VLAN_PORT_VID GENMASK(11, 0) > +#define AR9331_SW_PORT_VLAN_PORT_VID_DEF 1 > + > /* MIB registers */ > #define AR9331_MIB_COUNTER(x) (0x20000 + ((x) * 0x100)) > > @@ -229,6 +278,7 @@ struct ar9331_sw_priv { > struct regmap *regmap; > struct reset_control *sw_reset; > struct ar9331_sw_port port[AR9331_SW_PORTS]; > + int cpu_port; > }; > > static struct ar9331_sw_priv *ar9331_sw_port_to_priv(struct ar9331_sw_port *port) > @@ -371,12 +421,72 @@ static int ar9331_sw_mbus_init(struct ar9331_sw_priv *priv) > return 0; > } > > -static int ar9331_sw_setup(struct dsa_switch *ds) > +static int ar9331_sw_setup_port(struct dsa_switch *ds, int port) > { > struct ar9331_sw_priv *priv = (struct ar9331_sw_priv *)ds->priv; > struct regmap *regmap = priv->regmap; > + u32 port_mask, port_ctrl, val; > int ret; > > + /* Generate default port settings */ > + port_ctrl = FIELD_PREP(AR9331_SW_PORT_CTRL_PORT_STATE, > + AR9331_SW_PORT_CTRL_PORT_STATE_DISABLED); > + > + if (dsa_is_cpu_port(ds, port)) { > + /* > + * CPU port should be allowed to communicate with all user > + * ports. > + */ > + //port_mask = dsa_user_ports(ds); Please cleanup dead code. > + port_mask = 0; Is 0 the correct value here? It is the same as default, i.e. unused ports? > + /* > + * Enable atheros header on CPU port. This will allow us > + * communicate with each port separately > + */ > + port_ctrl |= AR9331_SW_PORT_CTRL_HEAD_EN; > + port_ctrl |= AR9331_SW_PORT_CTRL_LEARN_EN; > + } else if (dsa_is_user_port(ds, port)) { > + /* > + * User ports should communicate only with the CPU port. > + */ > + port_mask = BIT(priv->cpu_port); > + /* Enable unicast address learning by default */ > + port_ctrl |= AR9331_SW_PORT_CTRL_LEARN_EN > + /* IGMP snooping seems to work correctly, let's use it */ > + | AR9331_SW_PORT_CTRL_IGMP_MLD_EN > + | AR9331_SW_PORT_CTRL_SINGLE_VLAN_EN; There was a discussion a couple of months ago about if there should be address learning on the CPU port. Having it enabled allows for devices which move from behind the CPU onto the switched network. There is a software workaround in place now, so it might not be needed. > + } else { > + /* Other ports do not need to communicate at all */ > + port_mask = 0; > + } > + > + val = FIELD_PREP(AR9331_SW_PORT_VLAN_8021Q_MODE, > + AR9331_SW_8021Q_MODE_NONE) | > + FIELD_PREP(AR9331_SW_PORT_VLAN_PORT_VID_MEMBER, port_mask) | > + FIELD_PREP(AR9331_SW_PORT_VLAN_PORT_VID, > + AR9331_SW_PORT_VLAN_PORT_VID_DEF); > + > + ret = regmap_write(regmap, AR9331_SW_REG_PORT_VLAN(port), val); > + if (ret) > + goto error; > + > + ret = regmap_write(regmap, AR9331_SW_REG_PORT_CTRL(port), port_ctrl); > + if (ret) > + goto error; > + > + return 0; > +error: > + dev_err_ratelimited(priv->dev, "%s: error: %i\n", __func__, ret); Typically this function is only called during probe. Do i don't think it needs rate limiting. > + > + return ret; > +} > + > +static int ar9331_sw_setup(struct dsa_switch *ds) > +{ > + struct ar9331_sw_priv *priv = (struct ar9331_sw_priv *)ds->priv; > + struct regmap *regmap = priv->regmap; > + int ret, i; > + > ret = ar9331_sw_reset(priv); > if (ret) > return ret; > @@ -390,7 +500,8 @@ static int ar9331_sw_setup(struct dsa_switch *ds) > > /* Do not drop broadcast frames */ > ret = regmap_write_bits(regmap, AR9331_SW_REG_FLOOD_MASK, > - AR9331_SW_FLOOD_MASK_BROAD_TO_CPU, > + AR9331_SW_FLOOD_MASK_BROAD_TO_CPU > + | AR9331_SW_FLOOD_MASK_MULTI_FLOOD_DP, > AR9331_SW_FLOOD_MASK_BROAD_TO_CPU); > if (ret) > goto error; > @@ -402,6 +513,36 @@ static int ar9331_sw_setup(struct dsa_switch *ds) > if (ret) > goto error; > > + /* > + * Configure the ARL: > + * AR9331_SW_AT_ARP_EN - why? > + * AR9331_SW_AT_LEARN_CHANGE_EN - why? > + */ > + ret = regmap_set_bits(regmap, AR9331_SW_REG_ADDR_TABLE_CTRL, > + AR9331_SW_AT_ARP_EN | > + AR9331_SW_AT_LEARN_CHANGE_EN); > + if (ret) > + goto error; > + > + /* find the CPU port */ > + priv->cpu_port = -1; > + for (i = 0; i < ds->num_ports; i++) { > + if (!dsa_is_cpu_port(ds, i)) > + continue; > + > + if (priv->cpu_port != -1) > + dev_err_ratelimited(priv->dev, "%s: more then one CPU port. Already set: %i, trying to add: %i\n", > + __func__, priv->cpu_port, i); Another rate limiting i would not do. > + else > + priv->cpu_port = i; > + } Andrew