Data Sheet

System Manageability—Ethernet Controller I210
641
• IP Unicast filtering — requires filtering for Link Local address and a Global address. Filtering setup
might depend on whether or not the MAC address is shared with the Host or dedicated to
manageability:
— Dedicated MAC address (for example, dynamic address allocation with DHCP does not support
multiple IP addresses for one MAC address). In this case, filtering can be done at L2 using two
dedicated unicast MAC filters.
— Shared MAC address (for example, static address allocation sharing addresses with Host). In
this case, filtering needs to be done at L3, requiring two IPv6 address filters, one per address.
• A neighbor Discovery filter — The I210 supports IPv6 neighbor Discovery protocol. Since the
protocol relies on multicast packets, the I210 supports filtering of these packets. IPv6 multicast
addresses are translated into corresponding Ethernet multicast addresses in the form of 33-33-xx-
xx-xx-xx, where the last 32 bits of address are taken from the last 32 bits of the IPv6 multicast
address. As a result, two direct MAC filters can be used to filter IPv6 solicited-node multicast
packets as well as IPv6 all node multicast packets.
10.3.5.5 Receive Filtering with Shared IP
When using the SMBus interface, it is possible to share the Host MAC and IP address with the MC. This
functionality is also available when using NC-SI using Intel OEM commands.
When the MC shares the MAC and IP address with the Host, receive filtering is based on identifying
specific flows through port allocation. The following setting might be used:
• Select one of the eight rules for Dedicated MAC filtering.
• Load Host MAC address to one of the management MAC address filters and set the appropriate bit
in field 3:0 of the MDEF register to enforce MAC address filtering using the MAC address.
• If VLAN is used for management, load one or more management VLAN filters and set the
appropriate bits in field 12:5 of the MDEF register to qualify the relevant manageability VLANs.
• ARP filter/Neighbor Discovery filter is enabled when the MC is responsible for handling the ARP
protocol. Set bit 27 or bit 28 in the MDEF register for this functionality.
• Set other bits to qualify which packets are allowed to pass through. For example:
— Set any L3/L4 bits (bits 31:27 in the MDEF register and bits 23:16 in the MDEF_EXT register) to
filter using the appropriate L3/L4 filters.
10.3.6 Determining Manageability MAC Address
If the MC wishes to use a dedicated MAC address or configure the automatic ARP response mechanism
(only available in SMBus mode), it may be beneficial for the MC to be able to determine the MAC
address used by the Host.
Both the NC-SI and SMBus interfaces provide an Intel OEM command to read the System MAC address.
A possible use for this is that the MAC address programmed at manufacturing time does not increment
by one each time, but rather by two. In this way, the MC can read the System MAC address and add
one to it and be guaranteed of a unique MAC address.
Determining the IP address being used by the Host is beyond the scope of this document.
10.3.7 Filtering Programming Interfaces
The I210 provides multiple options to program the forwarding filters, depending on the interface used
and the level of flexibility needed. The following table describes the different options and points to the
description of the relevant commands.