I am using Cumulus Linux 2.5.7.
I need to be able to specify ebtable drop rules on "all MAC address not equal to AA:AA:AA:AA:AA:AA". I see that the inverse flag to ebtables is not supported in the 2.5.7. When attempting to apply the following rule:
-A FORWARD -o swp3 -d ! AA:AA:AA:AA:AA:AA -j DROP
I receive the following error:
Installing acl policy
error: hw sync failed (Cannot process ebtables,FORWARD,21, Inverse flags for SRC/DST MAC, IN/OUT/logical interface, Protocol not supported)
I am hoping to find out if there is a version of Cumulus Linux that supports the inverse flag or if there is a recommended way to accomplish the same thing.