Layer-2 filtering in NPF

Hi tech-net,

Layer 2 filtering in NPF has been merged. man updated.

Follows a simple 

group name direction interface layer-2 {
	pass_or_block ether direction interface from src_MAC to dst_MAC type Ex(4 hex for ether_type) 
}

groups without layer-2 labels have the layer 3 bit set in the attribues automatically (so it doesn’t break existing configurations)
so no need to set layer-3 label. layer 2 default group isn’t mandatory until you include a layer 2 group. so your existing configs are safe.

reviewing policy based routing(force a packet to a particular interface) next.

anyone in desperate need of any feature, let me know. i can do my best to finish it quickly. 


Emmanuel