Regards _Sugesh
From: SANKET RAUT [mailto:ssr8...@g.rit.edu] Sent: Sunday, May 15, 2016 2:50 AM To: Chandran, Sugesh <sugesh.chand...@intel.com> Cc: b...@openvswitch.org Subject: Re: [ovs-discuss] GRE ipsec tunnels over open vswitch Hello, I tried to implment ipsec+GRE using open vswitch on ubuntu vm inside vmware workstation. I'm facing problem : Once the ipsec+gre tunnel is up all my vm goes into freeze state, and my laptop and all other applications turns into freeze state. [Sugesh] I haven’t seen this issue in my setup. Are you seeing this when the traffic is start flowing?? Since you are trying out in the VM, just to be sure, VM has enough processor and memory resource allocated because Ipsec is very CPU intensive task. Are you getting any error while configuring the ports/starting the OVS? I have to restart all vm to resolve this issue. [Sugesh] I assume when you restart the VM, the ipsec starts working without any issue. Can you please check the CPU and memory usage at that time.. So, could you please help me with the same. Thanks, Sanket On Tue, Apr 26, 2016 at 3:53 AM, Chandran, Sugesh <sugesh.chand...@intel.com> wrote: Regards _Sugesh From: SANKET RAUT [mailto:ssr8...@g.rit.edu] Sent: Monday, April 25, 2016 2:50 PM To: Chandran, Sugesh <sugesh.chand...@intel.com> Cc: b...@openvswitch.org Subject: Re: [ovs-discuss] GRE ipsec tunnels over open vswitch Hello, Thanks for your reply. Could you please tell me that open vswitch package name, so I can download and test Ipsec tunnel between two vm. [Sugesh] You need to install openvswitch-ipsec debian package. OVS-IPSEC works only on debian machines. Refer debian/ovs-monitor-ipsec file to know more about how OVS interact with ipsec-tools and how SA, SP configurations are made in the kernel. Thanks, -Sanket On Mon, Apr 25, 2016 at 4:24 AM, Chandran, Sugesh <sugesh.chand...@intel.com> wrote: Regards _Sugesh From: discuss [mailto:discuss-boun...@openvswitch.org] On Behalf Of SANKET RAUT Sent: Thursday, April 21, 2016 7:37 PM To: b...@openvswitch.org Subject: [ovs-discuss] GRE ipsec tunnels over open vswitch Hello, I would like to know more about How I can setup GRE ipsec tunnel between vm using open vswitch. [Sugesh] The ipsec tunnel setup is similar to normal tunnel setup except that you need to install all the necessary kernel ipsec + openvswitch-ipsec packages. An eg; for creating an ipsec-tunnel port is given below. sudo ovs-vsctl --timeout 10 add-port br0 gre1 -- \ set interface gre1 type=ipsec_gre \ options:remote_ip=100.0.0.2 options:psk=test The port creation will be successful if all the prerequisites met. Thanks, -sanket _______________________________________________ discuss mailing list discuss@openvswitch.org http://openvswitch.org/mailman/listinfo/discuss
