On Mon, May 16, 2016 at 1:11 AM, Chandran, Sugesh <sugesh.chand...@intel.com> wrote: > > > Regards > _Sugesh > > From: SANKET RAUT [mailto:ssr8...@g.rit.edu] > Sent: Sunday, May 15, 2016 2:50 AM > To: Chandran, Sugesh <sugesh.chand...@intel.com> > Cc: b...@openvswitch.org > Subject: Re: [ovs-discuss] GRE ipsec tunnels over open vswitch > > Hello, > > I tried to implment ipsec+GRE using open vswitch on ubuntu vm inside vmware > workstation. > > I'm facing problem : > > Once the ipsec+gre tunnel is up all my vm goes into freeze state, and my > laptop and all other applications turns into freeze state.
Are you saying that your hypervisor (i.e. laptop) freezes when you are trying to use IPsec with GRE? If so, then sounds like a kernel issue (possible, but unlikely). However, if you still have access to the console then can you copy paste output of "ip xfrm policy" and "ip xfrm state" commands? Also, show us what racoon version you have by running "dpkg -l | grep racoon". > > [Sugesh] I haven’t seen this issue in my setup. Are you seeing this when the > traffic is start flowing?? Since you are trying out in the VM, just to be > sure, > VM has enough processor and memory resource allocated because Ipsec is very > CPU intensive task. > Are you getting any error while configuring the ports/starting the OVS? > > > I have to restart all vm to resolve this issue. > [Sugesh] I assume when you restart the VM, the ipsec starts working without > any issue. Can you please check the CPU and memory usage at that time.. > > So, could you please help me with the same. > > Thanks, > Sanket > > > On Tue, Apr 26, 2016 at 3:53 AM, Chandran, Sugesh <sugesh.chand...@intel.com> > wrote: > > > Regards > _Sugesh > > From: SANKET RAUT [mailto:ssr8...@g.rit.edu] > Sent: Monday, April 25, 2016 2:50 PM > To: Chandran, Sugesh <sugesh.chand...@intel.com> > Cc: b...@openvswitch.org > Subject: Re: [ovs-discuss] GRE ipsec tunnels over open vswitch > > Hello, > Thanks for your reply. > > Could you please tell me that open vswitch package name, so I can download > and test Ipsec tunnel between two vm. > [Sugesh] You need to install openvswitch-ipsec debian package. OVS-IPSEC > works only on debian machines. > Refer debian/ovs-monitor-ipsec file to know more about how OVS interact with > ipsec-tools and how SA, SP configurations are made in the kernel. > > Thanks, > -Sanket > > On Mon, Apr 25, 2016 at 4:24 AM, Chandran, Sugesh <sugesh.chand...@intel.com> > wrote: > > > Regards > _Sugesh > > From: discuss [mailto:discuss-boun...@openvswitch.org] On Behalf Of SANKET > RAUT > Sent: Thursday, April 21, 2016 7:37 PM > To: b...@openvswitch.org > Subject: [ovs-discuss] GRE ipsec tunnels over open vswitch > > Hello, > > I would like to know more about How I can setup GRE ipsec tunnel between vm > using open vswitch. > [Sugesh] The ipsec tunnel setup is similar to normal tunnel setup except that > you need to install all the necessary kernel ipsec + openvswitch-ipsec > packages. An eg; for creating an ipsec-tunnel port is given below. > sudo ovs-vsctl --timeout 10 add-port br0 gre1 -- \ > set interface gre1 type=ipsec_gre \ > options:remote_ip=100.0.0.2 options:psk=test > The port creation will be successful if all the prerequisites met. > > Thanks, > -sanket > > > _______________________________________________ > discuss mailing list > discuss@openvswitch.org > http://openvswitch.org/mailman/listinfo/discuss _______________________________________________ discuss mailing list discuss@openvswitch.org http://openvswitch.org/mailman/listinfo/discuss
