Re: [vpp-dev] multi-queue tap interface #vpp
Can send me one example how map una interface to vpp, and this interface to one lisp vni different to 0 El 28 de enero de 2019 7:57:10 PM GMT-05:00, Ranadip Das escribió: >Does vpp support multi-queue tap interface? If yes, how do I create a >tap interface with multi-queue support? -- Enviado desde mi dispositivo Android con K-9 Mail. Por favor, disculpa mi brevedad. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12031): https://lists.fd.io/g/vpp-dev/message/12031 Mute This Topic: https://lists.fd.io/mt/29577498/21656 Mute #vpp: https://lists.fd.io/mk?hashtag=vpp&subid=1480452 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] Dual stack con VPP and VRF
Can someone show me one example, how can use dual stack in one interface and vrf.?? -- Enviado desde mi dispositivo Android con K-9 Mail. Por favor, disculpa mi brevedad. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12032): https://lists.fd.io/g/vpp-dev/message/12032 Mute This Topic: https://lists.fd.io/mt/29577845/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] Dual stack con VPP and VRF
And then what is the differents between this comand: Ip table X and ip6 table X ??? Great job is VPP. El 29 de enero de 2019 3:54:07 AM GMT-05:00, "Neale Ranns via Lists.Fd.Io" escribió: >Hi, > >You just need to give the interface an IPv4 and IPv6 address. > >DBGvpp# loop cre >DBGvpp# ip table 1 >DBGvpp# set int ip table loop0 1 >DBGvpp# set int state loop0 up >DBGvpp# set int ip address loop0 10.10.10.10/24 >DBGvpp# set int ip address loop0 2001::10/64 > >The creation of the IP table 1 is optional, it would work in the >‘default’ table too. > >/neale > >De : au nom de Yosvany >Date : mardi 29 janvier 2019 à 02:34 >À : "dmar...@me.com" , "Damjan Marion via Lists.Fd.Io" >, Marco Varlese >Cc : "vpp-dev@lists.fd.io" >Objet : [vpp-dev] Dual stack con VPP and VRF > >Can someone show me one example, how can use dual stack in one >interface and vrf.?? >-- >Enviado desde mi dispositivo Android con K-9 Mail. Por favor, disculpa >mi brevedad. -- Enviado desde mi dispositivo Android con K-9 Mail. Por favor, disculpa mi brevedad. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12053): https://lists.fd.io/g/vpp-dev/message/12053 Mute This Topic: https://lists.fd.io/mt/29577845/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] VPP send map-register with R=0 on LISP
VPP with LISP send the reachable bit to 0. When use one iid to vni different that 0. How can change the reachable bit to 1 on map-register. I am testing with cisco router as MS/MR. -- Enviado desde mi dispositivo Android con K-9 Mail. Por favor, disculpa mi brevedad. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12052): https://lists.fd.io/g/vpp-dev/message/12052 Mute This Topic: https://lists.fd.io/mt/29589087/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] VPP delete map-reply from cisco router
VPP are delete LISP map reply from cisco router as LISP MR/MS when VPP are making Map-Request to good EID. The problem is when vni map to iid is differents that 0. When response map-reply is native forward, VPP work fine. When response is good VPP dont show the result on one eid-table remote. Look show trace in txt file as lip-cp delete udp packet. Best Regard. -- Enviado desde mi dispositivo Android con K-9 Mail. Por favor, disculpa mi brevedad. Packet 4 192.168.74.60 cisco ms/mr 192.168.74.58 VPP as XTR VNI 10 map to IID 10 //ERROR DROP PACKET TO lisp-cp-input: drop 00:24:25:107634: dpdk-input GigabitEthernet0/13/0 rx queue 0 buffer 0x2cf4: current data 0, length 210, buffer-pool 0, clone-count 0, totlen-nifb 0, trace 0x3 ext-hdr-valid l4-cksum-computed l4-cksum-correct PKT MBUF: port 0, nb_segs 1, pkt_len 210 buf_len 2176, data_len 210, ol_flags 0x0, data_off 128, phys_addr 0x3e8b3d80 packet_type 0x0 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0 rss 0x0 fdir.hi 0x0 fdir.lo 0x0 IP4: 1a:c6:2b:f0:9f:66 -> b6:c0:d9:18:d5:fa UDP: 192.168.74.60 -> 192.168.74.58 tos 0xc0, ttl 255, length 196, checksum 0xa28f fragment id 0x0212 UDP: 4342 -> 4342 length 176, checksum 0x21d1 00:24:25:107643: ethernet-input frame: flags 0x1, hw-if-index 1, sw-if-index 1 IP4: 1a:c6:2b:f0:9f:66 -> b6:c0:d9:18:d5:fa 00:24:25:107648: ip4-input UDP: 192.168.74.60 -> 192.168.74.58 tos 0xc0, ttl 255, length 196, checksum 0xa28f fragment id 0x0212 UDP: 4342 -> 4342 length 176, checksum 0x21d1 00:24:25:107652: ip4-lookup fib 0 dpo-idx 9 flow hash: 0x UDP: 192.168.74.60 -> 192.168.74.58 tos 0xc0, ttl 255, length 196, checksum 0xa28f fragment id 0x0212 UDP: 4342 -> 4342 length 176, checksum 0x21d1 00:24:25:107653: ip4-local UDP: 192.168.74.60 -> 192.168.74.58 tos 0xc0, ttl 255, length 196, checksum 0xa28f fragment id 0x0212 UDP: 4342 -> 4342 length 176, checksum 0x21d1 00:24:25:107656: ip4-udp-lookup UDP: src-port 4342 dst-port 4342 00:24:25:107680: error-drop lisp-cp-input: drop -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12070): https://lists.fd.io/g/vpp-dev/message/12070 Mute This Topic: https://lists.fd.io/mt/29596854/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] VPP send map-register with R=0 on LISP
Yes was solved, but we have map-reply problem, it is drop by lisp-cp when vni is differents that 0. El 29 de enero de 2019 8:37:45 PM GMT-05:00, Florin Coras escribió: >Does this [1] solve the issue? > >Florin > >[1] https://gerrit.fd.io/r/#/c/17151/ > >> On Jan 29, 2019, at 4:34 PM, Yosvany wrote: >> >> VPP with LISP send the reachable bit to 0. When use one iid to vni >different that 0. >> >> How can change the reachable bit to 1 on map-register. >> >> I am testing with cisco router as MS/MR. >> -- >> Enviado desde mi dispositivo Android con K-9 Mail. Por favor, >disculpa mi brevedad. -=-=-=-=-=-=-=-=-=-=-=- >> Links: You receive all messages sent to this group. >> >> View/Reply Online (#12052): >https://lists.fd.io/g/vpp-dev/message/12052 >> Mute This Topic: https://lists.fd.io/mt/29589087/675152 >> Group Owner: vpp-dev+ow...@lists.fd.io >> Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub >[fcoras.li...@gmail.com] >> -=-=-=-=-=-=-=-=-=-=-=- -- Enviado desde mi dispositivo Android con K-9 Mail. Por favor, disculpa mi brevedad. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12080): https://lists.fd.io/g/vpp-dev/message/12080 Mute This Topic: https://lists.fd.io/mt/29589087/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] VPP send map-register with R=0 on LISP
I am testing shared mode, is make by: - 1Map server with 2 instance iid(20 ipv6 and 30 ipv4), same key . Cisco router. -3 VPP on ubuntu. Each VPP has 2 table-id(20and30) linked to differents interfaces and of course map (vni to iid). The RLOC is located on table-id 0. On Cisco router whith show lisp site, show only status "yes" on rloc,(when etr make full registration cisco router show "yes#" with the same comand) Best regards. El 30 de enero de 2019 7:17:07 PM GMT-05:00, Paul Vinciguerra escribió: >Are you testing a shared-mode or parallel-mode topology? > >On Wed, Jan 30, 2019 at 7:11 PM Florin Coras >wrote: > >> As per previous email, please check for any errors reported by >lisp-cp in >> cli and syslog. >> >> Florin >> >> On Jan 30, 2019, at 9:50 AM, Yosvany wrote: >> >> Yes was solved, but we have map-reply problem, it is drop by lisp-cp >when >> vni is differents that 0. >> >> >> >> El 29 de enero de 2019 8:37:45 PM GMT-05:00, Florin Coras < >> fcoras.li...@gmail.com> escribió: >>> >>> Does this [1] solve the issue? >>> >>> Florin >>> >>> [1] https://gerrit.fd.io/r/#/c/17151/ >>> >>> On Jan 29, 2019, at 4:34 PM, Yosvany wrote: >>>> >>>> VPP with LISP send the reachable bit to 0. When use one iid to vni >different that 0. >>>> >>>> How can change the reachable bit to 1 on map-register. >>>> >>>> I am testing with cisco router as MS/MR. >>>> -- >>>> Enviado desde mi dispositivo Android con K-9 Mail. Por favor, >disculpa mi brevedad. -=-=-=-=-=-=-=-=-=-=-=- >>>> Links: You receive all messages sent to this group. >>>> >>>> View/Reply Online (#12052): >https://lists.fd.io/g/vpp-dev/message/12052 >>>> Mute This Topic: https://lists.fd.io/mt/29589087/675152 >>>> Group Owner: vpp-dev+ow...@lists.fd.io >>>> Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub >[fcoras.li...@gmail.com] >>>> -- >>>> >>> >>> >> -- >> Enviado desde mi dispositivo Android con K-9 Mail. Por favor, >disculpa mi >> brevedad. >> >> >> -=-=-=-=-=-=-=-=-=-=-=- >> Links: You receive all messages sent to this group. >> >> View/Reply Online (#12081): >https://lists.fd.io/g/vpp-dev/message/12081 >> Mute This Topic: https://lists.fd.io/mt/29589087/1594641 >> Group Owner: vpp-dev+ow...@lists.fd.io >> Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [ >> pvi...@vinciconsulting.com] >> -=-=-=-=-=-=-=-=-=-=-=- >> -- Enviado desde mi dispositivo Android con K-9 Mail. Por favor, disculpa mi brevedad. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12084): https://lists.fd.io/g/vpp-dev/message/12084 Mute This Topic: https://lists.fd.io/mt/29589087/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] VPP send map-register with R=0 on LISP
Look the show error vpp# show error CountNode Reason 334 dpdk-input no error 166 lisp-cp-input drop 165 lisp-cp-input map-notifies received 14 lisp-cp-lookup-ip6 drop 165 lisp-cp-output map-registers sent 2 lisp-cp-output map-requests sent 32arp-input ARP replies sent 70arp-input IP4 source address not local to subnet 2arp-input ARP request IP4 source address learned 2880ip4-input Multicast RPF check failed 1ip4-glean ARP requests sent 109 ip6-icmp-input valid packets 1 ip6-icmp-input neighbor advertisements received 57 ip6-icmp-input router advertisements sent 109 ip6-icmp-input router advertisements received vpp# show int addr GigabitEthernet0/13/0 (up): L3 192.168.74.59/29 GigabitEthernet0/14/0 (up): L3 10.74.0.1/30 ip4 table-id 10 fib-idx 1 L3 fd00:74:100::2/64 ip6 table-id 10 fib-idx 1 GigabitEthernet0/15/0 (up): L3 172.8.0.1/30 ip4 table-id 20 fib-idx 2 lisp_gpe0 (up): lisp_gpe10 (up): lisp_gpe10.0 (up): lisp_gpe20 (up): local0 (dn): vpp# vpp# vpp# vpp# show one locator-set Locator-set LocatorPriority Weight xx 1 1 100 192.168.76.60 1 100 vpp# vpp# vpp# show one eid-table local EIDtypelocators ttl authoritative [10] fd00:74::/48 local(xx) GigabitEthernet0/13/0 0 1 [10] 10.74.0.0/16 local(xx) GigabitEthernet0/13/0 0 1 [20] 172.8.0.0/16 local(xx) GigabitEthernet0/13/0 0 1 vpp# vpp# vpp# show one eid-table map l33 vpp# show one eid-table map l3 VNI VRF 1010 0 0 2020 vpp# vpp# vpp# show one eid-table remote EIDtypelocators ttl authoritative [10] fd00:0:76::/48remote 192.168.76.60 14401This is other cisco router sonly working as XTR vpp# vpp# vpp# vpp# vpp# show one st statistics status vpp# show one statistics details [src-EID, dst-EID] [loc-rloc, rmt-rloc] count bytes [fd00:74::/48, fd00:0:76::/48] [192.168.74.59, 192.168.76.60] 18499 887952 vpp# vpp# De: Florin Coras [mailto:fcoras.li...@gmail.com] Enviado el: jueves, 31 de enero de 2019 1:12 Para: Yosvany CC: vpp-dev@lists.fd.io Asunto: Re: [vpp-dev] VPP send map-register with R=0 on LISP As per previous email, please check for any errors reported by lisp-cp in cli and syslog. Florin On Jan 30, 2019, at 9:50 AM, Yosvany mailto:yosvan...@nauta.cu> > wrote: Yes was solved, but we have map-reply problem, it is drop by lisp-cp when vni is differents that 0. El 29 de enero de 2019 8:37:45 PM GMT-05:00, Florin Coras mailto:fcoras.li...@gmail.com> > escribió: Does this [1] solve the issue? Florin [1] https://gerrit.fd.io/r/#/c/17151/ On Jan 29, 2019, at 4:34 PM, Yosvany mailto:yosvan...@nauta.cu> > wrote: VPP with LISP send the reachable bit to 0. When use one iid to vni different that 0. How can change the reachable bit to 1 on map-register. I am testing with cisco router as MS/MR. -- Enviado desde mi dispositivo Android con K-9 Mail. Por favor, disculpa mi brevedad. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12052): https://lists.fd.io/g/vpp-dev/message/12052 Mute This Topic: https://lists.fd.io/mt/29589087/675152 Group Owner: vpp-dev+ow...@lists.fd.io <mailto:vpp-dev+ow...@lists.fd.io> Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [fcoras.li...@gmail.com <mailto:fcoras.li...@gmail.com> ] _ -- Enviado desde mi dispositivo Android con K-9 Mail. Por favor, disculpa mi brevedad. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12085): https://lists.fd.io/g/vpp-dev/message/12085 Mute This Topic: https://lists.fd.io/mt/29589087/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] VPP 19.01 release is out!
Great Job. Excellent Team. El 31 de enero de 2019 4:49:59 PM GMT-05:00, Paul Vinciguerra escribió: >Thanks Andrew! Great Job! > >On Thu, Jan 31, 2019 at 4:13 PM Florin Coras >wrote: > >> Awesome! Thanks, Andrew! >> >> Florin >> >> > On Jan 31, 2019, at 1:05 PM, Andrew Yourtchenko > >> wrote: >> > >> > Hi all, >> > >> > I am happy to announce that 19.01 release is now available. >> > >> > Release artificats can be found on both Nexus and Packagecloud. >> > >> > Thanks to all the contributors and committers, and also special >> > thanks from me who helped to make this adventurous ride a little >> smoother. >> > >> > I would like to say special big thanks to Paul Vinciguerra for his >> > wonderful help tracking the moving target of some python packages >we >> > consume in make test, their release dates happened to coincide with >> > ours just close enough to cause very interesting race conditions. >> > >> > --a >> > -=-=-=-=-=-=-=-=-=-=-=- >> > Links: You receive all messages sent to this group. >> > >> > View/Reply Online (#12102): >https://lists.fd.io/g/vpp-dev/message/12102 >> > Mute This Topic: https://lists.fd.io/mt/29610895/675152 >> > Group Owner: vpp-dev+ow...@lists.fd.io >> > Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [ >> fcoras.li...@gmail.com] >> > -=-=-=-=-=-=-=-=-=-=-=- >> >> -=-=-=-=-=-=-=-=-=-=-=- >> Links: You receive all messages sent to this group. >> >> View/Reply Online (#12104): >https://lists.fd.io/g/vpp-dev/message/12104 >> Mute This Topic: https://lists.fd.io/mt/29610895/1594641 >> Group Owner: vpp-dev+ow...@lists.fd.io >> Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [ >> pvi...@vinciconsulting.com] >> -=-=-=-=-=-=-=-=-=-=-=- >> -- Enviado desde mi dispositivo Android con K-9 Mail. Por favor, disculpa mi brevedad. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12106): https://lists.fd.io/g/vpp-dev/message/12106 Mute This Topic: https://lists.fd.io/mt/29610895/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
RV: [vpp-dev] VPP send map-register with R=0 on LISP
Again, do you see any error in /var/log/syslog for vni 0? · I nedd to check. And do you mean that the map-reply from vpp to cisco router is not accepted in the cisco router? · This is the problem. Cisco MR/MS – (Can see information about registration of VPP and Cisco Xtr) VPP xTr-- Cisco xTR Can see the RLOC CiscoXTR I cant see any Information Show one eid-table remote Conclusion: Cisco XTR receive a bad Map-Reply from VPP. · Another problem is that VPP is making a Loop sendingmap-request to MR/MS. In this map-request can se a map-reply. De: Florin Coras [ <mailto:fcoras.li...@gmail.com> mailto:fcoras.li...@gmail.com] Enviado el: jueves, 31 de enero de 2019 6:13 Para: yosvany < <mailto:yosvan...@nauta.cu> yosvan...@nauta.cu> Asunto: Re: [vpp-dev] VPP send map-register with R=0 on LISP Again, do you see any error in /var/log/syslog for vni 0? And do you mean that the map-reply from vpp to cisco router is not accepted in the cisco router? Florin On Jan 30, 2019, at 1:41 PM, yosvany mailto:yosvan...@nauta.cu> > wrote: We need use wireshark to compare replys and request. What about /var/log/syslog? Do you have any lisp specific errors there? Seems that you have v6 traffic going for vni 10. Did you statically configure the mapping for fd00:74::/48? If not, then map-replies with vni non 0 seem to be working. · fd00:74::/48 is local eid statically configured. Map replies only work from cisco router as xtr when vni is different that 0 What map-reply isn’t correctly parsed? Is it for the v4 eid in vni 10 or for the v4 in vni 20? · Only work vni 10 this is cisco router, xtr vpp isn’t correctly parsed [10] fd00:0:76::/48remote 192.168.76.60 1440 Florin -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12109): https://lists.fd.io/g/vpp-dev/message/12109 Mute This Topic: https://lists.fd.io/mt/29613581/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] L2 with LISP
Tomorrow i will send you more details. Can send me one example how implement LISP with L2 and bd, (What comand need use and what make MAC ADDRES TO RLOC???) De: vpp-dev@lists.fd.io [mailto:vpp-dev@lists.fd.io] En nombre de Florin Coras Enviado el: viernes, 1 de febrero de 2019 3:13 Para: Yosvany CC: vpp-dev Asunto: Re: [vpp-dev] VPP send map-register with R=0 on LISP I think I understand the problem now, but I don’t understand your last point. Does vpp send a map-reply and if yes, does it look okay? If it does not, we’re back to my first question about syslog. Florin On Jan 31, 2019, at 11:49 AM, Yosvany mailto:yosvan...@nauta.cu> > wrote: Again, do you see any error in /var/log/syslog for vni 0? · I nedd to check. And do you mean that the map-reply from vpp to cisco router is not accepted in the cisco router? · This is the problem. Cisco MR/MS – (Can see information about registration of VPP and Cisco Xtr) VPP xTr-- Cisco xTR Can see the RLOC CiscoXTR I cant see any Information Show one eid-table remote Conclusion: Cisco XTR receive a bad Map-Reply from VPP. · Another problem is that VPP is making a Loop sendingmap-request to MR/MS. In this map-request can se a map-reply. De: Florin Coras [ <mailto:fcoras.li...@gmail.com> mailto:fcoras.li...@gmail.com] Enviado el: jueves, 31 de enero de 2019 6:13 Para: yosvany < <mailto:yosvan...@nauta.cu> yosvan...@nauta.cu> Asunto: Re: [vpp-dev] VPP send map-register with R=0 on LISP Again, do you see any error in /var/log/syslog for vni 0? And do you mean that the map-reply from vpp to cisco router is not accepted in the cisco router? Florin On Jan 30, 2019, at 1:41 PM, yosvany < <mailto:yosvan...@nauta.cu> yosvan...@nauta.cu> wrote: We need use wireshark to compare replys and request. What about /var/log/syslog? Do you have any lisp specific errors there? Seems that you have v6 traffic going for vni 10. Did you statically configure the mapping for fd00:74::/48? If not, then map-replies with vni non 0 seem to be working. · fd00:74::/48 is local eid statically configured. Map replies only work from cisco router as xtr when vni is different that 0 What map-reply isn’t correctly parsed? Is it for the v4 eid in vni 10 or for the v4 in vni 20? · Only work vni 10 this is cisco router, xtr vpp isn’t correctly parsed [10] fd00:0:76::/48remote 192.168.76.60 1440 Florin -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12109): <https://lists.fd.io/g/vpp-dev/message/12109> https://lists.fd.io/g/vpp-dev/message/12109 Mute This Topic: <https://lists.fd.io/mt/29613581/675152> https://lists.fd.io/mt/29613581/675152 Group Owner: <mailto:vpp-dev+ow...@lists.fd.io> vpp-dev+ow...@lists.fd.io Unsubscribe: <https://lists.fd.io/g/vpp-dev/unsub> https://lists.fd.io/g/vpp-dev/unsub [ <mailto:fcoras.li...@gmail.com> fcoras.li...@gmail.com] -=-=-=-=-=-=-=-=-=-=-=- -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12111): https://lists.fd.io/g/vpp-dev/message/12111 Mute This Topic: https://lists.fd.io/mt/29613965/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] Acces control list
Can someone show me the best way to implement ACL on input way for ipv4 tcp stream??? VPP make statefull ACL for tcp stream?? Best Regards. -- Enviado desde mi dispositivo Android con K-9 Mail. Por favor, disculpa mi brevedad. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12139): https://lists.fd.io/g/vpp-dev/message/12139 Mute This Topic: https://lists.fd.io/mt/29636641/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] output ACL is not effctive
How can make this ACL form a network, example with src 10.0.0.0/24 Thanks El 2 de abril de 2019 9:10:39 PM GMT-04:00, star escribió: >Hello all， > >I am trying to test ACL funtion, input ACL is OK, But output ACL is not >effective > >my configuration as below, is there anything wrong in my configuration? >Thanks for your response > >VPP1810# show version >vpp v18.10-7~g6ff8790-dirty built by root on localhost.localdomain at >Mon Apr 1 15:06:48 EDT 2019 > >VPP1810# classify table mask l3 ip4 src >VPP1810# classify session acl-hit-next deny table-index 0 match l3 ip4 >src 10.0.0.2 >VPP1810# set interface output acl intfc host-eth8 ip4-table 0 > > >Packet 1 > >00:04:29:245976: af-packet-input > af_packet: hw_if_index 5 next-index 4 >tpacket2_hdr: > status 0x1 len 124 snaplen 124 mac 66 net 80 > sec 0x5ca3021e nsec 0x1d5674aa vlan 0 vlan_tpid 0 >00:04:29:245984: ethernet-input > IP4: 00:10:94:00:00:02 -> ff:ff:ff:ff:ff:ff >00:04:29:245989: ip4-input > unknown 253: 10.0.0.2 -> 10.1.1.2 >tos 0x00, ttl 255, length 110, checksum 0xa585 >fragment id 0x0009 >00:04:29:245994: ip4-lookup > fib 0 dpo-idx 2 flow hash: 0x >unknown 253: 10.0.0.2 -> 10.1.1.2 > >tos 0x00, ttl 255, length 110, checksum 0xa585 >fragment id 0x0009 >00:04:29:245999: ip4-rewrite >tx_sw_if_index 3 dpo-idx 2 : ipv4 via 10.1.1.2 host-eth8: mtu:0 >000c295a907c298abc980800 flow hash: 0x >: >000c295a907c298abc980800456e0009fefda6850a020a01 > 0020: 0102 >00:04:29:246003: ip4-outacl > OUTACL: sw_if_index 3, next_index 1, table 0, offset -1 >00:04:29:246061: host-eth8-output > host-eth8 > IP4: 00:0c:29:8a:bc:98 -> 00:0c:29:5a:90:70 > unknown 253: 10.0.0.2 -> 10.1.1.2 >tos 0x00, ttl 254, length 110, checksum 0xa685 >fragment id 0x0009 > > > >fx...@fiberhome.com -- Enviado desde mi dispositivo Android con K-9 Mail. Por favor, disculpa mi brevedad. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12707): https://lists.fd.io/g/vpp-dev/message/12707 Mute This Topic: https://lists.fd.io/mt/30876208/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
