Re: [vpp-dev] ACL not working #vpp

2019-09-04 Thread Andrew Yourtchenko
Hi Cipher, Reply below inline > On 4 Sep 2019, at 12:36, Cipher Chen wrote: > > Thanks Andrew, I've successfully done acl_plugin test. > > BTW, just reply here for latecomers, do "V=2 EXTENDED_TESTS=1 > TEST=acl_plugin* make test" to do more test and print verbosely. Yeah the connection tra

Re: [vpp-dev] ACL not working #vpp

2019-09-04 Thread Cipher Chen
Thanks Andrew, I've successfully done acl_plugin test. BTW, just reply here for latecomers, do "V=2 EXTENDED_TESTS=1 TEST=acl_plugin* make test" to do more test and print verbosely. Since I'm testing stateful ACL by watching behavior of test_acl_plugin_conns.py, along with explaination from Sta

Re: [vpp-dev] ACL not working #vpp

2019-09-03 Thread Andrew Yourtchenko
The VPP packet tracer might tell a bit more what is going on. https://wiki.fd.io/view/VPP/Command-line_Interface_(CLI)_Guide#packet_tracer Also you can do “TEST=acl_plugin* make test” and examine the logs of successful testcase runs and compare with what you have. --a > On 3 Sep 2019, at 16:2

Re: [vpp-dev] ACL not working #vpp

2019-09-03 Thread Cipher Chen
More info about acl plugin vpp# show acl-plugin acl acl-index 4 count 2 tag {} 0: ipv4 deny src 0.0.0.0/0 dst 0.0.0.0/0 proto 1 sport 0-65535 dport 0-65535 1: ipv4 permit src 0.0.0.0/0 dst 0.0.0.0/0 proto 6 sport 0-65535 dport 0-65535 applied inbound on sw_if_index: 1 applied outbound on sw_if_ind

[vpp-dev] ACL not working #vpp

2019-09-03 Thread cipher . chen2012
Hi vpp-dev, I'm testing security group functions on VPP19.08, and got some questions here. I have two vms: A(172.16.0.1/24, using vxlan_tunnel10 / bridge 10) and B(172.16.1.1/24, using vxlan_tunnel11 / bridge 11). Both these two networks' gateway is X.254, configured on VPP bridges (10 and 11).