Re: [vpp-dev] Regarding IPsec errors "Integrity failure" and "Unsupported payload"

2021-08-02 Thread Vijay Kumar
y Kumar > *Date: *Monday, 2 August 2021 at 11:33 > *To: *Neale Ranns > *Cc: *vpp-dev > *Subject: *Re: [vpp-dev] Regarding IPsec errors "Integrity failure" and > "Unsupported payload" > > Hi Neale, > > > > My IPSEC rekey is set to high (2 hr

Re: [vpp-dev] Regarding IPsec errors "Integrity failure" and "Unsupported payload"

2021-08-02 Thread Neale Ranns
From: Vijay Kumar Date: Monday, 2 August 2021 at 11:33 To: Neale Ranns Cc: vpp-dev Subject: Re: [vpp-dev] Regarding IPsec errors "Integrity failure" and "Unsupported payload" Hi Neale, My IPSEC rekey is set to high (2 hr). So the issue is not during rekey. I don’t under

Re: [vpp-dev] Regarding IPsec errors "Integrity failure" and "Unsupported payload"

2021-08-02 Thread Vijay Kumar
gt; > > No I don’t see random failures. Do they occur during a rekeying event? > > > > /neale > > > > *From: *vpp-dev@lists.fd.io on behalf of Vijay > Kumar via lists.fd.io > *Date: *Monday, 2 August 2021 at 08:43 > *To: *vpp-dev > *Subject: *Re: [vpp-dev]

Re: [vpp-dev] Regarding IPsec errors "Integrity failure" and "Unsupported payload"

2021-08-02 Thread Neale Ranns
Hi Vijay, No I don’t see random failures. Do they occur during a rekeying event? /neale From: vpp-dev@lists.fd.io on behalf of Vijay Kumar via lists.fd.io Date: Monday, 2 August 2021 at 08:43 To: vpp-dev Subject: Re: [vpp-dev] Regarding IPsec errors "Integrity failure" and &q

Re: [vpp-dev] Regarding IPsec errors "Integrity failure" and "Unsupported payload"

2021-08-01 Thread Vijay Kumar
Hi Neale, Do you have any suggestions for this problem. Did you face this random issue anytime? On Sat, Jul 31, 2021 at 7:05 PM Vijay Kumar via lists.fd.io wrote: > Hi Neale, > > I am testing data traffic b/w Strongswan and VPP but sometimes data > traffic is dropped in *esp4-decrypt-tun *gr

[vpp-dev] Regarding IPsec errors "Integrity failure" and "Unsupported payload"

2021-07-31 Thread Vijay Kumar
Hi Neale, I am testing data traffic b/w Strongswan and VPP but sometimes data traffic is dropped in *esp4-decrypt-tun *graph node. Sometimes it is dropped with "Integrity failure" while sometimes it is "Unsupported payload" But if I delete the tunnel and re-establish IPSec SA, then it works fine.