Re: [vpp-dev] VPP IPSec failed to add SA

2019-10-21 Thread Neale Ranns via Lists.Fd.Io
(ftehlar - PANTHEON TECHNOLOGIES at Cisco)" , "vpp-dev@lists.fd.io" Subject: RE: [vpp-dev] VPP IPSec failed to add SA Thanks Balaji, I’m able to see crypto engines loaded after installing the plugins, but I still got the same error that the sa failed. vpp# show ipsec ba

Re: [vpp-dev] VPP IPSec failed to add SA

2019-10-20 Thread Ying, Ruoyu
- PANTHEON TECHNOLOGIES at Cisco) ; vpp-dev@lists.fd.io Subject: Re: [vpp-dev] VPP IPSec failed to add SA I think the vpp-plugin-core, vpp-plugin-dpdk should carry them: sudo apt-get install vpp-plugin-core vpp-plugin-dpdk and confirm the crypto engine is loaded : show plugins -- Regards

Re: [vpp-dev] VPP IPSec failed to add SA

2019-10-18 Thread Balaji Venkatraman via Lists.Fd.Io
(ftehlar - PANTHEON TECHNOLOGIES at Cisco)" , "vpp-dev@lists.fd.io" Subject: Re: [vpp-dev] VPP IPSec failed to add SA I think the vpp-plugin-core, vpp-plugin-dpdk should carry them: sudo apt-get install vpp-plugin-core vpp-plugin-dpdk and confirm the crypto engine is loaded : show

Re: [vpp-dev] VPP IPSec failed to add SA

2019-10-18 Thread Balaji Venkatraman via Lists.Fd.Io
anns)" , "Filip Tehlar -X (ftehlar - PANTHEON TECHNOLOGIES at Cisco)" , "Balaji Venkatraman (balajiv)" , "vpp-dev@lists.fd.io" Subject: RE: [vpp-dev] VPP IPSec failed to add SA Hi Neale, I’m really new to VPP and can you tell me where’s the plugins you mentione

Re: [vpp-dev] VPP IPSec failed to add SA

2019-10-18 Thread Ying, Ruoyu
TECHNOLOGIES at Cisco) ; Balaji Venkatraman (balajiv) ; vpp-dev@lists.fd.io Cc: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] VPP IPSec failed to add SA Hi Ruoyo, You need to load one of the crypto_* plugins that provide the engine functions. /neale From: "Ying, Ruoyu" mailto:ruoyu.y...@intel.

Re: [vpp-dev] VPP IPSec failed to add SA

2019-10-18 Thread Neale Ranns via Lists.Fd.Io
t;Neale Ranns (nranns)" , "vpp-dev@lists.fd.io" Subject: RE: [vpp-dev] VPP IPSec failed to add SA Hi Filip, I tried them also, but I still get a similar error: vpp# set crypto handler aes-128-cbc openssl failed to set engine openssl for aes-128-cbc! vpp# set crypto handler aes-128-

Re: [vpp-dev] VPP IPSec failed to add SA

2019-10-18 Thread Ying, Ruoyu
command? Thanks a lot. Best Regards, Ruoyu From: Filip Tehlar -X (ftehlar - PANTHEON TECHNOLOGIES at Cisco) Sent: Friday, October 18, 2019 3:29 PM To: Ying, Ruoyu ; Balaji Venkatraman (balajiv) ; Neale Ranns (nranns) ; vpp-dev@lists.fd.io Subject: RE: [vpp-dev] VPP IPSec failed to add SA

Re: [vpp-dev] VPP IPSec failed to add SA

2019-10-18 Thread Filip Tehlar -X (ftehlar - PANTHEON TECHNOLOGIES at Cisco) via Lists.Fd.Io
>>; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] VPP IPSec failed to add SA Looking at the docs, I think you need to set one using the: set crypto handler cipher [cipher2 cipher3 …] engine Not sure, what’s the default behavior. -- Regards, Balaji. From: ma

Re: [vpp-dev] VPP IPSec failed to add SA

2019-10-17 Thread Ying, Ruoyu
registering the engines? Thanks a lot. Best Regards, Ruoyu From: Balaji Venkatraman (balajiv) Sent: Friday, October 18, 2019 9:37 AM To: Ying, Ruoyu ; Neale Ranns (nranns) ; vpp-dev@lists.fd.io Subject: Re: [vpp-dev] VPP IPSec failed to add SA Looking at the docs, I think you need to set one

Re: [vpp-dev] VPP IPSec failed to add SA

2019-10-17 Thread Balaji Venkatraman via Lists.Fd.Io
ns)" , "vpp-dev@lists.fd.io" Subject: Re: [vpp-dev] VPP IPSec failed to add SA Hi Neale, Thanks for replying. I think you’ve pointed out the root cause. The cmds provides the response like this: vpp# show crypto engine No crypto engines registered vpp# show ipsec backend IPsec AH backe

Re: [vpp-dev] VPP IPSec failed to add SA

2019-10-17 Thread Ying, Ruoyu
...@cisco.com; vpp-dev@lists.fd.io Subject: Re: [vpp-dev] VPP IPSec failed to add SA Hi Neale, Thanks for replying. I think you’ve pointed out the root cause. The cmds provides the response like this: vpp# show crypto engine No crypto engines registered vpp# show ipsec backend IPsec AH backends

Re: [vpp-dev] VPP IPSec failed to add SA

2019-10-17 Thread Ying, Ruoyu
: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] VPP IPSec failed to add SA Hi Ruoyo, Possiblly because your loaded crypto engine/backend does not support the requested algorithms. Please provide : show crypto engine show ipsec backend also whenever asking for assistance: sh version Thanks

Re: [vpp-dev] VPP IPSec failed to add SA

2019-10-17 Thread Neale Ranns via Lists.Fd.Io
tober 2019 at 10:52 To: "vpp-dev@lists.fd.io" Subject: [vpp-dev] VPP IPSec failed to add SA Hi, I tried to use vpp to enable IPSec in my environment. And when I tried to create a SA, I always got an error for that. Detailed configs look like this: Interface details

Re: [vpp-dev] VPP IPSec failed to add SA

2019-10-17 Thread Balaji Venkatraman via Lists.Fd.Io
: "vpp-dev@lists.fd.io" Subject: [vpp-dev] VPP IPSec failed to add SA Hi, I tried to use vpp to enable IPSec in my environment. And when I tried to create a SA, I always got an error for that. Detailed configs look like this: Interface details

[vpp-dev] VPP IPSec failed to add SA

2019-10-17 Thread Ying, Ruoyu
Hi, I tried to use vpp to enable IPSec in my environment. And when I tried to create a SA, I always got an error for that. Detailed configs look like this: Interface details: vpp# show int Name IdxState MTU (L3/IP4/IP6/MPLS) Counter