[vpp-dev] ipsec vpn

Hi all, How can we use IPSEC VPN to protect multi subnetworks. Such as 10.11.0.0/16 and 192.168.0.0/16. Do they negotiate this information through IKEV2 AUTH procedure? And the code show that there is only one TS per profile, how can that protect multi subnet. Regards, xlangyun-=-=-=-=-=-=-

[vpp-dev] IPSEC VPN NAT Traversal

Hi all, It seems that this function does not work. ipsec: support UDP encap/decap for NAT traversal Regards, Xlangyun-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11393): https://lists.fd.io/g/vpp-dev/message/11393 Mute This Topic: http

Re: [vpp-dev] ipsec vpn(site to site)

Hi, Actually VPP can be IKE initiator, wiki is little bit outdated, see https://gerrit.fd.io/r/#/c/5401/ Matus From: vpp-dev@lists.fd.io On Behalf Of xulang Sent: Wednesday, August 29, 2018 8:45 AM To: vpp-dev@lists.fd.io Subject: [vpp-dev] ipsec vpn(site to site) Hi all, I'd like to

[vpp-dev] ipsec vpn(site to site)

Hi all, I'd like to build a site to site VPN tunnel with vpp only. Because VPP can't be SA initiator, so we can't use IKE2, so how can we build this, is there any files about this? Regards, Xiaoxu -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Onli

Re: [vpp-dev] IPSEC VPN

xulang Sent: Sunday, April 8, 2018 12:32 PM To: vpp-dev@lists.fd.io Subject: [vpp-dev] IPSEC VPN Hi all, Here are the ipsec vpn configuration example. Does this command "set interface ipsec spd GigabitEthernet0/8/0 1" mean that all traffic comes through this int will be pr

[vpp-dev] IPSEC VPN

Hi all,Here are the ipsec vpn configuration example.Does this command "set interface ipsec spd GigabitEthernet0/8/0 1" mean that all traffic comes through this int will be processed by ipsec?How cloud I only protect some specific traffic and leave the other traffic to the normal for