gt;>> Please provide packet traces when you are reporting packet loss
>>> problems, it helps us debug.
>>>
>>>
>>>
>>> For reference the setup for GRE TEB IPSec can be found in the python UT
>>> TestIpsecGreTebIfEsp.
>>>
>&g
et loss problems,
>> it helps us debug.
>>
>>
>>
>> For reference the setup for GRE TEB IPSec can be found in the python UT
>> TestIpsecGreTebIfEsp.
>>
>>
>>
>> Regards,
>>
>> neale
>>
>>
>>
>>
>>
>
>
>
> *From: * on behalf of "Chuan Han via Lists.Fd.Io"
>
> *Reply to: *"chuan...@google.com"
> *Date: *Friday 4 October 2019 at 02:15
> *To: *"John Lo (loj)"
> *Cc: *"vpp-dev@lists.fd.io"
> *Subject: *Re: [vpp-dev] How to
n Lo (loj)"
Cc: "vpp-dev@lists.fd.io"
Subject: Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08
Hi,
Thanks for information.
I am trying to configure l2 gre over ipsec transport mode.
Here are my startup.cfg files. Can you help check if my configuration is
correct or not?
AM
> *To:* Neale Ranns (nranns)
> *Cc:* vpp-dev@lists.fd.io
> *Subject:* Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08
>
>
>
> Gre is l3 in this case. Right? This limits the possible use cases.
>
>
>
> Is there any plan to support l2 gre over ipsec
: Neale Ranns (nranns)
Cc: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08
Gre is l3 in this case. Right? This limits the possible use cases.
Is there any plan to support l2 gre over ipsec transport mode? It seems vpp 17
support s this feature. Not sure why
Gre is l3 in this case. Right? This limits the possible use cases.
Is there any plan to support l2 gre over ipsec transport mode? It seems vpp
17 support s this feature. Not sure why it is dropped in 19.
On Wed, Oct 2, 2019, 12:18 AM Neale Ranns (nranns) wrote:
>
> Hi Chuan,
>
> IPSec and GRE i
Hi Chuan,
IPSec and GRE is supported using the tunnel protection mechanismĀ :
https://wiki.fd.io/view/VPP/IPSec
GRE over IPSec is only support when the SA is in tunnel mode. This means there
is a double encap of the IP headerĀ ; once by the SA (in tunnel mode) and once
by the tunnel itself. (W