Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08

2019-11-01 Thread Chuan Han via Lists.Fd.Io
gt;>> Please provide packet traces when you are reporting packet loss >>> problems, it helps us debug. >>> >>> >>> >>> For reference the setup for GRE TEB IPSec can be found in the python UT >>> TestIpsecGreTebIfEsp. >>> >&g

Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08

2019-10-08 Thread Chuan Han via Lists.Fd.Io
et loss problems, >> it helps us debug. >> >> >> >> For reference the setup for GRE TEB IPSec can be found in the python UT >> TestIpsecGreTebIfEsp. >> >> >> >> Regards, >> >> neale >> >> >> >> >>

Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08

2019-10-04 Thread Chuan Han via Lists.Fd.Io
> > > > *From: * on behalf of "Chuan Han via Lists.Fd.Io" > > *Reply to: *"chuan...@google.com" > *Date: *Friday 4 October 2019 at 02:15 > *To: *"John Lo (loj)" > *Cc: *"vpp-dev@lists.fd.io" > *Subject: *Re: [vpp-dev] How to

Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08

2019-10-04 Thread Neale Ranns via Lists.Fd.Io
n Lo (loj)" Cc: "vpp-dev@lists.fd.io" Subject: Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08 Hi, Thanks for information. I am trying to configure l2 gre over ipsec transport mode. Here are my startup.cfg files. Can you help check if my configuration is correct or not?

Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08

2019-10-03 Thread Chuan Han via Lists.Fd.Io
AM > *To:* Neale Ranns (nranns) > *Cc:* vpp-dev@lists.fd.io > *Subject:* Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08 > > > > Gre is l3 in this case. Right? This limits the possible use cases. > > > > Is there any plan to support l2 gre over ipsec

Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08

2019-10-02 Thread John Lo (loj) via Lists.Fd.Io
: Neale Ranns (nranns) Cc: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08 Gre is l3 in this case. Right? This limits the possible use cases. Is there any plan to support l2 gre over ipsec transport mode? It seems vpp 17 support s this feature. Not sure why

Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08

2019-10-02 Thread Chuan Han via Lists.Fd.Io
Gre is l3 in this case. Right? This limits the possible use cases. Is there any plan to support l2 gre over ipsec transport mode? It seems vpp 17 support s this feature. Not sure why it is dropped in 19. On Wed, Oct 2, 2019, 12:18 AM Neale Ranns (nranns) wrote: > > Hi Chuan, > > IPSec and GRE i

Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08

2019-10-02 Thread Neale Ranns via Lists.Fd.Io
Hi Chuan, IPSec and GRE is supported using the tunnel protection mechanismĀ : https://wiki.fd.io/view/VPP/IPSec GRE over IPSec is only support when the SA is in tunnel mode. This means there is a double encap of the IP headerĀ ; once by the SA (in tunnel mode) and once by the tunnel itself. (W