[vpp-dev] Regarding IPsec errors "Integrity failure" and "Unsupported payload"

2021-07-31 Thread Vijay Kumar
Hi Neale, I am testing data traffic b/w Strongswan and VPP but sometimes data traffic is dropped in *esp4-decrypt-tun *graph node. Sometimes it is dropped with "Integrity failure" while sometimes it is "Unsupported payload" But if I delete the tunnel and re-establish IPSec SA, then it works fine.

[vpp-dev] #ipsec #vnet #vpp #vpp-dev

2021-07-31 Thread nikhil subhedar
Hi All, I am facing a problem when IPSEC is enabled on my  box. 1) once the packet comes to my box i am decrypting the packet and i am setting the fib index as 1 since my TCP application's listening ip belongs to fib 1. 2)in this scenario  SYN has reached to TCP node and then SYN+ACK is formed an

Re: [vpp-dev] #ipsec #vnet #vpp #vpp-dev

2021-07-31 Thread Neale Ranns
There’s not enough information here to diagnose what the problem is. Let’s start with a packet trace. #regards /neale From: vpp-dev@lists.fd.io on behalf of nikhil subhedar via lists.fd.io Date: Saturday, 31 July 2021 at 19:49 To: vpp-dev@lists.fd.io Subject: [vpp-dev] #ipsec #vnet #vpp #v