Hi, Thanks. Regards, Ewan
yug...@telincn.com From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) Date: 2017-05-22 12:55 To: yug...@telincn.com; otroan CC: vpp-dev Subject: RE: [vpp-dev] five tuple nat Hi, You probably use older VPP version, ICMP support for deterministic NAT was added later on Apr 11 (https://gerrit.fd.io/r/#/c/6031/). Regards, Matus From: vpp-dev-boun...@lists.fd.io [mailto:vpp-dev-boun...@lists.fd.io] On Behalf Of yug...@telincn.com Sent: Sunday, May 21, 2017 5:32 AM To: otroan <otr...@employees.org> Cc: vpp-dev <vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] five tuple nat Hi, There is no code to process ICMP in func "snat_det_in2out_node_fn", so it treats ICMP packet as UDP packet, then we get the wrong output packet. Regards, Ewan yug...@telincn.com From: otroan Date: 2017-05-20 20:00 To: yug...@telincn.com CC: vpp-dev Subject: Re: [vpp-dev] five tuple nat Hi, > Thanks, it seems that there is no icmp procedure in det nat, why is it like > this? Yes, there should be ICMP support. E.g. through: commit b33f413af46ec8dff7f222dbd5bc3bcec1502d3d Author: Juraj Sloboda <jslob...@cisco.com> Date: Wed Feb 8 23:54:21 2017 -0800 Add handling of ICMP error packets in SNAT (VPP-629) Change-Id: I8d2022b7cb3ef3da736c085bccbb5b9c057a8d76 Signed-off-by: Juraj Sloboda <jslob...@cisco.com There are quite a few ICMP additions after that, also for deterministic CGN. What problem are you seeing? Best regards, Ole > > > Regards, > Ewan > ewan > > From: otroan > Date: 2017-04-25 16:06 > To: yugang > CC: vpp-dev > Subject: Re: [vpp-dev] five tuple nat > Ewan, > > > Do we have any plan to surpport five tuple nat like linux kernel? > > That should already be supported in the SNAT plugin. > https://wiki.fd.io/view/VPP/SNAT > > Best regards, > Ole
_______________________________________________ vpp-dev mailing list vpp-dev@lists.fd.io https://lists.fd.io/mailman/listinfo/vpp-dev
