Hi ,

after applying dnat on interface ping, to that interface from outside is
not working.

following is my config.


vpp# show interface address
GigabitEthernet0/14/0 (up):
  L2 bridge bd-id 1 idx 2 shg 0
local0 (dn):
loop1 (up):
  L2 bridge bd-id 1 idx 2 shg 0 bvi
  L3 192.168.10.24/24


vpp# show nat44 static mappings
NAT44 static mappings:
 tcp local 192.168.100.253:443 external 192.168.10.24:443 vrf 0
 udp local 192.168.100.253:3799 external 192.168.10.24:3799 vrf 0
 identity mapping udp 192.168.10.24:53053 vrf 0
 tcp local 192.168.100.253:443 external loop1:443 vrf -1
 udp local 192.168.100.253:3799 external loop1:3799 vrf -1
 udp local 0.0.0.0:53053 external loop1:53053 vrf -1


now from remote machine with ip of 192.168.10.2(some linux machine) when i
ping to 192.168.10.24 (VPP)
there is no response and vpp trace shows following.


------------------- Start of thread 0 vpp_main -------------------
Packet 1

00:30:35:069531: dpdk-input
  GigabitEthernet0/14/2 rx queue 0
  buffer 0x1d1c: current data 0, length 98, free-list 0, clone-count 0,
totlen-nifb 0, trace 0x0
                 ext-hdr-valid
                 l4-cksum-computed l4-cksum-correct
  PKT MBUF: port 2, nb_segs 1, pkt_len 98
    buf_len 2176, data_len 98, ol_flags 0x180, data_off 128, phys_addr
0x63e74780
    packet_type 0x11 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0
    rss 0x0 fdir.hi 0x0 fdir.lo 0x0
    Packet Offload Flags
      PKT_RX_IP_CKSUM_GOOD (0x0080) IP cksum of RX pkt. is valid
      PKT_RX_L4_CKSUM_GOOD (0x0100) L4 cksum of RX pkt. is valid
    Packet Types
      RTE_PTYPE_L2_ETHER (0x0001) Ethernet packet
      RTE_PTYPE_L3_IPV4 (0x0010) IPv4 packet without extension headers
  IP4: 8c:ec:4b:48:d4:4a -> 58:c1:7a:9f:21:41
  ICMP: 192.168.10.2 -> 192.168.10.24
    tos 0x00, ttl 64, length 84, checksum 0xd146
    fragment id 0xd3f7, flags DONT_FRAGMENT
  ICMP echo_request checksum 0xe588
00:30:35:069547: ethernet-input
  frame: flags 0x3, hw-if-index 3, sw-if-index 3
  IP4: 8c:ec:4b:48:d4:4a -> 58:c1:7a:9f:21:41
00:30:35:069553: l2-input
  l2-input: sw_if_index 3 dst 58:c1:7a:9f:21:41 src 8c:ec:4b:48:d4:4a
00:30:35:069556: l2-learn
  l2-learn: sw_if_index 3 dst 58:c1:7a:9f:21:41 src 8c:ec:4b:48:d4:4a
bd_index 2
00:30:35:069559: l2-fwd
  l2-fwd:   sw_if_index 3 dst 58:c1:7a:9f:21:41 src 8c:ec:4b:48:d4:4a
bd_index 2 result [0x700000006, 6] static age-not bvi
00:30:35:069562: ip4-input
  ICMP: 192.168.10.2 -> 192.168.10.24
    tos 0x00, ttl 64, length 84, checksum 0xd146
    fragment id 0xd3f7, flags DONT_FRAGMENT
  ICMP echo_request checksum 0xe588
00:30:35:069566: nat44-out2in
  NAT44_OUT2IN: sw_if_index 6, next index 0, session index -1
00:30:35:069573: error-drop
  nat44-out2in: no translation

-Shahid.
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#12949): https://lists.fd.io/g/vpp-dev/message/12949
Mute This Topic: https://lists.fd.io/mt/31530366/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to