Merci Benoit, Benoit Ganne (bganne) via lists.fd.io <bganne=cisco....@lists.fd.io> writes:
> Hi Ray, > > [...] >> create ipip tunnel src 10.0.0.2 dst 10.0.0.1 >> ipsec tunnel protect ipip1 sa-in 30 sa-out 20 > > Looking at https://git.fd.io/vpp/tree/src/scripts/vnet/ipsec_tun_protect I > think you are missing the table id to look after encrypt for ipip1, ie you > should do: > create ipip tunnel src 10.0.0.2 dst 10.0.0.1 outer-table-id 1 > Otherwise it is probably not correctly initialized. > Now should we initialize it correctly automatically that is another > question 😊 So the fixes to the vnet ipsec script are at... https://gerrit.fd.io/r/c/vpp/+/35490 I am guessing that the reason the explicit "set int ip table ipip1 1" in the script, didn't work is because it is setting the inner table, not the outer table? > > Best > ben > > -- Regards, Ray K
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#20934): https://lists.fd.io/g/vpp-dev/message/20934 Mute This Topic: https://lists.fd.io/mt/89457422/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
