Hi Filip,

There are two kinds of traffic in my test.
one is managing traffic, which will comes into vpp only from a tap interfaces, 
for example tap's ip address is 10.10.1.1/24. we need these traffic to do snat 
and out from G0
one is business traffic, which are gererated interlanfrom vpp, these traffic 
will not do snat and out from G0
Both the two kinds of traffic share the same outside interface G0 which could 
access the internet.

I have tried:
1. seperate managing traffic into different vrf, ...
2. add static mapping for local 10.10.1.x/24 external <G0's ip>,  ...

but both did not work.

can vpp achieve this goal?  any suggestions will be appreciated.




haiyan...@ilinkall.cn
 
From: Filip Varga -X (fivarga - PANTHEON TECH SRO at Cisco)
Date: 2022-03-12 02:27
To: haiyan...@ilinkall.cn; vpp-dev
Subject: RE: [vpp-dev] about in/out arguments in "set interface nat44 .."command
Hi Haiyan,
 
Can you please be more specific. For example what other traffic except from 
interface A and B will be passing (are there other interfaces involved) ? Using 
nat44-ed forwarding is a bit tricky. It let’s pass traffic without translation 
if a preexisting session isn’t found so this would mean only static mapping 
get’s translated. Forwarding feature is used for specific purposes when in 
mixed environments you have A configured as inside and also outside and B 
configured as inside and outside also.
 
Best regards,
Filip Varga
 
From: vpp-dev@lists.fd.io <vpp-dev@lists.fd.io> On Behalf Of 
haiyan...@ilinkall.cn
Sent: Thursday, March 10, 2022 12:54 AM
To: vpp-dev <vpp-dev@lists.fd.io>
Subject: [vpp-dev] about in/out arguments in "set interface nat44 .."command
 
Dear all
 
if only want traffic from interface A to interface B done with nat44, others 
will be directly out from interface B, is this possible? 
 
I did the following command in vpp, but did not work
nat44 forwarding enable 
nat44 add address <B'ip>
set interface nat44 in A out B
 
Thanks 
 


haiyan...@ilinkall.cn
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#21015): https://lists.fd.io/g/vpp-dev/message/21015
Mute This Topic: https://lists.fd.io/mt/89682456/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to