----- Original Message ----- 
From: "sonia verma" gmail.com> 
To: [email protected] 
Sent: Wednesday, February 12, 2014 3:28:04 AM 
Subject: [ovs-discuss] GRE over IPsec 

Hi All, 

I have been able to implement GRE tunneling on OpenvSwitch and now I want to 
implement GRE over IPsec on OpenvSwitch. 
For this, I have installed the OpenvSwitch-IPsec package on my system and I'm 
running the ovs-monitor-ipsec demon. 

But when I'm using the following command: 
ovs-vsctl add-port br0 gre0 -- set interface gre0 type=ipsec_gre 
options:remote_ip=10.10.10.2 . 
The ipsec_gre interface is not getting shown at the kernel level. 
I checked it using the following command: 
ovs-dpctl show br0 

When I see the OpenvSwitch logs,it is giving following error: 

2014-02-12T11:04:38Z|00010|netdev_vport|ERR|gre0: IPsec requires the 
ovs-monitor-ipsec daemon 
2014-02-12T11:04:38Z|00011|bridge|WARN|could not configure network device gre0 
(Invalid argument) 

[Ansis]: Make sure that ovs-monitor-ipsec.pid file is in the ovs run directory 
(just like all other ovs pid files).

I haven't been able to figure why this error is coming , as the demon is 
running in the background. 
Also I didn't found found any relevant document related to GRE over IPsec which 
will show how the openvswitch-ipsec demon will commiunicate with racoon in 
order to implement ipsec functionality on OpenvSwitch with the configuration 
required in order to implement this. 

How should I configure racoon to implement IPsec functionality? 
Do I need to do some more configuration regarding ipsec on openvswitch? 

Please help me regarding this issue.Any help would be appreciated. 

Thanks 



_______________________________________________ 
discuss mailing list 
[email protected] 
https://urldefense.proofpoint.com/v1/url?u=http://openvswitch.org/mailman/listinfo/discuss&k=oIvRg1%2BdGAgOoM1BIlLLqw%3D%3D%0A&r=%2BXk50J8yLqbRhlVkuC%2BJEmVDkOTsHuSfu5t%2FO7oEwWU%3D%0A&m=rq7%2B0leIjGyTFuBcuv6Ke3fmaNeGmTLpmxFfwo9mHfU%3D%0A&s=97fe6496618575e64a00a40955541585c2313eb887ca1b136c6da693a5201783
 
_______________________________________________
discuss mailing list
[email protected]
http://openvswitch.org/mailman/listinfo/discuss

Reply via email to