Hi Vijay.
Those cli commands come from the wiki url provided.
The wiki was actually incorrect. The command is:
create teib peer nh [nh-table-id ]
(Which I just updated)
On Fri, Dec 25, 2020 at 11:19 AM Vijay Kumar wrote:
> Hi Paul,
>
> Thanks for the response.
> Could you clarify the below two points based out of your response?
>
> 1) Can the TEIB entry be filled by CLI and does TEIB concept apply for GRE
> also(besides IPIP)?
>
> 2) I assume the address 192.168.0.2 points to the GRE destination that's
> dynamically discovered. While the 10.1.1.1 address in your example below
> refer to the tunnel src address hosted in VPP?
>
>
>
> Regards
>
>
>
> On Fri, 25 Dec 2020, 04:49 Paul Vinciguerra,
> wrote:
>
>> Hi Vijay,
>>
>> The Tunnel Endpoint Information Base (TEIB), is the database of
>> mappings. It was formerly called NHRP in VPP.
>> It can be populated:
>>
>>1. via the 'tieb ipip0 peer 192.168.0.2 nh 10.1.1.1' command
>>2. or when the SA is established, via 'ipsec tunnel protect ipip0
>>sa-in 20 sa-out 30 nh 192.168.0.2'
>>
>> See the ipsec wiki page [0] for more info.
>>
>> [0] https://wiki.fd.io/view/VPP/IPSec
>>
>> On Thu, Dec 24, 2020 at 1:59 PM Vijay Kumar
>> wrote:
>>
>>> Hi Paul,
>>>
>>> If you know about the below two questions that I asked in my last reply,
>>> could you plz answer?
>>>
>>>
>>> Regards.
>>>
>>> On Thu, 24 Dec 2020, 00:02 Vijay Kumar via lists.fd.io, >> gmail@lists.fd.io> wrote:
>>>
Hi Paul,
Question 1
By physical addresses you mean the routable public IPs that form the
tunnel src and tunnel dst addresses?
In my use case there is a GRE traffic that is originating from 5G
mobiles and is received by the N3IWF (wifi gateway) as shown in the below
topo. The GRE traffic generated by UE is over IPSEC (the GRE pkts have ESP
encap). In the production, there can be several thousands of 5G UEs that
generate gre-over-ipsec traffic that will terminate on a single p2mp
(multipoint) GRE interface on the N3IWF gateway as shown below.
Question 2
Since GRE is always encapsulated in IPSEC tunnel, do we still need to
need to map the GRE tunnel addresses to physical addresses. I thought we
would not be need GRE physical addresses in our use-case as there is the
IPSEC that is always outermost hdr and would be used for routing
Topo
UE --(gre-over-ipsec traffic)--N3IWF
On Wed, Dec 23, 2020 at 10:12 AM Paul Vinciguerra <
pvi...@vinciconsulting.com> wrote:
> Hi Vijay,
>
> How are you planning to map the tunnel addresses to the
> physical addresses?
>
> On Tue, Dec 22, 2020 at 9:04 PM Vijay Kumar
> wrote:
>
>> Hi Paul,
>>
>> Thanks for the information.
>>
>> Your script is talking about nhrp protocol.
>> Is NHRP protocol mandatory to support mGRE?
>>
>>
>> Regards
>>
>> On Wed, 23 Dec 2020, 01:24 Paul Vinciguerra, <
>> pvi...@vinciconsulting.com> wrote:
>>
>>> Hi Vijay.
>>>
>>> Does this help any?
>>> https://github.com/vpp-dev/vpp/blob/master/test/test_gre.py#L998
>>>
>>>
>>> On Tue, Dec 22, 2020 at 12:47 PM Vijay Kumar
>>> wrote:
>>>
Hi,
Can someone help me understand if multipoint GRE (one gre interface
that can communicate with multiple peers) is supported in the fd.ip GRE
plugin?
If yes, could you please share with me an example config for
multi-point GRE. In the fd.io wiki pages, I am only seeing *p2mp
*configuration
(point to multipoint) for IP-in-IP but not for GRE
Please share me an example config that I can use to test
Regards
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#18430): https://lists.fd.io/g/vpp-dev/message/18430
Mute This Topic: https://lists.fd.io/mt/79154511/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
