Hi all, I am trying to setup vpn on a vpp router. Testing via MacOS, as client. When a MacOS device connects it should join into a VLAN and receives an ip address under subnet 10.154.3.0/24.
I am following this: https://wiki.fd.io/view/VPP/IPSec_and_IKEv2#VPP_configuration_2 vpp.conf set int state TenGigabitEthernet8/0/0 up set int ip address TenGigabitEthernet8/0/0 71.22.100.124/29 ip route add 0.0.0.0/0 via 71.22.100.130 ikev2 profile add pr1 ikev2 profile set pr1 auth shared-key-mic string Vpp123 ikev2 profile set pr1 id local fqdn vpp.home ikev2 profile set pr1 id remote fqdn roadwarrior.vpn.example.com ikev2 profile set pr1 traffic-selector local ip-range 10.154.3.2 - 10.154.3.220 port-range 0 - 65535 protocol 0 ikev2 profile set pr1 traffic-selector remote ip-range 10.154.3.2 - 10.154.3.220 port-range 0 - 65535 protocol 0 set int state GigabitEthernet4/0/0 up loopback create set int l2 bridge loop2 3 bvi set int ip address loop2 10.154.3.1/24 set int state loop2 up create sub GigabitEthernet4/0/0 3 set int l2 bridge GigabitEthernet4/0/0.3 3 set int l2 tag-rewrite GigabitEthernet4/0/0.3 pop 1 set int state GigabitEthernet4/0/0.3 up nat44 add interface address TenGigabitEthernet8/0/0 set interface nat44 in loop2 out TenGigabitEthernet8/0/0 macOS network settings: server address: 71.22.100.124 remote id: vpp.home local id: roadwarrior.vpn.example.com Shared Secret: Vpp123 sh ikev2 sa is empty. Thanks
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#10529): https://lists.fd.io/g/vpp-dev/message/10529 Mute This Topic: https://lists.fd.io/mt/25742356/21656 Group Owner: [email protected] Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
