I don't think that the current PoC ikev2 code can do that. Regards, Klement
Quoting [email protected] (2018-12-06 11:29:12) > Klement, > i saw the ipsec_sad_add_del_entry api , but in my mind, it was used to > create manual ipsec tunnel . > how to set the ipsec tunnel negotiated out by ikev2 to be udp-encaped > using this api? > can you give me some tips? > thanks! > > -------------------------------------------------------------------------- > > [email protected] > > > 发件人： [1]Klement Sekera > 发送时间： 2018-12-06 18:16 > 收件人： [2][email protected] > 抄送： [3]vpp-dev > 主题： Re: Re: [vpp-dev] ikev2-ipsec-tunnel && NAT-T ？ > ipsec_sad_add_del_entry API - udp_encap parameter must be set to 1 > > Regards, > Klement > > Quoting [email protected] (2018-12-06 02:16:35) > > hi Klement, > > which api? Thanks > > > > > > -------------------------------------------------------------------------- > > > > [email protected] > > > > > > 发件人： [1]Klement Sekera > > 发送时间： 2018-12-04 18:09 > > 收件人： [2][email protected] > > 主题： Re: [vpp-dev] ikev2-ipsec-tunnel && NAT-T ？ > > There is an API to enable udp encap, but unless this is called > > externally, it won't be used. > > > > Regards, > > Klement > > > > Quoting [email protected] (2018-12-04 02:15:53) > > > Hi all, > > > Can the ipsec tunnel generated by ikev2 support > > udp-encap(NAT-T) ? > > > How? > > > Thanks! > > > > > > > > > > -------------------------------------------------------------------------- > > > > > > [email protected] > > > > References > > > > Visible links > > 1. mailto:[email protected] > > 2. mailto:[email protected] > > References > > Visible links > 1. mailto:[email protected] > 2. mailto:[email protected] > 3. mailto:[email protected]
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11510): https://lists.fd.io/g/vpp-dev/message/11510 Mute This Topic: https://lists.fd.io/mt/28578226/21656 Group Owner: [email protected] Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
