Hi Vijay, The Tunnel Endpoint Information Base (TEIB), is the database of mappings. It was formerly called NHRP in VPP. It can be populated:
1. via the 'tieb ipip0 peer 192.168.0.2 nh 10.1.1.1' command 2. or when the SA is established, via 'ipsec tunnel protect ipip0 sa-in 20 sa-out 30 nh 192.168.0.2' See the ipsec wiki page [0] for more info. [0] https://wiki.fd.io/view/VPP/IPSec On Thu, Dec 24, 2020 at 1:59 PM Vijay Kumar <vjkumar2...@gmail.com> wrote: > Hi Paul, > > If you know about the below two questions that I asked in my last reply, > could you plz answer? > > > Regards. > > On Thu, 24 Dec 2020, 00:02 Vijay Kumar via lists.fd.io, <vjkumar2003= > gmail....@lists.fd.io> wrote: > >> Hi Paul, >> >> Question 1 >> By physical addresses you mean the routable public IPs that form the >> tunnel src and tunnel dst addresses? >> >> In my use case there is a GRE traffic that is originating from 5G mobiles >> and is received by the N3IWF (wifi gateway) as shown in the below topo. The >> GRE traffic generated by UE is over IPSEC (the GRE pkts have ESP encap). In >> the production, there can be several thousands of 5G UEs that generate >> gre-over-ipsec traffic that will terminate on a single p2mp (multipoint) >> GRE interface on the N3IWF gateway as shown below. >> >> Question 2 >> Since GRE is always encapsulated in IPSEC tunnel, do we still need to >> need to map the GRE tunnel addresses to physical addresses. I thought we >> would not be need GRE physical addresses in our use-case as there is the >> IPSEC that is always outermost hdr and would be used for routing >> >> >> Topo >> ================ >> UE ------(gre-over-ipsec traffic)----------N3IWF >> >> On Wed, Dec 23, 2020 at 10:12 AM Paul Vinciguerra < >> pvi...@vinciconsulting.com> wrote: >> >>> Hi Vijay, >>> >>> How are you planning to map the tunnel addresses to the >>> physical addresses? >>> >>> On Tue, Dec 22, 2020 at 9:04 PM Vijay Kumar <vjkumar2...@gmail.com> >>> wrote: >>> >>>> Hi Paul, >>>> >>>> Thanks for the information. >>>> >>>> Your script is talking about nhrp protocol. >>>> Is NHRP protocol mandatory to support mGRE? >>>> >>>> >>>> Regards >>>> >>>> On Wed, 23 Dec 2020, 01:24 Paul Vinciguerra, < >>>> pvi...@vinciconsulting.com> wrote: >>>> >>>>> Hi Vijay. >>>>> >>>>> Does this help any? >>>>> https://github.com/vpp-dev/vpp/blob/master/test/test_gre.py#L998 >>>>> >>>>> >>>>> On Tue, Dec 22, 2020 at 12:47 PM Vijay Kumar <vjkumar2...@gmail.com> >>>>> wrote: >>>>> >>>>>> Hi, >>>>>> >>>>>> Can someone help me understand if multipoint GRE (one gre interface >>>>>> that can communicate with multiple peers) is supported in the fd.ip GRE >>>>>> plugin? >>>>>> >>>>>> If yes, could you please share with me an example config for >>>>>> multi-point GRE. In the fd.io wiki pages, I am only seeing *p2mp >>>>>> *configuration >>>>>> (point to multipoint) for IP-in-IP but not for GRE >>>>>> >>>>>> >>>>>> Please share me an example config that I can use to test >>>>>> >>>>>> >>>>>> Regards >>>>>> >>>>>> >>>>>> >>>>>> >> >> >>
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#18427): https://lists.fd.io/g/vpp-dev/message/18427 Mute This Topic: https://lists.fd.io/mt/79154511/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
