Hi Vijay.

Those cli commands come from the wiki url provided.
The wiki was actually incorrect. The command is:

create teib <interface> peer <addr> nh <addr> [nh-table-id <ID>]

(Which I just updated)



On Fri, Dec 25, 2020 at 11:19 AM Vijay Kumar <vjkumar2...@gmail.com> wrote:

> Hi Paul,
>
> Thanks for the response.
> Could you clarify the below two points based out of your response?
>
> 1) Can the TEIB entry be filled by CLI and does TEIB concept apply for GRE
> also(besides IPIP)?
>
> 2) I assume the address 192.168.0.2  points to the GRE destination that's
> dynamically discovered. While the 10.1.1.1 address in your example below
> refer to the tunnel src address hosted in VPP?
>
>
>
> Regards
>
>
>
> On Fri, 25 Dec 2020, 04:49 Paul Vinciguerra, <pvi...@vinciconsulting.com>
> wrote:
>
>> Hi Vijay,
>>
>> The Tunnel Endpoint Information Base (TEIB), is the database of
>> mappings.  It was formerly called NHRP in VPP.
>> It can be populated:
>>
>>    1. via the 'tieb ipip0 peer 192.168.0.2 nh 10.1.1.1' command
>>    2. or when the SA is established, via 'ipsec tunnel protect ipip0
>>    sa-in 20 sa-out 30 nh 192.168.0.2'
>>
>> See the ipsec wiki page [0] for more info.
>>
>> [0] https://wiki.fd.io/view/VPP/IPSec
>>
>> On Thu, Dec 24, 2020 at 1:59 PM Vijay Kumar <vjkumar2...@gmail.com>
>> wrote:
>>
>>> Hi Paul,
>>>
>>> If you know about the below two questions that I asked in my last reply,
>>> could you plz answer?
>>>
>>>
>>> Regards.
>>>
>>> On Thu, 24 Dec 2020, 00:02 Vijay Kumar via lists.fd.io, <vjkumar2003=
>>> gmail....@lists.fd.io> wrote:
>>>
>>>> Hi Paul,
>>>>
>>>> Question 1
>>>> By physical addresses you mean the routable public IPs that form the
>>>> tunnel src and tunnel dst addresses?
>>>>
>>>> In my use case there is a GRE traffic that is originating from 5G
>>>> mobiles and is received by the N3IWF (wifi gateway) as shown in the below
>>>> topo. The GRE traffic generated by UE is over IPSEC (the GRE pkts have ESP
>>>> encap). In the production, there can be several thousands of 5G UEs that
>>>> generate gre-over-ipsec traffic that will terminate on a single p2mp
>>>> (multipoint) GRE interface on the N3IWF gateway as shown below.
>>>>
>>>> Question 2
>>>> Since GRE is always encapsulated in IPSEC tunnel, do we still need to
>>>> need to map the GRE tunnel addresses to physical addresses. I thought we
>>>> would not be need GRE physical addresses in our use-case as there is the
>>>> IPSEC that is always outermost hdr and would be used for routing
>>>>
>>>>
>>>> Topo
>>>> ================
>>>> UE ------(gre-over-ipsec traffic)----------N3IWF
>>>>
>>>> On Wed, Dec 23, 2020 at 10:12 AM Paul Vinciguerra <
>>>> pvi...@vinciconsulting.com> wrote:
>>>>
>>>>> Hi Vijay,
>>>>>
>>>>> How are you planning to map the tunnel addresses to the
>>>>> physical addresses?
>>>>>
>>>>> On Tue, Dec 22, 2020 at 9:04 PM Vijay Kumar <vjkumar2...@gmail.com>
>>>>> wrote:
>>>>>
>>>>>> Hi Paul,
>>>>>>
>>>>>> Thanks for the information.
>>>>>>
>>>>>> Your script is talking about nhrp protocol.
>>>>>> Is NHRP protocol mandatory to support mGRE?
>>>>>>
>>>>>>
>>>>>> Regards
>>>>>>
>>>>>> On Wed, 23 Dec 2020, 01:24 Paul Vinciguerra, <
>>>>>> pvi...@vinciconsulting.com> wrote:
>>>>>>
>>>>>>> Hi Vijay.
>>>>>>>
>>>>>>> Does this help any?
>>>>>>> https://github.com/vpp-dev/vpp/blob/master/test/test_gre.py#L998
>>>>>>>
>>>>>>>
>>>>>>> On Tue, Dec 22, 2020 at 12:47 PM Vijay Kumar <vjkumar2...@gmail.com>
>>>>>>> wrote:
>>>>>>>
>>>>>>>> Hi,
>>>>>>>>
>>>>>>>> Can someone help me understand if multipoint GRE (one gre interface
>>>>>>>> that can communicate with multiple peers) is supported in the fd.ip GRE
>>>>>>>> plugin?
>>>>>>>>
>>>>>>>> If yes, could you please share with me an example config for
>>>>>>>> multi-point GRE. In the fd.io wiki pages, I am only seeing *p2mp 
>>>>>>>> *configuration
>>>>>>>> (point to multipoint) for IP-in-IP but not for GRE
>>>>>>>>
>>>>>>>>
>>>>>>>> Please share me an example config that I can use to test
>>>>>>>>
>>>>>>>>
>>>>>>>> Regards
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>> 
>>>>
>>>>
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#18430): https://lists.fd.io/g/vpp-dev/message/18430
Mute This Topic: https://lists.fd.io/mt/79154511/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to