Hi Andre, I think you forgot to enable nat44 feature. `nat44 plugin enable` and probably `nat44 forwarding enable`
On Thu, 16 Jun 2022 at 22:40, Andre Courchesne <courc...@net-forces.com> wrote: > I have this very simple config: > > startup.conf > unix { > nodaemon > log /var/log/vpp/vpp.log > full-coredump > cli-listen /run/vpp/cli.sock > gid vpp > startup-config /etc/vpp/initial_setup.conf > poll-sleep-usec 100 > } > > api-trace { > on > } > > api-segment { > gid vpp > } > > socksvr { > default > } > > cpu { > } > > buffers { > buffers-per-numa 512000 > default data-size 4096 > } > > dpdk { > dev default { > num-rx-queues 3 > num-tx-queues 3 > num-rx-desc 512 > num-tx-desc 512 > rss-queues 0,2,5-7 > } > > dev 0000:01:00.0 { > name wanport > } > dev 0000:03:00.0 { > name guestport > } > } > > plugins { > plugin default { disable } > plugin dpdk_plugin.so { enable } > plugin acl_plugin.so { enable } > plugin dhcp_plugin.so { enable } > plugin dns_plugin.so { disable } > plugin nat_plugin.so { enable } > plugin nat44_plugin.so { enable } > plugin cnat_plugin.so { enable } > plugin ping_plugin.so { enable } > } > > logging { > default-log-level debug > default-syslog-log-level debug > } > > initial_setup.conf > comment { configure wan port 0c:c4:7a:c8:fc:e4 } > set int mac address wanport 0c:c4:7a:c8:fc:e4 > set dhcp client intfc wanport hostname vpprouter > set int state wanport up > > comment { Add Linux VLAN interfaces } > create sub-interfaces guestport 1000 > > comment { Create loop0 -> untag traffic } > loopback create-interface > set int l2 bridge loop0 1 bvi > set int ip address loop0 192.168.2.1/24 > set int state loop0 up > > comment { Loop interfaces for VLANs } > comment { Create loop1 -> VLAN 1000 } > loopback create-interface > set int l2 bridge loop1 2 bvi > set int ip address loop1 172.20.0.0/20 > set int state loop1 up > > > comment { Add untag guest to loop0 } > set int l2 bridge guestport 1 > set int state guestport up > > comment { Add VLAN 1000 guest to loop1 } > set int l2 bridge guestport.1000 2 > set int l2 tag-rewrite guestport.1000 pop 1 > set int state guestport.1000 up > > > comment { create tap interface for dhcp server and host-stack access > (untag - loop0 - tap0) } > create tap id 0 host-if-name eno3 host-ip4-addr 192.168.2.2/24 > host-ip4-gw 192.168.2.1 > set int l2 bridge tap0 1 > set int state tap0 up > > comment { tap interfaces for VLANs } > comment { create tap interface for dhcp server and host-stack access > (VLAN 1000 - loop1 - tap1) } > create tap id 1 host-if-name eno3.1000 host-ip4-addr 172.20.0.2/20 > host-ip4-gw 172.20.0.1 > set int l2 bridge tap1 2 > set int state tap1 up > > comment { configure nat } > nat44 add interface address wanport > set interface nat44 in loop1 out wanport > > comment { Route ssh (TCP 22) to the untag Linux interface } > nat44 add static mapping local 192.168.2.2 22 external wanport 22 tcp > > > When starting vpp manually I get an error on NAT44: > > guestport.1000 > loop0 > loop1 > tap0 > tap1 > nat44 add interface address: add wanport address failed > > > This same config works on CentOS with vpp 20.09 but failt with v22.06-rc1 > > wanport did get an IP via DHCP. > > Any clues ? > > Andre Courchesne - Consultant > http://net-forces.blogspot.ca <http://www.net-forces.com/> > https://www.co2.click > Twitter: @IndianaTux > LinkedIn: http://www.linkedin.com/pub/andr%C3%A9-courchesne/0/b0b/688 > > L'information contenue dans le présent document est la propriété de Andre > Courchesne. Et est divulguée en toute confidentialité. Cette information ne > doit pas être utilisée, divulguée à d'autres personnes ou reproduite sans > le consentement écrit explicite de Andre Courchesne. > > The information contained in this document is confidential and property of > Andre Courchesne. It shall not be used, disclosed to others or reproduced > without the express written consent of Andre Courchesne. > > > > -- Best regards Stanislav Zaikin
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#21548): https://lists.fd.io/g/vpp-dev/message/21548 Mute This Topic: https://lists.fd.io/mt/91808820/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/1480452/21656/631435203/xyzzy [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-