syncmaster4 wrote:
Looking for some advise from the experts out there.

We do simple traffice shaping and I'm having trouble figuring out how to
shape vpn traffic using a tc filter.

The following filter works fine for SSH
tc filter add dev eth2 parent 1:0 protocol ip u32 match ip sport 22 0xffff
classid 1:10

The following throws and "Illegal match" error when trying to filter GRE
traffic.
tc filter add dev eth2 parent 1:0 protocol ip u32 \
       match ip protocol 47 0xff \
       match ip u16 0x10 00ff at 24 \
       classid 1:10

Any pointers are greatly appreciated!

You don't need the ip in match ip u16.

Possibly also put 0x before 00ff and I am not sure what that will actually match.

Andy.
_______________________________________________
LARTC mailing list
[email protected]
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Reply via email to