Re: [vpp-dev] Issues adding ACL with binary_api
I was able to run the same command on the centos platform when I build the image. I am seeing this issue when I install the VPP package Downloading and Installing VPP — The Vector Packet Processor 21.06 documentation (fd.io) ( https://fd.io/docs/vpp/latest/gettingstarted/installing/#installing-on-centos ) -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#20020): https://lists.fd.io/g/vpp-dev/message/20020 Mute This Topic: https://lists.fd.io/mt/85093357/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] Issues adding ACL with binary_api
vl_api_acl_add_replace_reply_t_handler: *73* : ACL index: 0 *73* pointing to the error code VNET_API_ERROR_INVALID_ARGUMENT. It gives some clue. -- Thanks & Regards, Murthy -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#20016): https://lists.fd.io/g/vpp-dev/message/20016 Mute This Topic: https://lists.fd.io/mt/85093357/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] Issues adding ACL with binary_api
Have a look at https://git.fd.io/vpp/tree/src/plugins/acl/acl_test.c#n565 to check what you need to specify. “T” in VAT stands for “test”, so there may be not enough TLC harness around. Feel free to submit changes that improve the user friendliness :) --a > On 23 Aug 2021, at 21:36, satish amara wrote: > > > [Edited Message Follows] > > Hi, >I tried to add ACL rule by following commands. There was no error. A new > ACL index is created. When I do show ACL , count is 0, and the ACL rule is > not displayed. > > vat# acl_add_replace ipv4 permit src 30.30.30.1/32 dst 40.40.40.1/32 sport > 1000 dport 1000, ipv4 permit src 10.10.10.0/24, ipv4 permit src 20.20.20.0/24 > vl_api_acl_add_replace_reply_t_handler:73: ACL index: 0 > > > vat# acl_dump > vl_api_acl_details_t_handler:194: acl_index: 0, count: 0 >tag {} > vat# > > > If I use debug CLI it works, for example > set acl-plugin acl permit+reflect src 192.81.1.1/32 dst 192.82.1.1/32 proto > 17 sport 100 dport 1 > > > Thanks, > Satish K Amara > > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#20014): https://lists.fd.io/g/vpp-dev/message/20014 Mute This Topic: https://lists.fd.io/mt/85093357/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] Issues adding ACL with binary_api
[Edited Message Follows] Hi, I tried to add ACL rule by following commands. There was no error. A new ACL index is created. When I do show ACL , count is 0, and the ACL rule is not displayed. vat# acl_add_replace ipv4 permit src 30.30.30.1/32 ( http://30.30.30.1/32 ) dst 40.40.40.1/32 ( http://40.40.40.1/32 ) sport 1000 dport 1000, ipv4 permit src 10.10.10.0/24 ( http://10.10.10.0/24 ) , ipv4 permit src 20.20.20.0/24 ( http://20.20.20.0/24 ) vl_api_acl_add_replace_reply_t_handler:73: ACL index: 0 vat# acl_dump vl_api_acl_details_t_handler:194: acl_index: 0, count: 0 tag {} vat# If I use debug CLI it works, for example set acl-plugin acl permit+reflect src 192.81.1.1/32 ( http://192.81.1.1/32 ) dst 192.82.1.1/32 ( http://192.82.1.1/32 ) proto 17 sport 100 dport 1 Thanks, Satish K Amara -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#20012): https://lists.fd.io/g/vpp-dev/message/20012 Mute This Topic: https://lists.fd.io/mt/85093357/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] Issues adding ACL with binary_api
Hi, I am tried to add ACL rule by following commands. There was no error. A new ACL index is created by when I do show ACL , count is 0, and the ACL rule is not displayed. vat# acl_add_replace ipv4 permit src 30.30.30.1/32 dst 40.40.40.1/32 sport 1000 dport 1000, ipv4 permit src 10.10.10.0/24, ipv4 permit src 20.20.20.0/24 vl_api_acl_add_replace_reply_t_handler:73: ACL index: 0 vat# dump_acl 'dump_acl': function not found vat# acl_dump vl_api_acl_details_t_handler:194: acl_index: 0, count: 0 tag {} vat# vat But if use debug CLI it works, for example set acl-plugin acl permit+reflect src 192.81.1.1/32 dst 192.82.1.1/32 proto 17 sport 100 dport 1 I can the new ACL rule Thanks, Satish K Amara -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#20012): https://lists.fd.io/g/vpp-dev/message/20012 Mute This Topic: https://lists.fd.io/mt/85093357/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-