Hi Bin & Neale,
I know this exchange is a couple of years old now, but I'm having the exact
issue where the Ping reply from VPP is being sent in cleartext rather than
going through the IPSec tunnel. Could you provide some information on how this
was resolved?
Thanks in advance.
Dom
-=-=-=-=-=
"Bin Zhang (binzhang)"
Cc: "vpp-dev@lists.fd.io"
Subject: Re: [vpp-dev] Need Help on an ipsec Problem
Hi Bin,
That looks like a FIB entry caused by there being an ARP entry for 172.28.128.4
on GigE0/8/0. Is that true?
and it looks like from your trace that 172.28.128.4 is the tu
t;Bin Zhang (binzhang)"
Date: Tuesday, 19 December 2017 at 02:28
To: "Neale Ranns (nranns)"
Cc: "vpp-dev@lists.fd.io"
Subject: Re: [vpp-dev] Need Help on an ipsec Problem
Hi Neale,
Many thanks for the help. You are right that I did not enable/configure the
ipse
00, ttl 63, length 84, checksum 0x478d
fragment id 0x6ff8
ICMP echo_reply checksum 0x91d6
Thanks in advance,
Bin
From: "Neale Ranns (nranns)"
Date: Sunday, December 17, 2017 at 8:07 AM
To: "Bin Zhang (binzhang)" , "vpp-dev@lists.fd.io"
Subject: Re: [vpp-dev] Ne
;
set int ip addr p.q.r.s/t
Or be unnumbered to another interface that has one;
set int ip addr p.q.r.s/t
set int unnumbered use
/neale
From: on behalf of "Bin Zhang (binzhang)"
Date: Friday, 15 December 2017 at 23:04
To: "vpp-dev@lists.fd.io"
Subject: [vpp-dev] N
Hi Team,
I am new to VPP and would appreciate your comments and debugging tips on the
following problem.
I have set up an ipsec tunnel between two VMs (as shown in the diagram). The
client side is Strongswan and the server side is VPP. But I can not ping
through the tunnel from the client VM
