Hi,
I have 4 VLANs each with loopback interface and a tap interface. I
want each of the tap interfaces to have access to the WAN (internet)
via BondEthernet0 interface. I am using ubuntu.
snat config:
nat44 add interface address BondEthernet0
set interface nat44 in loop0 out BondEthernet0 // gw addr 10.0.0.1 (ltap0)
set interface nat44 in loop1 out BondEthernet0 // gw 10.1.0.1 (ltap1)
set interface nat44 in loop2 out BondEthernet0 // gw 10.2.0.1 (ltap2)
set interface nat44 in loop3 out BondEthernet0 // gw 10.3.0.1 (ltap3)
I am setting route as:
sudo route add default gw 10.3.0.1 dev ltap3
I am not able to ping. (ping -I ltap3 google.com)
But when I change the order, move loop3 to second position or first
position, I can ping via ltap3
nat44 add interface address BondEthernet0
set interface nat44 in loop0 out BondEthernet0 // gw addr 10.0.0.1 (ltap0)
set interface nat44 in loop3 out BondEthernet0 // gw 10.3.0.1 (ltap3)
set interface nat44 in loop1 out BondEthernet0 // gw 10.1.0.1 (ltap1)
set interface nat44 in loop2 out BondEthernet0 // gw 10.2.0.1 (ltap2)
I can only ping via whatever interfaces are set in first and second position.
Also when I have more than one set interface nat44, I see an error in the logs:
set interface nat44: add BondEthernet0 failed
when loop3 is in second position:
vpp# sh nat44 detail
NAT plugin mode: dynamic translations enabled
loop0 in
BondEthernet0 out
loop3 in
NAT44 pool addresses interfaces:
BondEthernet0
10.1.0.71
tenant VRF independent
0 busy udp ports
0 busy tcp ports
0 busy icmp ports
0 users, 1 outside addresses, 0 active sessions, 0 static mappings
Hash table in2out-ed
0 active elements
0 free lists
0 linear search buckets
0 cache hits, 0 cache misses
Hash table out2in-ed
0 active elements
0 free lists
0 linear search buckets
0 cache hits, 0 cache misses
Thanks
_______________________________________________
vpp-dev mailing list
[email protected]
https://lists.fd.io/mailman/listinfo/vpp-dev
