Hi Paul,

Here does the nh means the next hop to reach the destination which in the
case of multipoint GRE would be the tunnel src address configured on the
vpp side right?

On Sun, 27 Dec 2020, 06:11 Paul Vinciguerra, <pvi...@vinciconsulting.com>
wrote:

> Hi Vijay.
>
> Those cli commands come from the wiki url provided.
> The wiki was actually incorrect. The command is:
>
> create teib <interface> peer <addr> nh <addr> [nh-table-id <ID>]
>
> (Which I just updated)
>
>
>
> On Fri, Dec 25, 2020 at 11:19 AM Vijay Kumar <vjkumar2...@gmail.com>
> wrote:
>
>> Hi Paul,
>>
>> Thanks for the response.
>> Could you clarify the below two points based out of your response?
>>
>> 1) Can the TEIB entry be filled by CLI and does TEIB concept apply for
>> GRE also(besides IPIP)?
>>
>> 2) I assume the address 192.168.0.2  points to the GRE destination
>> that's dynamically discovered. While the 10.1.1.1 address in your example
>> below refer to the tunnel src address hosted in VPP?
>>
>>
>>
>> Regards
>>
>>
>>
>> On Fri, 25 Dec 2020, 04:49 Paul Vinciguerra, <pvi...@vinciconsulting.com>
>> wrote:
>>
>>> Hi Vijay,
>>>
>>> The Tunnel Endpoint Information Base (TEIB), is the database of
>>> mappings.  It was formerly called NHRP in VPP.
>>> It can be populated:
>>>
>>>    1. via the 'tieb ipip0 peer 192.168.0.2 nh 10.1.1.1' command
>>>    2. or when the SA is established, via 'ipsec tunnel protect ipip0
>>>    sa-in 20 sa-out 30 nh 192.168.0.2'
>>>
>>> See the ipsec wiki page [0] for more info.
>>>
>>> [0] https://wiki.fd.io/view/VPP/IPSec
>>>
>>> On Thu, Dec 24, 2020 at 1:59 PM Vijay Kumar <vjkumar2...@gmail.com>
>>> wrote:
>>>
>>>> Hi Paul,
>>>>
>>>> If you know about the below two questions that I asked in my last
>>>> reply, could you plz answer?
>>>>
>>>>
>>>> Regards.
>>>>
>>>> On Thu, 24 Dec 2020, 00:02 Vijay Kumar via lists.fd.io, <vjkumar2003=
>>>> gmail....@lists.fd.io> wrote:
>>>>
>>>>> Hi Paul,
>>>>>
>>>>> Question 1
>>>>> By physical addresses you mean the routable public IPs that form the
>>>>> tunnel src and tunnel dst addresses?
>>>>>
>>>>> In my use case there is a GRE traffic that is originating from 5G
>>>>> mobiles and is received by the N3IWF (wifi gateway) as shown in the below
>>>>> topo. The GRE traffic generated by UE is over IPSEC (the GRE pkts have ESP
>>>>> encap). In the production, there can be several thousands of 5G UEs that
>>>>> generate gre-over-ipsec traffic that will terminate on a single p2mp
>>>>> (multipoint) GRE interface on the N3IWF gateway as shown below.
>>>>>
>>>>> Question 2
>>>>> Since GRE is always encapsulated in IPSEC tunnel, do we still need to
>>>>> need to map the GRE tunnel addresses to physical addresses. I thought we
>>>>> would not be need GRE physical addresses in our use-case as there is the
>>>>> IPSEC that is always outermost hdr and would be used for routing
>>>>>
>>>>>
>>>>> Topo
>>>>> ================
>>>>> UE ------(gre-over-ipsec traffic)----------N3IWF
>>>>>
>>>>> On Wed, Dec 23, 2020 at 10:12 AM Paul Vinciguerra <
>>>>> pvi...@vinciconsulting.com> wrote:
>>>>>
>>>>>> Hi Vijay,
>>>>>>
>>>>>> How are you planning to map the tunnel addresses to the
>>>>>> physical addresses?
>>>>>>
>>>>>> On Tue, Dec 22, 2020 at 9:04 PM Vijay Kumar <vjkumar2...@gmail.com>
>>>>>> wrote:
>>>>>>
>>>>>>> Hi Paul,
>>>>>>>
>>>>>>> Thanks for the information.
>>>>>>>
>>>>>>> Your script is talking about nhrp protocol.
>>>>>>> Is NHRP protocol mandatory to support mGRE?
>>>>>>>
>>>>>>>
>>>>>>> Regards
>>>>>>>
>>>>>>> On Wed, 23 Dec 2020, 01:24 Paul Vinciguerra, <
>>>>>>> pvi...@vinciconsulting.com> wrote:
>>>>>>>
>>>>>>>> Hi Vijay.
>>>>>>>>
>>>>>>>> Does this help any?
>>>>>>>> https://github.com/vpp-dev/vpp/blob/master/test/test_gre.py#L998
>>>>>>>>
>>>>>>>>
>>>>>>>> On Tue, Dec 22, 2020 at 12:47 PM Vijay Kumar <vjkumar2...@gmail.com>
>>>>>>>> wrote:
>>>>>>>>
>>>>>>>>> Hi,
>>>>>>>>>
>>>>>>>>> Can someone help me understand if multipoint GRE (one gre
>>>>>>>>> interface that can communicate with multiple peers) is supported in 
>>>>>>>>> the
>>>>>>>>> fd.ip GRE plugin?
>>>>>>>>>
>>>>>>>>> If yes, could you please share with me an example config for
>>>>>>>>> multi-point GRE. In the fd.io wiki pages, I am only seeing *p2mp 
>>>>>>>>> *configuration
>>>>>>>>> (point to multipoint) for IP-in-IP but not for GRE
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Please share me an example config that I can use to test
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Regards
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>> 
>>>>>
>>>>>
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#18432): https://lists.fd.io/g/vpp-dev/message/18432
Mute This Topic: https://lists.fd.io/mt/79154511/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to