Hi Ray, [...] > create ipip tunnel src 10.0.0.2 dst 10.0.0.1 > ipsec tunnel protect ipip1 sa-in 30 sa-out 20
Looking at https://git.fd.io/vpp/tree/src/scripts/vnet/ipsec_tun_protect I think you are missing the table id to look after encrypt for ipip1, ie you should do: create ipip tunnel src 10.0.0.2 dst 10.0.0.1 outer-table-id 1 Otherwise it is probably not correctly initialized. Now should we initialize it correctly automatically that is another question 😊 Best ben
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#20930): https://lists.fd.io/g/vpp-dev/message/20930 Mute This Topic: https://lists.fd.io/mt/89457422/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
