[ovs-dev] GRE over IPsec on CentOS

Diego Rivero riverod9 at gmail.com
Fri Dec 14 09:49:53 UTC 2012


How can I achieve GRE over IPsec on CentOS 6.3 instead of debian?

So far what I've understood is the following..

# ovs-vsctl add-port br0 gre0
# ovs-vsctl set interface gre0 type=ipsec_gre \
options:remote_ip=192.168.2.xxx \
options:psk=testtest \
options:certificate=cert.pem \
options:peer_cert='"-----BEGIN CERTIFICATE-----(not a real peer
certificate)-----END CERTIFICATE----- \


But I don't know how to move it forward. Do I need to install openswan for
encryption? How can I configure to tell open vswitch the existance of
openswan? Does open vswitch have an encription module on its own?

Thanks in advance.

Diego
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openvswitch.org/pipermail/ovs-dev/attachments/20121214/a32fafc2/attachment-0003.html>


More information about the dev mailing list