[ovs-dev] Configuring GRE over IPSEC Tunnel in OVS

Farrukh Aftab Khan Farrukh.Khan at xflowresearch.com
Tue Sep 25 07:36:23 UTC 2012


Thank you for the reply Justin.

I am using Ubuntu 11.10. I did install the package 'openvswitch-ipsec'
before but when it asked for openvswitch_mod,ko as kernel module, I assumed
it to be out dated. I have searched around a little more for a package
based upon recent/current release but to no avail.

I am using OVS-1.7.1, which is not one of the the LTS series of
openvswitch. Is there a package for it?
If not, what would I need to do to run ipsec in OVS-1.7.1? I am extremely
interested in attempting to run these tunneling protocols (and maybe
develop one someday as well).

Regards.
--Farrukh


On Mon, Sep 24, 2012 at 9:18 PM, Justin Pettit <jpettit at nicira.com> wrote:

> We only have packaging for Debian-based systems, so it will be far easier
> to use there.  Assuming you are on Debian, do you have the
> openvswitch-ipsec package installed?
>
> --Justin
>
>
> On Sep 24, 2012, at 4:04 AM, Farrukh Aftab Khan <
> Farrukh.Khan at xflowresearch.com> wrote:
>
> > (Sorry for the resend but my earlier email seems to have been truncated)
> >
> > Hello,
> > Is there any specific way of running GRE over IPSEC? From what I
> understood after implementing STT, VXLAN and GRE tunnels, I tried using:
> >
> > sudo ovs-vsctl add-port br1 gre1 -- set interface gre1 type=ipsec_gre
> option:remote_ip=xx.xx.xx.xx
> >
> > But the tunnel won't set up. I have tried using wireshark for debugging
> as well but no packets come to the interface. Is there something I am
> missing regarding this?
> > Any sort of help/feedback would be appreciated.
> > Thanks & Regards.
> > _______________________________________________
> > dev mailing list
> > dev at openvswitch.org
> > http://openvswitch.org/mailman/listinfo/dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openvswitch.org/pipermail/ovs-dev/attachments/20120925/cc0c22cd/attachment-0003.html>


More information about the dev mailing list