[ovs-dev] Configuring GRE over IPSEC Tunnel in OVS

Justin Pettit jpettit at nicira.com
Tue Sep 25 07:42:22 UTC 2012


I don't know of any prebuilt packages, but you should be able to generate your own packages with dpkg-buildpackage as described in INSTALL.

--Justin


On Sep 25, 2012, at 12:36 AM, Farrukh Aftab Khan <Farrukh.Khan at xflowresearch.com> wrote:

> Thank you for the reply Justin.
> 
> I am using Ubuntu 11.10. I did install the package 'openvswitch-ipsec' before but when it asked for openvswitch_mod,ko as kernel module, I assumed it to be out dated. I have searched around a little more for a package based upon recent/current release but to no avail.
> 
> I am using OVS-1.7.1, which is not one of the the LTS series of openvswitch. Is there a package for it?
> If not, what would I need to do to run ipsec in OVS-1.7.1? I am extremely interested in attempting to run these tunneling protocols (and maybe develop one someday as well).
> 
> Regards.
> --Farrukh
> 
> 
> On Mon, Sep 24, 2012 at 9:18 PM, Justin Pettit <jpettit at nicira.com> wrote:
> We only have packaging for Debian-based systems, so it will be far easier to use there.  Assuming you are on Debian, do you have the openvswitch-ipsec package installed?
> 
> --Justin
> 
> 
> On Sep 24, 2012, at 4:04 AM, Farrukh Aftab Khan <Farrukh.Khan at xflowresearch.com> wrote:
> 
> > (Sorry for the resend but my earlier email seems to have been truncated)
> >
> > Hello,
> > Is there any specific way of running GRE over IPSEC? From what I understood after implementing STT, VXLAN and GRE tunnels, I tried using:
> >
> > sudo ovs-vsctl add-port br1 gre1 -- set interface gre1 type=ipsec_gre option:remote_ip=xx.xx.xx.xx
> >
> > But the tunnel won't set up. I have tried using wireshark for debugging as well but no packets come to the interface. Is there something I am missing regarding this?
> > Any sort of help/feedback would be appreciated.
> > Thanks & Regards.
> > _______________________________________________
> > dev mailing list
> > dev at openvswitch.org
> > http://openvswitch.org/mailman/listinfo/dev
> 
> 




More information about the dev mailing list