-
Hi
I am wondering if there is a way without dropping out to tnsr to vppctl to set ipip<x> tunnel to be unnumbered and use the DPDK interface to forward traffic. eg:
set interface unnumbered ipip0 use VirtualFunctionEthernet0/X/0
Not all ipsec tunnels are route based with a seperate ip tunnel transport for endpoints. In addition to this, setting a route for a tunnel from the docs you are only able to specify and ip not a interface eg:
if ipip tunnel is setup src 172.10.40.1 dst 167.71.50.1ip route add 192.168.2.0/24 via 167.71.50.1 ipip0
-
Currently the only supported IPsec method is routed IPsec as described in the docs. Policy-based tunnels are something we are looking to add, but there is no ETA.