diff options
author | Benoît Ganne <bganne@cisco.com> | 2019-06-26 13:36:51 +0200 |
---|---|---|
committer | Neale Ranns <nranns@cisco.com> | 2019-07-02 14:19:07 +0000 |
commit | cfc7a107e6cb8be6e7c53a08e23a146c431c8e90 (patch) | |
tree | 2179e92193ce7453b6eb67ba94a3c881f998f4fc /test/template_ipsec.py | |
parent | 2ec825937b7ac856f67d086ce6814dd21c5e9bd7 (diff) |
gbp: add anonymous l3-out external interfaces
So far, GBP l3-out packets classification & policy relied on programmed
EP. All traffic to/from l3-out must go through a known EP.
This patch introduces a new feature where l3-out next-hops are only
known by their subnets (l3-out prefixes). As there are no longer known
EPs to program, an interface must be configured as external anonymous
l3-out. Packets classification & policy on this interface will rely on
the external subnets programmed in the BD VRF.
Note that contrary to all other interfaces in a GBP BD, external
anonymous l3-out interfaces have BD L2 learning turned on and rely on
ARP/ND.
Type: feature
Change-Id: Ieedb29dff4e967d08c4301e82d06bff450a63e5f
Signed-off-by: Benoît Ganne <bganne@cisco.com>
Diffstat (limited to 'test/template_ipsec.py')
0 files changed, 0 insertions, 0 deletions