From 4362baa33c00b93d07f6648c87c064c96900f4df Mon Sep 17 00:00:00 2001 From: Filip Tehlar Date: Thu, 2 Apr 2020 13:13:39 +0000 Subject: ikev2: add support for NAT traversal Type: feature * initiator behind NAT supported * tested with static NAT mappings * works only with pre-configured tunnels The pre-configured tunnel has to be defined as follows: initiator (i) side: src=ip(i) dst=ip(r) responder (r) side: src=ip(r) dst=ip(nat) Change-Id: Ia9f79ddbbcc3f7dc8fde6bbeca2a433e3b784e94 Signed-off-by: Filip Tehlar --- test/test_punt.py | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) (limited to 'test/test_punt.py') diff --git a/test/test_punt.py b/test/test_punt.py index ecd34f6eea7..0c5ec7efe1f 100644 --- a/test/test_punt.py +++ b/test/test_punt.py @@ -795,15 +795,12 @@ class TestExceptionPuntSocket(TestPuntSocket): # # we're dealing with IPSec tunnels punting for no-such-tunnel - # adn SPI=0 + # (SPI=0 goes to ikev2) # cfgs = dict() cfgs['ipsec4-no-such-tunnel'] = {'spi': 99, 'udp': False, 'itf': self.pg0} - cfgs['ipsec4-spi-o-udp-0'] = {'spi': 0, - 'udp': True, - 'itf': self.pg1} # # find the VPP ID for these punt exception reasin -- cgit 1.2.3-korg