documentation:examples:ipsec_performance_of_a_netgate_rcc-ve_4860
Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revisionNext revisionBoth sides next revision | ||
| documentation:examples:ipsec_performance_of_a_netgate_rcc-ve_4860 [2017/09/04 01:23] – external edit 127.0.0.1 | documentation:examples:ipsec_performance_of_a_netgate_rcc-ve_4860 [2020/09/22 12:02] – [Netgate (DUT)] olivier | ||
|---|---|---|---|
| Line 17: | Line 17: | ||
| < | < | ||
| - | +---------------------+ | + | +---------------------+ |
| - | | R1 | + | | R1 |
| - | | | + | | |
| - | | and receiver | + | | and receiver |
| - | | | + | | |
| - | |igb2: 198.18.0.201/ | + | |igb2: 198.18.0.201/ |
| - | | | + | | |
| - | | 00: | + | | 00: |
| - | | | + | | |
| - | | | + | | |
| - | | | + | | |
| - | | | + | | |
| - | | | + | | |
| - | | | + | | |
| - | | | + | | |
| - | | | + | | |
| - | | | + | | |
| - | | | + | | |
| - | | | + | | |
| - | |igb3: 198.19.0.201/ | + | | |
| - | |2001: | + | | |
| - | | | + | | |
| - | +---------------------+ | + | |igb3: 198.19.0.201/ |
| - | || | + | |2001: |
| - | ==================================< | + | | |
| + | +---------------------+ | ||
| + | || || | ||
| + | ==================================< | ||
| </ | </ | ||
| ===== Devices configuration ===== | ===== Devices configuration ===== | ||
| Line 49: | Line 52: | ||
| ==== Netgate (DUT) ==== | ==== Netgate (DUT) ==== | ||
| + | / | ||
| + | < | ||
| + | # Loading AES-NI module sooner to be sure it is loaded before IPsec keys | ||
| + | aesni_load=" | ||
| + | </ | ||
| Configure IP address, routes and static IPSec: | Configure IP address, routes and static IPSec: | ||
| Line 58: | Line 66: | ||
| static_routes=" | static_routes=" | ||
| route_generator=" | route_generator=" | ||
| - | route_receiver=" | + | route_receiver=" |
| static_arp_pairs=" | static_arp_pairs=" | ||
| static_arp_generator=" | static_arp_generator=" | ||
| Line 70: | Line 78: | ||
| ipv6_static_routes=" | ipv6_static_routes=" | ||
| ipv6_route_generator=" | ipv6_route_generator=" | ||
| - | ipv6_route_receiver=" | + | ipv6_route_receiver=" |
| static_ndp_pairs=" | static_ndp_pairs=" | ||
| static_ndp_generator=" | static_ndp_generator=" | ||
| static_ndp_receiver=" | static_ndp_receiver=" | ||
| + | cloned_interfaces=" | ||
| + | create_args_ipsec0=" | ||
| + | ifconfig_ipsec0=" | ||
| + | ifconfig_ipsec0_ipv6=" | ||
| - | # Enabling | + | # Enabling |
| ipsec_enable=" | ipsec_enable=" | ||
| - | |||
| - | # Enabling AES-NI | ||
| - | kld_list=" | ||
| </ | </ | ||
| Line 86: | Line 95: | ||
| flush; | flush; | ||
| spdflush; | spdflush; | ||
| - | spdadd 198.18.0.0/ | + | add 198.18.1.203 198.18.1.209 esp 10000 -m tunnel -u 100 -E aes-gcm-16 " |
| - | spdadd 198.19.0.0/ | + | add 198.18.1.209 198.18.1.203 esp 10001 -m tunnel -u 100 -E aes-gcm-16 " |
| - | add 198.18.1.203 198.18.1.209 esp 0x1000 | + | |
| - | add 198.18.1.209 198.18.1.203 esp 0x1001 | + | |
| - | spdadd 2001:2::/49 2001: | + | |
| - | spdadd 2001: | + | |
| - | add 2001: | + | |
| - | add 2001: | + | |
| </ | </ | ||
documentation/examples/ipsec_performance_of_a_netgate_rcc-ve_4860.txt · Last modified: 2020/09/22 12:08 by olivier