documentation:examples:ipsec_performance_of_a_superserver_5018a-ftn4
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
| documentation:examples:ipsec_performance_of_a_superserver_5018a-ftn4 [2020/09/22 11:49] – [Diagram] olivier | documentation:examples:ipsec_performance_of_a_superserver_5018a-ftn4 [2020/09/22 11:52] – [DUT] olivier | ||
|---|---|---|---|
| Line 54: | Line 54: | ||
| Configure IP address, routes and static IPSec. | Configure IP address, routes and static IPSec. | ||
| + | |||
| + | / | ||
| + | < | ||
| + | # Loading AES-NI module sooner to be sure it is loaded before IPsec keys | ||
| + | aesni_load=" | ||
| + | </ | ||
| / | / | ||
| Line 59: | Line 65: | ||
| # IPv4 router | # IPv4 router | ||
| gateway_enable=" | gateway_enable=" | ||
| - | static_routes=" | ||
| - | route_generator=" | ||
| - | route_receiver=" | ||
| ifconfig_cxl0=" | ifconfig_cxl0=" | ||
| ifconfig_cxl1=" | ifconfig_cxl1=" | ||
| + | static_routes=" | ||
| + | route_generator=" | ||
| + | route_receiver=" | ||
| static_arp_pairs=" | static_arp_pairs=" | ||
| - | static_arp_generator=" | + | static_arp_generator=" |
| static_arp_receiver=" | static_arp_receiver=" | ||
| Line 71: | Line 77: | ||
| ipv6_gateway_enable=" | ipv6_gateway_enable=" | ||
| ipv6_activate_all_interfaces=" | ipv6_activate_all_interfaces=" | ||
| - | ipv6_static_routes=" | ||
| - | ipv6_route_generator=" | ||
| - | ipv6_route_receiver=" | ||
| ifconfig_cxl0_ipv6=" | ifconfig_cxl0_ipv6=" | ||
| ifconfig_cxl1_ipv6=" | ifconfig_cxl1_ipv6=" | ||
| + | ipv6_static_routes=" | ||
| + | ipv6_route_generator=" | ||
| + | ipv6_route_receiver=" | ||
| static_ndp_pairs=" | static_ndp_pairs=" | ||
| - | static_ndp_generator=" | + | static_ndp_generator=" |
| static_ndp_receiver=" | static_ndp_receiver=" | ||
| - | # Enabling IPSec | + | cloned_interfaces=" |
| - | kld_list="aesni" | + | create_args_ipsec0="reqid 100" |
| + | ifconfig_ipsec0=" | ||
| + | ifconfig_ipsec0_ipv6=" | ||
| + | |||
| + | # Enabling IPsec | ||
| ipsec_enable=" | ipsec_enable=" | ||
| </ | </ | ||
| Line 90: | Line 100: | ||
| flush; | flush; | ||
| spdflush; | spdflush; | ||
| - | spdadd 198.18.0.0/ | + | add 198.18.1.208 198.18.1.210 |
| - | spdadd 198.19.0.0/ | + | add 198.18.1.210 198.18.1.208 esp 10001 -m tunnel -u 100 -E aes-gcm-16 " |
| - | add 198.18.1.208 198.18.1.210 esp 0x1000 | + | |
| - | add 198.18.1.210 198.18.1.208 esp 0x1001 | + | |
| - | spdadd 2001:2::/49 2001: | + | |
| - | spdadd 2001: | + | |
| - | add 2001: | + | |
| - | add 2001: | + | |
| </ | </ | ||
| ==== Reference Endpoint ==== | ==== Reference Endpoint ==== | ||
| + | |||
| + | / | ||
| + | < | ||
| + | # Loading AES-NI module sooner to be sure it is loaded before IPsec keys | ||
| + | aesni_load=" | ||
| + | </ | ||
| Configure IP address, routes and static IPSec: | Configure IP address, routes and static IPSec: | ||
| < | < | ||
| - | # IPv4 router | ||
| gateway_enable=" | gateway_enable=" | ||
| ifconfig_cxl0=" | ifconfig_cxl0=" | ||
| ifconfig_cxl1=" | ifconfig_cxl1=" | ||
| static_routes=" | static_routes=" | ||
| - | route_generator=" | + | route_generator=" |
| route_receiver=" | route_receiver=" | ||
| static_arp_pairs=" | static_arp_pairs=" | ||
| static_arp_generator=" | static_arp_generator=" | ||
| - | static_arp_receiver=" | + | static_arp_receiver=" |
| # IPv6 router | # IPv6 router | ||
| Line 121: | Line 130: | ||
| ifconfig_cxl1_ipv6=" | ifconfig_cxl1_ipv6=" | ||
| ipv6_static_routes=" | ipv6_static_routes=" | ||
| - | ipv6_route_generator=" | + | ipv6_route_generator=" |
| ipv6_route_receiver=" | ipv6_route_receiver=" | ||
| static_ndp_pairs=" | static_ndp_pairs=" | ||
| static_ndp_generator=" | static_ndp_generator=" | ||
| - | static_ndp_receiver=" | + | static_ndp_receiver=" |
| + | cloned_interfaces=" | ||
| + | create_args_ipsec0=" | ||
| + | ifconfig_ipsec0=" | ||
| + | ifconfig_ipsec0_ipv6=" | ||
| - | # Enabling | + | # Enabling |
| - | kld_list=" | + | |
| ipsec_enable=" | ipsec_enable=" | ||
| </ | </ | ||
| Line 137: | Line 149: | ||
| flush; | flush; | ||
| spdflush; | spdflush; | ||
| - | spdadd 198.18.0.0/ | + | add 198.18.1.208 198.18.1.210 |
| - | spdadd 198.19.0.0/ | + | add 198.18.1.210 198.18.1.208 esp 10001 -m tunnel -u 200 -E aes-gcm-16 " |
| - | add 198.18.1.208 198.18.1.210 esp 0x1000 | + | |
| - | add 198.18.1.210 198.18.1.208 esp 0x1001 | + | |
| - | spdadd 2001:2::/49 2001: | + | |
| - | spdadd 2001: | + | |
| - | add 2001: | + | |
| - | add 2001: | + | |
| </ | </ | ||
documentation/examples/ipsec_performance_of_a_superserver_5018a-ftn4.txt · Last modified: 2020/09/22 11:56 by olivier