documentation:examples:ipsec_performance_of_a_superserver_5018a-ftn4
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
documentation:examples:ipsec_performance_of_a_superserver_5018a-ftn4 [2020/09/22 11:51] – [DUT] olivier | documentation:examples:ipsec_performance_of_a_superserver_5018a-ftn4 [2020/09/22 11:52] – [DUT] olivier | ||
---|---|---|---|
Line 57: | Line 57: | ||
/ | / | ||
< | < | ||
+ | # Loading AES-NI module sooner to be sure it is loaded before IPsec keys | ||
aesni_load=" | aesni_load=" | ||
</ | </ | ||
Line 104: | Line 105: | ||
==== Reference Endpoint ==== | ==== Reference Endpoint ==== | ||
+ | |||
+ | / | ||
+ | < | ||
+ | # Loading AES-NI module sooner to be sure it is loaded before IPsec keys | ||
+ | aesni_load=" | ||
+ | </ | ||
Configure IP address, routes and static IPSec: | Configure IP address, routes and static IPSec: | ||
< | < | ||
- | # IPv4 router | ||
gateway_enable=" | gateway_enable=" | ||
ifconfig_cxl0=" | ifconfig_cxl0=" | ||
ifconfig_cxl1=" | ifconfig_cxl1=" | ||
static_routes=" | static_routes=" | ||
- | route_generator=" | + | route_generator=" |
route_receiver=" | route_receiver=" | ||
static_arp_pairs=" | static_arp_pairs=" | ||
static_arp_generator=" | static_arp_generator=" | ||
- | static_arp_receiver=" | + | static_arp_receiver=" |
# IPv6 router | # IPv6 router | ||
Line 124: | Line 130: | ||
ifconfig_cxl1_ipv6=" | ifconfig_cxl1_ipv6=" | ||
ipv6_static_routes=" | ipv6_static_routes=" | ||
- | ipv6_route_generator=" | + | ipv6_route_generator=" |
ipv6_route_receiver=" | ipv6_route_receiver=" | ||
static_ndp_pairs=" | static_ndp_pairs=" | ||
static_ndp_generator=" | static_ndp_generator=" | ||
- | static_ndp_receiver=" | + | static_ndp_receiver=" |
+ | cloned_interfaces=" | ||
+ | create_args_ipsec0=" | ||
+ | ifconfig_ipsec0=" | ||
+ | ifconfig_ipsec0_ipv6=" | ||
- | # Enabling | + | # Enabling |
- | kld_list=" | + | |
ipsec_enable=" | ipsec_enable=" | ||
</ | </ | ||
Line 140: | Line 149: | ||
flush; | flush; | ||
spdflush; | spdflush; | ||
- | spdadd 198.18.0.0/ | + | add 198.18.1.208 198.18.1.210 |
- | spdadd 198.19.0.0/ | + | add 198.18.1.210 198.18.1.208 esp 10001 -m tunnel -u 200 -E aes-gcm-16 " |
- | add 198.18.1.208 198.18.1.210 esp 0x1000 | + | |
- | add 198.18.1.210 198.18.1.208 esp 0x1001 | + | |
- | spdadd 2001:2::/49 2001: | + | |
- | spdadd 2001: | + | |
- | add 2001: | + | |
- | add 2001: | + | |
</ | </ | ||
documentation/examples/ipsec_performance_of_a_superserver_5018a-ftn4.txt · Last modified: 2020/09/22 11:56 by olivier