Uploaded image for project: 'vpp'
  1. vpp
  2. VPP-687

ACL-plugin does not match UDP next-header

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Medium Medium
    • None
    • None
    • Security Groups
    • None
    • VPP:
      "version": "17.07-rc0~63-g63d5bae~b2166"
      "build_date": "Tue Apr 4 21:11:58 UTC 2017"

      Given the following configuration:

      1. setup interfaces and bridge domain:
      vat# sw_interface_set_flags sw_if_index 1 admin_up link_up
      vat# sw_interface_set_flags sw_if_index 2 admin_up link_up
      vat# bridge_domain_add_del bd_id 1 flood 1 uu-flood 1 forward 1 learn 1 arp-term 0
      vat# sw_interface_set_l2_bridge sw_if_index 1 bd_id 1
      vat# sw_interface_set_l2_bridge sw_if_index 2 bd_id 1

      2. configure classifier:
      vat# acl_add_replace ipv6 permit proto 17
      vat# acl_interface_add_del sw_if_index 1 add input acl 0

      When I send an IPv6 UDP packet to interface 1, the packet does not hit the rule and is dropped.

      Attached pcap file with test packet used and VPP packet trace.

            Unassigned Unassigned
            selias Samuel Eliáš
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: