[mpls-linux-general] BUG FIX: mplsadm+ingress policing
Status: Beta
Brought to you by:
jleu
|
From: Elio F. <el...@ti...> - 2001-05-29 19:00:00
|
The network is:
HOST_A LER_A LER_B HOST_B
| 10.0.1. | | 131.114.33. | | 192.168.4. |
--------------- ---------------- ------------------
.2 .1 .172 .200 .2 .1
On LER_A
$TC qdisc add dev $INDEV handle ffff: ingress
mplsadm -L eth0:0
mplsadm -v -A -O gen:30:eth0:ipv4:131.114.33.200
KEY1=`grep 'gen 30' /proc/net/mpls_out | cut -d' ' -f1`
$TC filter add dev $INDEV parent ffff: protocol ip prio 1 u32 match ip
src 10.0.1.2
On LER_B
mplsadm -L eth0:0
mplsadm -A -I gen:30:0
I think the problem is: when the pk forwarding from 10.0.1.2 to
192.168.4.1 comes to ip_recv( ) on LER_A, ip_recv( ) doesn't find
the fib.
So I've added :
on LER_A
mplsadm -v -B gen:30:eth0 -f 192.168.4.1
and patched the kernel file : /usr/src/linux/net/sched/sch_ingress
deleting skb->mpls_index = TC_H_MIN(res.classid); and adding
skb->mpls_index = res.classid;
Now the ingress policing works
Any comments/help
Thanks in advance
Elio
|