mpls-linux-general — Mailing list for general discussion about MPLS for Linux

Re: [mpls-linux-general] PATCh

[James R. L. <jl...@mi...>]

I maintain differnt kernel trees for each version, but you could just
un-apply the first patch (mpl-linux1.0), then apply the second patch
(mpls-linux-1.128) or you could try 'interdiff' a program developed
by redhat I think.

To un-apply a patch do:

patch -R -p1 < patch

On Mon, Feb 25, 2002 at 07:30:20PM +0100, sehla loussaief wrote:
> Hi all,
> I installed the mpls-linux-1. Now i would like to
> install linux-mpls-1.128 so i need to apllay another
> time the patch. How can i disable the first patch.
>=20
> can any body help me ?
> kind regards.
>=20
> ___________________________________________________________
> Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en fran=E7ais !
> Yahoo! Mail : http://fr.mail.yahoo.com
>=20
> _______________________________________________
> mpls-linux-general mailing list
> mpl...@li...
> https://lists.sourceforge.net/lists/listinfo/mpls-linux-general

--=20
James R. Leu

[mpls-linux-general] PATCh

[<seh...@ya...>]

Hi all,
I installed the mpls-linux-1. Now i would like to
install linux-mpls-1.128 so i need to apllay another
time the patch. How can i disable the first patch.

can any body help me ?
kind regards.

___________________________________________________________
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com

[mpls-linux-general] Re: MPLS-Diffserv Instructions + Counters

[Stefano A. <avi...@li...>]

Hi Paul and all,

On Friday 22 February 2002 14:31, ncc49a wrote:
> Hi Stefano, James and all,
>
>     Stefano, when I put executed the "pop" before the exp2ds, it worked!!
> Thanks!
>
>     However, I encountered another problem.
> 1)    The exp->ds mapping is sometimes reflected incorrectly in the
> "/proc/mpls_*" files.

Could you provide any example ?

> 2)    To test the exp2ds function, I have set up a couple of MPLS routers
> in serial, with non-MPLS hosts/routers at each ends.  I then ping an end
> host from the other end. The non-Mpls host/router which is the origin will
> mark a packet's DSCP. The edge MPLS router will mark the EXP bits based on
> the DSCP value. The edge MPLS router at the end will re-mark the DSCP of
> the incoming packet, based on its EXP. As the packet returns, it will mark
> the outgoing EXP bits based on the new DSCP. The origin MPLS edge router
> will then remark the DSCP (again) based on the incoming new EXP bits.
>
>        I monitor at the origin MPLS router's interfaces. I find that the
> new EXP bits on the shim of the returned incoming ping packet is correct.
> However,the returning packet on the outgoing interface of the origin MPLS
> edge (connected to the origin non-MPLS host/router) has its DSCP bits
> marked wrongly.
>
>     Anyone knows what could be a possible reason?
>

It seems strange to me. Have you checked that /proc/net/mpls_* content reflects what you want to do ?
Anyway, you should provide more information (e.g. the commands you typed and what instead you obtain) to let someone help you.

>     I have also tried the exp2tc.. function. I ran the following script. I
> think dsmark works like that: NEW_DS_FIELD = (tc_index & MASK) | VALUE. So
> with a MASK of 0xff and a VALUE of 0, I can check exp2tc function by
> setting the tc_index to the required DS field value, such that I get the
> desired DSCP value right?

No, this is right : New_DS_field = (Old_DS_field & Mask) | Value.

>
> -----------------------------------SCRIPT
> STARTS--------------------------------------------------------
> #!/bin/sh
> TC=tc
> ITF=eth1
> DEST=192.168.0.1
> # NEW_DS_FIELD = (tc_index & MASK) | VALUE
> # EF -> DSCP:0x2e     DS:0xb8
> # AF31-> DSCP: 0x1a   DS:0x68
> # AF21 -> DSCP:0x12   DS:0x48
> MASK1=0xff
> VALUE1=0x0
> $TC qdisc del dev $ITF root
> $TC qdisc add dev $ITF handle 1:0 root dsmark indices 64
> $TC class change dev $ITF classid 1:1 dsmark mask $MASK1 value $VALUE1
> $TC filter add dev $ITF parent 1:0 protocol ip prio 4 handle 1: u32 divisor
> 1
> $TC filter add dev $ITF parent 1:0 prio 4 u32 \
> match ip dst $DEST \
> police rate 3Mbit burst 2K continue \
> flowid 1:1
> ------------------------------SCRIPT
> ENDS----------------------------------------------------
>
>     I have an incoming packet with label 199 and its EXP bit marked
> accordingly, to say 2. I execute the following command to set an incoming
> label.
>
> mplsadm2 -v -A -I gen:199:0
> mplsadm2 -v -I gen:199:0 -i pop:exp2tc:2:184:peek
>
>     As 184 is 0xb8, I should get a DS field of 0xb8 and a DSCP of 0x2e
> (EF), right? But, I don't. The whole DS field remains unmarked. 

I expected this, since mask=0xff and value=0 means that DS field will be left unchanged.

> I have tried :
>
> mplsadm2 -v -I gen:199:0 -i exp2tc:2:184:pop:peek
>
>     But I dun think that worked either.
>
>     Stefano, have u tried out the exp2tc function? I may have missed out
> things or did things wrongly... Do please correct me.. I will appreciate it
> greatly!
>

You could try this way: you use a tcindex filter (which classify packets based on skb->tc_index) to select a dsmark class which sets the desired DSCP value.
For example:

 mplsadm2 -v -A -I gen:199:0
 mplsadm2 -v -I gen:199:0 -i pop:exp2tc:2:184:peek

 tc qdisc add dev $ITF handle 1:0 root dsmark indices 64
 tc class change dev $ITF classid 1:1 dsmark mask 0x0 value 0xb8
 tc filter add dev $ITF parent 1:0 protocol ip prio 1 tcindex mask 0xff
 tc filter add dev $ITF parent 1:0 protocol ip prio 1 handle 184 tcindex classid 1:1

Thus packets arriving with label 199 and Exp 2 will leave with DS field 0xb8 (DSCP 0x2e).
Let me know if this works.

If you want more details on dsmark qdisc and tcindex classifier you can get the Linux Advanced Routing & Traffic Control HOWTO at http://lartc.org and see section "DSMARK".

Stefano

Re: [mpls-linux-general] Another questions about CVS

[James R. L. <jl...@mi...>]

On Mon, Feb 25, 2002 at 02:59:54PM +0800, clz wrote:
>=20
>=20
> Hi, Jim=20
>=20
>         I have executed the "cvs". And it worked! Thank you. But I encoun=
tered another problem. =20
>         When I use the following command:
>         cvs -d:pserver:ano...@cv...:/cvsroot/mpls-linux login
>        (hit enter when it asks for a password)
>         there came "unknown host cvs.sf.net".
>     How to correct it?  Do please help me.

For some reason DNS is not working.  Try using the IP instead of the name.
The IP address for cvs.sf.net is 216.136.171.202.

Jim

>=20
> Thanks a lot in advance.
>=20
> Regards,
>=20
>=20
> clz
>=20
>=20
>=20
>=20
>=20
>=20
>=20
> CVS is a unix program for dealing with revision control on an entire soft=
ware
> tree.  CVS uses RCS, but on groups of files.
>=20
> >From your linux command line, try typing 'cvs' (without the single quote=
s)
> and see if you have CVS installed on your machine.  If not, your distribu=
tion
> (redhat debian etc) should have a package availble for you to download and
> install.
>=20
> Jim
>=20
> On Fri, Feb 22, 2002 at 02:27:53PM +0800, clz wrote:
> <snip>
> >=20
> >     But I don't know when I use 'cvs' command line. Please help me.=20
> >=20
> >      Thanks in advance.
> >      Regards.
> >                              clz
> >=20
> James R. Leu
> =FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=
=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=E6=A6[=FF=96)=EE=C7=F8=1E=9D=EA=DA=96f=A2=
=96)=E0=96+-=9A=99l=FEX=A7=BB=1F=E0zw=ABj_=E5=8A=CBl=FE=CA.=AD=C7=9F=A2=B8=
=1E=FEw=AD=86=DBi=B3=FF=FF=96+-=B3=FB(=BA=B7=1E~=8A=E0{=F9=DE=B7=F9b=B2=DB?=
=96+-=8Aw=E8=FEje=B3=F9b=9E=EC=FF=81=E9=DE

--=20
James R. Leu

Re: [mpls-linux-general] CD-LDP or RSVP-TE in MPLS

[<pim...@in...>]

> Heeyeol Yu wrote:
> 
> Hi
> 
> I want to know if I can use CD-LDP or RSVP-TE feature in MPLS code?
> 
> Are they available? The current LDP-linux is not CD-LDP.
You could try our RSVP-TE for Linux:
http://dsmpls.atlantis.rug.ac.be
which has support for ER-LSPs and DiffServ over MPLS
(the kernel is based on James' work and some of ours, the next version
will be soly based on the James' new 1.1 branch)

Pim.
> 
> 
> 
> I found some one implement RSVP-TE
> (http://www.labs.fujitsu.com/free/te-on-linux/software.html),
> 
> but I found that code is not complete while compiling.
> 
> 
> 
> Is it good to correct , modify and use it for MPLS signaling?
> 
> 
> 
> 

-- 
Pim Van Heuven            Ghent University - IMEC
Department  of  Information  Technology   (INTEC)
Sint-Pietersnieuwstraat, 41 B-9000, Gent, Belgium
pim...@in...
        DiffServ/MPLS(RSVP-TE) for Linux:
        http://dsmpls.atlantis.rug.ac.be

RE: [mpls-linux-general] MPLS+iptables Help

[Steven V. d. B. <ste...@in...>]

Hi,

Try with "mpls-linux" as module and "mpls-linux_1_128" as tag,
so:

cvs -z3
-d:pserver:ano...@cv...:/cvsroot/mpls-linux co -r
mpls-linux_1_128 mpls-linux

Best regards,
Steven

On Monday 25 February 2002 13:23, you wrote:
> Hi all,
> Can anybody help me to get the linux-mpls.1.127 code.
> I failed to get it from the CVS.
> "cvs -z3
> -d:pserver:ano...@cv...:/cvsroot/mpls-linux
> co  mpls-linux-1_127" . the error message is :
> "cvs server: cannot find module `mpls-linux-1.127' -
> ignored"
>
>
> Thanks a lot in advance.
> Kind regards.
>
> ___________________________________________________________
> Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
> Yahoo! Mail : http://fr.mail.yahoo.com
>
> _______________________________________________
> mpls-linux-general mailing list
> mpl...@li...
> https://lists.sourceforge.net/lists/listinfo/mpls-linux-general

--
Steven Van den Berghe
ste...@in...
Workgroup Broadband Communication Networks
Department Information Technology
Ghent University - Belgium
Phone:  +32 (0)9 267 35 86 | Fax  :  +32 (0)9 267 35 99
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
DiffServ over MPLS for Linux: http://dsmpls.atlantis.rug.ac.be
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
 I cna ytpe 300 wrods pre mniuet!!!



*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*

-------------------------------------------------------

-- 
Steven Van den Berghe             
ste...@in...
Workgroup Broadband Communication Networks
Department Information Technology 
Ghent University - Belgium
Phone:  +32 (0)9 267 35 86 | Fax  :  +32 (0)9 267 35 99
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
DiffServ over MPLS for Linux: http://dsmpls.atlantis.rug.ac.be
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
 Where a calculator on the ENIAC is equipped with 18,000
 vacuum tubes and weighs 30 tons, computers in the future 
 may have only 1,000 vacuum tubes and weigh only 1.5 tons.
 - Popular Mechanics, 1949  
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
 

[mpls-linux-general] MPLS +ATM Help

[<seh...@ya...>]

Hi all,
I read in the README of tle "mplsadm" commande that it
support the types "gen/atm/fr" .can any body help me
to use this commande with ATM because i have an
MArconni ATM switch connected to my LSR.


Thanks in advance.
Kind regards.

___________________________________________________________
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com

[mpls-linux-general] MPLS+iptables Help

[<seh...@ya...>]

Hi all,
Can anybody help me to get the linux-mpls.1.127 code.
I failed to get it from the CVS.
"cvs -z3
-d:pserver:ano...@cv...:/cvsroot/mpls-linux
co  mpls-linux-1_127" . the error message is :
"cvs server: cannot find module `mpls-linux-1.127' -
ignored"


Thanks a lot in advance.
Kind regards.

___________________________________________________________
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com

[mpls-linux-general] Multiple pushes again

[Radu D. <dr...@ee...>]

Hi all.
I'm trying to push 2 labels into the MPLS stack.

Begin (Scenario):
linux-2.4.17
mpls-linux-1.128

------                           _____
|Host|---------------------------UML1|
------                           -----
      tap0			eth0
	192.168.100.1		192.168.100.2


On host:
#./mplsadm2 -v -A -O gen:16:tap0:ipv4:192.168.100.2
#./mplsadm2 -v -O key:0x3 -o
push:gen:16:push:gen:17:set:tap0:ipv4:192.168.100.2
#iptables -A OUTPUT -d 192.168.100.2 -j MPLS --set-key 0x3
#./mplsadm -L tap0:0

#watch cat /proc/net/mpls*
lo      0       109
tap0    0       7
0x00000003 4/336/0 1 PUSH(gen 16) PUSH(gen 17) SET(tap0,192.168.100.2)

############################################################
On UML1:
./mplsadm2 -A -I gen:17:0 -i pop:peek
./mplsadm2 -A -I gen:16:0
./mplsadm -L eth0:0

#watch cat /proc/net/mpls*
0x40004000 0/0/0 gen 16 0 1 POP PEEK
0x40004400 0/0/0 gen 17 0 1 POP PEEK
lo      0       5
tap0    0       1
eth0    0       5

End(Scenario)

On host:
ping 192.168.100.2
PING 192.168.100.2 (192.168.100.2) from 192.168.100.1 : 56(84) bytes of
data.
64 bytes from 192.168.100.2: icmp_seq=0 ttl=255 time=3.916 msec
The host received only 1 replay.

On UML1:
Kernel panic.

bt from gdb:
#0  panic (fmt=0xa0140e2c "Segfault with no mm") at panic.c:52
#1  0xa00c67a1 in segv (address=276, ip=2685111923, is_write=0, is_user=0)
    at trap_kern.c:42
#2  0xa00c7548 in segv_handler (sig=11, sc=0xa015f798, usermode=0)
    at trap_user.c:370
#3  0xa00c76bf in sig_handler (sig=11, sc=
      {gs = 0, __gsh = 0, fs = 0, __fsh = 0, es = 43, __esh = 0, ds = 43,
__dsh = 0, edi = 2720948257, esi = 2720948253, ebp = 2685794980, esp =
2685794924, ebx = 2693715584, edx = 272, ecx = 2685794652, eax = 38,
trapno = 14, err = 4, eip = 2685111923, cs = 35, __csh = 0, eflags =
66182, esp_at_signal = 2685794924, ss = 43, __ssh = 0, fpstate = 0x0,
oldmask = 0, cr2 = 276}) at trap_user.c:429
#4  <signal handler called>
#5  0xa00b8e73 in mpls_opcode_push (skb=0xa015fafc, ml=0x110,
mpr=0xa0973340)
    at mpls_opcode.c:138
#6  0xa00b7e3c in mpls_input (skb=0xa08ed680, dev=0xa08f9800,
pt=0xa016a040,
    label=0xa23c41e0, mpr=0xa0973340, labelspace=0) at mpls_input.c:190
#7  0xa00b8584 in mpls_rcv (skb=0xa08ed680, dev=0xa08f9800, pt=0xa016a040)
    at mpls_input.c:515
#8  0xa0074f45 in net_rx_action (h=0xa017d350) at dev.c:1530
#9  0xa001238a in do_softirq () at softirq.c:90
#10 0xa00c3385 in do_IRQ (irq=4, user_mode=0) at irq.c:332
#11 0xa00c39af in sigio_handler (sig=29, sc=0xa015fc80, usermode=0)
    at irq_user.c:62
---Type <return> to continue, or q <return> to quit---
#12 0xa00c75de in irq_handler (sig=29, sc=
      {gs = 0, __gsh = 0, fs = 0, __fsh = 0, es = 43, __esh = 0, ds = 43,
__dsh = 0, edi = 10, esi = 2685796348, ebp = 2685796208, esp = 2685796180,
ebx = 2685796200, edx = 8192, ecx = 2685796200, eax = 4294967292, trapno =
1, err = 0, eip = 2685302417, cs = 35, __csh = 0, eflags = 646,
esp_at_signal = 2685796180, ss = 43, __ssh = 0, fpstate = 0xa015fcd8,
oldmask = 0, cr2 = 0}) at trap_user.c:405
#13 <signal handler called>
#14 0xa00e7691 in __libc_nanosleep ()
#15 0xa00c60dd in idle_sleep (secs=10) at time.c:108
#16 0xa00c92a0 in do_idle () at process_kern.c:418
#17 0xa00c934d in cpu_idle () at process_kern.c:445
#18 0xa00036f1 in start_kernel () at init/main.c:623
#19 0xa00c7acd in start_kernel_proc (unused=0x0) at um_arch.c:131
#20 0xa00c6fea in signal_tramp (arg=0xa00c7a98) at trap_user.c:84


Does anyone has an updated version of README.hierarchy
or an working example with multiple pushes/pops ??

Thanks in advance,
Radu.

[mpls-linux-general] Another question about CVS

[clz <cui...@26...>]

SGksIEppbSANCg0KICAgICAgICBJIGhhdmUgZXhlY3V0ZWQgdGhlICJjdnMiLiBBbmQgaXQgd29y
a2VkISBUaGFuayB5b3UuIEJ1dCBJIGVuY291bnRlcmVkIGFub3RoZXIgcHJvYmxlbS4gIA0KICAg
ICAgICBXaGVuIEkgdXNlIHRoZSBmb2xsb3dpbmcgY29tbWFuZDoNCiAgICAgICAgY3ZzIC1kOnBz
ZXJ2ZXI6YW5vbnltb3VzQGN2cy5zZi5uZXQ6L2N2c3Jvb3QvbXBscy1saW51eCBsb2dpbg0KICAg
ICAgIChoaXQgZW50ZXIgd2hlbiBpdCBhc2tzIGZvciBhIHBhc3N3b3JkKQ0KICAgICAgICB0aGVy
ZSBjYW1lICJ1bmtub3duIGhvc3QgY3ZzLnNmLm5ldCIuDQogICAgSG93IHRvIGNvcnJlY3QgaXQ/
ICBEbyBwbGVhc2UgaGVscCBtZS4NCg0KVGhhbmtzIGEgbG90IGluIGFkdmFuY2UuDQoNClJlZ2Fy
ZHMsDQoNCg0KY2x6DQoNCg0KDQoNCg0KDQoNCg0KDQo=

[mpls-linux-general] Another questions about CVS

[clz <cui...@26...>]
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[mpls-linux-general] CD-LDP or RSVP-TE in MPLS

[Heeyeol Y. <hee...@CS...>]

Hi
I want to know if I can use CD-LDP or RSVP-TE feature in MPLS code?
Are they available? The current LDP-linux is not CD-LDP.
 
I found some one implement RSVP-TE
(http://www.labs.fujitsu.com/free/te-on-linux/software.html),
but I found that code is not complete while compiling.
 
Is it good to correct , modify and use it for MPLS signaling?
 
 

Re: [mpls-linux-general] Re: mpls and port filtering

[James R. L. <jl...@mi...>]

Hello,

On Mon, Feb 25, 2002 at 01:03:24AM +0100, Daniel Teckentrup wrote:
> Hello,

<snip>

> thank you for the fast response, unfortunately I have to
> admit that I do not know what you mean with the terms
> nf2exp and nffwd. Could you give some advise where to
> find information, or go into greater detail?

The mpls-linux-1.1xx code (you can only get it via CVS) allows you
to set EXP bits and forward the packet to different LSPs based on
the nfmark on the packet.  IP tables has the ability change the nfmark on
packets via the MARK target.

> Also, referring to Ulrich Duerholz mail, send 23 Feb 2002
> requesting patch 0.4 again: Could this patch perhaps
> be used to filter according to the port number or is it
> a general property mpls and netfilter just can not offer?

The patch you are refering to was created by Olivier.  Much of his work
has been added to mpls-linux-1.1xx, therefore you wouldn't need that patch.

Jim

> Thanks in advance,
> 
> Daniel
> 
> 
> _______________________________________________
> mpls-linux-general mailing list
> mpl...@li...
> https://lists.sourceforge.net/lists/listinfo/mpls-linux-general

-- 
James R. Leu

[mpls-linux-general] Re: mpls and port filtering

[Daniel T. <da...@un...>]

Hello,

> You will not beable to use the MPLS target with port filtering.  What you
> can do is:
>
> Create an MPLS tunnel interface.
> Create an MPLS outgoing label that uses nf2exp or nffwd.
> Attach it to the MPLS tunnel interface.
> Point the aggregate route out the MPLS tunnel interface
> Use iptables to set nfmask according to the TCP/UDP ports.
>
> Let me know if it works.

thank you for the fast response, unfortunately I have to
admit that I do not know what you mean with the terms
nf2exp and nffwd. Could you give some advise where to
find information, or go into greater detail?

Also, referring to Ulrich Duerholz mail, send 23 Feb 2002
requesting patch 0.4 again: Could this patch perhaps
be used to filter according to the port number or is it
a general property mpls and netfilter just can not offer?

Thanks in advance,

Daniel

Re: [mpls-linux-general] problems using netfilter

[Ulrich <due...@cs...>]

Hi Olivier!

> I post some month ago (look at the mailing list) a version 0.4 of our
> patch which resolved some pb., add TC support and let the user use
> directly the label for iptables instead of the key.


Could you (or maybe someone else from the list) please post this patch again?
The list archive at geocrawler doesn't save the attachments, and at that
time I was not subscribed yet.

Thanks a lot,

Uli

[mpls-linux-general] MPLS-Diffserv Instructions + Counters

[ncc49a <nc...@si...>]

Hi Stefano, James and all,

    Stefano, when I put executed the "pop" before the exp2ds, it worked!!
Thanks!

    However, I encountered another problem.
1)    The exp->ds mapping is sometimes reflected incorrectly in the
"/proc/mpls_*" files.
2)    To test the exp2ds function, I have set up a couple of MPLS routers in
serial, with non-MPLS hosts/routers at each ends.  I then ping an end host
from the other end. The non-Mpls host/router which is the origin will mark a
packet's DSCP. The edge MPLS router will mark the EXP bits based on the DSCP
value. The edge MPLS router at the end will re-mark the DSCP of the incoming
packet, based on its EXP. As the packet returns, it will mark the outgoing
EXP bits based on the new DSCP. The origin MPLS edge router will then remark
the DSCP (again) based on the incoming new EXP bits.

       I monitor at the origin MPLS router's interfaces. I find that the new
EXP bits on the shim of the returned incoming ping packet is correct.
However,the returning packet on the outgoing interface of the origin MPLS
edge (connected to the origin non-MPLS host/router) has its DSCP bits marked
wrongly.

    Anyone knows what could be a possible reason?

    I have also tried the exp2tc.. function. I ran the following script. I
think dsmark works like that: NEW_DS_FIELD = (tc_index & MASK) | VALUE. So
with a MASK of 0xff and a VALUE of 0, I can check exp2tc function by setting
the tc_index to the required DS field value, such that I get the desired
DSCP value right?

-----------------------------------SCRIPT
STARTS--------------------------------------------------------
#!/bin/sh
TC=tc
ITF=eth1
DEST=192.168.0.1
# NEW_DS_FIELD = (tc_index & MASK) | VALUE
# EF -> DSCP:0x2e     DS:0xb8
# AF31-> DSCP: 0x1a   DS:0x68
# AF21 -> DSCP:0x12   DS:0x48
MASK1=0xff
VALUE1=0x0
$TC qdisc del dev $ITF root
$TC qdisc add dev $ITF handle 1:0 root dsmark indices 64
$TC class change dev $ITF classid 1:1 dsmark mask $MASK1 value $VALUE1
$TC filter add dev $ITF parent 1:0 protocol ip prio 4 handle 1: u32 divisor
1
$TC filter add dev $ITF parent 1:0 prio 4 u32 \
match ip dst $DEST \
police rate 3Mbit burst 2K continue \
flowid 1:1
------------------------------SCRIPT
ENDS----------------------------------------------------

    I have an incoming packet with label 199 and its EXP bit marked
accordingly, to say 2. I execute the following command to set an incoming
label.

mplsadm2 -v -A -I gen:199:0
mplsadm2 -v -I gen:199:0 -i pop:exp2tc:2:184:peek

    As 184 is 0xb8, I should get a DS field of 0xb8 and a DSCP of 0x2e (EF),
right? But, I don't. The whole DS field remains unmarked. I have tried :

mplsadm2 -v -I gen:199:0 -i exp2tc:2:184:pop:peek

    But I dun think that worked either.

    Stefano, have u tried out the exp2tc function? I may have missed out
things or did things wrongly... Do please correct me.. I will appreciate it
greatly!

    Also, regarding counter support provided in /proc/net/mpls_* files.
1)    Just to confirm, they are in this order -> pkts/bytes/drops ?
2)    May I find out if anyone have verified these figures? Because I have
tried comparing the figures of "mpls_in" of one
       MPLS edge router with the "mpls_out" of the MPLS edge router at the
other end, when the only traffic between the 2 routers are ICMP ping
packets. They do often differ.

    Maybe I have misunderstood what the actual figures in the
/proc/net/mpls_* measure... Can anyone correct me?

    Sorry for the LONG mail post...:)

    Thanks a lot in advance.

Regards,

Paul

Re: [mpls-linux-general] Questions about CVS

[James R. L. <jl...@mi...>]

Hello,

CVS is a unix program for dealing with revision control on an entire softwa=
re
tree.  CVS uses RCS, but on groups of files.

=46rom your linux command line, try typing 'cvs' (without the single quotes)
and see if you have CVS installed on your machine.  If not, your distributi=
on
(redhat debian etc) should have a package availble for you to download and
install.

Jim

On Fri, Feb 22, 2002 at 02:27:53PM +0800, clz wrote:
<snip>
>=20
>     But I don't know when I use 'cvs' command line. Please help me.=20
>=20
>      Thanks in advance.
>      Regards.
>                              clz
>=20
> =FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=
=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=E6=A6[=FF=96)=EE=C7=F8=1E=9D=EA=DA=96f=A2=
=96)=E0=96+-=9A=99l=FEX=A7=BB=1F=E0zw=ABj_=E5=8A=CBl=FE=CA.=AD=C7=9F=A2=B8=
=1E=FEw=AD=86=DBi=B3=FF=FF=96+-=B3=FB(=BA=B7=1E~=8A=E0{=F9=DE=B7=F9b=B2=DB?=
=96+-=8Aw=E8=FEje=B3=F9b=9E=EC=FF=81=E9=DE

--=20
James R. Leu

[mpls-linux-general] Questions about CVS

[clz <cui...@26...>]
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Re: [mpls-linux-general] I need some files

[James R. L. <jl...@mi...>]

Hello,

On Fri, Feb 22, 2002 at 08:53:47AM +0800, clz wrote:
> Hi, Jim
>     Thank you very much.=20
>     Now I can't get the document "ldp-portable/linux-port/README.cli" and=
 "README.sample".
> Would you mind emailing me these two documents?

What 'cvs' command line are you using?  This is what I use:

cvs -d:pserver:ano...@cv...:/cvsroot/mpls-linux login
(just hit enter when it asks for a password)
cvs -d:pserver:ano...@cv...:/cvsroot/mpls-linux co ldp-portable

Jim

>     Thanks in advance.
>     Regards.
>                             clz
>=20
>=20
>=20
> =FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=
=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=FF=E6=A6[=FF=96)=EE=C7=F8=1E=9D=EA=DA=96f=A2=
=96)=E0=96+-=9A=99l=FEX=A7=BB=1F=E0zw=ABj_=E5=8A=CBl=FE=CA.=AD=C7=9F=A2=B8=
=1E=FEw=AD=86=DBi=B3=FF=FF=96+-=B3=FB(=BA=B7=1E~=8A=E0{=F9=DE=B7=F9b=B2=DB?=
=96+-=8Aw=E8=FEje=B3=F9b=9E=EC=FF=81=E9=DE

--=20
James R. Leu

[mpls-linux-general] Request for some help files

[clz <cui...@26...>]

SGksICANCiAgICBUaGFuayB5b3UgdmVyeSBtdWNoLiANCiAgICBOb3cgSSBjYW4ndCBnZXQgdGhl
IGRvY3VtZW50ICJsZHAtcG9ydGFibGUvbGludXgtcG9ydC9SRUFETUUuY2xpIiBhbmQgIlJFQURN
RS5zYW1wbGUiLg0KV291bGQgeW91IG1pbmQgZW1haWxpbmcgbWUgdGhlc2UgdHdvIGRvY3VtZW50
cz8NCiAgICANCiAgICBUaGFua3MgaW4gYWR2YW5jZS4NCiAgICBSZWdhcmRzLg0KICAgICAgICAg
ICAgICAgICAgICAgICAgICAgIGNseg0KDQoNCg0KDQo=

[mpls-linux-general] I need some files

[clz <cui...@26...>]

SGksIEppbQ0KICAgIFRoYW5rIHlvdSB2ZXJ5IG11Y2guIA0KICAgIE5vdyBJIGNhbid0IGdldCB0
aGUgZG9jdW1lbnQgImxkcC1wb3J0YWJsZS9saW51eC1wb3J0L1JFQURNRS5jbGkiIGFuZCAiUkVB
RE1FLnNhbXBsZSIuDQpXb3VsZCB5b3UgbWluZCBlbWFpbGluZyBtZSB0aGVzZSB0d28gZG9jdW1l
bnRzPw0KICAgIA0KICAgIFRoYW5rcyBpbiBhZHZhbmNlLg0KICAgIFJlZ2FyZHMuDQogICAgICAg
ICAgICAgICAgICAgICAgICAgICAgY2x6DQoNCg0KDQo=

Re: [mpls-linux-general] ioctl in LDP too...

[James R. L. <jl...@mi...>]

Yep.  When I get around to working on ldp-portable again.  I will
switch over to ioctls.

Jim

On Thu, Feb 21, 2002 at 08:28:16AM -0800, Mrugendra Singhai wrote:
> 
> Hi James,
> 
> Presently the ldp code uses netlink as well as ioctl. So do you plan to change over to ioctls in LDP code too.
> 
> Thanks
> 
> Mrugendra
> 
> 
> 
> ---------------------------------
> Do You Yahoo!?
> Yahoo! Sports - Coverage of the 2002 Olympic Games
-- 
James R. Leu

[mpls-linux-general] ioctl in LDP too...

[Mrugendra S. <mru...@ya...>]

Hi James,

Presently the ldp code uses netlink as well as ioctl. So do you plan to change over to ioctls in LDP code too.

Thanks

Mrugendra



---------------------------------
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games

Re: [mpls-linux-general] mpls and port filtering

[James R. L. <jl...@mi...>]

You will not beable to use the MPLS target with port filtering.  What you
can do is:

Create an MPLS tunnel interface.
Create an MPLS outgoing label that uses nf2exp or nffwd.
Attach it to the MPLS tunnel interface.
Point the aggregate route out the MPLS tunnel interface
Use iptables to set nfmask according to the TCP/UDP ports.

Let me know if it works.

Poitn the aggreagate routes On Thu, Feb 21, 2002 at 01:17:39PM +0100, Daniel Teckentrup wrote:
> Hi,
> 
> is it possible to use mpls and netfilter to distinguish streams based also
> on their TCP/UDP port number?
> 
> We are using the mpls configuration like the one described in the
> mini-howto, posted by Anatoly Asviyan and extended later by Radu
> Dragos (linux 2.4.17, mpls 1.1.2.7, iptables 1.2.4 etc.).
> In our scenario, the toplogy differs: traffic is not generated at the
> ingress itself, but at a neighbour mpls-unaware host. Therefore the
> iptables rules at the ingress do not use the OUTPUT, but the FORWARD chain
> (e.g. iptables -A FORWARD -p tcp --dport 44 -d 192.168.6.1 -j MPLS
> --set-key Ox00000002).
> This is were we encountered some "problems", it was possible to use
> different MPLS routing schemes as long as IP-address and protocoll were
> the only rule matches, but when using the port number, the behaviour
> was not what we expected.
> >From the first time a packet matched the above rule, even other packets,
> using the same address and protocoll, but with a different port number
> (which should be routed using normal TCP/IP) were send along the established MPLS
> path.
> Besides that the above rule can not be easily deleted, flushing the chain
> is not sufficient, only deleting the labels has the desired effect.
> 
> Has anyone experienced similar problems or is mpls+netfilter just not
> suited for this scenario?
> 
> Thanks in advance,
> 
> Daniel and Ulrich
> 
> 
> 
> 
> 
> _______________________________________________
> mpls-linux-general mailing list
> mpl...@li...
> https://lists.sourceforge.net/lists/listinfo/mpls-linux-general

-- 
James R. Leu

Re: [mpls-linux-general] LDP Questions

[James R. L. <jl...@mi...>]

On Thu, Feb 21, 2002 at 09:47:38AM +0100, sehla loussaief wrote:
> Hi,
> Can you please help me to fix this problem: i have 2
> PC with linux2.4.7 + mpls_linux-1.0
> +ldp-portable-0.080 . I install both MPLS and LDP. I
> am trying to test this 2 LSRs. I start by configure
> the LDP with "add global" and "add interface"  in the
> 2 PC as it is mentionned in the
> linux-port/REDME.sample. I notice that i have a "HELLO
> LDP" message between the 2 LSRs but my
> /proc/net/mpls-out and /proc/net/mpls_fec are empty.
> What is missing ? does this insufficent to bind a
> lebel to the FEC ( 192.168.0.0 ) ? must i use the
> "mplsadm" commande?

First, you need to understand that I have not done any developement on
ldp-portable for many months now.  If you're not will to dig into the cod=
e
or atleast do some level of trouble shooting/research you probably should
not be using ldp-portable.  There is a good possibility that it does not =
work.

Did you grab the HEAD of the ldp-portable tree via CVS or did you specify
revision 'ldp-portable_0_080'? (you want the 'Head of Line') I just submi=
tted
a small fix a couple days ago.
Did you compile with the MPLS_LINUX flag?
Do you have static route between the LDP speakers for the LSRIDs of each =
box?
Do you know how LDP works?

If you want me to help:

-send ma an ascii drawing of you setup, ip addresses, interfaces, network=
s
etc.
-send me the commands you typed in
-sent me the output of:
 show route
 show ses
 show data
 show inte
-send me the output of your linux routing table

Please forgive me if I seem rude, but:
 -ldp-portable is intended for developers
 -I have recieved (and answered) this exact question many time no this ma=
iling
  list

Jim

> Please help me?
> Thanks in advance.
> Kind regards.
> Sehla loussaief.
>=20
>=20
> ___________________________________________________________
> Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en fran=E7ais !
> Yahoo! Mail : http://fr.mail.yahoo.com
>=20
> _______________________________________________
> mpls-linux-general mailing list
> mpl...@li...
> https://lists.sourceforge.net/lists/listinfo/mpls-linux-general

--=20
James R. Leu