diff options
| author | Balazs Nemeth <bnemeth@redhat.com> | 2021-02-17 16:17:56 +0100 |
|---|---|---|
| committer | Ilya Maximets <i.maximets@ovn.org> | 2021-02-19 18:20:01 +0100 |
| commit | 647a719881725218435dd38b24f4ac16d5520319 (patch) | |
| tree | 8126fe08d61a05643f43c00b4428b3b1f5fc5fd4 /Documentation/tutorials | |
| parent | 163b134d0e51157de858b01747bca59f7f3a8866 (diff) | |
| download | openvswitch-647a719881725218435dd38b24f4ac16d5520319.tar.gz | |
docs: Add instruction to set local_ip to ipsec tutorial.
Signed-off-by: Balazs Nemeth <bnemeth@redhat.com>
Acked-by: Mark Gray <mark.d.gray@redhat.com>
Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
Diffstat (limited to 'Documentation/tutorials')
| -rw-r--r-- | Documentation/tutorials/ipsec.rst | 21 |
1 files changed, 20 insertions, 1 deletions
diff --git a/Documentation/tutorials/ipsec.rst b/Documentation/tutorials/ipsec.rst index 3b3e42c59..b6cc1c3a8 100644 --- a/Documentation/tutorials/ipsec.rst +++ b/Documentation/tutorials/ipsec.rst @@ -273,7 +273,26 @@ external IP is 1.1.1.1, and `host_2`'s external IP is 2.2.2.2. Make sure authenticated; otherwise, any certificate signed by the CA would be accepted. -3. Test IPsec tunnel. +3. Set the `local_ip` field in the Interface table (Optional) + + Make sure that the `local_ip` field in the Interface table is set to the + NIC used for egress traffic. + + On `host 1`:: + + # ovs-vsctl set Interface tun options:local_ip=$ip_1 + + Similarly, on `host 2`:: + + # ovs-vsctl set Interface tun options:local_ip=$ip_2 + + .. note:: + + It is not strictly necessary to set the `local_ip` field if your system + only has one NIC or the default gateway interface is set to the NIC + used for egress traffic. + +4. Test IPsec tunnel. Now you should have an IPsec GRE tunnel running between two hosts. To verify it, in `host_1`:: |