FD.io VPP
v21.10.1-2-g0a485f517
Vector Packet Processing
|
map add domain [tag <tag>] ip4-pfx <ip4-pfx> ip6-pfx <ip6-pfx> ip6-src <ip6-pfx> ea-bits-len <n> psid-offset <n> psid-len <n> [map-t] [mtu <mtu>].
Add MAP domain
vpp# map add domain
Declaration: map_add_domain_command (src/plugins/map/map.c line 1397)
Implementation: map_add_domain_command_fn.
map add rule index <domain> psid <psid> ip6-dst <ip6-addr>.
Add MAP rule to a domain
vpp# map add rule
Declaration: map_add_rule_command (src/plugins/map/map.c line 1413)
Implementation: map_add_rule_command_fn.
map del domain index <domain>.
Delete MAP domain
vpp# map del domain
Declaration: map_del_command (src/plugins/map/map.c line 1426)
Implementation: map_del_domain_command_fn.
map interface <interface-name> [map-t] [del].
Enable MAP processing on interface (input feature)
Declaration: map_if_command (src/plugins/map/map.c line 1462)
Implementation: map_if_command_fn.
map params fragment inner|outer ignore-df|honor-df.
Configure MAP fragmentation behaviour
vpp# map params fragment
Allows fragmentation of the IPv4 packet even if the DF bit is set. The choice between inner or outer fragmentation of tunnel packets is complicated. The benefit of inner fragmentation is that the ultimate endpoint must reassemble, instead of the tunnel endpoint.
Declaration: map_fragment_command (src/plugins/map/map.c line 1383)
Implementation: map_fragment_command_fn.
map params icmp source-address <ip4-address>.
Specifiy the IPv4 source address used for relayed ICMP error messages
vpp# map params icmp source-address
Declaration: map_icmp_relay_source_address_command (src/plugins/map/map.c line 1348)
Implementation: map_icmp_relay_source_address_command_fn.
map params icmp6 unreachables {on|off}.
Send IPv6 ICMP unreachables
vpp# map params icmp6 unreachables
Declaration: map_icmp_unreachables_command (src/plugins/map/map.c line 1364)
Implementation: map_icmp_unreachables_command_fn.
map params pre-resolve {ip4-nh <address>} | {ip6-nh <address>}.
Bypass IP4/IP6 lookup
vpp# map params pre-resolve
Declaration: map_pre_resolve_command (src/plugins/map/map.c line 1306)
Implementation: map_pre_resolve_command_fn.
map params security-check enable|disable fragments on|off.
Enable or disable the MAP-E inbound security check Specifiy if the inbound security check should be done on fragments
vpp# map params security-check
Typically the inbound on-decapsulation security check is only done
on the first packet. The packet that contains the L4
information. While a security check on every fragment is possible,
it has a cost. State must be created on the first fragment.
Declaration: map_security_check_command (src/plugins/map/map.c line 1330)
Implementation: map_security_check_command_fn.
map params tcp-mss <value>.
TCP MSS clamping
vpp# map params tcp-mss
Declaration: map_tcp_mss_command (src/plugins/map/map.c line 1288)
Implementation: map_tcp_mss_command_fn.
map params traffic-class {0x0-0xff | copy}.
Set or copy the IP TOS/Traffic Class field
vpp# map params traffic-class
Declaration: map_traffic_class_command (src/plugins/map/map.c line 1272)
Implementation: map_traffic_class_command_fn.
show map domain index <n> [counters].
Show MAP domains
vpp# show map domain
Declaration: show_map_domain_command (src/plugins/map/map.c line 1439)
Implementation: show_map_domain_command_fn.
show map stats.
Show MAP statistics
vpp# show map stats
Declaration: show_map_stats_command (src/plugins/map/map.c line 1452)
Implementation: show_map_stats_command_fn.