ligang/vpp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

NAT44 - unknown protocols work with forwarding

Browse Source 
If forwarding is enabled, inbound packets on an outside
interface should not be dropped and instead pass on to
the FIB lookup. This works for TCP and UDP but not other
IP protocols. Enable it for unknown protocols.

Change-Id: I1da84b5633a36b3e5e64079754db2fcc50f29819
Signed-off-by: Matthew Smith <mgsmith@netgate.com>
(cherry picked from commit 03f942a1cc)
This commit is contained in:
Matthew Smith
2018-03-02 11:31:26 -06:00
committed by Damjan Marion
parent d30c94afe4
commit fb5148b4df
1 changed files with 9 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
src/plugins/nat/out2in.c
View File

@ -1103,8 +1103,9 @@ snat_out2in_node_fn (vlib_main_t * vm,
{
s0 = snat_out2in_unknown_proto(sm, b0, ip0, rx_fib_index0,
thread_index, now, vm, node);
if (!s0)
next0 = SNAT_OUT2IN_NEXT_DROP;
if (!sm->forwarding_enabled)
if (!s0)
next0 = SNAT_OUT2IN_NEXT_DROP;
goto trace0;
}
@ -1269,8 +1270,9 @@ snat_out2in_node_fn (vlib_main_t * vm,
{
s1 = snat_out2in_unknown_proto(sm, b1, ip1, rx_fib_index1,
thread_index, now, vm, node);
if (!s1)
next1 = SNAT_OUT2IN_NEXT_DROP;
if (!sm->forwarding_enabled)
if (!s1)
next1 = SNAT_OUT2IN_NEXT_DROP;
goto trace1;
}
@ -1461,8 +1463,9 @@ snat_out2in_node_fn (vlib_main_t * vm,
{
s0 = snat_out2in_unknown_proto(sm, b0, ip0, rx_fib_index0,
thread_index, now, vm, node);
if (!s0)
next0 = SNAT_OUT2IN_NEXT_DROP;
if (!sm->forwarding_enabled)
if (!s0)
next0 = SNAT_OUT2IN_NEXT_DROP;
goto trace00;
}