Re: traffic shaping vpn (GRE) traffic

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



syncmaster4 wrote:
Looking for some advise from the experts out there.

We do simple traffice shaping and I'm having trouble figuring out how to
shape vpn traffic using a tc filter.

The following filter works fine for SSH
tc filter add dev eth2 parent 1:0 protocol ip u32 match ip sport 22 0xffff
classid 1:10

The following throws and "Illegal match" error when trying to filter GRE
traffic.
tc filter add dev eth2 parent 1:0 protocol ip u32 \
       match ip protocol 47 0xff \
       match ip u16 0x10 00ff at 24 \
       classid 1:10

Any pointers are greatly appreciated!

You don't need the ip in match ip u16.

Possibly also put 0x before 00ff and I am not sure what that will actually match.

Andy.
_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux