Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feat(eos_cli_config_gen): Add support for connection tx-interface match source-ip for ip security #4841

Open
1 task done
sasi-arista opened this issue Dec 23, 2024 · 0 comments · May be fixed by #4844
Open
1 task done

Feat(eos_cli_config_gen): Add support for connection tx-interface match source-ip for ip security #4841

sasi-arista opened this issue Dec 23, 2024 · 0 comments · May be fixed by #4844
Assignees
@laxmikantchintakindi
Labels
EPIC - AVD AutoVPN/WAN type: enhancement New feature or request

Comments

@sasi-arista
Copy link

sasi-arista commented Dec 23, 2024 •
edited by gmuloc
Loading

Issue Summary

In CV Pathfinder solution, if there is ECMP route pointing via more than one nexthop-interface to reach the destination endpoint, it was not selecting the proper source-interface to send out the packets. This was fixed in the recent version.

This configuration is required in the latest versions for the Fix to work.
We need to check the possible method to integrate this command in the CV Pathfinder AVD configs.

ip security
   connection tx-interface match source-ip

Which component(s) of AVD impacted

This PR targets: eos_cli_config_gen
eos_designs shoudl follow once proper design will be provided

How do you run AVD ?

None

Steps to reproduce

No response

Relevant log output

No response

Contributing Guide

  • I agree to follow this project's Code of Conduct
@sasi-arista sasi-arista added the type: bug Something isn't working label Dec 23, 2024
@gmuloc gmuloc added type: enhancement New feature or request and removed type: bug Something isn't working labels Dec 23, 2024
@gmuloc gmuloc changed the title Caravan : Need to add one CLI under "ip security" when there is ECMP wan interfaces Feat(eos_cli_config_gen): Add support for connctiontx-interface match soruce-ip for ip security Dec 23, 2024
@gmuloc gmuloc changed the title Feat(eos_cli_config_gen): Add support for connctiontx-interface match soruce-ip for ip security Feat(eos_cli_config_gen): Add support for connection tx-interface match soruce-ip for ip security Dec 23, 2024
@gmuloc gmuloc changed the title Feat(eos_cli_config_gen): Add support for connection tx-interface match soruce-ip for ip security Feat(eos_cli_config_gen): Add support for connection tx-interface match source-ip for ip security Dec 23, 2024
@laxmikantchintakindi laxmikantchintakindi self-assigned this Dec 26, 2024
@laxmikantchintakindi laxmikantchintakindi linked a pull request Dec 27, 2024 that will close this issue
Draft
4 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@laxmikantchintakindi laxmikantchintakindi

Labels
EPIC - AVD AutoVPN/WAN type: enhancement New feature or request
Projects
None yet
Milestone
No milestone
3 participants
@gmuloc @laxmikantchintakindi @sasi-arista