vpp-swan: assign src/dst port in udp encap 79/38679/2
authorGabriel Oginski <gabrielx.oginski@intel.com>
Mon, 17 Apr 2023 07:00:24 +0000 (07:00 +0000)
committerDave Wallace <dwallacelf@gmail.com>
Tue, 25 Apr 2023 15:50:05 +0000 (15:50 +0000)
This patch add in missing src/dst port assignment in SA for udp port
if encap.

Type: fix
Signed-off-by: Gabriel Oginski <gabrielx.oginski@intel.com>
Change-Id: I84219c016c5a32590aba0371c01ad8d44cbf4c5c

extras/strongswan/vpp_sswan/kernel_vpp_ipsec.c

index 652de65..38d3951 100644 (file)
@@ -1598,8 +1598,10 @@ METHOD (kernel_ipsec_t, add_sa, status_t, private_kernel_vpp_ipsec_t *this,
     }
   if (data->encap)
     {
-      DBG1 (DBG_KNL, "UDP encap!!!!!!!!!!!!!!!!!!!!");
+      DBG1 (DBG_KNL, "UDP encap");
       flags |= IPSEC_API_SAD_FLAG_UDP_ENCAP;
+      mp->entry.udp_src_port = htons (natt_port);
+      mp->entry.udp_dst_port = htons (natt_port);
     }
   mp->entry.flags = htonl (flags);