Accelerated data-plane 295 IP Flow Information Export (IPFIX) configuration 332 Collector IP address ipv4 IPv4 server to export IPFIX ipv6 IPv6 server to export IPFIX #include 4739 Path MTU u32:68-1450 Bytes 512 #include Interval in seconds u32:1-300 Seconds 20 Allow UDP checksum Interface txt Interface name Flow direction rx tx both rx Rx direction tx Tx direction both Rx and Tx direction (rx|tx|both) both Flow variant l2 ipv4 ipv6 l2 L2 _ipv4 IPv4 _ipv6 IPv6 (l2|ipv4|ipv6) ipv4 Flow activity timeout u32:0-2147483647 Active flow export timeout (seconds) 15 Flow inactivity timeout u32:0-2147483647 Inactive flow export timeout (seconds) 120 Flow record layers l2 l3 l4 l2 Include level 2 information l3 Include level 3 information l4 Include level 4 information (l2|l3|l4) l3 VPP settings Resource allocation settings Create worker threads (including main-core) u32:1-512 Worker threads 1 Buffer settings Number of buffers per numa node auto u32:16384-4294967295 Number of buffers auto Auto calculate number of buffers per numa node (auto) auto Size of buffer data area u32 Size of buffer data area 2048 Set the page-size for buffer allocation #include 2M IPv6 settings IPv6 heap size #include 32M IPv6 forwarding table hash buckets u32:1-4294967295 IPv6 forwarding table hash buckets 65536 Number of MAC addresses in the L2 FIB u32:1-4294967295 Number of MAC addresses in the L2 FIB 4194304 Memory settings Main heap size #include 3G Main heap page size #include 2M Memory size for protectable memory allocator (pmalloc) memory space #include Stats settings Size of stats segment #include 128M Stats page size #include 2M Interface ethN Interface name Invalid interface name Receive ring descriptors u32:256-16384 Number of descriptors in receive ring 1024 Tranceive ring descriptors u32:256-8192 Number of descriptors in tranceive ring 1024 Number of receive queues u32:1-8192 Number of receive queues Number of tranceive queues u32:1-8192 Number of tranceive queues Enable IPsec acceleration Ignore kernel routes Logging settings Default logging level alert crit debug disabled emerg error info notice warn alert Alert crit Critical debug Debug disabled Disabled emerg Emergency error Error info Informational notice Notice warn Warning (alert|crit|debug|disabled|emerg|error|info|notice|warn) Add a fixed-sleep between main loop poll u32:0-500000 Sleep interval in microseconds 0 #include Allow the attachment of unsupported NICs to VPP. This operation voids official support for the system VPP data-plane sFlow 322 Interface name txt Interface name sFlow maximum packet-header length 64 96 128 160 192 224 256 64 64 bytes 96 96 bytes 128 128 bytes 160 160 bytes 192 192 bytes 224 224 bytes 256 256 bytes (64|96|128|160|192|224|256) 128 Network Address Translation (NAT) settings Carrier-grade NAT (CGNAT) 331 CGNAT interface setting CGNAT inside interface CGNAT outside interface Rule number for CGNAT u32 Number of rule Inside IPv4 prefix ipv4net IPv4 prefix Outside IPv4 prefix ipv4net IPv4 prefix #include Exclude packets matching these rules from CGNAT Rule number u32 Number of rule IP address of the internal (local) device ipv4 IPv4 address Port number used by connection on internal device u32:1-65535 Numeric IP port Port number must be in range 1 to 65535 #include #include Timeouts for CGNAT sessions ICMP timeout u32 Timeout in seconds (default: 60) 60 TCP established timeout u32 TCP established timeout in seconds (default: 7440) 7440 TCP transitory timeout u32 Timeout in seconds (default: 240) 240 UDP timeout u32 Timeout in seconds (default: 300) 300 NAT44 330 NAT44 session timeouts ICMP timeout u32 Timeout in seconds (default: 60) 60 TCP established timeout u32 TCP established timeout in seconds (default: 7440) 7440 TCP transitory timeout u32 Timeout in seconds (default: 240) 240 UDP timeout u32 Timeout in seconds (default: 300) 300 Maximum number of sessions per thread u32 Number of sessions Number of sessions must be between 1 and 4294967295 64512 NAT interface setting NAT inside interface NAT outside interface NAT address pool NAT translation pool #include #include NAT twice-nat pool #include #include Static NAT rules Rule number for NAT u32 Number of NAT rule #include NAT external parameters IP address ipv4 IPv4 address #include NAT local parameters IP address ipv4 IPv4 address #include NAT static mapping options Rewrite source IP addresses on packets sent from outside to inside Rewrite source IP addresses on packets sent only from a local address to an external address Only apply rule for traffic from outside to inside interfaces Force use of specific IP address from twice-nat address pool ipv4 IPv4 address #include Exclude packets matching these rules from NAT Rule number u32 Number of rule IP address of the internal (local) device ipv4 IPv4 address Port number used by connection on internal device u32:1-65535 Numeric IP port Port number must be in range 1 to 65535 #include External interface #include Access Control Lists (ACLs) 332 Access Control List by IPv4/IPv6 ACL tag name txt Tag name #include Rule number for Access control element (ACE) u32 Number of ACE Rule number must be between 1 and 4294967295 #include Rule action permit deny permit-reflect permit Permit matching traffic deny Deny matching traffic permit-reflect Permit the matching outbound traffic and allow the reverse traffic (permit|deny|permit-reflect) Source parameters #include #include Destination parameters #include #include Protocol all all All IP protocols <protocol> IP protocol name all Match TCP packet flags Match TCP flags that are set #include Match TCP flags that are not set #include Apply an ACL to an interface Input direction #include Output direction #include Access Control List by mac address ACL tag name txt ACL name #include Rule number for Access control element (ACE) u32 Number of ACE Rule number must be between 1 and 4294967295 #include Rule action permit deny permit Permit matching traffic deny Deny matching traffic (permit|deny) #include Source IP prefix Source MAC address macaddr MAC address Source MAC mask (default ff:ff:ff:ff:ff:ff) macaddr MAC mask ff:ff:ff:ff:ff:ff Apply an ACL to an input interface ACL tag name vpp acl mac tag-name