NAT44 - unknown protocols work with forwarding
If forwarding is enabled, inbound packets on an outside
interface should not be dropped and instead pass on to
the FIB lookup. This works for TCP and UDP but not other
IP protocols. Enable it for unknown protocols.
@@ -1103,6 +1103,7 @@ snat_out2in_node_fn (vlib_main_t * vm,
{
s0 = snat_out2in_unknown_proto(sm, b0, ip0, rx_fib_index0,
thread_index, now, vm, node);
+ if (!sm->forwarding_enabled)
if (!s0)
next0 = SNAT_OUT2IN_NEXT_DROP;
goto trace0;
@@ -1273,6 +1274,7 @@ snat_out2in_node_fn (vlib_main_t * vm,
{
s1 = snat_out2in_unknown_proto(sm, b1, ip1, rx_fib_index1,
thread_index, now, vm, node);
+ if (!sm->forwarding_enabled)
if (!s1)
next1 = SNAT_OUT2IN_NEXT_DROP;
goto trace1;
@@ -1469,6 +1471,7 @@ snat_out2in_node_fn (vlib_main_t * vm,
{
s0 = snat_out2in_unknown_proto(sm, b0, ip0, rx_fib_index0,
thread_index, now, vm, node);
+ if (!sm->forwarding_enabled)
if (!s0)
next0 = SNAT_OUT2IN_NEXT_DROP;
goto trace00;
