Skip to content

Add security group for IPv4 and IPv6 enacapsulation

  • IPv4: openstack security group rule create --protocol 4 --ingress --remote-ip 0.0.0.0/0
  • IPv6: openstack security group rule create --protocol 41 --ingress --remote-ip 0.0.0.0/0

Maybe we need ipip too? calco is using ipip but I have verified that 4 worked.

$ cat /etc/protocols  | grep encapsulation
ipv4	4	IPv4		# IPv4 encapsulation
ipv6	41	IPv6		# IPv6 encapsulation
ipip	94	IPIP		# Yet Another IP encapsulation