IPSEC; dpdk backend for tunnel interface encryption
Change-Id: Ide2a9df18db371c8428855d7f12f246006d7c04c
Signed-off-by: Neale Ranns <nranns@cisco.com>
diff --git a/src/vnet/ipsec/ipsec_cli.c b/src/vnet/ipsec/ipsec_cli.c
index 16d9048..4691214 100644
--- a/src/vnet/ipsec/ipsec_cli.c
+++ b/src/vnet/ipsec/ipsec_cli.c
@@ -661,17 +661,16 @@
unformat_input_t * input,
vlib_cli_command_t * cmd)
{
- u32 backend_index;
- ipsec_main_t *im = &ipsec_main;
-
- if (pool_elts (im->sad) > 0)
- {
- return clib_error_return (0,
- "Cannot change IPsec backend, while %u SA entries are configured",
- pool_elts (im->sad));
- }
-
unformat_input_t _line_input, *line_input = &_line_input;
+ ipsec_main_t *im = &ipsec_main;
+ clib_error_t *error;
+ u32 backend_index;
+
+ error = ipsec_rsc_in_use (im);
+
+ if (error)
+ return error;
+
/* Get a line of input. */
if (!unformat_user (input, unformat_line_input, line_input))
return 0;