crypto

default

eth2p-ethip4ipsectnl-ip4base-func

IPv4 IPsec tunnel mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5a47416b52784574446a397271747756 integ-alg sha1-96 integ-key 65307038437771707a42727472626673746c5061 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5a47416b52784574446a397271747756 integ-alg sha1-96 integ-key 65307038437771707a42727472626673746c5061 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc02: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 345259747a5653793469484e543558385341524344343131 integ-alg sha1-96 integ-key 376f625a6b624d70567757696f744365646d5879 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 345259747a5653793469484e543558385341524344343131 integ-alg sha1-96 integ-key 376f625a6b624d70567757696f744365646d5879 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc03: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 5835575a6a574661454d4a555870494769476b75744b6759466f4d4246636e6a integ-alg sha1-96 integ-key 754246596e4857726671695970705232334d6871 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 5835575a6a574661454d4a555870494769476b75744b6759466f4d4246636e6a integ-alg sha1-96 integ-key 754246596e4857726671695970705232334d6871 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc04: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 73707661357a307a304b38566a4d444f integ-alg sha-256-128 integ-key 6443714855494134616837486a38484c34637a70793570754b49587a52715130 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 73707661357a307a304b38566a4d444f integ-alg sha-256-128 integ-key 6443714855494134616837486a38484c34637a70793570754b49587a52715130 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 396f574d584f4f504445683264487759694c64724b536b6c integ-alg sha-256-128 integ-key 514a75484c736f754b77656b6d5a59516377344d797462334938764b6f4f377a tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 396f574d584f4f504445683264487759694c64724b536b6c integ-alg sha-256-128 integ-key 514a75484c736f754b77656b6d5a59516377344d797462334938764b6f4f377a tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc06: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 6a456162494a747a736e6c586f327636424f396e6d614a716951324f64613635 integ-alg sha-256-128 integ-key 36457a51305068754d6467397830324a46306b6d52585a356c74416e78357244 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 6a456162494a747a736e6c586f327636424f396e6d614a716951324f64613635 integ-alg sha-256-128 integ-key 36457a51305068754d6467397830324a46306b6d52585a356c74416e78357244 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc07: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 767a303068433330655a41784a626a33 integ-alg sha-384-192 integ-key 677636594141786a4e48584d4c4e4836474f525877684f335470485850503671466a424b756f52694938434339686b42 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 767a303068433330655a41784a626a33 integ-alg sha-384-192 integ-key 677636594141786a4e48584d4c4e4836474f525877684f335470485850503671466a424b756f52694938434339686b42 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc08: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 52744f3052353164444248707241414b3466683542776734 integ-alg sha-384-192 integ-key 7670596f6c6c7279676c6b435034667931586a50325555537061674a4171706449704678397334537065737a45614d55 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 52744f3052353164444248707241414b3466683542776734 integ-alg sha-384-192 integ-key 7670596f6c6c7279676c6b435034667931586a50325555537061674a4171706449704678397334537065737a45614d55 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 3162787134636c6c7a4d59344952766c4c786370554670563774336442326779 integ-alg sha-384-192 integ-key 4d557a59436e653335664c6f6e745a53394f7937643154773845653767533934467354365044777071614d7462395a65 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 3162787134636c6c7a4d59344952766c4c786370554670563774336442326779 integ-alg sha-384-192 integ-key 4d557a59436e653335664c6f6e745a53394f7937643154773845653767533934467354365044777071614d7462395a65 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc10: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 7a6a53374c5a33477452415147614e46 integ-alg sha-512-256 integ-key 6163565942596a64363848485a575445507663494b54495a725862434636413658724d624344537558327755456543444b504865364a6e4d6e586d544c4e4242 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 7a6a53374c5a33477452415147614e46 integ-alg sha-512-256 integ-key 6163565942596a64363848485a575445507663494b54495a725862434636413658724d624344537558327755456543444b504865364a6e4d6e586d544c4e4242 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc11: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 7a3767687130656f684e425a70787575566c424c46703949 integ-alg sha-512-256 integ-key 4c54436f7a6d485267584b4f58434d7055444e336b45653735555155637559424432516e6b4b4e76567a6a76315062636b6b416e42476372626a6f3677525a58 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 7a3767687130656f684e425a70787575566c424c46703949 integ-alg sha-512-256 integ-key 4c54436f7a6d485267584b4f58434d7055444e336b45653735555155637559424432516e6b4b4e76567a6a76315062636b6b416e42476372626a6f3677525a58 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 577a6478504775357030425764774948767331326832514247336d5364585062 integ-alg sha-512-256 integ-key 4264524f6468585246695a4c715046564c50786d50526673686359757535614a736d5175584272356f7049455143664d6b705734486b344672656d574a347477 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 577a6478504775357030425764774948767331326832514247336d5364585062 integ-alg sha-512-256 integ-key 4264524f6468585246695a4c715046564c50786d50526673686359757535614a736d5175584272356f7049455143664d6b705734486b344672656d574a347477 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 763548457845756b7077363949447138 integ-alg sha1-96 integ-key 4f306f505a426f7979786a5645763030514e4f61 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 763548457845756b7077363949447138 integ-alg sha1-96 integ-key 4f306f505a426f7979786a5645763030514e4f61 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 34305255464c554e4873675273534c5a integ-alg sha1-96 integ-key 34503236414d77676835396333544c79554b4f52 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 34305255464c554e4873675273534c5a integ-alg sha1-96 integ-key 34503236414d77676835396333544c79554b4f52 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 37313533424978636b716a4459555a75 integ-alg sha1-96 integ-key 4c717a4d533071735134746855526d5139415a32 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 37313533424978636b716a4459555a75 integ-alg sha1-96 integ-key 4c717a4d533071735134746855526d5139415a32 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 49586d4662455630796f45424f617530 integ-alg sha1-96 integ-key 61737a723055434c726b725332424a5652773049 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 49586d4662455630796f45424f617530 integ-alg sha1-96 integ-key 61737a723055434c726b725332424a5652773049 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec set ipsec sa 10 crypto-key 377a71616677504b626b414652376174 integ-key 7a513731727345536444396e4455505658676c36
exec set ipsec sa 20 crypto-key 377a71616677504b626b414652376174 integ-key 7a513731727345536444396e4455505658676c36
exec show trace

DUT2:
exec show trace
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 74714f4e6f6e44533246714352737568 integ-alg sha1-96 integ-key 5771335a5055314e6d4978575555596543694643 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 74714f4e6f6e44533246714352737568 integ-alg sha1-96 integ-key 5771335a5055314e6d4978575555596543694643 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec set ipsec sa 10 crypto-key 5455774b434178733431534b43514b57 integ-key 4357697668733142416d46575136515174507848
exec set ipsec sa 20 crypto-key 5455774b434178733431534b43514b57 integ-key 4357697668733142416d46575136515174507848
exec show trace

DUT2:
exec show trace
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 55635a3977394c71494b535742516750 integ-alg sha1-96 integ-key 306f34326d547666534e6b57787667336358324b tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 55635a3977394c71494b535742516750 integ-alg sha1-96 integ-key 306f34326d547666534e6b57787667336358324b tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec set ipsec sa 10 crypto-key 786a67533733573447565832336c7935 integ-key 704962307873796865334953393643763548657a
exec set ipsec sa 20 crypto-key 786a67533733573447565832336c7935 integ-key 704962307873796865334953393643763548657a
exec show trace

DUT2:
exec show trace
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 7366376a68426241436d495032724e63 integ-alg sha1-96 integ-key 64396858784d4a34684a63797a366e514349794a tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 7366376a68426241436d495032724e63 integ-alg sha1-96 integ-key 64396858784d4a34684a63797a366e514349794a tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec set ipsec sa 10 crypto-key 3658704f4564614a65346a5559775232 integ-key 356d6b4c65766e356e7346696274556d47677954
exec set ipsec sa 20 crypto-key 3658704f4564614a65346a5559775232 integ-key 356d6b4c65766e356e7346696274556d47677954
exec show trace

DUT2:
exec show trace

eth2p-ethip4ipsectpt-ip4base-func

IPv4 IPsec transport mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 744b31476330633932327a4e374d4139 integ-alg sha1-96 integ-key 376c6c4a6f386362363066697254306647533851
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 744b31476330633932327a4e374d4139 integ-alg sha1-96 integ-key 376c6c4a6f386362363066697254306647533851
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc02: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 3871686e6f5346734b6e71364b47523669344a4454597571 integ-alg sha1-96 integ-key 69696c5a754c644f753865734b5a7a6e5233436f
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 3871686e6f5346734b6e71364b47523669344a4454597571 integ-alg sha1-96 integ-key 69696c5a754c644f753865734b5a7a6e5233436f
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc03: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 6c303170636273314770386941346479556e3943654e56663958623561635546 integ-alg sha1-96 integ-key 4d6235636762304c4f4e61463361387138456f75
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 6c303170636273314770386941346479556e3943654e56663958623561635546 integ-alg sha1-96 integ-key 4d6235636762304c4f4e61463361387138456f75
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc04: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 51644f384244427176366a69414b7a36 integ-alg sha-256-128 integ-key 54746630534c717a505a5a463658584869494c356476466b6f37393139794774
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 51644f384244427176366a69414b7a36 integ-alg sha-256-128 integ-key 54746630534c717a505a5a463658584869494c356476466b6f37393139794774
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 4c633539686e68624d343442395442716972586176414b55 integ-alg sha-256-128 integ-key 5479364d796a41784d307a565a6f715233346b687571776154346c306a555453
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 4c633539686e68624d343442395442716972586176414b55 integ-alg sha-256-128 integ-key 5479364d796a41784d307a565a6f715233346b687571776154346c306a555453
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc06: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 6b38454d4c3553756e64444753746b7163525241506a6964566c387141755441 integ-alg sha-256-128 integ-key 466d79355537365a4e446778394a7635474f6b37654a6e563862324646497652
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 6b38454d4c3553756e64444753746b7163525241506a6964566c387141755441 integ-alg sha-256-128 integ-key 466d79355537365a4e446778394a7635474f6b37654a6e563862324646497652
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc07: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 694c52475153766e376f33326c74574e integ-alg sha-384-192 integ-key 48305970347933745450353149706432643331797a706633414f4e4b4d4e325276374b58714c684173663450754f6744
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 694c52475153766e376f33326c74574e integ-alg sha-384-192 integ-key 48305970347933745450353149706432643331797a706633414f4e4b4d4e325276374b58714c684173663450754f6744
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc08: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 554f6f4536547256715170367346423039377255665a3270 integ-alg sha-384-192 integ-key 7571484968384d56343933506859694e435636496454317a6f307656315a666f35775674454153555976793157325761
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 554f6f4536547256715170367346423039377255665a3270 integ-alg sha-384-192 integ-key 7571484968384d56343933506859694e435636496454317a6f307656315a666f35775674454153555976793157325761
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 766479494a4b75453359314a36615a35563857416d5269586d46646578756c4a integ-alg sha-384-192 integ-key 68667043317a6255536d6b6d56397035314532666378675449334b7353724a6c4d395568566754637630577770393446
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 766479494a4b75453359314a36615a35563857416d5269586d46646578756c4a integ-alg sha-384-192 integ-key 68667043317a6255536d6b6d56397035314532666378675449334b7353724a6c4d395568566754637630577770393446
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc10: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 687354677237645a76673141566f5563 integ-alg sha-512-256 integ-key 4a666568696b56566658727374776f53783648314e6258436c6d4f55304958376b724d50674956755732516a4674637435666f3970737a675642544234516569
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 687354677237645a76673141566f5563 integ-alg sha-512-256 integ-key 4a666568696b56566658727374776f53783648314e6258436c6d4f55304958376b724d50674956755732516a4674637435666f3970737a675642544234516569
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc11: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 515245397343307431595547656368584c51353179395342 integ-alg sha-512-256 integ-key 664e34676f66677a5030344c704b736d3954584569684e624d56324747655a54484a6d72324f79787242653746436d784571553254586555636343396f467172
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 515245397343307431595547656368584c51353179395342 integ-alg sha-512-256 integ-key 664e34676f66677a5030344c704b736d3954584569684e624d56324747655a54484a6d72324f79787242653746436d784571553254586555636343396f467172
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 73754b7a70433234556a377869465856655479797a395648754448356a484768 integ-alg sha-512-256 integ-key 374c6349724a52566179756369715148554846457934536d4471765a37486c566d4839686d534f31495a4d305235786d5361326167706b65466163614c335546
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 73754b7a70433234556a377869465856655479797a395648754448356a484768 integ-alg sha-512-256 integ-key 374c6349724a52566179756369715148554846457934536d4471765a37486c566d4839686d534f31495a4d305235786d5361326167706b65466163614c335546
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6d594c4643796f4b4f63797761586d35 integ-alg sha1-96 integ-key 724b4e4149505074664e424957685350476e6233
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6d594c4643796f4b4f63797761586d35 integ-alg sha1-96 integ-key 724b4e4149505074664e424957685350476e6233
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 484136313961767565564b6938724937 integ-alg sha1-96 integ-key 33654b6d6950464932724e4d334b326b45525a55
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 484136313961767565564b6938724937 integ-alg sha1-96 integ-key 33654b6d6950464932724e4d334b326b45525a55
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 43486938395254685863455346355866 integ-alg sha1-96 integ-key 6e52394a777148743652314b7a483164665a5874
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 43486938395254685863455346355866 integ-alg sha1-96 integ-key 6e52394a777148743652314b7a483164665a5874
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 324565377062514b4939725256515361 integ-alg sha1-96 integ-key 6d7957374d665674363472333945747568494843
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 324565377062514b4939725256515361 integ-alg sha1-96 integ-key 6d7957374d665674363472333945747568494843
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec set ipsec sa 10 crypto-key 4c485570696b54705a4155476b636f79 integ-key 5770684751626f717543764e4734573736763658
exec set ipsec sa 20 crypto-key 4c485570696b54705a4155476b636f79 integ-key 5770684751626f717543764e4734573736763658
exec show trace

DUT2:
exec show trace
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6b6e51446653386a7a6d6d7978374250 integ-alg sha1-96 integ-key 575546764841734d6c783746516e655875325759
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6b6e51446653386a7a6d6d7978374250 integ-alg sha1-96 integ-key 575546764841734d6c783746516e655875325759
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec set ipsec sa 10 crypto-key 594972453356775841464e414a696b4b integ-key 4153314f703931526e7a5950656266305a463546
exec set ipsec sa 20 crypto-key 594972453356775841464e414a696b4b integ-key 4153314f703931526e7a5950656266305a463546
exec show trace

DUT2:
exec show trace
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4f434a574c7972337644667279465444 integ-alg sha1-96 integ-key 343774456e70595746496b717a456f6363724667
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4f434a574c7972337644667279465444 integ-alg sha1-96 integ-key 343774456e70595746496b717a456f6363724667
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec set ipsec sa 10 crypto-key 78445673564c334c314c36474362354a integ-key 45377a45794b685637593664686577713534344e
exec set ipsec sa 20 crypto-key 78445673564c334c314c36474362354a integ-key 45377a45794b685637593664686577713534344e
exec show trace

DUT2:
exec show trace
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5063417a78734b656251324f3442384c integ-alg sha1-96 integ-key 42516c324a444e4f6144773174444a32677a4b44
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5063417a78734b656251324f3442384c integ-alg sha1-96 integ-key 42516c324a444e4f6144773174444a32677a4b44
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec set ipsec sa 10 crypto-key 5572765331786e7a795a563875696351 integ-key 4e6166455a66375877316f466644635954646c61
exec set ipsec sa 20 crypto-key 5572765331786e7a795a563875696351 integ-key 4e6166455a66375877316f466644635954646c61
exec show trace

DUT2:
exec show trace

eth2p-ethip4ipsectptlispgpe-ip4base-func

IPv4-ip4-ipsec-lispgpe-ip4 - main fib, vrf (gpe_vni-to-vrf)

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: ICMPv4-IPv4-IPSec-LISPGPE-IPv4-ICMPv4.
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 0
sw_interface_set_table sw_if_index 1 vrf 0
sw_interface_add_del_address sw_if_index 3 6.6.3.1/24
sw_interface_add_del_address sw_if_index 1 6.6.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:5b:85
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2
lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4f654c434c6f643070476d49756b696d integ-alg sha1-96 integ-key 6d524d6c3565554a716b5562483773313233627a
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4f654c434c6f643070476d49756b696d integ-alg sha1-96 integ-key 6d524d6c3565554a716b5562483773313233627a
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 0
sw_interface_set_table sw_if_index 1 vrf 0
sw_interface_add_del_address sw_if_index 3 6.6.3.2/24
sw_interface_add_del_address sw_if_index 1 6.6.2.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:14:eb:c7
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1
lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4f654c434c6f643070476d49756b696d integ-alg sha1-96 integ-key 6d524d6c3565554a716b5562483773313233627a
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4f654c434c6f643070476d49756b696d integ-alg sha1-96 integ-key 6d524d6c3565554a716b5562483773313233627a
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec show trace
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) lisp_gpe0 int.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 0
sw_interface_set_table sw_if_index 1 vrf 0
sw_interface_add_del_address sw_if_index 3 6.6.3.1/24
sw_interface_add_del_address sw_if_index 1 6.6.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:5b:85
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2
lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24
sw_interface_dump
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 664376456271774d484d683968446576 integ-alg sha1-96 integ-key 4749704e46796e3031775052374e7a70395a6d44
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 664376456271774d484d683968446576 integ-alg sha1-96 integ-key 4749704e46796e3031775052374e7a70395a6d44
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 0
sw_interface_set_table sw_if_index 1 vrf 0
sw_interface_add_del_address sw_if_index 3 6.6.3.2/24
sw_interface_add_del_address sw_if_index 1 6.6.2.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:14:eb:c7
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1
lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 664376456271774d484d683968446576 integ-alg sha1-96 integ-key 4749704e46796e3031775052374e7a70395a6d44
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 664376456271774d484d683968446576 integ-alg sha1-96 integ-key 4749704e46796e3031775052374e7a70395a6d44
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2
exec show trace
tc03: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int and vrf on eid is enabled.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1
sw_interface_set_table sw_if_index 1 vrf 1
sw_interface_add_del_address sw_if_index 3 6.6.3.1/24
sw_interface_add_del_address sw_if_index 1 6.6.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:5b:85
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 6.6.1.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 1 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2
lisp_add_del_adjacency add vni 1 reid 6.6.2.0/24 leid 6.6.1.0/24
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 566d304643774f757557486d43725543 integ-alg sha1-96 integ-key 3244775a50387a6862443543737751585872744d
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 566d304643774f757557486d43725543 integ-alg sha1-96 integ-key 3244775a50387a6862443543737751585872744d
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1
sw_interface_set_table sw_if_index 1 vrf 1
sw_interface_add_del_address sw_if_index 3 6.6.3.2/24
sw_interface_add_del_address sw_if_index 1 6.6.2.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:14:eb:c7
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 6.6.2.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 1 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1
lisp_add_del_adjacency add vni 1 reid 6.6.1.0/24 leid 6.6.2.0/24
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 566d304643774f757557486d43725543 integ-alg sha1-96 integ-key 3244775a50387a6862443543737751585872744d
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 566d304643774f757557486d43725543 integ-alg sha1-96 integ-key 3244775a50387a6862443543737751585872744d
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec show trace
tc04: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int and vrf is enabled.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1
sw_interface_set_table sw_if_index 1 vrf 1
sw_interface_add_del_address sw_if_index 3 6.6.3.1/24
sw_interface_add_del_address sw_if_index 1 6.6.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:5b:85
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 6.6.1.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 1 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2
lisp_add_del_adjacency add vni 1 reid 6.6.2.0/24 leid 6.6.1.0/24
sw_interface_dump
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3938555065773358704a715253444433 integ-alg sha1-96 integ-key 787241616164766d43666c757468574a6765414e
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3938555065773358704a715253444433 integ-alg sha1-96 integ-key 787241616164766d43666c757468574a6765414e
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1
sw_interface_set_table sw_if_index 1 vrf 1
sw_interface_add_del_address sw_if_index 3 6.6.3.2/24
sw_interface_add_del_address sw_if_index 1 6.6.2.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:14:eb:c7
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 6.6.2.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 1 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1
lisp_add_del_adjacency add vni 1 reid 6.6.1.0/24 leid 6.6.2.0/24
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3938555065773358704a715253444433 integ-alg sha1-96 integ-key 787241616164766d43666c757468574a6765414e
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3938555065773358704a715253444433 integ-alg sha1-96 integ-key 787241616164766d43666c757468574a6765414e
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2
exec show trace

eth2p-ethip4ipsectptlispgpe-ip6base-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.6.3.1/24
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:5b:85
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2
lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 614f6a446f7243454e47736a57456555 integ-alg sha1-96 integ-key 6c30507135436e577953674e43744939546b4845
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 614f6a446f7243454e47736a57456555 integ-alg sha1-96 integ-key 6c30507135436e577953674e43744939546b4845
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.6.3.2/24
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1
lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 614f6a446f7243454e47736a57456555 integ-alg sha1-96 integ-key 6c30507135436e577953674e43744939546b4845
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 614f6a446f7243454e47736a57456555 integ-alg sha1-96 integ-key 6c30507135436e577953674e43744939546b4845
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec show trace
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.6.3.1/24
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:5b:85
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2
lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64
sw_interface_dump
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 313456704b3767645573557847543675 integ-alg sha1-96 integ-key 74704d39423063567765567a664f726933615772
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 313456704b3767645573557847543675 integ-alg sha1-96 integ-key 74704d39423063567765567a664f726933615772
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.6.3.2/24
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1
lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 313456704b3767645573557847543675 integ-alg sha1-96 integ-key 74704d39423063567765567a664f726933615772
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 313456704b3767645573557847543675 integ-alg sha1-96 integ-key 74704d39423063567765567a664f726933615772
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec show trace

eth2p-ethip4ipsectptlispgpe-ip6basevrf-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1 ipv6
sw_interface_set_table sw_if_index 1 vrf 1 ipv6
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 47335455334a35306964355978505145 integ-alg sha1-96 integ-key 394c327345347944535a4d637a786a6875626758
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 47335455334a35306964355978505145 integ-alg sha1-96 integ-key 394c327345347944535a4d637a786a6875626758
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.6.3.1/24
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:5b:85
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 2001:cdba:1::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2
lisp_add_del_adjacency add vni 1 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1 ipv6
sw_interface_set_table sw_if_index 1 vrf 1 ipv6
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 47335455334a35306964355978505145 integ-alg sha1-96 integ-key 394c327345347944535a4d637a786a6875626758
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 47335455334a35306964355978505145 integ-alg sha1-96 integ-key 394c327345347944535a4d637a786a6875626758
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.6.3.2/24
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 2001:cdba:2::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1
lisp_add_del_adjacency add vni 1 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64
exec show trace

eth2p-ethip6ipsectnl-ip6base-func

IPv6 IPsec tunnel mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 32654575516758534f4f5270527a3248 integ-alg sha1-96 integ-key 7077774656754961537543706c67593762504649 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 32654575516758534f4f5270527a3248 integ-alg sha1-96 integ-key 7077774656754961537543706c67593762504649 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc02: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 5367696d4c5071666d6b7978616670737576686f35447974 integ-alg sha1-96 integ-key 52794d73337a4d534f684c314d61797071684552 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 5367696d4c5071666d6b7978616670737576686f35447974 integ-alg sha1-96 integ-key 52794d73337a4d534f684c314d61797071684552 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc03: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 673834673369524d795046776f44744a5035517a647177364e334e4c6b383430 integ-alg sha1-96 integ-key 674d70333939565748474157764d477736624a56 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 673834673369524d795046776f44744a5035517a647177364e334e4c6b383430 integ-alg sha1-96 integ-key 674d70333939565748474157764d477736624a56 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc04: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5a4c516450505a7a6941513935756961 integ-alg sha-256-128 integ-key 544c36344f4e43656c385969546b32504b4a7646376f636a4d6c6541486a5746 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5a4c516450505a7a6941513935756961 integ-alg sha-256-128 integ-key 544c36344f4e43656c385969546b32504b4a7646376f636a4d6c6541486a5746 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 777343726534504a6361503577616550537650644d527170 integ-alg sha-256-128 integ-key 6e4178653468324a696a6f3357494c65696944354e6f7537474d4a304d46734d tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 777343726534504a6361503577616550537650644d527170 integ-alg sha-256-128 integ-key 6e4178653468324a696a6f3357494c65696944354e6f7537474d4a304d46734d tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc06: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 5554665a7a55527476454c593870784a617849316c485765594c5a37497a6130 integ-alg sha-256-128 integ-key 427370553174616937506350453459305137664a4c54557047554a6357473938 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 5554665a7a55527476454c593870784a617849316c485765594c5a37497a6130 integ-alg sha-256-128 integ-key 427370553174616937506350453459305137664a4c54557047554a6357473938 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc07: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4f486232566b77754834343273677454 integ-alg sha-384-192 integ-key 4e3359574b4a6161344e716677324d44414171744c45714a4634627a49767256385839787a7a6537476b34644f584844 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4f486232566b77754834343273677454 integ-alg sha-384-192 integ-key 4e3359574b4a6161344e716677324d44414171744c45714a4634627a49767256385839787a7a6537476b34644f584844 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc08: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 6c3243444a6d7078716f796174574f735750383838716169 integ-alg sha-384-192 integ-key 654c5849744b5064664834596154626b76376b30796873694a69347133785034775744584d36636548344b6533376e4e tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 6c3243444a6d7078716f796174574f735750383838716169 integ-alg sha-384-192 integ-key 654c5849744b5064664834596154626b76376b30796873694a69347133785034775744584d36636548344b6533376e4e tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 48434e6358366f35764f367379716e6748326e514b54693577676b4d71424d67 integ-alg sha-384-192 integ-key 66636b626f366f4e637167637338564357484c6534554852443158535054477575436d4275754d4159597449545a5471 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 48434e6358366f35764f367379716e6748326e514b54693577676b4d71424d67 integ-alg sha-384-192 integ-key 66636b626f366f4e637167637338564357484c6534554852443158535054477575436d4275754d4159597449545a5471 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc10: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 455337747377436f7754323947747479 integ-alg sha-512-256 integ-key 78345a506d4635436673324e6e556f513041345175527a495a6946766961525a373862627454465551545a42494365317267474d3144486c6b67366971305658 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 455337747377436f7754323947747479 integ-alg sha-512-256 integ-key 78345a506d4635436673324e6e556f513041345175527a495a6946766961525a373862627454465551545a42494365317267474d3144486c6b67366971305658 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc11: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 6868557043303341756756524c6c4a3278776f696b616368 integ-alg sha-512-256 integ-key 7a77377a754a35545057304f387642574d6a6a4144777734513045646a506f6a767759424a71384c6f71587a306c69314e52426b5848325753756f53754c3170 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 6868557043303341756756524c6c4a3278776f696b616368 integ-alg sha-512-256 integ-key 7a77377a754a35545057304f387642574d6a6a4144777734513045646a506f6a767759424a71384c6f71587a306c69314e52426b5848325753756f53754c3170 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 7364504b69443272496747417736336f645a576f597651644a7a557a55674f41 integ-alg sha-512-256 integ-key 33395256724b4a6b726f6f51336f4f656a7451625332313069484e496f596444377778706b53723539476253397650354558394e586a614553436e4f72666774 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 7364504b69443272496747417736336f645a576f597651644a7a557a55674f41 integ-alg sha-512-256 integ-key 33395256724b4a6b726f6f51336f4f656a7451625332313069484e496f596444377778706b53723539476253397650354558394e586a614553436e4f72666774 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3558464a7964796a4f344d6842476138 integ-alg sha1-96 integ-key 5a4450386e6645645a6872413063796b626e676d tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3558464a7964796a4f344d6842476138 integ-alg sha1-96 integ-key 5a4450386e6645645a6872413063796b626e676d tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 384d55334b736c536b3047494f513835 integ-alg sha1-96 integ-key 444c716e705a3041764c505a306944554c544330 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 384d55334b736c536b3047494f513835 integ-alg sha1-96 integ-key 444c716e705a3041764c505a306944554c544330 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 34554644664d35305544506a4c57304a integ-alg sha1-96 integ-key 3775464145564c5a7835304c41386858645a6539 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 34554644664d35305544506a4c57304a integ-alg sha1-96 integ-key 3775464145564c5a7835304c41386858645a6539 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 69516937623063316262304951446133 integ-alg sha1-96 integ-key 3667726d387066707877507773374e5854596a5a tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 69516937623063316262304951446133 integ-alg sha1-96 integ-key 3667726d387066707877507773374e5854596a5a tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec set ipsec sa 10 crypto-key 6f507a5734623039767052614763526d integ-key 786c736b6d6c4d7665704d47356f4e536972336a
exec set ipsec sa 20 crypto-key 6f507a5734623039767052614763526d integ-key 786c736b6d6c4d7665704d47356f4e536972336a
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 75534d6c5367394e32326a524f756d46 integ-alg sha1-96 integ-key 30676c6142333154506f594937544a5861655976 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 75534d6c5367394e32326a524f756d46 integ-alg sha1-96 integ-key 30676c6142333154506f594937544a5861655976 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec set ipsec sa 10 crypto-key 46774e49457a3961545448337778384c integ-key 7a6949337349584e4c793664646b593445757331
exec set ipsec sa 20 crypto-key 46774e49457a3961545448337778384c integ-key 7a6949337349584e4c793664646b593445757331
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 596762764847574c415066784548734f integ-alg sha1-96 integ-key 685a4d4934434753416753744650437143774966 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 596762764847574c415066784548734f integ-alg sha1-96 integ-key 685a4d4934434753416753744650437143774966 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec set ipsec sa 10 crypto-key 4b76483847673973634c536333345468 integ-key 344f6666773055434d3966456338725371384161
exec set ipsec sa 20 crypto-key 4b76483847673973634c536333345468 integ-key 344f6666773055434d3966456338725371384161
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 306d3052726579445133546a344b5949 integ-alg sha1-96 integ-key 5056684f7a6d6858556148663777615747436a32 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 306d3052726579445133546a344b5949 integ-alg sha1-96 integ-key 5056684f7a6d6858556148663777615747436a32 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3
exec set ipsec sa 10 crypto-key 714b6d4b5a7867386461416e77744947 integ-key 5979346766595247314f754f5452387579754351
exec set ipsec sa 20 crypto-key 714b6d4b5a7867386461416e77744947 integ-key 5979346766595247314f754f5452387579754351
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

eth2p-ethip6ipsectpt-ip6base-func

IPv6 IPsec transport mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 616b4174597332504e4e68446f723470 integ-alg sha1-96 integ-key 6e6b48554654546e4730747a634e335839505a61
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 616b4174597332504e4e68446f723470 integ-alg sha1-96 integ-key 6e6b48554654546e4730747a634e335839505a61
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc02: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 5938645234524549495a686758795a3947456a657a316e6c integ-alg sha1-96 integ-key 525342596a47493478446d66456a705874473478
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 5938645234524549495a686758795a3947456a657a316e6c integ-alg sha1-96 integ-key 525342596a47493478446d66456a705874473478
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc03: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 59436863664f3546717836684273715a4d5a4541337553463747376248567241 integ-alg sha1-96 integ-key 474c79595a4d7a57526f34617850467743343739
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 59436863664f3546717836684273715a4d5a4541337553463747376248567241 integ-alg sha1-96 integ-key 474c79595a4d7a57526f34617850467743343739
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc04: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6c7955674141546b3858354c514e4b64 integ-alg sha-256-128 integ-key 3944527561314c5033657367535733436b516d783555555768596f4755364143
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6c7955674141546b3858354c514e4b64 integ-alg sha-256-128 integ-key 3944527561314c5033657367535733436b516d783555555768596f4755364143
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 5467584a3471443170704b50544b5151443258666c4d6b71 integ-alg sha-256-128 integ-key 4934785453396c3635393353773455344d62785a616b4e44726a784f3644416e
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 5467584a3471443170704b50544b5151443258666c4d6b71 integ-alg sha-256-128 integ-key 4934785453396c3635393353773455344d62785a616b4e44726a784f3644416e
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc06: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 326f66463854785a3652316f345962786b654c615a596d396c5a627961344142 integ-alg sha-256-128 integ-key 7a796c496563587a434e5271325179775557396b586f6e644b42476b31773957
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 326f66463854785a3652316f345962786b654c615a596d396c5a627961344142 integ-alg sha-256-128 integ-key 7a796c496563587a434e5271325179775557396b586f6e644b42476b31773957
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc07: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 7a774441587a4d64614265695a75684c integ-alg sha-384-192 integ-key 4f4d4e62363841704e6243775237593641316c72706e69414d464d6234775364596e583445367443443159564346377a
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 7a774441587a4d64614265695a75684c integ-alg sha-384-192 integ-key 4f4d4e62363841704e6243775237593641316c72706e69414d464d6234775364596e583445367443443159564346377a
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc08: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 73713273703557687459486f32395876634d3269526f3639 integ-alg sha-384-192 integ-key 6d4b5247724c5a30694a79534c385439454f724f4e305464367436754c46767559567a467057485a6673646934397669
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 73713273703557687459486f32395876634d3269526f3639 integ-alg sha-384-192 integ-key 6d4b5247724c5a30694a79534c385439454f724f4e305464367436754c46767559567a467057485a6673646934397669
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 31586f564c5631496a55595155444c396b516131777877507651736a43714d46 integ-alg sha-384-192 integ-key 6449645032326e4c3551506773393678414c696e6e616847387241567754766b754e4341616e67633761587853583861
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 31586f564c5631496a55595155444c396b516131777877507651736a43714d46 integ-alg sha-384-192 integ-key 6449645032326e4c3551506773393678414c696e6e616847387241567754766b754e4341616e67633761587853583861
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc10: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 635a5a5048456b4a5950676831516178 integ-alg sha-512-256 integ-key 6c33323779544d314556544b4b567431386636746c57466e5545344e754d4349416b4b53716235353657735764744475485645413338715632516d4b49446976
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 635a5a5048456b4a5950676831516178 integ-alg sha-512-256 integ-key 6c33323779544d314556544b4b567431386636746c57466e5545344e754d4349416b4b53716235353657735764744475485645413338715632516d4b49446976
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc11: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 477876796b626576533762464e7549586d44394433724237 integ-alg sha-512-256 integ-key 374c6c505a516d38564a574b4a5a4f4e74526e58476b42336871734b41434b65525a7a4c69545577644f43386c33376d4552425a33786e705667527a62705a61
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 477876796b626576533762464e7549586d44394433724237 integ-alg sha-512-256 integ-key 374c6c505a516d38564a574b4a5a4f4e74526e58476b42336871734b41434b65525a7a4c69545577644f43386c33376d4552425a33786e705667527a62705a61
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 676a7133763353314449554163384a536d6f586a4971576b55396d3751443677 integ-alg sha-512-256 integ-key 724d50474c7766756d58576e4e324b4573746754526e7535355571616b6750736c565957526a436e30744751446f41497158386457327530553833456d626639
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 676a7133763353314449554163384a536d6f586a4971576b55396d3751443677 integ-alg sha-512-256 integ-key 724d50474c7766756d58576e4e324b4573746754526e7535355571616b6750736c565957526a436e30744751446f41497158386457327530553833456d626639
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4262436a715969374652764969754937 integ-alg sha1-96 integ-key 30636a717464725347454c76345139795935306c
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4262436a715969374652764969754937 integ-alg sha1-96 integ-key 30636a717464725347454c76345139795935306c
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 354e666b68534c6f34735551676a516d integ-alg sha1-96 integ-key 457a7934696c6f306c4936346861716f636f3665
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 354e666b68534c6f34735551676a516d integ-alg sha1-96 integ-key 457a7934696c6f306c4936346861716f636f3665
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4368735030553338733858565331787a integ-alg sha1-96 integ-key 4d3474364152444c334e473753744b3871444b6b
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4368735030553338733858565331787a integ-alg sha1-96 integ-key 4d3474364152444c334e473753744b3871444b6b
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 78614c3465376a4f715865486d757a79 integ-alg sha1-96 integ-key 37486148386648396e4761573759427a69415457
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 78614c3465376a4f715865486d757a79 integ-alg sha1-96 integ-key 37486148386648396e4761573759427a69415457
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec set ipsec sa 10 crypto-key 3773745449344d535a73634e46715a32 integ-key 7073716c4d704a5a427a4d6e70374562596c5643
exec set ipsec sa 20 crypto-key 3773745449344d535a73634e46715a32 integ-key 7073716c4d704a5a427a4d6e70374562596c5643
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6c707736433949743133546145385555 integ-alg sha1-96 integ-key 56506b4f6f63706737776c6f316a79617865714c
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6c707736433949743133546145385555 integ-alg sha1-96 integ-key 56506b4f6f63706737776c6f316a79617865714c
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec set ipsec sa 10 crypto-key 6a4c524c30636d7a735572687937484b integ-key 5877304e366245326f504e697862307a594d6e71
exec set ipsec sa 20 crypto-key 6a4c524c30636d7a735572687937484b integ-key 5877304e366245326f504e697862307a594d6e71
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 774853645a36666f4241556333313541 integ-alg sha1-96 integ-key 453239356f374b6561756f45675836734f45654f
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 774853645a36666f4241556333313541 integ-alg sha1-96 integ-key 453239356f374b6561756f45675836734f45654f
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec set ipsec sa 10 crypto-key 6a54496e376e67734f50434944727634 integ-key 325554797854393062514d787a6f505a70377430
exec set ipsec sa 20 crypto-key 6a54496e376e67734f50434944727634 integ-key 325554797854393062514d787a6f505a70377430
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64
sw_interface_set_flags sw_if_index 5 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6e706a4d496f79374938736254766430 integ-alg sha1-96 integ-key 6c6c69426f437a53327548394738737872616474
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6e706a4d496f79374938736254766430 integ-alg sha1-96 integ-key 6c6c69426f437a53327548394738737872616474
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1
exec set ipsec sa 10 crypto-key 4461624a4e714c445a586b6e7072634c integ-key 346f3938776b4b6579304f645657774434706135
exec set ipsec sa 20 crypto-key 4461624a4e714c445a586b6e7072634c integ-key 346f3938776b4b6579304f645657774434706135
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

eth2p-ethip6ipsectptlispgpe-ip4base-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISPGPE-IPSec-IPv4-ICMP, Eth-IPv6-IPSec-LISPGPE-IPv4-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 6.0.1.1/24
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:5b:85
ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2
lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 505134584a6f4341654a79496c736a71 integ-alg sha1-96 integ-key 6a7152575a4e63364551336f7149745555444753
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 505134584a6f4341654a79496c736a71 integ-alg sha1-96 integ-key 6a7152575a4e63364551336f7149745555444753
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 6.0.2.1/24
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1
lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 505134584a6f4341654a79496c736a71 integ-alg sha1-96 integ-key 6a7152575a4e63364551336f7149745555444753
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 505134584a6f4341654a79496c736a71 integ-alg sha1-96 integ-key 6a7152575a4e63364551336f7149745555444753
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1
exec show trace
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 6.0.1.1/24
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:5b:85
ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2
lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24
sw_interface_dump
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 316a3669426652353745514e7a635367 integ-alg sha1-96 integ-key 486543584b6a4b703238494b36774f3745345032
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 316a3669426652353745514e7a635367 integ-alg sha1-96 integ-key 486543584b6a4b703238494b36774f3745345032
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 6.0.2.1/24
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1
lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 316a3669426652353745514e7a635367 integ-alg sha1-96 integ-key 486543584b6a4b703238494b36774f3745345032
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 316a3669426652353745514e7a635367 integ-alg sha1-96 integ-key 486543584b6a4b703238494b36774f3745345032
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1
exec show trace

eth2p-ethip6ipsectptlispgpe-ip6base-func

IPv6 - ip6-ipsec-lispgpe-ip6 - main fib, vrf (gpe_vni-to-vrf), phy2lisp, virt2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6,
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int.
 DUT1:  
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:5b:85
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2
lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4d3233545442376a5a4a53376f345551 integ-alg sha1-96 integ-key 35565975613734305947386f7a504b4c386c326d
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4d3233545442376a5a4a53376f345551 integ-alg sha1-96 integ-key 35565975613734305947386f7a504b4c386c326d
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1
lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4d3233545442376a5a4a53376f345551 integ-alg sha1-96 integ-key 35565975613734305947386f7a504b4c386c326d
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4d3233545442376a5a4a53376f345551 integ-alg sha1-96 integ-key 35565975613734305947386f7a504b4c386c326d
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1
exec show trace
tc02: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using ipsec (transport) lisp_gpe0 int.
 DUT1:  
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:5b:85
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2
lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64
sw_interface_dump
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4253324355776a45726e314861487462 integ-alg sha1-96 integ-key 7263484c4141523265366b764b4d4a4d41343454
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4253324355776a45726e314861487462 integ-alg sha1-96 integ-key 7263484c4141523265366b764b4d4a4d41343454
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:1::2 - 2001:cdba:1::2 remote-ip-range 2001:cdba:2::2 - 2001:cdba:2::2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:1::2 - 2001:cdba:1::2 remote-ip-range 2001:cdba:2::2 - 2001:cdba:2::2
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1
lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4253324355776a45726e314861487462 integ-alg sha1-96 integ-key 7263484c4141523265366b764b4d4a4d41343454
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4253324355776a45726e314861487462 integ-alg sha1-96 integ-key 7263484c4141523265366b764b4d4a4d41343454
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:2::2 - 2001:cdba:2::2 remote-ip-range 2001:cdba:1::2 - 2001:cdba:1::2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:2::2 - 2001:cdba:2::2 remote-ip-range 2001:cdba:1::2 - 2001:cdba:1::2
exec show trace

sw device

eth2p-ethip4ipsectnlsw-ip4base-func

IPv4 SW cryptodev IPsec tunnel mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: With enabled SW crytodev on DUT1 create loopback interface, configure loopback and physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 646e554a6f4d62617a424e6a54763253 integ-alg sha1-96 integ-key 4437395944686e734c6b34696348457231653572 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 646e554a6f4d62617a424e6a54763253 integ-alg sha1-96 integ-key 4437395944686e734c6b34696348457231653572 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc02: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 4e624658344936303233587971574333496e755531644a57 integ-alg sha1-96 integ-key 73314c3746423758356858377734503543756c55 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 4e624658344936303233587971574333496e755531644a57 integ-alg sha1-96 integ-key 73314c3746423758356858377734503543756c55 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc03: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 5534434859646f436c364c5a6b5769724f6571743330316f4b4d7a62536a6736 integ-alg sha1-96 integ-key 695a764a476c4f796f395a493536534f4a393367 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 5534434859646f436c364c5a6b5769724f6571743330316f4b4d7a62536a6736 integ-alg sha1-96 integ-key 695a764a476c4f796f395a493536534f4a393367 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc04: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 50574745757362496348747469514266 integ-alg sha-256-128 integ-key 4c6a6c474635634c423149647563384b776655306d6d7a64564a65347563774b tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 50574745757362496348747469514266 integ-alg sha-256-128 integ-key 4c6a6c474635634c423149647563384b776655306d6d7a64564a65347563774b tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 596264344134486567324d445531485452624c4553727553 integ-alg sha-256-128 integ-key 435867414b724d4145793239545059346336794a73525a4c686c434930564b71 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 596264344134486567324d445531485452624c4553727553 integ-alg sha-256-128 integ-key 435867414b724d4145793239545059346336794a73525a4c686c434930564b71 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc06: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 4c7771435634596e6c643334465661764358386d426439434234507050475a70 integ-alg sha-256-128 integ-key 3562516a6d316e677538475671633077466c766e464f716346734f3751617031 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 4c7771435634596e6c643334465661764358386d426439434234507050475a70 integ-alg sha-256-128 integ-key 3562516a6d316e677538475671633077466c766e464f716346734f3751617031 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc07: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6a67446b495a4a6b77306d643347576c integ-alg sha-384-192 integ-key 484f466a5a4e6467495158336e6770717630486472525577534b47666b4162334776696d6f66667351336e6b58376c45 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6a67446b495a4a6b77306d643347576c integ-alg sha-384-192 integ-key 484f466a5a4e6467495158336e6770717630486472525577534b47666b4162334776696d6f66667351336e6b58376c45 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc08: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 554159495632754d6e656e7675345364705043517578684f integ-alg sha-384-192 integ-key 47495775533467416b587378523868324c525154476c326c39717963645770326b667139307531316e496862754d3948 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 554159495632754d6e656e7675345364705043517578684f integ-alg sha-384-192 integ-key 47495775533467416b587378523868324c525154476c326c39717963645770326b667139307531316e496862754d3948 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 37375358426d48546e65496752536e3253764d56385473784a456a3647437239 integ-alg sha-384-192 integ-key 614c7a4d6d57565379306632745451344461536f6668716b51734250325344586d35624e44663877506f576265316979 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 37375358426d48546e65496752536e3253764d56385473784a456a3647437239 integ-alg sha-384-192 integ-key 614c7a4d6d57565379306632745451344461536f6668716b51734250325344586d35624e44663877506f576265316979 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc10: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 44315a436f314d624b363132536a6143 integ-alg sha-512-256 integ-key 5a4e334f696a6c4f44677045387a6e6a624d52565676416d72706337695138525a6950586164314b326a62316a58623372614c377742686b6259524c74585532 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 44315a436f314d624b363132536a6143 integ-alg sha-512-256 integ-key 5a4e334f696a6c4f44677045387a6e6a624d52565676416d72706337695138525a6950586164314b326a62316a58623372614c377742686b6259524c74585532 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc11: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 59584c333552696f45474f6a3274306c624772327151425a integ-alg sha-512-256 integ-key 6d6e5976323136534175697830346e62516d6356724b455861793634395a4e5749336a516377636645694e4d6c77726d6f535758546548525675754b72696c48 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 59584c333552696f45474f6a3274306c624772327151425a integ-alg sha-512-256 integ-key 6d6e5976323136534175697830346e62516d6356724b455861793634395a4e5749336a516377636645694e4d6c77726d6f535758546548525675754b72696c48 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 30727a646d4930796f444e724d5458546653756870446e327867324477756a61 integ-alg sha-512-256 integ-key 65655334746b3439664a37764842534b5770454d62664f7935456e684176374c73345043696d6e4e4d38685566624632514136643157793446394337354e6542 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 30727a646d4930796f444e724d5458546653756870446e327867324477756a61 integ-alg sha-512-256 integ-key 65655334746b3439664a37764842534b5770454d62664f7935456e684176374c73345043696d6e4e4d38685566624632514136643157793446394337354e6542 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6c574e63427659417a6a3876324e7630 integ-alg sha1-96 integ-key 57757334636a73316f4c31524553656c6f73466d tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6c574e63427659417a6a3876324e7630 integ-alg sha1-96 integ-key 57757334636a73316f4c31524553656c6f73466d tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6238323737526f4d4451324571416468 integ-alg sha1-96 integ-key 48686f6f317738574e31416752626a326b484431 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6238323737526f4d4451324571416468 integ-alg sha1-96 integ-key 48686f6f317738574e31416752626a326b484431 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3974474d5a6b78506653357671693865 integ-alg sha1-96 integ-key 3749375a304b317466413845596e4d794a62486a tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3974474d5a6b78506653357671693865 integ-alg sha1-96 integ-key 3749375a304b317466413845596e4d794a62486a tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec show trace

DUT2:
exec show trace
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 34457266323043584d394f5472414459 integ-alg sha1-96 integ-key 564137713134564c766a307a506d564b62764f41 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 34457266323043584d394f5472414459 integ-alg sha1-96 integ-key 564137713134564c766a307a506d564b62764f41 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec set ipsec sa 10 crypto-key 4c4672704a705456365947676f583744 integ-key 49653655516450454d585a67306a476c66744c41
exec set ipsec sa 20 crypto-key 4c4672704a705456365947676f583744 integ-key 49653655516450454d585a67306a476c66744c41
exec show trace

DUT2:
exec show trace
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4c6f494878637944413771574c54304c integ-alg sha1-96 integ-key 4f6c65784a7346775757414c74524c4e6555786f tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4c6f494878637944413771574c54304c integ-alg sha1-96 integ-key 4f6c65784a7346775757414c74524c4e6555786f tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec set ipsec sa 10 crypto-key 42687654764f72704b3061354a33426c integ-key 6237545837556d5357687a6e7667585147494144
exec set ipsec sa 20 crypto-key 42687654764f72704b3061354a33426c integ-key 6237545837556d5357687a6e7667585147494144
exec show trace

DUT2:
exec show trace
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 396e75707773566c4754633049517251 integ-alg sha1-96 integ-key 385a5835583553526d61464174444f6c44394845 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 396e75707773566c4754633049517251 integ-alg sha1-96 integ-key 385a5835583553526d61464174444f6c44394845 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec set ipsec sa 10 crypto-key 684950556553614b6277614c6f677570 integ-key 6f647075534d356d4b49546b754250324f695154
exec set ipsec sa 20 crypto-key 684950556553614b6277614c6f677570 integ-key 6f647075534d356d4b49546b754250324f695154
exec show trace

DUT2:
exec show trace
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 41764c6d5a4d42316830555546715161 integ-alg sha1-96 integ-key 6434595746634730617134676a62566b7a45474a tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 41764c6d5a4d42316830555546715161 integ-alg sha1-96 integ-key 6434595746634730617134676a62566b7a45474a tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3
exec set ipsec sa 10 crypto-key 58725a6c376e715563645538494e326f integ-key 634a61456c6e54594630684d34676e4931476134
exec set ipsec sa 20 crypto-key 58725a6c376e715563645538494e326f integ-key 634a61456c6e54594630684d34676e4931476134
exec show trace

DUT2:
exec show trace

eth2p-ethip4ipsectptsw-ip4base-func

IPv4 IPsec transport mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: With enabled SW crytodev on DUT1 create loopback interface, configure loopback and physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5a704949666b4858474c4567484e4176 integ-alg sha1-96 integ-key 72725544507a5a627872556b74414b5030684a72
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5a704949666b4858474c4567484e4176 integ-alg sha1-96 integ-key 72725544507a5a627872556b74414b5030684a72
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc02: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 3363456557366e6d66676254793173416953545865444b4f integ-alg sha1-96 integ-key 4474624444464d447772465979703537366c6779
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 3363456557366e6d66676254793173416953545865444b4f integ-alg sha1-96 integ-key 4474624444464d447772465979703537366c6779
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc03: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha1-96 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 45734155644558364f7a4a6c6b4d39454f625a4b4a7658637a316d7875374475 integ-alg sha1-96 integ-key 39703251544c5a4951326b7050764278686e6c51
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 45734155644558364f7a4a6c6b4d39454f625a4b4a7658637a316d7875374475 integ-alg sha1-96 integ-key 39703251544c5a4951326b7050764278686e6c51
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc04: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 32694953686961675378734f4d304c7a integ-alg sha-256-128 integ-key 346739356b6339724a6f5369796b61577a4b7672373749435141577635434f62
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 32694953686961675378734f4d304c7a integ-alg sha-256-128 integ-key 346739356b6339724a6f5369796b61577a4b7672373749435141577635434f62
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 796a6c75657a7176504c344253454f5878486e5136435343 integ-alg sha-256-128 integ-key 373639496b766674685042536c305976695147327352553764414249686d5954
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 796a6c75657a7176504c344253454f5878486e5136435343 integ-alg sha-256-128 integ-key 373639496b766674685042536c305976695147327352553764414249686d5954
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc06: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-256-128 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 6a7a55774955534c654a584f4132517a4f73506d454a4a6c4c7a457835363758 integ-alg sha-256-128 integ-key 537173537771566671753745535149554845506a5778666d3050506634335048
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 6a7a55774955534c654a584f4132517a4f73506d454a4a6c4c7a457835363758 integ-alg sha-256-128 integ-key 537173537771566671753745535149554845506a5778666d3050506634335048
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc07: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 30634948746c36397135457341724538 integ-alg sha-384-192 integ-key 42444a4b6a4145594377304541675163513358374370556972556969517a4e4232683678544d4a567571706e7a487359
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 30634948746c36397135457341724538 integ-alg sha-384-192 integ-key 42444a4b6a4145594377304541675163513358374370556972556969517a4e4232683678544d4a567571706e7a487359
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc08: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 793041537a655a4c52585242456a445a5950615856363448 integ-alg sha-384-192 integ-key 30593352687152394c5477466e616139433461784476375a4a3178725a66627131584745513635587151775444624476
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 793041537a655a4c52585242456a445a5950615856363448 integ-alg sha-384-192 integ-key 30593352687152394c5477466e616139433461784476375a4a3178725a66627131584745513635587151775444624476
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 61494c324352635158767634583754384f665978534845316b6f39434c304b6b integ-alg sha-384-192 integ-key 706d697235446d7568743234744b33447767474d71496e79394676635146687166754f6e68456f76786a4431414a4758
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 61494c324352635158767634583754384f665978534845316b6f39434c304b6b integ-alg sha-384-192 integ-key 706d697235446d7568743234744b33447767474d71496e79394676635146687166754f6e68456f76786a4431414a4758
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc10: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 61424f4878303564423661466c334253 integ-alg sha-512-256 integ-key 335357475975657272776d6445313559575237564d4363736b685769756a3459346b4452304f556f64596f6c6c5165536d6931625762755843794d4838697a69
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 61424f4878303564423661466c334253 integ-alg sha-512-256 integ-key 335357475975657272776d6445313559575237564d4363736b685769756a3459346b4452304f556f64596f6c6c5165536d6931625762755843794d4838697a69
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc11: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 4c396e7277416a6b344779736e445866796d673847615048 integ-alg sha-512-256 integ-key 636e3059557641655268544b4e616675664d504e6a7a6430324b6d4453485475616932734f7636576f6a4b4d506433646f587157514b4f48764d674f54423932
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 4c396e7277416a6b344779736e445866796d673847615048 integ-alg sha-512-256 integ-key 636e3059557641655268544b4e616675664d504e6a7a6430324b6d4453485475616932734f7636576f6a4b4d506433646f587157514b4f48764d674f54423932
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 4d437a304f6c4577447372614d5a4f5961616b3245724642526830306b49456c integ-alg sha-512-256 integ-key 6b77707434573969473473715870375a50436c667a6f6a61364c49765163413275416b5a6846726667357268476d31657a73786a4c6e49584b58516c33535758
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 4d437a304f6c4577447372614d5a4f5961616b3245724642526830306b49456c integ-alg sha-512-256 integ-key 6b77707434573969473473715870375a50436c667a6f6a61364c49765163413275416b5a6846726667357268476d31657a73786a4c6e49584b58516c33535758
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5934757646555a35746b375872715257 integ-alg sha1-96 integ-key 67364d6d78793867657a4b454c384857357a6e68
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5934757646555a35746b375872715257 integ-alg sha1-96 integ-key 67364d6d78793867657a4b454c384857357a6e68
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4d7548487269346b6e316e4476683944 integ-alg sha1-96 integ-key 554255687a4667364d534b3271556b37455a5550
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4d7548487269346b6e316e4476683944 integ-alg sha1-96 integ-key 554255687a4667364d534b3271556b37455a5550
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 394f7553543631413656515534345159 integ-alg sha1-96 integ-key 536f63414667367032356734714257336d475361
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 394f7553543631413656515534345159 integ-alg sha1-96 integ-key 536f63414667367032356734714257336d475361
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec show trace

DUT2:
exec show trace
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 344e7536447a7973367062624c647130 integ-alg sha1-96 integ-key 61455454786f513078666250414971547174307a
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 344e7536447a7973367062624c647130 integ-alg sha1-96 integ-key 61455454786f513078666250414971547174307a
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec set ipsec sa 10 crypto-key 7357764b71636e5a6b48697575474341 integ-key 413457425a363871357536334139655445537546
exec set ipsec sa 20 crypto-key 7357764b71636e5a6b48697575474341 integ-key 413457425a363871357536334139655445537546
exec show trace

DUT2:
exec show trace
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4c5642354675703536645876656d5754 integ-alg sha1-96 integ-key 6c624131516d7332684d4f6153424b5168487169
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4c5642354675703536645876656d5754 integ-alg sha1-96 integ-key 6c624131516d7332684d4f6153424b5168487169
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec set ipsec sa 10 crypto-key 55533830684d466c46625330714b6966 integ-key 6c47497773304978767567466f4f6b376f78326a
exec set ipsec sa 20 crypto-key 55533830684d466c46625330714b6966 integ-key 6c47497773304978767567466f4f6b376f78326a
exec show trace

DUT2:
exec show trace
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6a435345706662547937476c446c5651 integ-alg sha1-96 integ-key 63794a4b4f4f394b7738324475705938456c7141
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6a435345706662547937476c446c5651 integ-alg sha1-96 integ-key 63794a4b4f4f394b7738324475705938456c7141
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec set ipsec sa 10 crypto-key 304a77576b376b7737634a63634b6277 integ-key 5943733748574344564e706e4174524130733950
exec set ipsec sa 20 crypto-key 304a77576b376b7737634a63634b6277 integ-key 5943733748574344564e706e4174524130733950
exec show trace

DUT2:
exec show trace
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used
 DUT1:  
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.100.3/24
sw_interface_add_del_address sw_if_index 5 192.168.4.4/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 192.168.3.3/24 via 192.168.100.2 sw_if_index 1 resolve-attempts 10 count 1
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 69495364326662644c6546463231346e integ-alg sha1-96 integ-key 4470556c6256696647677575417573684243574d
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 69495364326662644c6546463231346e integ-alg sha1-96 integ-key 4470556c6256696647677575417573684243574d
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 1 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2
exec set ipsec sa 10 crypto-key 5141323237634e66617a736a56424239 integ-key 51634e6471527a6a75644c4e4a444e6947616741
exec set ipsec sa 20 crypto-key 5141323237634e66617a736a56424239 integ-key 51634e6471527a6a75644c4e4a444e6947616741
exec show trace

DUT2:
exec show trace

interfaces

api-crud-tap-func

Tap Interface CRUD Tests

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Enc] Packet Encapsulations: No packet sent.
  • [Cfg] DUT configuration: Add/Modify/Delete linux-TAP on DUT1.
  • [Ver] Verification: Check dump of tap interfaces for correctness.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: tap interface modify and delete
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
tap_create_v2 tapname tap0
exec show hardware detail
exec show hardware detail
tap_create_v2 tapname tap1
exec show hardware detail
exec show hardware detail
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_tap_v2_dump
tap_delete_v2 sw_if_index 5
sw_interface_tap_v2_dump
sw_interface_tap_v2_dump
tap_delete_v2 sw_if_index 6
sw_interface_tap_v2_dump
exec show trace

DUT2:
exec show trace

eth2p-eth-l2bdbasemaclrn-eth-2tap-func

Tap Interface Traffic Tests

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) MAC learning enabled; Split Horizon Groups (SHG) are set depending on test case; Namespaces (NM) are set on DUT1 with attached linux-TAP.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent by TG on link to DUT1; On receipt TG verifies packets for correctness and their IPv4 src-addr, dst-addr, and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: tap interface simple bd
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
tap_create_v2 tapname tap0
exec show hardware detail
exec show hardware detail
tap_create_v2 tapname tap1
exec show hardware detail
exec show hardware detail
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
bridge_domain_add_del(bd_id=19,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=19)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=19)
exec show trace

DUT2:
exec show trace

eth2p-eth-l2bdbasemaclrn-l2shg-eth-2tap-func

Tap Interface Traffic Tests

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) MAC learning enabled; Split Horizon Groups (SHG) are set depending on test case; Namespaces (NM) are set on DUT1 with attached linux-TAP.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent by TG on link to DUT1; On receipt TG verifies packets for correctness and their IPv4 src-addr, dst-addr, and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: tap interface bd - different split horizon
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
tap_create_v2 tapname tap0
exec show hardware detail
exec show hardware detail
tap_create_v2 tapname tap1
exec show hardware detail
exec show hardware detail
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
bridge_domain_add_del(bd_id=21,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=21)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=2,port_type=0,bd_id=21)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=3,port_type=0,bd_id=21)
exec show trace

DUT2:
exec show trace
tc02: tap interface bd - same split horizon
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
tap_create_v2 tapname tap0
exec show hardware detail
exec show hardware detail
tap_create_v2 tapname tap1
exec show hardware detail
exec show hardware detail
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
bridge_domain_add_del(bd_id=21,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=21)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=2,port_type=0,bd_id=21)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=2,port_type=0,bd_id=21)
exec show trace

DUT2:
exec show trace

eth2p-ethip4-ip4base-eth-1tap-func

Tap Interface Traffic Tests

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) MAC learning enabled; Split Horizon Groups (SHG) are set depending on test case; Namespaces (NM) are set on DUT1 with attached linux-TAP.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent by TG on link to DUT1; On receipt TG verifies packets for correctness and their IPv4 src-addr, dst-addr, and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: tap interface ip ping without namespace
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
tap_create_v2 tapname tap0
exec show hardware detail
exec show hardware detail
sw_interface_add_del_address sw_if_index 5 16.0.10.1/24
sw_interface_add_del_address sw_if_index 2 192.168.0.1/24
sw_interface_set_flags sw_if_index 5 admin-up link-up
ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 5 dst 16.0.10.2 mac 02:00:00:00:00:02
exec show trace

DUT2:
exec show trace
tc02: tap interface ip ping with namespace
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
tap_create_v2 tapname tap0
exec show hardware detail
exec show hardware detail
sw_interface_add_del_address sw_if_index 5 16.0.10.1/24
sw_interface_add_del_address sw_if_index 2 192.168.0.1/24
sw_interface_set_flags sw_if_index 5 admin-up link-up
ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 5 dst 16.0.10.2 mac 02:00:00:00:00:02
exec show trace

DUT2:
exec show trace

ip4

eth2p-dot1q-ip4base-func

IPv4 with VLAN subinterfaces

  • [Top] Network Topologies: TG-DUT1-TG 2-node circular topology with double links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-ICMPv4 on TG-DUT1-IF1, Eth-dot1q-IPv4-ICMPv4 on TG-DUT1-IF2.
  • [Cfg] DUT configuration: DUT1 is configured with 2 Vlan subinterfaces on DUT1-IF2. The subinterfaces and DUT1-IF1 have IP addresses set and corresponding IP neighbor entries are configured.
  • [Ref] Applicable standard specifications: IEEE 802.1q.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: process untagged send tagged
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 10
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 5 vlan 20
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_add_del_address sw_if_index 2 192.168.0.1/24
sw_interface_add_del_address sw_if_index 5 192.168.100.1/24
sw_interface_add_del_address sw_if_index 6 192.168.200.1/24
ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 5 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 6 dst 192.168.200.2 mac fa:16:3e:60:5c:6d
exec show trace

DUT2:
exec show trace
tc02: process tagged send untagged
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 10
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 5 vlan 20
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_add_del_address sw_if_index 2 192.168.0.1/24
sw_interface_add_del_address sw_if_index 5 192.168.100.1/24
sw_interface_add_del_address sw_if_index 6 192.168.200.1/24
ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 5 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 6 dst 192.168.200.2 mac fa:16:3e:60:5c:6d
exec show trace

DUT2:
exec show trace
tc03: process tagged send tagged
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 10
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 5 vlan 20
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_add_del_address sw_if_index 2 192.168.0.1/24
sw_interface_add_del_address sw_if_index 5 192.168.100.1/24
sw_interface_add_del_address sw_if_index 6 192.168.200.1/24
ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 5 dst 192.168.100.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 6 dst 192.168.200.2 mac fa:16:3e:60:5c:6d
exec show trace

DUT2:
exec show trace

eth2p-ethip4-ip4base-copblklistbase-func

COP Security IPv4 Blacklist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv4 routing and static routes. COP security black-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut drops ipv4 pkts with cop blacklist set with ipv4 src-addr
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:f4:17:ae
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 resolve-attempts 10 count 1
ip_table_add_del table 1
cop_whitelist_enable_disable sw_if_index 1 ip4 fib-id 1
cop_interface_enable_disable sw_if_index 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace

eth2p-ethip4-ip4base-copwhlistbase-func

COP Security IPv4 Whitelist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv4 routing and static routes. COP security white-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut permits ipv4 pkts with cop whitelist set with ipv4 src-addr
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:f4:17:ae
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 resolve-attempts 10 count 1
ip_table_add_del table 1
ip_add_del_route 16.0.0.0/24 vrf 1 resolve-attempts 10 count 1 local
cop_whitelist_enable_disable sw_if_index 1 ip4 fib-id 1
cop_interface_enable_disable sw_if_index 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace

eth2p-ethip4-ip4base-func

IPv4 routing test cases RFC791 IPv4, RFC826 ARP, RFC792 ICMPv4. Encapsulations: Eth-IPv4-ICMPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv4 routing tests use circular 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2 and received on TG links on the other side of circular topology. On receive TG verifies packets IPv4 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut replies to icmpv4 echo req to its ingress interface
 DUT1:  
cli_inband(cmd=clear interfaces)
exec show trace

DUT2:
cli_inband(cmd=clear interfaces)
exec show trace
tc02: dut routes ipv4 to its egress interface
 DUT1:  
cli_inband(cmd=clear interfaces)
exec show trace

DUT2:
cli_inband(cmd=clear interfaces)
exec show trace
tc03: dut1 routes ipv4 to dut2 ingress interface
 DUT1:  
cli_inband(cmd=clear interfaces)
exec show trace

DUT2:
cli_inband(cmd=clear interfaces)
exec show trace
tc04: dut1 routes ipv4 to dut2 egress interface
 DUT1:  
cli_inband(cmd=clear interfaces)
exec show trace

DUT2:
cli_inband(cmd=clear interfaces)
exec show trace
tc05: dut1 and dut2 route ipv4 between tg interfaces
 DUT1:  
cli_inband(cmd=clear interfaces)
exec show trace

DUT2:
cli_inband(cmd=clear interfaces)
exec show trace
tc06: dut replies to icmpv4 echo reqs with size 64b-to-1500b-incr-1b
 DUT1:  
cli_inband(cmd=clear interfaces)
exec show trace

DUT2:
cli_inband(cmd=clear interfaces)
exec show trace
tc08: dut replies to arp request
 DUT1:  
cli_inband(cmd=clear interfaces)
exec show trace

DUT2:
cli_inband(cmd=clear interfaces)
exec show trace

eth2p-ethip4-ip4base-iaclbase-func

IPv4 routing with ingress ACL test cases Encapsulations: Eth-IPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv4 ingress ACL (iACL) tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. DUT1 is configured with iACL on link to TG, iACL classification and permit/deny action are configured on a per test case basis. Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped, or if received verifies packet IPv4 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with iacl ipv4 src-addr drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:f4:17:ae
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 resolve-attempts 10 count 1
classify_add_del_table mask l3 ip4 src
classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match l3 ip4 src 16.0.0.1
input_acl_set_interface sw_if_index 1 ip4-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace
tc02: dut with iacl ipv4 dst-addr drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:f4:17:ae
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 resolve-attempts 10 count 1
ip_add_del_route 33.0.0.1/24 via 192.168.2.2 sw_if_index 3 resolve-attempts 10 count 1
classify_add_del_table mask l3 ip4 dst
classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 2 match l3 ip4 dst 32.0.0.1
input_acl_set_interface sw_if_index 1 ip4-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace
tc03: dut with iacl ipv4 src-addr and dst-addr drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:f4:17:ae
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 resolve-attempts 10 count 1
ip_add_del_route 33.0.0.1/24 via 192.168.2.2 sw_if_index 3 resolve-attempts 10 count 1
classify_add_del_table mask l3 ip4 src
classify_add_del_table mask l3 ip4 dst
classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match l3 ip4 src 16.0.0.1
classify_add_del_session acl-hit-next deny table-index 1 skip_n 1 match_n 2 match l3 ip4 dst 32.0.0.1
input_acl_set_interface sw_if_index 1 ip4-table 0
input_acl_set_interface sw_if_index 1 ip4-table 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace
tc04: dut with iacl ipv4 protocol set to tcp drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:f4:17:ae
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 resolve-attempts 10 count 1
classify_add_del_table mask hex 0000000000000000000000000000000000000000000000FF
classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000000000006
input_acl_set_interface sw_if_index 1 ip4-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace
tc05: dut with iacl ipv4 protocol set to udp drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:f4:17:ae
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 resolve-attempts 10 count 1
classify_add_del_table mask hex 0000000000000000000000000000000000000000000000FF
classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000000000011
input_acl_set_interface sw_if_index 1 ip4-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace
tc06: dut with iacl ipv4 tcp src-ports drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:f4:17:ae
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 resolve-attempts 10 count 1
classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFF0000
classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500000
input_acl_set_interface sw_if_index 1 ip4-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace
tc07: dut with iacl ipv4 tcp dst-ports drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:f4:17:ae
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 resolve-attempts 10 count 1
classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000FFFF
classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000000050
input_acl_set_interface sw_if_index 1 ip4-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace
tc08: dut with iacl ipv4 tcp src-ports and dst-ports drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:f4:17:ae
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 resolve-attempts 10 count 1
classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF
classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500014
input_acl_set_interface sw_if_index 1 ip4-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace
tc09: dut with iacl ipv4 udp src-ports drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:f4:17:ae
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 resolve-attempts 10 count 1
classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFF0000
classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500000
input_acl_set_interface sw_if_index 1 ip4-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace
tc10: dut with iacl ipv4 udp dst-ports drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:f4:17:ae
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 resolve-attempts 10 count 1
classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000FFFF
classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000000050
input_acl_set_interface sw_if_index 1 ip4-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace
tc11: dut with iacl ipv4 udp src-ports and dst-ports drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:f4:17:ae
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 resolve-attempts 10 count 1
classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF
classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500014
input_acl_set_interface sw_if_index 1 ip4-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace

eth2p-ethip4-ip4base-ip4arp-func

IPv4 ARP test cases RFC826 ARP: Eth-IPv4 and Eth-ARP on links TG-DUT1, TG-DUT2, DUT1-DUT2: IPv4 ARP tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. DUT ARP functionality is tested by making TG send ICMPv4 Echo Requests towards its other interface via DUT1 and DUT2.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut sends arp request for unresolved locally connected ipv4 address
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace
tc02: dut sends arp request for route next hop ipv4 address
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 count 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace

eth2p-ethip4-ip4base-ip4dhcpclient-func

DHCPv4 Client related test cases

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp sends a dhcp discover
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
dhcp_client_config sw_if_index 2
exec show trace

DUT2:
exec show trace
tc02: vpp sends a dhcpv4 discover with hostname
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
dhcp_client_config sw_if_index 2 hostname dhcp-client
exec show trace

DUT2:
exec show trace
tc03: vpp sends dhcpv4 request after offer
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
ip_add_del_route 255.255.255.255/32 local count 1
dhcp_client_config sw_if_index 2
exec show trace

DUT2:
exec show trace
tc04: vpp doesn’t send dhcpv4 request after offer with wrong xid
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
ip_add_del_route 255.255.255.255/32 local count 1
dhcp_client_config sw_if_index 2
exec show trace

DUT2:
exec show trace
tc05: vpp honors dhcpv4 lease time
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
ip_add_del_route 255.255.255.255/32 local count 1
dhcp_client_config sw_if_index 2
ip_neighbor_add_del sw_if_index 2 dst 192.168.23.1 mac fa:16:3e:75:2f:6b
exec show trace

DUT2:
exec show trace

eth2p-ethip4-ip4base-ip4dhcpproxy-func

DHCPv4 proxy test cases

  • [Top] Network Topologies: TG = DUT with two links between the nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-UDP-BOOTP-DHCP
  • [Cfg] DUT configuration: DUT is configured with DHCPv4 proxy.
  • [Ver] TG verification: Test DHCPv4 packets are sent on TG on first link to DUT and received on TG on second link. On receive TG verifies if DHCPv4 packets are valid.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp proxies valid dhcpv4 request to dhcpv4 server
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
ip_add_del_route 255.255.255.255/32 local count 1
sw_interface_add_del_address sw_if_index 2 172.16.0.1/24
sw_interface_add_del_address sw_if_index 1 192.168.0.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.0.100 mac fa:16:3e:60:5c:6d
dhcp_proxy_config svr 192.168.0.100 src 172.16.0.1
exec show trace

DUT2:
exec show trace
tc02: vpp proxy ignores invalid dhcpv4 request
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
ip_add_del_route 255.255.255.255/32 local count 1
sw_interface_add_del_address sw_if_index 2 172.16.0.1/24
sw_interface_add_del_address sw_if_index 1 192.168.0.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.0.100 mac fa:16:3e:60:5c:6d
dhcp_proxy_config svr 192.168.0.100 src 172.16.0.1
exec show trace

DUT2:
exec show trace

eth2p-ethip4-ip4base-ip4ecmp-func

Ipv4 Multipath routing test cases

  • [Top] Network topologies: TG=DUT 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT configure interfaces IPv4 adresses, and multipath routing.
  • [Ver] TG verification: Test packets are sent from TG on the first link to DUT. Packet is received on TG on the second link from DUT1.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: ipv4 equal-cost multipath routing
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 2 192.168.2.1/24
ip_neighbor_add_del sw_if_index 2 dst 192.168.2.10 mac 02:00:00:00:00:02
ip_neighbor_add_del sw_if_index 2 dst 192.168.2.20 mac 02:00:00:00:00:03
ip_add_del_route 32.0.0.1/24 via 192.168.2.10 sw_if_index 2 count 1 multipath
ip_add_del_route 32.0.0.1/24 via 192.168.2.20 sw_if_index 2 count 1 multipath
exec show trace

DUT2:
exec show trace

eth2p-ethip4-ip4base-ip4proxyarp-func

RFC1027 Proxy ARP test cases

  • [Top] Network topologies: TG-DUT1 2-node topology with single link between nodes.
  • [Cfg] DUT configuration: DUT1 is configured with Proxy ARP
  • [Ver] TG verification: Test ARP Request packet is sent from TG on link to DUT1; on receive TG verifies ARP reply packet for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC1027.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut sends arp reply on behalf of another machine from the ip range
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 10.0.0.1/24
proxy_arp_add_del 192.168.1.2 - 192.168.1.10
sw_interface_dump
proxy_arp_intfc_enable_disable sw_if_index 1 enable
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc02: dut sends arp reply on behalf of another machine from beginning of the ip range
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 10.0.0.1/24
proxy_arp_add_del 192.168.1.2 - 192.168.1.10
sw_interface_dump
proxy_arp_intfc_enable_disable sw_if_index 1 enable
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc03: dut sends arp reply on behalf of another machine from end of the ip range
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 10.0.0.1/24
proxy_arp_add_del 192.168.1.2 - 192.168.1.10
sw_interface_dump
proxy_arp_intfc_enable_disable sw_if_index 1 enable
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc04: dut does not send arp reply on behalf of another machine from below of the ip range
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 10.0.0.1/24
proxy_arp_add_del 192.168.1.2 - 192.168.1.10
sw_interface_dump
proxy_arp_intfc_enable_disable sw_if_index 1 enable
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc05: dut does not send arp reply on behalf of another machine from above of the ip range
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 10.0.0.1/24
proxy_arp_add_del 192.168.1.2 - 192.168.1.10
sw_interface_dump
proxy_arp_intfc_enable_disable sw_if_index 1 enable
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace

eth2p-ethip4-ip4base-ipolicemarkbase-func

IPv4 policer test cases

  • [Top] Network topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT1 configure interfaces IPv4 adresses, and static ARP record on the second interface.
  • [Ver] TG verification: Test packet is sent from TG on the first link to DUT1. Packet is received on TG on the second link from DUT1.
  • [Ref] Applicable standard specifications: RFC2474, RFC2697, RFC2698.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp policer 2r3c color-aware marks packet
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 192.168.122.1/24
sw_interface_add_del_address sw_if_index 1 192.168.123.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:60:5c:6d
policer_add_del name policer1 cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware
classify_add_del_table mask l3 ip4 src
classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2
policer_classify_set_interface sw_if_index 2 ip4-table 0
exec show trace

DUT2:
exec show trace
tc02: vpp policer 2r3c color-blind marks packet
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 192.168.122.1/24
sw_interface_add_del_address sw_if_index 1 192.168.123.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:60:5c:6d
policer_add_del name policer1 cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop
classify_add_del_table mask l3 ip4 src
classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2
policer_classify_set_interface sw_if_index 2 ip4-table 0
exec show trace

DUT2:
exec show trace
tc03: vpp policer 1r3c color-aware marks packet
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 192.168.122.1/24
sw_interface_add_del_address sw_if_index 1 192.168.123.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:60:5c:6d
policer_add_del name policer1 cir 1 eir 0 cb 2 eb 300 rate_type pps round_type closest type 1r3c conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware
classify_add_del_table mask l3 ip4 src
classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2
policer_classify_set_interface sw_if_index 2 ip4-table 0
exec show trace

DUT2:
exec show trace
tc04: vpp policer 1r3c color-blind marks packet
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 192.168.122.1/24
sw_interface_add_del_address sw_if_index 1 192.168.123.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:60:5c:6d
policer_add_del name policer1 cir 100 eir 0 cb 200 eb 300 rate_type pps round_type closest type 1r3c conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop
classify_add_del_table mask l3 ip4 src
classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2
policer_classify_set_interface sw_if_index 2 ip4-table 0
exec show trace

DUT2:
exec show trace

eth2p-ethip4-ip4base-rpf-func

Source RPF check on IPv4 test cases

  • [Top] Network Topologies: TG - DUT1 - DUT2 - TG with one link between the nodes.
  • [Cfg] DUT configuration: DUT2 is configured with L2 Cross connect. DUT1 is configured with IP source check on link to TG,
  • [Ver] TG verification: Test ICMP Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets which source address is not in routes are dropped.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp source rpf check on ipv4 src-addr
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:f4:17:ae
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 count 1
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 16.0.0.1/24 via 192.168.1.2 sw_if_index 1 count 1
exec set interface ip source-check GigabitEthernet0/4/0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace
tc02: vpp pass traffic on non-enabled rpf interface
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 3 192.168.2.1/24
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:f4:17:ae
ip_add_del_route 32.0.0.1/24 via 192.168.2.2 sw_if_index 3 count 1
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 16.0.0.1/24 via 192.168.1.2 sw_if_index 1 count 1
exec set interface ip source-check GigabitEthernet0/4/0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace

eth2p-ethip4-ip4basevrf-func

Vpn routed forwarding - baseline IPv4

  • [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node topology with two links in between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4.
  • [Cfg] DUT configuration: Each DUT is configured with two VRF tables; Separation of traffic is tested by IP packets; Basic ARP and ROUTES are set on DUT nodes; IP addresses are set on DUT interfaces.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent by TG on link to DUT1, DUT2 or back to TG; On receipt TG verifies packets for correctness and their IPv4 src-addr, dst-addr, and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: tg packets routed to dut ingress interface, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 30.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 10.0.0.3/24
sw_interface_add_del_address sw_if_index 1 10.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.1/24
sw_interface_add_del_address sw_if_index 3 20.0.0.2/24
ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:b6:5b:85
ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 10.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 30.0.0.3/24
sw_interface_add_del_address sw_if_index 1 30.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.3/24
sw_interface_add_del_address sw_if_index 3 20.0.0.4/24
ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:14:eb:c7
ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace
tc02: tg packets routed to dut egress interface, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 30.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 10.0.0.3/24
sw_interface_add_del_address sw_if_index 1 10.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.1/24
sw_interface_add_del_address sw_if_index 3 20.0.0.2/24
ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:b6:5b:85
ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 10.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 30.0.0.3/24
sw_interface_add_del_address sw_if_index 1 30.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.3/24
sw_interface_add_del_address sw_if_index 3 20.0.0.4/24
ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:14:eb:c7
ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace
tc03: tg packets routed to dut2 ingress interface through dut1, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 30.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 10.0.0.3/24
sw_interface_add_del_address sw_if_index 1 10.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.1/24
sw_interface_add_del_address sw_if_index 3 20.0.0.2/24
ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:b6:5b:85
ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 10.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 30.0.0.3/24
sw_interface_add_del_address sw_if_index 1 30.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.3/24
sw_interface_add_del_address sw_if_index 3 20.0.0.4/24
ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:14:eb:c7
ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace
tc04: tg packets routed to dut2 egress interface through dut1, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 30.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 10.0.0.3/24
sw_interface_add_del_address sw_if_index 1 10.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.1/24
sw_interface_add_del_address sw_if_index 3 20.0.0.2/24
ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:b6:5b:85
ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 10.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 30.0.0.3/24
sw_interface_add_del_address sw_if_index 1 30.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.3/24
sw_interface_add_del_address sw_if_index 3 20.0.0.4/24
ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:14:eb:c7
ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace
tc05: tg packets routed to tg through dut1 and dut2, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 30.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 10.0.0.3/24
sw_interface_add_del_address sw_if_index 1 10.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.1/24
sw_interface_add_del_address sw_if_index 3 20.0.0.2/24
ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:b6:5b:85
ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 10.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 30.0.0.3/24
sw_interface_add_del_address sw_if_index 1 30.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.3/24
sw_interface_add_del_address sw_if_index 3 20.0.0.4/24
ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:14:eb:c7
ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace
tc06: tg packets not routed to dut ingress interface in different vrf, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 30.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 10.0.0.3/24
sw_interface_add_del_address sw_if_index 1 10.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.1/24
sw_interface_add_del_address sw_if_index 3 20.0.0.2/24
ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:b6:5b:85
ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 10.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 30.0.0.3/24
sw_interface_add_del_address sw_if_index 1 30.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.3/24
sw_interface_add_del_address sw_if_index 3 20.0.0.4/24
ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:14:eb:c7
ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace
tc07: tg packets not routed to dut egress interface in different vrf, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 30.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 10.0.0.3/24
sw_interface_add_del_address sw_if_index 1 10.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.1/24
sw_interface_add_del_address sw_if_index 3 20.0.0.2/24
ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:b6:5b:85
ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 10.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 30.0.0.3/24
sw_interface_add_del_address sw_if_index 1 30.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.3/24
sw_interface_add_del_address sw_if_index 3 20.0.0.4/24
ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:14:eb:c7
ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace
tc08: tg packets not routed to dut2 ingress interface in different vrf through dut1, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 30.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 10.0.0.3/24
sw_interface_add_del_address sw_if_index 1 10.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.1/24
sw_interface_add_del_address sw_if_index 3 20.0.0.2/24
ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:b6:5b:85
ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 10.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 30.0.0.3/24
sw_interface_add_del_address sw_if_index 1 30.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.3/24
sw_interface_add_del_address sw_if_index 3 20.0.0.4/24
ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:14:eb:c7
ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace
tc09: tg packets not routed to dut2 egress interface in different vrf through dut1, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 30.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 10.0.0.3/24
sw_interface_add_del_address sw_if_index 1 10.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.1/24
sw_interface_add_del_address sw_if_index 3 20.0.0.2/24
ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:b6:5b:85
ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 10.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 30.0.0.3/24
sw_interface_add_del_address sw_if_index 1 30.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.3/24
sw_interface_add_del_address sw_if_index 3 20.0.0.4/24
ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:14:eb:c7
ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace
tc10: tg packets not routed to tg in different vrf through dut1 and dut2, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 30.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 10.0.0.3/24
sw_interface_add_del_address sw_if_index 1 10.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.1/24
sw_interface_add_del_address sw_if_index 3 20.0.0.2/24
ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:b6:5b:85
ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9
ip_table_add_del table 99
ip_add_del_route 10.0.0.1/24 via 9 sw_if_index None resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 99 sw_if_index None resolve-attempts 10 count 1
sw_interface_set_table sw_if_index 4 vrf 9
sw_interface_set_table sw_if_index 3 vrf 99
sw_interface_set_table sw_if_index 2 vrf 9
sw_interface_set_table sw_if_index 1 vrf 99
sw_interface_add_del_address sw_if_index 2 30.0.0.3/24
sw_interface_add_del_address sw_if_index 1 30.0.0.4/24
sw_interface_add_del_address sw_if_index 4 20.0.0.3/24
sw_interface_add_del_address sw_if_index 3 20.0.0.4/24
ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:14:eb:c7
ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
exec show trace

ip4 tunnels

gre

eth2p-ethip4gre-ip4base-func

GREoIPv4 test cases

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes; TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-GRE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for routing over GRE tunnel; Eth-IPv4-ICMPv4 on TG_if1-DUT, Eth-IPv4-GRE-IPv4-ICMPv4 on TG_if2_DUT for GREoIPv4 encapsulation and decapsulation verification.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. GREoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; GREoIPv4 encapsulation and decapsulation are verified separately by TG; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC2784.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route over greoipv4 tunnel between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 192.168.1.1/24
sw_interface_add_del_address sw_if_index 1 192.168.0.1/24
gre_add_del_tunnel src 192.168.1.1 dst 192.168.1.2
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_add_del_address sw_if_index 5 172.16.0.1/24
ip_add_del_route 192.168.2.0/24 via 172.16.0.2 sw_if_index 5 resolve-attempts 10 count 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 192.168.1.2/24
sw_interface_add_del_address sw_if_index 1 192.168.2.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.2.100 mac fa:16:3e:f4:17:ae
gre_add_del_tunnel src 192.168.1.2 dst 192.168.1.1
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_add_del_address sw_if_index 5 172.16.0.2/24
exec show trace
tc02: dut encapsulates ipv4 into greoipv4 tunnel - gre header verification
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 2 192.168.0.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
gre_add_del_tunnel src 192.168.1.1 dst 192.168.1.2
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_add_del_address sw_if_index 5 172.16.0.1/24
ip_add_del_route 192.168.2.0/24 via 172.16.0.2 sw_if_index 5 resolve-attempts 10 count 1
exec show trace

DUT2:
exec show trace
tc03: dut decapsulates ipv4 from greoipv4 tunnel - ipv4 header verification
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 2 192.168.0.1/24
ip_neighbor_add_del sw_if_index 2 dst 192.168.0.100 mac fa:16:3e:75:2f:6b
gre_add_del_tunnel src 192.168.1.1 dst 192.168.1.2
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_add_del_address sw_if_index 5 172.16.0.1/24
exec show trace

DUT2:
exec show trace
tc04: dut encapsulates ipv4 into greoipv4 different tunnels - gre header verification
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 2 192.168.0.1/24
sw_interface_add_del_address sw_if_index 5 10.0.0.1/32
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 10.0.0.2/32 via 192.168.1.2 sw_if_index 1 resolve-attempts 10 count 1
ip_add_del_route 10.0.0.3/32 via 192.168.1.2 sw_if_index 1 resolve-attempts 10 count 1
gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.2
sw_interface_set_flags sw_if_index 6 admin-up link-up
gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.3
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_add_del_address sw_if_index 6 172.16.0.1/24
sw_interface_add_del_address sw_if_index 7 172.16.1.1/24
ip_add_del_route 192.168.2.0/24 via 172.16.0.2 sw_if_index 6 resolve-attempts 10 count 1
ip_add_del_route 192.168.3.0/24 via 172.16.1.2 sw_if_index 7 resolve-attempts 10 count 1
exec show trace

DUT2:
exec show trace
tc05: dut re-encapsulates ipv4 gre into other gre tunnel - gre header verification
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 2 192.168.0.1/24
sw_interface_add_del_address sw_if_index 5 10.0.0.1/32
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 10.0.0.2/32 via 192.168.1.2 sw_if_index 1 resolve-attempts 10 count 1
ip_add_del_route 10.0.0.3/32 via 192.168.1.2 sw_if_index 1 resolve-attempts 10 count 1
gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.2
sw_interface_set_flags sw_if_index 6 admin-up link-up
gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.3
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_add_del_address sw_if_index 6 172.16.0.1/24
sw_interface_add_del_address sw_if_index 7 172.16.1.1/24
ip_add_del_route 192.168.2.0/24 via 172.16.0.2 sw_if_index 6 resolve-attempts 10 count 1
ip_add_del_route 192.168.3.0/24 via 172.16.1.2 sw_if_index 7 resolve-attempts 10 count 1
exec show trace

DUT2:
exec show trace
tc06: dut do not process gre with wrong tunnel destination ip
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
create_loopback
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
sw_interface_add_del_address sw_if_index 2 192.168.0.1/24
sw_interface_add_del_address sw_if_index 5 10.0.0.1/32
ip_neighbor_add_del sw_if_index 2 dst 192.168.0.100 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
ip_add_del_route 10.0.0.2/32 via 192.168.1.2 sw_if_index 1 resolve-attempts 10 count 1
ip_add_del_route 10.0.0.3/32 via 192.168.1.2 sw_if_index 1 resolve-attempts 10 count 1
gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.2
sw_interface_set_flags sw_if_index 6 admin-up link-up
gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.3
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_add_del_address sw_if_index 6 172.16.0.1/24
sw_interface_add_del_address sw_if_index 7 172.16.1.1/24
exec show trace

DUT2:
exec show trace

lisp

api-crud-lisp-func

API test cases

  • [Top] Network Topologies: DUT1 1-node topology.
  • [Enc] Packet Encapsulations: None.
  • [Cfg] DUT configuration: DUT1 gets configured with all LISP parameters.
  • [Ver] Verification: DUT1 operational data gets verified following configuration.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut can enable and disable lisp
 DUT1:  
lisp_enable_disable enable
lisp_enable_disable disable
exec show trace

DUT2:
exec show trace
tc02: dut can add and delete locator_set
 DUT1:  
lisp_enable_disable enable
lisp_add_del_locator_set locator-set ls0
lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1
lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2
lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3
lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4
lisp_add_del_locator_set locator-set ls1
lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5
lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7
lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8
lisp_add_del_locator_set locator-set ls2
lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9
lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10
lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11
lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12
lisp_locator_set_dump local
lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del
lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del
lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del
lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del
lisp_add_del_locator_set locator-set ls0 del
lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del
lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del
lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del
lisp_add_del_locator_set locator-set ls1 del
lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del
lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del
lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del
lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del
lisp_add_del_locator_set locator-set ls2 del
lisp_locator_set_dump
exec show trace

DUT2:
exec show trace
tc03: dut can add, reset and delete locator_set
 DUT1:  
lisp_enable_disable enable
lisp_add_del_locator_set locator-set ls0
lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1
lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2
lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3
lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4
lisp_add_del_locator_set locator-set ls0
lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1
lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2
lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3
lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4
lisp_add_del_locator_set locator-set ls0
lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1
lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2
lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3
lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4
lisp_add_del_locator_set locator-set ls0
lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1
lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2
lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3
lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4
lisp_add_del_locator_set locator-set ls1
lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5
lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7
lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8
lisp_add_del_locator_set locator-set ls1
lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5
lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7
lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8
lisp_add_del_locator_set locator-set ls1
lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5
lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7
lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8
lisp_add_del_locator_set locator-set ls1
lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5
lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7
lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8
lisp_add_del_locator_set locator-set ls2
lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9
lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10
lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11
lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12
lisp_add_del_locator_set locator-set ls2
lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9
lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10
lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11
lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12
lisp_add_del_locator_set locator-set ls2
lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9
lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10
lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11
lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12
lisp_add_del_locator_set locator-set ls2
lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9
lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10
lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11
lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12
lisp_locator_set_dump local
lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del
lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del
lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del
lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del
lisp_add_del_locator_set locator-set ls0 del
lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del
lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del
lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del
lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del
lisp_add_del_locator_set locator-set ls0 del
lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del
lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del
lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del
lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del
lisp_add_del_locator_set locator-set ls0 del
lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del
lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del
lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del
lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del
lisp_add_del_locator_set locator-set ls0 del
lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del
lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del
lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del
lisp_add_del_locator_set locator-set ls1 del
lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del
lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del
lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del
lisp_add_del_locator_set locator-set ls1 del
lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del
lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del
lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del
lisp_add_del_locator_set locator-set ls1 del
lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del
lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del
lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del
lisp_add_del_locator_set locator-set ls1 del
lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del
lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del
lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del
lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del
lisp_add_del_locator_set locator-set ls2 del
lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del
lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del
lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del
lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del
lisp_add_del_locator_set locator-set ls2 del
lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del
lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del
lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del
lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del
lisp_add_del_locator_set locator-set ls2 del
lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del
lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del
lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del
lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del
lisp_add_del_locator_set locator-set ls2 del
lisp_locator_set_dump
exec show trace

DUT2:
exec show trace
tc04: dut can add and delete eid address
 DUT1:  
lisp_enable_disable enable
lisp_add_del_locator_set locator-set ls1
lisp_add_del_local_eid vni 0 eid 192.168.0.0/24 locator-set ls1
lisp_add_del_locator_set locator-set ls1
lisp_add_del_local_eid vni 0 eid 192.168.1.0/24 locator-set ls1
lisp_add_del_locator_set locator-set ls1
lisp_add_del_local_eid vni 0 eid 192.168.2.0/24 locator-set ls1
lisp_add_del_locator_set locator-set ls1
lisp_add_del_local_eid vni 0 eid 192.168.3.0/24 locator-set ls1
lisp_add_del_locator_set locator-set ls1
lisp_add_del_local_eid vni 0 eid 10:1::/64 locator-set ls1
lisp_add_del_locator_set locator-set ls1
lisp_add_del_local_eid vni 0 eid 10:2::/64 locator-set ls1
lisp_add_del_locator_set locator-set ls1
lisp_add_del_local_eid vni 0 eid 10:3::/64 locator-set ls1
lisp_add_del_local_eid vni 0 eid 192.168.0.0/24 locator-set ls1 del
lisp_add_del_local_eid vni 0 eid 192.168.1.0/24 locator-set ls1 del
lisp_add_del_local_eid vni 0 eid 192.168.2.0/24 locator-set ls1 del
lisp_add_del_local_eid vni 0 eid 192.168.3.0/24 locator-set ls1 del
lisp_add_del_local_eid vni 0 eid 10:1::/64 locator-set ls1 del
lisp_add_del_local_eid vni 0 eid 10:2::/64 locator-set ls1 del
lisp_add_del_local_eid vni 0 eid 10:3::/64 locator-set ls1 del
lisp_add_del_locator_set locator-set ls1 del
exec show trace

DUT2:
exec show trace
tc05: dut can add and delete lisp map resolver address
 DUT1:  
lisp_enable_disable enable
lisp_add_del_map_resolver 192.169.0.1
lisp_add_del_map_resolver 192.169.1.1
lisp_add_del_map_resolver 192.169.2.1
lisp_add_del_map_resolver 12:1::1
lisp_add_del_map_resolver 12:2::1
lisp_add_del_map_resolver 192.169.0.1 del
lisp_add_del_map_resolver 192.169.1.1 del
lisp_add_del_map_resolver 192.169.2.1 del
lisp_add_del_map_resolver 12:1::1 del
lisp_add_del_map_resolver 12:2::1 del
exec show trace

DUT2:
exec show trace

eth2p-ethip4lisp-ip4base-func

IP AFI independent functional tests.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 over lispoipv4 tunnel after disable-enable
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.0.3.1/24
sw_interface_add_del_address sw_if_index 1 6.0.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:60:5c:6d
lisp_enable_disable enable
lisp_add_del_locator_set locator-set ls1
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1
lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set ls1
lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6.0.3.2
lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24
lisp_enable_disable disable
lisp_enable_disable enable
lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.0.3.2/24
sw_interface_add_del_address sw_if_index 1 6.0.2.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:f4:17:ae
lisp_enable_disable enable
lisp_add_del_locator_set locator-set ls1
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1
lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set ls1
lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 6.0.3.1
lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24
lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24
exec show trace

eth2p-ethip4lisp-l2bdbasemaclrn-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4-LISPGpe-IP4
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: route ipv4 packet through lisp with bridge domain setup.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 10.0.3.1/24
sw_interface_add_del_address sw_if_index 1 10.0.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 10.0.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 10.0.3.2 mac fa:16:3e:b6:5b:85
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
lisp_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 5 bd_index 10
lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:11 locator-set tst_locator
lisp_add_del_map_resolver 10.0.0.2
lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:22 seid 08:22:22:22:22:11 rloc 10.0.3.2
lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:22 leid 08:22:22:22:22:11
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 10.0.3.2/24
sw_interface_add_del_address sw_if_index 1 10.0.2.1/24
ip_neighbor_add_del sw_if_index 1 dst 10.0.2.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 10.0.3.1 mac fa:16:3e:14:eb:c7
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
lisp_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 5 bd_index 10
lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:22 locator-set tst_locator
lisp_add_del_map_resolver 10.0.0.1
lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:11 seid 08:22:22:22:22:22 rloc 10.0.3.1
lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:11 leid 08:22:22:22:22:22
exec show trace

eth2p-ethip4lispgpe-ip4base-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using physical interfaces
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.0.4.1/24
sw_interface_add_del_address sw_if_index 1 6.0.1.2/24
ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:b6:5b:85
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2
lisp_add_del_adjacency add vni 0 reid 6.0.5.0/24 leid 6.0.1.0/24
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.0.4.2/24
sw_interface_add_del_address sw_if_index 1 6.0.5.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:14:eb:c7
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.0.5.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1
lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.5.0/24
exec show trace

eth2p-ethip4lispgpe-ip4basevrf-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1
sw_interface_set_table sw_if_index 1 vrf 1
ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:b6:5b:85
sw_interface_add_del_address sw_if_index 3 6.0.4.1/24
sw_interface_add_del_address sw_if_index 1 6.0.1.2/24
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 6.0.1.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 1 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2
lisp_add_del_adjacency add vni 1 reid 6.0.5.0/24 leid 6.0.1.0/24
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1
sw_interface_set_table sw_if_index 1 vrf 1
ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:14:eb:c7
sw_interface_add_del_address sw_if_index 3 6.0.4.2/24
sw_interface_add_del_address sw_if_index 1 6.0.5.1/24
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 6.0.5.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 1 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1
lisp_add_del_adjacency add vni 1 reid 6.0.1.0/24 leid 6.0.5.0/24
exec show trace

eth2p-ethip4lispgpe-ip6base-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lispoipv4 tunnel
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.0.3.1/24
sw_interface_add_del_address sw_if_index 1 6:0:1::1/64
ip_neighbor_add_del sw_if_index 1 dst 6:0:1::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 6.0.3.2 mac fa:16:3e:b6:5b:85
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_add_del_locator_set locator-set ls1
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1
lisp_add_del_local_eid vni 0 eid 6:0:1::0/64 locator-set ls1
lisp_add_del_remote_mapping add vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2
lisp_add_del_adjacency add vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64
lisp_add_del_remote_mapping del vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2
lisp_add_del_adjacency del vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64
ip_neighbor_add_del sw_if_index 3 dst 6.0.3.20 mac fa:16:3e:b6:5b:85
lisp_add_del_remote_mapping add vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.20
lisp_add_del_adjacency add vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.0.3.2/24
sw_interface_add_del_address sw_if_index 1 6:0:2::1/64
ip_neighbor_add_del sw_if_index 1 dst 6:0:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_add_del_locator_set locator-set ls1
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1
lisp_add_del_local_eid vni 0 eid 6:0:2::0/64 locator-set ls1
lisp_add_del_remote_mapping add vni 0 eid 6:0:1::0/64 seid 6:0:2::0/64 rloc 6.0.3.1
lisp_add_del_adjacency add vni 0 reid 6:0:1::0/64 leid 6:0:2::0/64
sw_interface_add_del_address sw_if_index 3 del-all
sw_interface_add_del_address sw_if_index 3 6.0.3.20/24
ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:14:eb:c7
exec show trace

eth2p-ethip4lispgpe-ip6basevrf-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1 ipv6
sw_interface_set_table sw_if_index 1 vrf 1 ipv6
ip_neighbor_add_del sw_if_index 1 dst 6:0:1::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 6.0.3.2 mac fa:16:3e:b6:5b:85
sw_interface_add_del_address sw_if_index 3 6.0.3.1/24
sw_interface_add_del_address sw_if_index 1 6:0:1::1/64
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set ls1
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 6:0:1::0/64 locator-set ls1
lisp_add_del_remote_mapping add vni 1 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2
lisp_add_del_adjacency add vni 1 reid 6:0:2::0/64 leid 6:0:1::0/64
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1 ipv6
sw_interface_set_table sw_if_index 1 vrf 1 ipv6
ip_neighbor_add_del sw_if_index 1 dst 6:0:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:14:eb:c7
sw_interface_add_del_address sw_if_index 3 6.0.3.2/24
sw_interface_add_del_address sw_if_index 1 6:0:2::1/64
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set ls1
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 6:0:2::0/64 locator-set ls1
lisp_add_del_remote_mapping add vni 1 eid 6:0:1::0/64 seid 6:0:2::0/64 rloc 6.0.3.1
lisp_add_del_adjacency add vni 1 reid 6:0:1::0/64 leid 6:0:2::0/64
exec show trace

vxlan

eth2p-dot1qip4vxlan-l2bdbasemaclrn-func

RFC7348 VXLAN: Bridge-domain with VXLAN over VLAN test cases

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-dot1q-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with static MACs, MAC learning enabled and Split Horizon Groups (SHG) depending on test case; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv4ovlan tunnels switch icmpv4 between tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
create_vlan_subif sw_if_index 3 vlan 10
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_dump
sw_interface_add_del_address sw_if_index 5 172.16.0.1/24
ip_neighbor_add_del sw_if_index 5 dst 172.16.0.2 mac fa:16:3e:b6:5b:85
vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23
sw_interface_dump
sw_interface_set_flags sw_if_index 6 admin-up link-up
bridge_domain_add_del(bd_id=23,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=23)
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=23)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
create_vlan_subif sw_if_index 3 vlan 10
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_dump
sw_interface_dump
sw_interface_add_del_address sw_if_index 5 172.16.0.2/24
ip_neighbor_add_del sw_if_index 5 dst 172.16.0.1 mac fa:16:3e:14:eb:c7
vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23
sw_interface_dump
sw_interface_set_flags sw_if_index 6 admin-up link-up
bridge_domain_add_del(bd_id=23,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=23)
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=23)
exec show trace

eth2p-ethip4vxlan-l2bdbasemaclrn-func

Bridge-domain with VXLAN test cases - IPv4

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels switch icmpv4 between tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 172.16.0.1/24
ip_neighbor_add_del sw_if_index 3 dst 172.16.0.2 mac fa:16:3e:b6:5b:85
vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23
sw_interface_dump
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 172.16.0.2/24
ip_neighbor_add_del sw_if_index 3 dst 172.16.0.1 mac fa:16:3e:14:eb:c7
vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23
sw_interface_dump
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10)
exec show trace

eth2p-ethip4vxlan-l2xcbase-func

RFC7348 VXLAN: L2 cross-connect with VXLAN test cases

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching; VXLAN tunnels are configured between L2XCs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vxlanoipv4 tunnels switch icmpv4 between tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 172.16.0.1/24
ip_neighbor_add_del sw_if_index 3 dst 172.16.0.2 mac fa:16:3e:b6:5b:85
vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 24
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 172.16.0.2/24
ip_neighbor_add_del sw_if_index 3 dst 172.16.0.1 mac fa:16:3e:14:eb:c7
vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 24
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace

eth4p-ethip4vxlan-l2bdbasemaclrn-l2shg-func

L2BD with SHG combined with VXLAN test cases - IPv4

  • [Top] Network topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG); VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels in shg switch icmpv4 between tg links
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 172.16.0.1/24
vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23
sw_interface_dump
vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 35
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_dump
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=1,port_type=0,bd_id=10)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 172.16.0.2/24
vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23
sw_interface_dump
vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 35
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_dump
bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20)
bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30)
exec show trace
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels in different shgs switch icmpv4 between tg links
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 172.16.0.1/24
vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23
sw_interface_dump
vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 35
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_dump
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=2,port_type=0,bd_id=10)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 172.16.0.2/24
vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23
sw_interface_dump
vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 35
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_dump
bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20)
bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30)
exec show trace

ip6

eth2p-ethip6-ip6base-copblklistbase-func

COP Security IPv6 Blacklist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv6 routing and static routes. COP security black-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut drops ipv6 pkts with cop blacklist set with ipv6 src-addr
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64
sw_interface_set_flags sw_if_index 3 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:62::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:f4:17:ae
ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_table_add_del table 1 ipv6
cop_whitelist_enable_disable sw_if_index 1 ip6 fib-id 1
cop_interface_enable_disable sw_if_index 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_add_del_address sw_if_index 3 3ffe:72::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 3ffe:73::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

eth2p-ethip6-ip6base-copwhlistbase-func

COP Security IPv6 Whitelist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv6 routing and static routes. COP security white-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut permits ipv6 pkts with cop whitelist set with ipv6 src-addr
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64
sw_interface_set_flags sw_if_index 3 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:62::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:f4:17:ae
ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_table_add_del table 1 ipv6
ip_add_del_route 3ffe:61::/64 vrf 1 resolve-attempts 10 count 1 local
cop_whitelist_enable_disable sw_if_index 1 ip6 fib-id 1
cop_interface_enable_disable sw_if_index 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_add_del_address sw_if_index 3 3ffe:72::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 3ffe:73::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

eth2p-ethip6-ip6base-func

IPv6 routing test cases RFC2460 IPv6, RFC4443 ICMPv6, RFC4861 Neighbor Discovery. Encapsulations: Eth-IPv6-ICMPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2; Eth-IPv6-NS/NA on links TG-DUT. IPv6 routing tests use circular 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2 and received on TG links on the other side of circular topology. On receive TG verifies packets IPv6 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut replies to icmpv6 echo req to its ingress interface
 DUT1:  
cli_inband(cmd=clear interfaces)
exec show trace

DUT2:
cli_inband(cmd=clear interfaces)
exec show trace
tc02: dut replies to icmpv6 echo req pkt with size 64b-to-1500b-incr-1b
 DUT1:  
cli_inband(cmd=clear interfaces)
exec show trace

DUT2:
cli_inband(cmd=clear interfaces)
exec show trace
tc04: dut routes to its egress interface
 DUT1:  
cli_inband(cmd=clear interfaces)
exec show trace

DUT2:
cli_inband(cmd=clear interfaces)
exec show trace
tc05: dut1 routes to dut2 ingress interface
 DUT1:  
cli_inband(cmd=clear interfaces)
exec show trace

DUT2:
cli_inband(cmd=clear interfaces)
exec show trace
tc06: dut1 routes to dut2 egress interface
 DUT1:  
cli_inband(cmd=clear interfaces)
exec show trace

DUT2:
cli_inband(cmd=clear interfaces)
exec show trace
tc07: dut1 and dut2 route between tg interfaces
 DUT1:  
cli_inband(cmd=clear interfaces)
exec show trace

DUT2:
cli_inband(cmd=clear interfaces)
exec show trace
tc08: dut replies to ipv6 neighbor solicitation
 DUT1:  
cli_inband(cmd=clear interfaces)
exec show trace

DUT2:
cli_inband(cmd=clear interfaces)
exec show trace

eth2p-ethip6-ip6base-iaclbase-func

IPv6 routing with ingress ACL test cases Encapsulations: Eth-IPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv6 ingress ACL (iACL) tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. DUT1 is configured with iACL on link to TG, iACL classification and permit/deny action are configured on a per test case basis. Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped, or if received verifies packet IPv6 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with iacl ipv6 src-addr drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64
sw_interface_set_flags sw_if_index 3 admin-up
ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:f4:17:ae
ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask l3 ip6 src
classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:61::1
input_acl_set_interface sw_if_index 1 ip6-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc02: dut with iacl ipv6 dst-addr drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64
sw_interface_set_flags sw_if_index 3 admin-up
ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:f4:17:ae
ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2 sw_if_index 3 resolve-attempts 10 count 1
ip_add_del_route 3ffe:54::1/64 via 3ffe:63::2 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask l3 ip6 dst
classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 2 match l3 ip6 dst 3ffe:64::1
input_acl_set_interface sw_if_index 1 ip6-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc03: dut with iacl ipv6 src-addr and dst-addr drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64
sw_interface_set_flags sw_if_index 3 admin-up
ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:f4:17:ae
ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2 sw_if_index 3 resolve-attempts 10 count 1
ip_add_del_route 3ffe:54::1/64 via 3ffe:63::2 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask l3 ip6 src
classify_add_del_table mask l3 ip6 dst
classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:61::1
classify_add_del_session acl-hit-next deny table-index 1 skip_n 2 match_n 2 match l3 ip6 dst 3ffe:64::1
input_acl_set_interface sw_if_index 1 ip6-table 0
input_acl_set_interface sw_if_index 1 ip6-table 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc04: dut with iacl ipv6 protocol set to tcp drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64
sw_interface_set_flags sw_if_index 3 admin-up
ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:f4:17:ae
ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask hex 0000000000000000000000000000000000000000FF
classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000006
input_acl_set_interface sw_if_index 1 ip6-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc05: dut with iacl ipv6 protocol set to udp drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64
sw_interface_set_flags sw_if_index 3 admin-up
ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:f4:17:ae
ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask hex 0000000000000000000000000000000000000000FF
classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000011
input_acl_set_interface sw_if_index 1 ip6-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc06: dut with iacl ipv6 tcp src-ports drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64
sw_interface_set_flags sw_if_index 3 admin-up
ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:f4:17:ae
ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF0000
classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000
input_acl_set_interface sw_if_index 1 ip6-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc07: dut with iacl ipv6 tcp dst-ports drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64
sw_interface_set_flags sw_if_index 3 admin-up
ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:f4:17:ae
ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask hex 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF
classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050
input_acl_set_interface sw_if_index 1 ip6-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc08: dut with iacl ipv6 tcp src-ports and dst-ports drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64
sw_interface_set_flags sw_if_index 3 admin-up
ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:f4:17:ae
ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF
classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500014
input_acl_set_interface sw_if_index 1 ip6-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc09: dut with iacl ipv6 udp src-ports drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64
sw_interface_set_flags sw_if_index 3 admin-up
ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:f4:17:ae
ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF0000
classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000
input_acl_set_interface sw_if_index 1 ip6-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc10: dut with iacl ipv6 udp dst-ports drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64
sw_interface_set_flags sw_if_index 3 admin-up
ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:f4:17:ae
ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask hex 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF
classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050
input_acl_set_interface sw_if_index 1 ip6-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc11: dut with iacl ipv6 udp src-ports and dst-ports drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64
sw_interface_set_flags sw_if_index 3 admin-up
ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:f4:17:ae
ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF
classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500014
input_acl_set_interface sw_if_index 1 ip6-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc12: dut with iacl mac src-addr and iacl ipv6 udp src-ports and dst-ports drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask l2 src
classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 src fa:16:3e:60:5c:6d
classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF
classify_add_del_session acl-hit-next deny table-index 1 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500014
input_acl_set_interface sw_if_index 1 l2-table 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

eth2p-ethip6-ip6base-ip6dhcpproxy-func

DHCPv6 proxy test cases

  • [Top] Network Topologies: TG = DUT with two links between the nodes.
  • [Cfg] DUT configuration: DUT is configured with DHCPv6 proxy.
  • [Ver] TG verification: Test DHCPv6 packets are sent on TG on first link to DUT and received on TG on second link. On receive TG verifies if DHCPv6 packets are valid
  • [Ref] Applicable standard specifications: RFC 3315
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp proxies valid dhcpv6 request to dhcpv6 server
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 3ffe:62::1/64
sw_interface_set_flags sw_if_index 2 admin-up
sw_interface_add_del_address sw_if_index 1 3ffe:63::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_add_del_route ff02::1:2/128 local count 1
ip_neighbor_add_del sw_if_index 1 dst 3ffe:63::2 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
dhcp_proxy_config svr 3ffe:63::2 src 3ffe:62::1
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

eth2p-ethip6-ip6base-ip6ecmp-func

Ipv6 Multipath routing test cases

  • [Top] Network topologies: TG=DUT 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT configure interfaces IPv4 adresses, and multipath routing.
  • [Ver] TG verification: Test packets are sent from TG on the first link to DUT. Packet is received on TG on the second link from DUT1.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: ipv6 equal-cost multipath routing
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:61::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_add_del_address sw_if_index 2 3ffe:62::1/64
sw_interface_set_flags sw_if_index 2 admin-up
ip_neighbor_add_del sw_if_index 2 dst 3ffe:62::2 mac 02:00:00:00:00:02
ip_neighbor_add_del sw_if_index 2 dst 3ffe:62::3 mac 02:00:00:00:00:03
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
ip_add_del_route 3ffe:71::1/64 via 3ffe:62::2 sw_if_index 2 count 1 multipath
ip_add_del_route 3ffe:71::1/64 via 3ffe:62::3 sw_if_index 2 count 1 multipath
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

eth2p-ethip6-ip6base-ip6ra-func

IPv6 Router Advertisement test cases RFC4861 Neighbor Discovery. Encapsulations: Eth-IPv6-RA on links TG-DUT1. IPv6 Router Advertisement tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. TG verifies received RA packets.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut transmits ra on ipv6 enabled interface
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_ip6nd_ra_config sw_if_index 1 interval 2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc02: dut retransmits ra on ipv6 enabled interface after a set interval
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_ip6nd_ra_config sw_if_index 1 interval 2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc03: dut responds to router solicitation request
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc04: dut responds to router solicitation request sent from link local address
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64
sw_interface_set_flags sw_if_index 1 admin-up
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace

eth2p-ethip6-ip6base-ipolicemarkbase-func

IPv6 policer test cases

  • [Top] Network topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT1 configure interfaces IPv6 adresses, and static neighbor record on the second interface.
  • [Ver] TG verification: Test packet is sent from TG on the first link to DUT1. Packet is received on TG on the second link from DUT1.
  • [Ref] Applicable standard specifications: RFC2474, RFC2697, RFC2698.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp policer 2r3c color-aware marks packet
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64
sw_interface_set_flags sw_if_index 2 admin-up
sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
policer_add_del name policer1 cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware
classify_add_del_table mask l3 ip6 src
classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2
policer_classify_set_interface sw_if_index 2 ip6-table 0
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc02: vpp policer 2r3c color-blind marks packet
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64
sw_interface_set_flags sw_if_index 2 admin-up
sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
policer_add_del name policer1 cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop
classify_add_del_table mask l3 ip6 src
classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2
policer_classify_set_interface sw_if_index 2 ip6-table 0
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc03: vpp policer 1r3c color-aware marks packet
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64
sw_interface_set_flags sw_if_index 2 admin-up
sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
policer_add_del name policer1 cir 1 eir 0 cb 2 eb 300 rate_type pps round_type closest type 1r3c conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware
classify_add_del_table mask l3 ip6 src
classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2
policer_classify_set_interface sw_if_index 2 ip6-table 0
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc04: vpp policer 1r3c color-blind marks packet
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64
sw_interface_set_flags sw_if_index 2 admin-up
sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
policer_add_del name policer1 cir 100 eir 0 cb 200 eb 0 rate_type pps round_type closest type 1r3c conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop
classify_add_del_table mask l3 ip6 src
classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2
policer_classify_set_interface sw_if_index 2 ip6-table 0
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

eth2p-ethip6-ip6basevrf-func

Vpn routed forwarding - baseline IPv6

  • [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node topology with two links in between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6
  • [Cfg] DUT configuration: Each DUT is configured with two VRF tables; Separation of traffic is tested by IP packets; Neighbors and Routes are set on DUT nodes; IP addresses are set on DUT interfaces.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent by TG on link to DUT1, DUT2 or back to TG; On receipt TG verifies packets for correctness and their IPv6 src-addr, dst-addr, and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: tg packets routed to dut ingress interface, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2001:62::3/64
sw_interface_add_del_address sw_if_index 1 2001:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::1/64
sw_interface_add_del_address sw_if_index 3 2002:62::2/64
ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:b6:5b:85
ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2003:62::3/64
sw_interface_add_del_address sw_if_index 1 2003:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::3/64
sw_interface_add_del_address sw_if_index 3 2002:62::4/64
ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:14:eb:c7
ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc02: tg packets routed to dut egress interface, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2001:62::3/64
sw_interface_add_del_address sw_if_index 1 2001:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::1/64
sw_interface_add_del_address sw_if_index 3 2002:62::2/64
ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:b6:5b:85
ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2003:62::3/64
sw_interface_add_del_address sw_if_index 1 2003:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::3/64
sw_interface_add_del_address sw_if_index 3 2002:62::4/64
ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:14:eb:c7
ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc03: tg packets routed to dut2 ingress interface through dut1, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2001:62::3/64
sw_interface_add_del_address sw_if_index 1 2001:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::1/64
sw_interface_add_del_address sw_if_index 3 2002:62::2/64
ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:b6:5b:85
ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2003:62::3/64
sw_interface_add_del_address sw_if_index 1 2003:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::3/64
sw_interface_add_del_address sw_if_index 3 2002:62::4/64
ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:14:eb:c7
ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc04: tg packets routed to dut2 egress interface through dut1, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2001:62::3/64
sw_interface_add_del_address sw_if_index 1 2001:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::1/64
sw_interface_add_del_address sw_if_index 3 2002:62::2/64
ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:b6:5b:85
ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2003:62::3/64
sw_interface_add_del_address sw_if_index 1 2003:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::3/64
sw_interface_add_del_address sw_if_index 3 2002:62::4/64
ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:14:eb:c7
ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc05: tg packets routed to tg through dut1 and dut2, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2001:62::3/64
sw_interface_add_del_address sw_if_index 1 2001:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::1/64
sw_interface_add_del_address sw_if_index 3 2002:62::2/64
ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:b6:5b:85
ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2003:62::3/64
sw_interface_add_del_address sw_if_index 1 2003:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::3/64
sw_interface_add_del_address sw_if_index 3 2002:62::4/64
ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:14:eb:c7
ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc06: tg packets not routed to dut ingress interface in different vrf, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2001:62::3/64
sw_interface_add_del_address sw_if_index 1 2001:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::1/64
sw_interface_add_del_address sw_if_index 3 2002:62::2/64
ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:b6:5b:85
ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2003:62::3/64
sw_interface_add_del_address sw_if_index 1 2003:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::3/64
sw_interface_add_del_address sw_if_index 3 2002:62::4/64
ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:14:eb:c7
ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc07: tg packets not routed to dut egress interface in different vrf, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2001:62::3/64
sw_interface_add_del_address sw_if_index 1 2001:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::1/64
sw_interface_add_del_address sw_if_index 3 2002:62::2/64
ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:b6:5b:85
ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2003:62::3/64
sw_interface_add_del_address sw_if_index 1 2003:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::3/64
sw_interface_add_del_address sw_if_index 3 2002:62::4/64
ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:14:eb:c7
ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc08: tg packets not routed to dut2 ingress interface in different vrf through dut1, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2001:62::3/64
sw_interface_add_del_address sw_if_index 1 2001:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::1/64
sw_interface_add_del_address sw_if_index 3 2002:62::2/64
ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:b6:5b:85
ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2003:62::3/64
sw_interface_add_del_address sw_if_index 1 2003:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::3/64
sw_interface_add_del_address sw_if_index 3 2002:62::4/64
ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:14:eb:c7
ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc09: tg packets not routed to dut2 egress interface in different vrf through dut1, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2001:62::3/64
sw_interface_add_del_address sw_if_index 1 2001:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::1/64
sw_interface_add_del_address sw_if_index 3 2002:62::2/64
ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:b6:5b:85
ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2003:62::3/64
sw_interface_add_del_address sw_if_index 1 2003:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::3/64
sw_interface_add_del_address sw_if_index 3 2002:62::4/64
ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:14:eb:c7
ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace
tc10: tg packets not routed to tg in different vrf through dut1 and dut2, vpp configured with two vrfs
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2001:62::3/64
sw_interface_add_del_address sw_if_index 1 2001:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::1/64
sw_interface_add_del_address sw_if_index 3 2002:62::2/64
ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:75:2f:6b
ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:b2:f5:1d
ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:b6:5b:85
ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 4 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 9 ipv6
ip_table_add_del table 99 ipv6
sw_interface_set_table sw_if_index 4 vrf 9 ipv6
sw_interface_set_table sw_if_index 3 vrf 99 ipv6
sw_interface_set_table sw_if_index 2 vrf 9 ipv6
sw_interface_set_table sw_if_index 1 vrf 99 ipv6
sw_interface_add_del_address sw_if_index 2 2003:62::3/64
sw_interface_add_del_address sw_if_index 1 2003:62::4/64
sw_interface_add_del_address sw_if_index 4 2002:62::3/64
sw_interface_add_del_address sw_if_index 3 2002:62::4/64
ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:2b:b3:7d
ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:cb:56:c9
ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:14:eb:c7
ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1
ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
exec show trace

ip6 tunnels

lisp

eth2p-ethip6lisp-l2bdbasemaclrn-func

l2-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IP6-ICMPv6-LISPGpe-IP6
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge domains and neighbors. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: route ipv6 packet through lisp with bridge domain setup.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:5b:85
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
lisp_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 5 bd_index 10
lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:11 locator-set tst_locator
lisp_add_del_map_resolver 2001:cdba:2::2
lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:22 seid 08:22:22:22:22:11 rloc 2001:cdba:3::2
lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:22 leid 08:22:22:22:22:11
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64
sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
lisp_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 5 bd_index 10
lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:22 locator-set tst_locator
lisp_add_del_map_resolver 2001:cdba:1::2
lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:11 seid 08:22:22:22:22:22 rloc 2001:cdba:3::1
lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:11 leid 08:22:22:22:22:22
exec show trace

eth2p-ethip6lispgpe-ip4base-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lispoipv6 tunnel
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6:0:3::1/64
sw_interface_add_del_address sw_if_index 1 6.0.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_add_del_locator_set locator-set ls1
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1
lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set ls1
lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6:0:3::2
lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24
lisp_add_del_remote_mapping del vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6:0:3::2
lisp_add_del_adjacency del vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24
ip_neighbor_add_del sw_if_index 3 dst 6:0:3::20 mac fa:16:3e:b6:5b:85
lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6:0:3::20
lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6:0:3::2/64
sw_interface_add_del_address sw_if_index 1 6.0.2.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:f4:17:ae
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_add_del_locator_set locator-set ls1
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1
lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set ls1
lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 6:0:3::1
lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24
sw_interface_add_del_address sw_if_index 3 del-all
sw_interface_add_del_address sw_if_index 3 6:0:3::20/64
ip_neighbor_add_del sw_if_index 3 dst 6:0:3::1 mac fa:16:3e:14:eb:c7
exec show trace

eth2p-ethip6lispgpe-ip6base-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces
 DUT1:  
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:5b:85
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2
lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1
lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64
exec show trace

eth2p-ethip6lispgpe-ip6basevrf-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled
 DUT1:  
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1 ipv6
sw_interface_set_table sw_if_index 1 vrf 1 ipv6
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:5b:85
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 2001:cdba:1::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2
lisp_add_del_adjacency add vni 1 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1 ipv6
sw_interface_set_table sw_if_index 1 vrf 1 ipv6
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 2001:cdba:2::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1
lisp_add_del_adjacency add vni 1 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64
exec show trace

vxlan

eth2p-ethip6vxlan-l2bdbasemaclrn-func

Bridge-domain with VXLAN test cases - IPv6

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv6 tunnels switch icmpv6 between tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23
sw_interface_dump
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23
sw_interface_dump
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10)
exec show trace

eth4p-ethip6vxlan-l2bdbasemaclrn-l2shg-func

L2BD with SHG combined with VXLAN test cases - IPv6

  • [Top] Network topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
  • [Enc] Packet encapsulations: th-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG); VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv6 tunnels in shg switch icmpv6 between tg links
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23
sw_interface_dump
vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 35
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_dump
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=1,port_type=0,bd_id=10)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23
sw_interface_dump
vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 35
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_dump
bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20)
bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30)
exec show trace
tc02: dut1 and dut2 with l2bd and vxlanoipv6 tunnels in different shgs switch icmpv6 between tg links
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23
sw_interface_dump
vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 35
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_dump
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=2,port_type=0,bd_id=10)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23
sw_interface_dump
vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 35
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_dump
bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20)
bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30)
exec show trace

l2bd

eth2p-dot1ad–dot1q-l2bdbasemaclrn-vlantrans21-func

L2BD with VLAN tag rewrite test cases - transalte-2-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-2-1 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-2-1 (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc02: dut1 and dut2 with l2bd and vlan translate-2-1 with wrong tag used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=150,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc03: dut1 and dut2 with l2bd and vlan translate-2-1 (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc04: dut1 and dut2 with l2bd and vlan translate-2-1 with wrong tag used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=150,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

eth2p-dot1ad-l2bdbasemaclrn-vlantrans22-func

L2BD with VLAN tag rewrite test cases - translate-2-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-2-2 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-2-2 switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc02: dut1 and dut2 with l2bd and vlan translate-2-2 with wrong inner tag used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=250,push_dot1q=0,tag1=120,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc03: dut1 and dut2 with l2bd and vlan translate-2-2 with wrong outer tag used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=150,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc04: dut1 and dut2 with l2bd and vlan translate-2-2 with wrong outer and inner tags used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=250,push_dot1q=0,tag1=150,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc05: dut1 and dut2 with l2bd and vlan translate-2-2 switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc06: dut1 and dut2 with l2bd and vlan translate-2-2 with wrong inner tag used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=250,push_dot1q=0,tag1=120,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc07: dut1 and dut2 with l2bd and vlan translate-2-2 with wrong outer tag used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=150,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc08: dut1 and dut2 with l2bd and vlan translate-2-2 with wrong outer and inner tags used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=250,push_dot1q=0,tag1=150,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

eth2p-dot1q–dot1ad-l2bdbasemaclrn-vlantrans12-func

L2BD with VLAN tag rewrite test cases - translate-1-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-1-2 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-1-2 (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=210,push_dot1q=0,tag1=120,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc02: dut1 and dut2 with l2bd and vlan translate-1-2 with wrong inner tag used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=250,push_dot1q=0,tag1=120,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc03: dut1 and dut2 with l2bd and vlan translate-1-2 with wrong outer tag used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=210,push_dot1q=0,tag1=150,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc04: dut1 and dut2 with l2bd and vlan translate-1-2 with wrong outer and inner tag used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=250,push_dot1q=0,tag1=150,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc05: dut1 and dut2 with l2bd and vlan translate-1-2 (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc06: dut1 and dut2 with l2bd and vlan translate-1-2 with wrong inner tag used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=250,push_dot1q=0,tag1=120,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc07: dut1 and dut2 with l2bd and vlan translate-1-2 with wrong outer tag used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=220,push_dot1q=0,tag1=150,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc08: dut1 and dut2 with l2bd and vlan translate-1-2 with wrong outer and inner tag used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=250,push_dot1q=0,tag1=150,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

eth2p-dot1q-l2bdbasemaclrn-vlantrans11-func

L2BD with VLAN tag rewrite test cases - translate-1-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-1-1 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-1-1 (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc02: dut1 and dut2 with l2bd and vlan translate-1-1 with wrong tag used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=150,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc03: dut1 and dut2 with l2bd and vlan translate-1-1 (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace
tc04: dut1 and dut2 with l2bd and vlan translate-1-1 with wrong tag used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=150,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

eth2p-eth-l2bdbasemaclrn-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes; TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports active interfaces
 DUT1:  
exec show trace

DUT2:
exec show trace
tc02: dut with l2bd (mac learning) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
exec show trace
tc03: dut1 and dut2 with l2bd (mac learning) switch between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=2)
exec show trace

eth2p-eth-l2bdbasemacstc-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with static MACs.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd (static macs) switch between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>`m,sw_if_index=1,bvi_mac=0)
l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>xf4xae,sw_if_index=3,bvi_mac=0)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=2)
l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>`m,sw_if_index=3,bvi_mac=0)
l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>xf4xae,sw_if_index=1,bvi_mac=0)
exec show trace

eth4p-eth-l2bdbasemaclrn-l2shg-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG).
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd (mac learn) and shg switch between four tg links
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=3,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=3,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=4,port_type=0,bd_id=2)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=4,port_type=0,bd_id=2)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=2)
exec show trace

l2xc

eth2p-dot1ad–dot1q-l2xcbase-vlantrans21-func

L2XC with VLAN tag rewrite test cases - translate-2-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 or Eth-dot1aq-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-2-1 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-2-1 (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc02: dut1 and dut2 with l2xc and vlan translate-2-1 with wrong tag used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=150,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc03: dut1 and dut2 with l2xc and vlan translate-2-1 (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc04: dut1 and dut2 with l2xc and vlan translate-2-1 with wrong tag used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=150,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace

eth2p-dot1ad-l2xcbase-func

L2 cross-connect with QinQ test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching with 802.1ad QinQ VLAN tag push and pop.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and two vlan push-pop switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 100 inner_vlan_id 200 two_tags
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 100 inner_vlan_id 200 two_tags
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace

eth2p-dot1ad-l2xcbase-vlantrans22-func

L2XC with VLAN tag rewrite test cases - translate-2-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-2-2 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-2-2 switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc02: dut1 and dut2 with l2xc and vlan translate-2-2 with wrong inner tag used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=250,push_dot1q=0,tag1=120,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc03: dut1 and dut2 with l2xc and vlan translate-2-2 with wrong outer tag used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=150,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc04: dut1 and dut2 with l2xc and vlan translate-2-2 with wrong outer and inner tags used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=250,push_dot1q=0,tag1=150,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc05: dut1 and dut2 with l2xc and vlan translate-2-2 switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc06: dut1 and dut2 with l2xc and vlan translate-2-2 with wrong inner tag used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=250,push_dot1q=0,tag1=120,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc07: dut1 and dut2 with l2xc and vlan translate-2-2 with wrong outer tag used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=150,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc08: dut1 and dut2 with l2xc and vlan translate-2-2 with wrong outer and inner tags used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=250,push_dot1q=0,tag1=150,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace

eth2p-dot1q–dot1ad-l2xcbase-vlantrans12-func

L2XC with VLAN tag rewrite test cases - translate-1-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-1-2 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-1-2 (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=210,push_dot1q=0,tag1=120,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc02: dut1 and dut2 with l2xc and vlan translate-1-2 with wrong inner tag used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=250,push_dot1q=0,tag1=120,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc03: dut1 and dut2 with l2xc and vlan translate-1-2 with wrong outer tag used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=210,push_dot1q=0,tag1=150,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc04: dut1 and dut2 with l2xc and vlan translate-1-2 with wrong outer and inner tag used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=250,push_dot1q=0,tag1=150,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc05: dut1 and dut2 with l2xc and vlan translate-1-2 (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc06: dut1 and dut2 with l2xc and vlan translate-1-2 with wrong inner tag used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=250,push_dot1q=0,tag1=120,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc07: dut1 and dut2 with l2xc and vlan translate-1-2 with wrong outer tag used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=220,push_dot1q=0,tag1=150,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc08: dut1 and dut2 with l2xc and vlan translate-1-2 with wrong outer and inner tag used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=250,push_dot1q=0,tag1=150,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad
sw_interface_dump
sw_interface_dump
exec show interfaces
l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace

eth2p-dot1q-l2xcbase-vlantrans11-func

L2XC with VLAN tag rewrite test cases - translate-1-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv4-ICMPv4 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-1-1 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-1-1 (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc02: dut1 and dut2 with l2xc and vlan translate-1-1 with wrong tag used (dut1) switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=150,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc03: dut1 and dut2 with l2xc and vlan translate-1-1 (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace
tc04: dut1 and dut2 with l2xc and vlan translate-1-1 with wrong tag used (dut1) switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=150,sw_if_index=5)
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
create_vlan_subif sw_if_index 3 vlan 120
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1)
exec show trace

eth2p-eth-l2xcbase-func

L2 cross-connect test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc switch icmpv4 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_dump
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_dump
exec show trace
tc02: dut1 and dut2 with l2xc switch icmpv6 between two tg links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_dump
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
sw_interface_dump
exec show trace

eth2p-eth-l2xcbase-iaclbase-func

Ingress ACL test cases

  • [Top] Network Topologies: TG - DUT1 - DUT2 - TG with one link between the nodes.
  • [Cfg] DUT configuration: DUT2 is configured with L2 Cross connect. DUT1 is configured with iACL classification on link to TG,
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with iacl mac src-addr drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
classify_add_del_table mask l2 src
classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 src fa:16:3e:60:5c:6d
input_acl_set_interface sw_if_index 1 l2-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace
tc02: dut with iacl mac dst-addr drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
classify_add_del_table mask l2 dst
classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 dst fa:16:3e:f4:17:ae
input_acl_set_interface sw_if_index 1 l2-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace
tc03: dut with iacl mac src-addr and dst-addr drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
classify_add_del_table mask l2 src
classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 src fa:16:3e:60:5c:6d
classify_add_del_table mask l2 dst
classify_add_del_session acl-hit-next deny table-index 1 skip_n 0 match_n 1 match l2 dst fa:16:3e:60:5c:6d
input_acl_set_interface sw_if_index 1 l2-table 0
input_acl_set_interface sw_if_index 1 l2-table 1
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace
tc04: dut with iacl ethertype drops matching pkts
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
classify_add_del_table mask hex 000000000000000000000000ffff
classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match hex 0000000000000000000000000800
input_acl_set_interface sw_if_index 1 l2-table 0
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1)
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3)
exec show trace

telemetry

eth2p-ethip4-ip4base-ip4ipfixbase-func

IPFIX ipv4 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector. Test packets are sent from TG to DUT1. TG listens for flow report packets and verifies that they contains flow record of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut sends ipfix template and data packets
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
classify_add_del_table mask l3 ip4 src
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.1.2
flow_classify_set_interface sw_if_index 1 ip4-table 0
set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1 template_interval 5
set_ipfix_classify_stream domain 1
ipfix_classify_table_add_del table 0 ip4 add
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc02: dut reports packet flow for traffic by source address
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
classify_add_del_table mask l3 ip4 src
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.1.2
flow_classify_set_interface sw_if_index 1 ip4-table 0
set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1 template_interval 5
set_ipfix_classify_stream domain 1
ipfix_classify_table_add_del table 0 ip4 add
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc03: dut reports packet flow for traffic with local destination address
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
classify_add_del_table mask l3 ip4 dst
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 dst 192.168.1.1
flow_classify_set_interface sw_if_index 1 ip4-table 0
set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1 template_interval 5
set_ipfix_classify_stream domain 1
ipfix_classify_table_add_del table 0 ip4 add
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc04: dut reports packet flow for traffic with remote destination address
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 192.168.2.1 mac fa:16:3e:b6:5b:85
classify_add_del_table mask l3 ip4 dst
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 dst 192.168.2.1
flow_classify_set_interface sw_if_index 1 ip4-table 0
set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1 template_interval 5
set_ipfix_classify_stream domain 1
ipfix_classify_table_add_del table 0 ip4 add
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc05: dut reports packet flow for traffic by source and destination port
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
classify_add_del_table mask l3 ip4 src proto l4 src_port dst_port
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 80 dst_port 80
flow_classify_set_interface sw_if_index 1 ip4-table 0
set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1 template_interval 5
set_ipfix_classify_stream domain 1
ipfix_classify_table_add_del table 0 ip4 add
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace

eth2p-ethip4-ip4base-ip4ipfixscale-func

IPFIX ipv4 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector. Test packets are sent from TG to DUT1. TG listens for flow report packets and verifies that they contains flow record of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports packet flow with a large number of packets
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
classify_add_del_table mask l3 ip4 src
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.1.2
flow_classify_set_interface sw_if_index 1 ip4-table 0
set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1 template_interval 5
set_ipfix_classify_stream domain 1
ipfix_classify_table_add_del table 0 ip4 add
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc02: dut reports packet flow when multiple sessions are configured
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
classify_add_del_table mask l3 ip4 src proto l4 src_port dst_port
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 0 dst_port 0
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 1 dst_port 1
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 2 dst_port 2
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 3 dst_port 3
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 4 dst_port 4
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 5 dst_port 5
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 6 dst_port 6
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 7 dst_port 7
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 8 dst_port 8
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 9 dst_port 9
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 10 dst_port 10
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 11 dst_port 11
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 12 dst_port 12
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 13 dst_port 13
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 14 dst_port 14
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 15 dst_port 15
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 16 dst_port 16
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 17 dst_port 17
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 18 dst_port 18
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 19 dst_port 19
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 20 dst_port 20
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 21 dst_port 21
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 22 dst_port 22
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 23 dst_port 23
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 24 dst_port 24
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 25 dst_port 25
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 26 dst_port 26
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 27 dst_port 27
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 28 dst_port 28
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 29 dst_port 29
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 30 dst_port 30
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 31 dst_port 31
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 32 dst_port 32
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 33 dst_port 33
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 34 dst_port 34
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 35 dst_port 35
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 36 dst_port 36
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 37 dst_port 37
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 38 dst_port 38
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 39 dst_port 39
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 40 dst_port 40
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 41 dst_port 41
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 42 dst_port 42
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 43 dst_port 43
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 44 dst_port 44
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 45 dst_port 45
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 46 dst_port 46
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 47 dst_port 47
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 48 dst_port 48
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 49 dst_port 49
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 50 dst_port 50
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 51 dst_port 51
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 52 dst_port 52
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 53 dst_port 53
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 54 dst_port 54
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 55 dst_port 55
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 56 dst_port 56
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 57 dst_port 57
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 58 dst_port 58
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 59 dst_port 59
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 60 dst_port 60
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 61 dst_port 61
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 62 dst_port 62
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 63 dst_port 63
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 64 dst_port 64
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 65 dst_port 65
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 66 dst_port 66
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 67 dst_port 67
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 68 dst_port 68
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 69 dst_port 69
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 70 dst_port 70
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 71 dst_port 71
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 72 dst_port 72
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 73 dst_port 73
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 74 dst_port 74
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 75 dst_port 75
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 76 dst_port 76
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 77 dst_port 77
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 78 dst_port 78
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 79 dst_port 79
flow_classify_set_interface sw_if_index 1 ip4-table 0
set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1 path_mtu 1450 template_interval 5
set_ipfix_classify_stream domain 1
ipfix_classify_table_add_del table 0 ip4 add
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace

eth2p-ethip4-ip4base-spanrx-func

SPAN test suite

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: DUT1 is configured with SPAN mirroring from the first DUT1-TG interface to the second one.
  • [Ver] TG verification: Test ARP or ICMP packets are sent by TG on first link to DUT1; On receipt through second link TG verifies the copy of packet sent and the copy of DUT’s reply packet.
  • [Ref] Applicable standard specifications: None?
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut mirrors l2 packets from one interface to another
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 192.168.1.2/24
sw_interface_span_enable_disable src_sw_if_index 2 dst_sw_if_index 1
exec show trace

DUT2:
exec show trace
tc02: dut mirrors ipv4 packets from one interface to another
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 192.168.1.2/24
ip_neighbor_add_del sw_if_index 2 dst 192.168.1.1 mac fa:16:3e:75:2f:6b
sw_interface_span_enable_disable src_sw_if_index 2 dst_sw_if_index 1
exec show trace

DUT2:
exec show trace

eth2p-ethip6-ip6base-ip6ipfixbase-func

IPFIX ipv6 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 and IPV6 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector.Test packets are sent from TG to or through DUT1. TG listens for flow report packets and verifies that they contains flow records of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports packet flow for traffic by source address
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 10::10/64
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask l3 ip6 src
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip6 src 12::10
flow_classify_set_interface sw_if_index 1 ip6-table 0
set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1 template_interval 5
set_ipfix_classify_stream domain 1
ipfix_classify_table_add_del table 0 ip6 add
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc02: dut reports packet flow for traffic with local destination address
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 10::10/64
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask l3 ip6 dst
classify_add_del_session acl-hit-next permit table-index 0 skip_n 2 match_n 2 match l3 ip6 dst 10::10
flow_classify_set_interface sw_if_index 1 ip6-table 0
set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1 template_interval 5
set_ipfix_classify_stream domain 1
ipfix_classify_table_add_del table 0 ip6 add
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc03: dut reports packet flow for traffic with remote destination address
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 10::10/64
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 11::10 mac fa:16:3e:b6:5b:85
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask l3 ip6 dst
classify_add_del_session acl-hit-next permit table-index 0 skip_n 2 match_n 2 match l3 ip6 dst 11::10
flow_classify_set_interface sw_if_index 1 ip6-table 0
set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1 template_interval 5
set_ipfix_classify_stream domain 1
ipfix_classify_table_add_del table 0 ip6 add
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc04: dut reports packet flow for traffic by source and destination port
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 10::10/64
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask l3 ip6 src proto l4 src_port dst_port
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 80 dst_port 80
flow_classify_set_interface sw_if_index 1 ip6-table 0
set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1 template_interval 5
set_ipfix_classify_stream domain 1
ipfix_classify_table_add_del table 0 ip6 add
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace

eth2p-ethip6-ip6base-ip6ipfixscale-func

IPFIX ipv6 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 and IPV6 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector.Test packets are sent from TG to or through DUT1. TG listens for flow report packets and verifies that they contains flow records of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports packet flow with a large number of packets
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 10::10/64
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask l3 ip6 src
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip6 src 12::10
flow_classify_set_interface sw_if_index 1 ip6-table 0
set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1 template_interval 5
set_ipfix_classify_stream domain 1
ipfix_classify_table_add_del table 0 ip6 add
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace
tc02: dut reports packet flow when multiple sessions are configured
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 1 10::10/64
sw_interface_add_del_address sw_if_index 1 192.168.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
classify_add_del_table mask l3 ip6 src proto l4 src_port dst_port
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 0 dst_port 0
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 1 dst_port 1
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 2 dst_port 2
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 3 dst_port 3
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 4 dst_port 4
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 5 dst_port 5
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 6 dst_port 6
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 7 dst_port 7
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 8 dst_port 8
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 9 dst_port 9
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 10 dst_port 10
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 11 dst_port 11
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 12 dst_port 12
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 13 dst_port 13
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 14 dst_port 14
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 15 dst_port 15
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 16 dst_port 16
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 17 dst_port 17
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 18 dst_port 18
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 19 dst_port 19
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 20 dst_port 20
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 21 dst_port 21
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 22 dst_port 22
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 23 dst_port 23
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 24 dst_port 24
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 25 dst_port 25
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 26 dst_port 26
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 27 dst_port 27
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 28 dst_port 28
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 29 dst_port 29
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 30 dst_port 30
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 31 dst_port 31
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 32 dst_port 32
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 33 dst_port 33
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 34 dst_port 34
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 35 dst_port 35
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 36 dst_port 36
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 37 dst_port 37
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 38 dst_port 38
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 39 dst_port 39
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 40 dst_port 40
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 41 dst_port 41
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 42 dst_port 42
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 43 dst_port 43
classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 44 dst_port 44
flow_classify_set_interface sw_if_index 1 ip6-table 0
set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1 path_mtu 1450 template_interval 5
set_ipfix_classify_stream domain 1
ipfix_classify_table_add_del table 0 ip6 add
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
exec show trace

eth2p-ethip6-ip6base-spanrx-func

SPAN test suite

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: DUT1 is configured with SPAN mirroring from the first DUT1-TG interface to the second one.
  • [Ver] TG verification: Test ARP or ICMP packets are sent by TG on first link to DUT1; On receipt through second link TG verifies the copy of packet sent and the copy of DUT’s reply packet.
  • [Ref] Applicable standard specifications: None?
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut mirrors ipv6 packets from one interface to another
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_add_del_address sw_if_index 2 10::1/24
sw_interface_set_flags sw_if_index 2 admin-up
ip_neighbor_add_del sw_if_index 2 dst 11::1 mac fa:16:3e:75:2f:6b
ip_add_del_route 11::1/24 via 10::1 sw_if_index 2 resolve-attempts 10 count 1
sw_interface_span_enable_disable src_sw_if_index 2 dst_sw_if_index 1
exec show trace

DUT2:
exec show trace

vm vhost

ip4

eth2p-ethip4-ip4base-eth-2vhost-1vm

eth2p-ethip4-ip4base-eth-2vhost-1vm

IPv4 routing test cases with vhost user interface RFC791 IPv4, RFC826 ARP, RFC792 ICMPv4. Encapsulations: Eth-IPv4-ICMPv4 on links TG=DUT1. IPv4 routing tests use circular 2-node topology TG - DUT1 - TG with two link between the nodes. DUT is configured with IPv4 routing and static routes. Test sends packets by TG on links to DUT and received on TG link on the other side of circular topology. On receive TG verifies packets IPv4 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: ipv4 forward via vhost to another vrf
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
ip_table_add_del table 20
sw_interface_set_table sw_if_index 6 vrf 20
sw_interface_set_table sw_if_index 1 vrf 20
sw_interface_add_del_address sw_if_index 2 10.0.1.1/24
sw_interface_add_del_address sw_if_index 5 10.0.2.1/24
sw_interface_add_del_address sw_if_index 6 10.0.2.2/24
sw_interface_add_del_address sw_if_index 1 10.0.3.1/24
sw_interface_dump
ip_add_del_route 10.0.3.0/24 via 10.0.2.2 sw_if_index 5
ip_add_del_route 10.0.1.0/24 via 10.0.2.1 vrf 20 sw_if_index 6
ip_neighbor_add_del sw_if_index 5 dst 10.0.2.2 mac 02:fe:fc:2b:a3:b7
ip_neighbor_add_del sw_if_index 1 dst 10.0.3.2 mac fa:16:3e:60:5c:6d
exec show trace

DUT2:
exec show trace

eth2p-ethip4ipsectptlispgpe-ip4base-eth-2vhost-1vm-func

IPv4-ip4-ipsec-lispgpe-ip4 - main fib, vrf (gpe_vni-to-vrf)

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: ICMPv4-IPv4-IPSec-LISPGPE-IPv4-ICMPv4.
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 0
sw_interface_set_table sw_if_index 1 vrf 0
sw_interface_add_del_address sw_if_index 3 6.6.3.1/24
sw_interface_add_del_address sw_if_index 1 6.6.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:5b:85
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_add_del_address sw_if_index 6 6.6.1.9/24
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_dump
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2
lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 49674f496373474b496230576b5a3751 integ-alg sha1-96 integ-key 3344784255386b3345524c78755334706e53476d
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 49674f496373474b496230576b5a3751 integ-alg sha1-96 integ-key 3344784255386b3345524c78755334706e53476d
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 0
sw_interface_set_table sw_if_index 1 vrf 0
sw_interface_add_del_address sw_if_index 3 6.6.3.2/24
sw_interface_add_del_address sw_if_index 1 6.6.2.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:14:eb:c7
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1
lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 49674f496373474b496230576b5a3751 integ-alg sha1-96 integ-key 3344784255386b3345524c78755334706e53476d
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 49674f496373474b496230576b5a3751 integ-alg sha1-96 integ-key 3344784255386b3345524c78755334706e53476d
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec show trace
tc02: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 0
sw_interface_set_table sw_if_index 1 vrf 0
sw_interface_add_del_address sw_if_index 3 6.6.3.1/24
sw_interface_add_del_address sw_if_index 1 6.6.1.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:5b:85
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_add_del_address sw_if_index 6 6.6.1.9/24
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_dump
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2
lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24
sw_interface_dump
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5855384e75476f5a4236354744766c46 integ-alg sha1-96 integ-key 75516a52556661496b4c6552466a634a526b6957
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5855384e75476f5a4236354744766c46 integ-alg sha1-96 integ-key 75516a52556661496b4c6552466a634a526b6957
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 7 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 0
sw_interface_set_table sw_if_index 1 vrf 0
sw_interface_add_del_address sw_if_index 3 6.6.3.2/24
sw_interface_add_del_address sw_if_index 1 6.6.2.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:14:eb:c7
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1
lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24
sw_interface_dump
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5855384e75476f5a4236354744766c46 integ-alg sha1-96 integ-key 75516a52556661496b4c6552466a634a526b6957
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5855384e75476f5a4236354744766c46 integ-alg sha1-96 integ-key 75516a52556661496b4c6552466a634a526b6957
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec show trace

eth2p-ethip4ipsectptlispgpe-ip6base-eth-2vhost-1vm-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.6.3.1/24
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:5b:85
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2
lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_add_del_address sw_if_index 8 2001:cdba:6::3/64
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_flags sw_if_index 8 admin-up link-up
sw_interface_ip6nd_ra_config sw_if_index 8 surpress
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_dump
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 37366f55555761704556593344304755 integ-alg sha1-96 integ-key 316b764a6e6956716e46764630526b7777443676
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 37366f55555761704556593344304755 integ-alg sha1-96 integ-key 316b764a6e6956716e46764630526b7777443676
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.6.3.2/24
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1
lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 37366f55555761704556593344304755 integ-alg sha1-96 integ-key 316b764a6e6956716e46764630526b7777443676
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 37366f55555761704556593344304755 integ-alg sha1-96 integ-key 316b764a6e6956716e46764630526b7777443676
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec show trace
tc02: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.6.3.1/24
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:5b:85
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2
lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_add_del_address sw_if_index 8 2001:cdba:6::3/64
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_flags sw_if_index 8 admin-up link-up
sw_interface_ip6nd_ra_config sw_if_index 8 surpress
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_dump
sw_interface_dump
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 75574e744f383734714f347067456674 integ-alg sha1-96 integ-key 3552465a734f7a377735374f583745766b4f484f
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 75574e744f383734714f347067456674 integ-alg sha1-96 integ-key 3552465a734f7a377735374f583745766b4f484f
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.6.3.2/24
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1
lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64
sw_interface_dump
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 75574e744f383734714f347067456674 integ-alg sha1-96 integ-key 3552465a734f7a377735374f583745766b4f484f
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 75574e744f383734714f347067456674 integ-alg sha1-96 integ-key 3552465a734f7a377735374f583745766b4f484f
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1
exec show trace

eth2p-ethip4lispgpe-ip4base-eth-2vhost-1vm-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using vhost interfaces
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.0.4.1/24
sw_interface_add_del_address sw_if_index 1 6.0.1.2/24
ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:b6:5b:85
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2
lisp_add_del_adjacency add vni 0 reid 6.0.5.0/24 leid 6.0.1.0/24
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
ip_table_add_del table 0
sw_interface_set_table sw_if_index 8 vrf 0
sw_interface_add_del_address sw_if_index 8 6.6.1.3/24
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_flags sw_if_index 8 admin-up link-up
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_dump
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.0.4.2/24
sw_interface_add_del_address sw_if_index 1 6.0.5.1/24
ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:14:eb:c7
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.0.5.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1
lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.5.0/24
exec show trace

eth2p-ethip4lispgpe-ip4basevrf-eth-2vhost-1vm-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using vhost interfaces and vrf is enabled
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1
sw_interface_set_table sw_if_index 1 vrf 1
ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:b6:5b:85
sw_interface_add_del_address sw_if_index 3 6.0.4.1/24
sw_interface_add_del_address sw_if_index 1 6.0.1.2/24
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 6.0.1.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 1 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2
lisp_add_del_adjacency add vni 1 reid 6.0.5.0/24 leid 6.0.1.0/24
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
ip_table_add_del table 1
sw_interface_set_table sw_if_index 9 vrf 1
sw_interface_add_del_address sw_if_index 9 6.6.1.3/24
sw_interface_set_flags sw_if_index 8 admin-up link-up
sw_interface_set_flags sw_if_index 9 admin-up link-up
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 8 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_dump
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1
sw_interface_set_table sw_if_index 1 vrf 1
ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:14:eb:c7
sw_interface_add_del_address sw_if_index 3 6.0.4.2/24
sw_interface_add_del_address sw_if_index 1 6.0.5.1/24
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 6.0.5.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 1 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1
lisp_add_del_adjacency add vni 1 reid 6.0.1.0/24 leid 6.0.5.0/24
exec show trace

eth2p-ethip4lispgpe-ip6base-eth-2vhost-1vm-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.0.3.1/24
sw_interface_add_del_address sw_if_index 1 6:0:1::1/64
ip_neighbor_add_del sw_if_index 1 dst 6:0:1::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 6.0.3.2 mac fa:16:3e:b6:5b:85
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set ls1
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6:0:1::0/64 locator-set ls1
lisp_add_del_remote_mapping add vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2
lisp_add_del_adjacency add vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_add_del_address sw_if_index 8 6:6:1::3/64
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_flags sw_if_index 8 admin-up link-up
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_dump
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 6.0.3.2/24
sw_interface_add_del_address sw_if_index 1 6:0:2::1/64
ip_neighbor_add_del sw_if_index 1 dst 6:0:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set ls1
lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6:0:2::0/64 locator-set ls1
lisp_add_del_remote_mapping add vni 0 eid 6:0:1::0/64 seid 6:0:2::0/64 rloc 6.0.3.1
lisp_add_del_adjacency add vni 0 reid 6:0:1::0/64 leid 6:0:2::0/64
exec show trace

ip6

eth2p-ethip6ipsectptlispgpe-ip4base-eth-2vhost-1vm-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISPGPE-IPSec-IPv4-ICMP, Eth-IPv6-IPSec-LISPGPE-IPv4-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Test cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 6.0.1.1/24
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:5b:85
ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2
lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_add_del_address sw_if_index 8 6.6.1.3/24
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_flags sw_if_index 8 admin-up link-up
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_dump
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e486a736749394f4150623937545430 integ-alg sha1-96 integ-key 524c3358376248414163465468716a4953415871
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e486a736749394f4150623937545430 integ-alg sha1-96 integ-key 524c3358376248414163465468716a4953415871
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 6.0.2.1/24
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1
lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e486a736749394f4150623937545430 integ-alg sha1-96 integ-key 524c3358376248414163465468716a4953415871
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e486a736749394f4150623937545430 integ-alg sha1-96 integ-key 524c3358376248414163465468716a4953415871
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1
exec show trace
tc02: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int.
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 6.0.1.1/24
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:5b:85
ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:60:5c:6d
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2
lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_add_del_address sw_if_index 8 6.6.1.3/24
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_flags sw_if_index 8 admin-up link-up
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_dump
sw_interface_dump
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 454f436f4e65554777687538614f6756 integ-alg sha1-96 integ-key 624b36544576307530336a656b70744374647535
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 454f436f4e65554777687538614f6756 integ-alg sha1-96 integ-key 624b36544576307530336a656b70744374647535
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 6.0.2.1/24
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1
lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24
sw_interface_dump
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 454f436f4e65554777687538614f6756 integ-alg sha1-96 integ-key 624b36544576307530336a656b70744374647535
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 454f436f4e65554777687538614f6756 integ-alg sha1-96 integ-key 624b36544576307530336a656b70744374647535
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1
exec show trace

eth2p-ethip6ipsectptlispgpe-ip6base-eth-2vhost-1vm-func

IPv6 - ip6-ipsec-lispgpe-ip6 - main fib, vrf (gpe_vni-to-vrf), phy2lisp, virt2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6,
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int.
 DUT1:  
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:5b:85
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_add_del_address sw_if_index 6 2001:cdba:1::9/64
sw_interface_set_flags sw_if_index 6 admin-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_ip6nd_ra_config sw_if_index 6 surpress
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_dump
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2
lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6e6566553456445a616b765765366566 integ-alg sha1-96 integ-key 6a78737643636264447866396233623844343639
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6e6566553456445a616b765765366566 integ-alg sha1-96 integ-key 6a78737643636264447866396233623844343639
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1
lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6e6566553456445a616b765765366566 integ-alg sha1-96 integ-key 6a78737643636264447866396233623844343639
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6e6566553456445a616b765765366566 integ-alg sha1-96 integ-key 6a78737643636264447866396233623844343639
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 3 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1
exec show trace
tc02: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int.
 DUT1:  
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:5b:85
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_add_del_address sw_if_index 6 2001:cdba:1::9/64
sw_interface_set_flags sw_if_index 6 admin-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_ip6nd_ra_config sw_if_index 6 surpress
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_dump
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2
lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64
sw_interface_dump
exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 7744614163425351534e756276734c45 integ-alg sha1-96 integ-key 70767448496139533130586378725877546c6969
exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 7744614163425351534e756276734c45 integ-alg sha1-96 integ-key 70767448496139533130586378725877546c6969
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 7 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1
lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64
sw_interface_dump
exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 7744614163425351534e756276734c45 integ-alg sha1-96 integ-key 70767448496139533130586378725877546c6969
exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 7744614163425351534e756276734c45 integ-alg sha1-96 integ-key 70767448496139533130586378725877546c6969
ipsec_spd_add_del spd_id 1
ipsec_interface_add_del_spd sw_if_index 5 spd_id 1
exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1
exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1
exec show trace

eth2p-ethip6lispgpe-ip6base-eth-2vhost-1vm-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces
 DUT1:  
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:5b:85
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2
lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
ip_table_add_del table 0 ipv6
sw_interface_set_table sw_if_index 8 vrf 0 ipv6
sw_interface_add_del_address sw_if_index 8 2001:cdba:6::9/64
sw_interface_set_flags sw_if_index 8 admin-up
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_flags sw_if_index 8 admin-up link-up
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_dump
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 0 vrf 0
lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1
lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64
exec show trace

eth2p-ethip6lispgpe-ip6basevrf-eth-2vhost-1vm-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces and vrf is enabled
 DUT1:  
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1 ipv6
sw_interface_set_table sw_if_index 1 vrf 1 ipv6
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:60:5c:6d
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:5b:85
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 2001:cdba:1::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2
lisp_add_del_adjacency add vni 1 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
ip_table_add_del table 1 ipv6
sw_interface_set_table sw_if_index 9 vrf 1 ipv6
sw_interface_add_del_address sw_if_index 9 2001:cdba:6::9/64
sw_interface_set_flags sw_if_index 9 admin-up
sw_interface_set_flags sw_if_index 8 admin-up link-up
sw_interface_set_flags sw_if_index 9 admin-up link-up
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_flags sw_if_index 8 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_dump
exec show trace

DUT2:
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
ip_table_add_del table 1 ipv6
sw_interface_set_table sw_if_index 1 vrf 1 ipv6
sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64
sw_interface_set_flags sw_if_index 3 admin-up
sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64
sw_interface_set_flags sw_if_index 1 admin-up
ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:f4:17:ae
ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:14:eb:c7
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
lisp_enable_disable enable
lisp_gpe_enable_disable enable
lisp_add_del_locator_set locator-set tst_locator
lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1
lisp_eid_table_add_del_map vni 1 vrf 1
lisp_add_del_local_eid vni 1 eid 2001:cdba:2::0/64 locator-set tst_locator
lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1
lisp_add_del_adjacency add vni 1 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64
exec show trace

l2bd

eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm-func

L2 bridge domain with VLAN tag over VM test cases

  • [Top] Network Topologies: TG=DUT 2-node circular topology with double links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG=DUT and on DUT=VM.
  • [Cfg] DUT configuration: DUT is configured with two bridge domains (L2BD) with MAC learning enabled; each one with added VLAN sub-interface towards TG and vhost-user interface to local VM. Configure linux bridge on VM to pass traffic between both vhost-user interfaces.
  • [Ver] TG verification: Make TG send ICMPv4/ICMPv6 Echo Req between two of its interfaces to be switched by DUT via VM; verify packets are switched between these TG interfaces; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr, MAC addresses and VLAN tag.
  • [Ref] Applicable standard specifications: IEEE 802.1q.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm - ipv4
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 2 admin-up link-up
create_vlan_subif sw_if_index 2 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 6 admin-up link-up
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_flags sw_if_index 8 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2)
sw_interface_set_flags sw_if_index 8 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=2)
exec show trace

DUT2:
exec show trace
tc01: eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm - ipv6
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_set_flags sw_if_index 2 admin-up link-up
create_vlan_subif sw_if_index 2 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
create_vlan_subif sw_if_index 1 vlan 110
sw_interface_dump
sw_interface_dump
exec show interfaces
sw_interface_set_flags sw_if_index 6 admin-up link-up
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_flags sw_if_index 8 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2)
sw_interface_set_flags sw_if_index 8 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=2)
exec show trace

DUT2:
exec show trace

eth2p-eth-l2bdbasemaclrn-eth-2vhost-1vm-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 is configured with two L2 bridge-domains (L2BD) switching combined with MAC learning enabled.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with two l2bds (mac learn) switches icmpv4 between tg and vm links
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2)
exec show trace

DUT2:
exec show trace
tc02: dut with two l2bds (mac learn) switches icmpv6 between tg and vm links
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2)
exec show trace

DUT2:
exec show trace

eth2p-eth-l2bdbasemacstc-eth-2vhost-1vm-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 is configured with two L2 bridge-domains (L2BD) switching combined with static MACs.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with two l2bds (static macs) switches icmpv4 between tg and vm links
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>u/k,sw_if_index=2,bvi_mac=0)
l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>`m,sw_if_index=5,bvi_mac=0)
bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2)
l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>`m,sw_if_index=1,bvi_mac=0)
l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>u/k,sw_if_index=6,bvi_mac=0)
exec show trace

DUT2:
exec show trace
tc02: dut with two l2bds (static macs) switches icmpv6 between tg and vm links
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1)
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1)
l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>u/k,sw_if_index=2,bvi_mac=0)
l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>`m,sw_if_index=5,bvi_mac=0)
bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2)
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2)
l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>`m,sw_if_index=1,bvi_mac=0)
l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>u/k,sw_if_index=6,bvi_mac=0)
exec show trace

DUT2:
exec show trace

eth2p-ethip4-l2bdbase-vhost-client-reconnect-2vm-func

Vhost-User Interface Traffic Tests

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-VXLAN-ETH-IP on TG-DUT link. ETH-IP on VirtualEthernet-VM interface.
  • [Cfg] DUT configuration: On DUT is running 2 VM with 2 vhost-user interface on each VM. DUT is configured with VXLAN and vhost-user interfaces in bridge-domain (L2BD).
  • [Cfg] VM configuration: VM has both vhost-user interfaces added into Linux Bridge.
  • [Ver] TG verification: VXLAN packet is send to DUT where is decapsulated and send bridged to vhost-user inteface. VM forwards frame to its second interface and VPP encapsulates it to another VXLAN tunnel. Packets are sent and received by TG on link to DUT.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: qemu reconnects to vpps vhost-user when qemu is killed and restarted
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 192.168.0.2/24
ip_neighbor_add_del sw_if_index 2 dst 192.168.0.1 mac fa:16:3e:75:2f:6b
vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 101
sw_interface_dump
vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 102
sw_interface_dump
vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 103
sw_interface_dump
vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 104
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_flags sw_if_index 8 admin-up link-up
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock3
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock4
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 9 admin-up link-up
sw_interface_set_flags sw_if_index 10 admin-up link-up
sw_interface_set_flags sw_if_index 11 admin-up link-up
sw_interface_set_flags sw_if_index 12 admin-up link-up
bridge_domain_add_del(bd_id=101,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=101)
sw_interface_set_l2_bridge(rx_sw_if_index=9,enable=1,shg=0,port_type=0,bd_id=101)
bridge_domain_add_del(bd_id=102,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=102)
sw_interface_set_l2_bridge(rx_sw_if_index=10,enable=1,shg=0,port_type=0,bd_id=102)
bridge_domain_add_del(bd_id=103,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=103)
sw_interface_set_l2_bridge(rx_sw_if_index=11,enable=1,shg=0,port_type=0,bd_id=103)
bridge_domain_add_del(bd_id=104,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=104)
sw_interface_set_l2_bridge(rx_sw_if_index=12,enable=1,shg=0,port_type=0,bd_id=104)
exec show trace

DUT2:
exec show trace
tc02: vpp reconnects to qemu vhost-user when restart vpp and reconfigured
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 192.168.0.2/24
ip_neighbor_add_del sw_if_index 2 dst 192.168.0.1 mac fa:16:3e:75:2f:6b
vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 101
sw_interface_dump
vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 102
sw_interface_dump
vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 103
sw_interface_dump
vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 104
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_flags sw_if_index 8 admin-up link-up
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock3
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock4
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 9 admin-up link-up
sw_interface_set_flags sw_if_index 10 admin-up link-up
sw_interface_set_flags sw_if_index 11 admin-up link-up
sw_interface_set_flags sw_if_index 12 admin-up link-up
bridge_domain_add_del(bd_id=101,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=101)
sw_interface_set_l2_bridge(rx_sw_if_index=9,enable=1,shg=0,port_type=0,bd_id=101)
bridge_domain_add_del(bd_id=102,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=102)
sw_interface_set_l2_bridge(rx_sw_if_index=10,enable=1,shg=0,port_type=0,bd_id=102)
bridge_domain_add_del(bd_id=103,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=103)
sw_interface_set_l2_bridge(rx_sw_if_index=11,enable=1,shg=0,port_type=0,bd_id=103)
bridge_domain_add_del(bd_id=104,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=104)
sw_interface_set_l2_bridge(rx_sw_if_index=12,enable=1,shg=0,port_type=0,bd_id=104)
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 192.168.0.2/24
ip_neighbor_add_del sw_if_index 2 dst 192.168.0.1 mac fa:16:3e:75:2f:6b
vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 101
sw_interface_dump
vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 102
sw_interface_dump
vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 103
sw_interface_dump
vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 104
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_flags sw_if_index 7 admin-up link-up
sw_interface_set_flags sw_if_index 8 admin-up link-up
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock3
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock4
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 9 admin-up link-up
sw_interface_set_flags sw_if_index 10 admin-up link-up
sw_interface_set_flags sw_if_index 11 admin-up link-up
sw_interface_set_flags sw_if_index 12 admin-up link-up
bridge_domain_add_del(bd_id=101,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=101)
sw_interface_set_l2_bridge(rx_sw_if_index=9,enable=1,shg=0,port_type=0,bd_id=101)
bridge_domain_add_del(bd_id=102,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=102)
sw_interface_set_l2_bridge(rx_sw_if_index=10,enable=1,shg=0,port_type=0,bd_id=102)
bridge_domain_add_del(bd_id=103,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=103)
sw_interface_set_l2_bridge(rx_sw_if_index=11,enable=1,shg=0,port_type=0,bd_id=103)
bridge_domain_add_del(bd_id=104,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=104)
sw_interface_set_l2_bridge(rx_sw_if_index=12,enable=1,shg=0,port_type=0,bd_id=104)
exec show trace

DUT2:
exec show trace

eth2p-ethip4vxlan-l2bdbasemaclrn-eth-2vhost-1vm-func

L2BD with VM combined with VXLAN test cases - IPv4

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01:dut1 and dut2 with two l2bds and vxlanoipv4 tunnel switch icmpv4 between tg links and vm links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_add_del_address sw_if_index 3 172.16.0.1/24
vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23
sw_interface_dump
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10)
bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20)
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_add_del_address sw_if_index 3 172.16.0.2/24
vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23
sw_interface_dump
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10)
bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20)
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20)
exec show trace

eth2p-ethip6vxlan-l2bdbasemaclrn-eth-2vhost-1vm-func

L2BD with VM combined with VXLAN test cases - IPv6

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01:dut1 and dut2 with two l2bds and vxlanoipv6 tunnel switch icmpv6 between tg links and vm links
 DUT1:  
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
sw_interface_ip6nd_ra_config sw_if_index 6 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23
sw_interface_dump
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10)
bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20)
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20)
exec show trace

DUT2:
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 3 admin-up link-up
sw_interface_dump
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64
sw_interface_ip6nd_ra_config sw_if_index 6 surpress
sw_interface_ip6nd_ra_config sw_if_index 5 surpress
sw_interface_ip6nd_ra_config sw_if_index 4 surpress
sw_interface_ip6nd_ra_config sw_if_index 2 surpress
sw_interface_ip6nd_ra_config sw_if_index 3 surpress
sw_interface_ip6nd_ra_config sw_if_index 1 surpress
vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23
sw_interface_dump
bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10)
sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10)
bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1)
sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20)
sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20)
exec show trace

l2xc

eth2p-eth-l2xcbase-eth-2vhost-1vm-func

L2 cross-connect test cases

  • [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with two l2xcs switches icmpv4 between tg and local vm links
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=2,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=2)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=6)
sw_interface_set_l2_xconnect(rx_sw_if_index=6,enable=1,tx_sw_if_index=1)
exec show trace

DUT2:
exec show trace
tc02: dut with two l2xcs switches icmpv6 between tg and local vm links
 DUT1:  
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
create_vhost_user_if socket /tmp/sock1
sw_interface_dump
sw_interface_dump
create_vhost_user_if socket /tmp/sock2
sw_interface_dump
sw_interface_dump
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 5 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=2,enable=1,tx_sw_if_index=5)
sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=2)
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_set_flags sw_if_index 6 admin-up link-up
sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=6)
sw_interface_set_l2_xconnect(rx_sw_if_index=6,enable=1,tx_sw_if_index=1)
exec show trace

DUT2:
exec show trace