crypto¶

ethip4¶

2n1l-10ge2p1x710-ethip4ipsec11tnlsw-ip4base-int-aes128cbc-hmac512sha-scapy¶

IPv4 IPsec tunnel mode test suite. [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes. [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode. [Ver] TG verification: ETH-IP4 packet is sent from TG to DUT1. Packet is received on TG from DUT1. [Ref] Applicable standard specifications: RFC4303.

 Test Name

 VPP API Test Commands History - Commands Used Per Test Case

 64b-0c-ethip4ipsec11tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-scapy

 DUT1:  
 cli_inband(cmd=’show logging’) 
 show_version() 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 cli_inband(cmd=’trace add dpdk-input 50’) 
 cli_inband(cmd=’trace add vhost-user-input 50’) 
 cli_inband(cmd=’trace add memif-input 50’) 
 cli_inband(cmd=’trace add avf-input 50’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8nx01’}}}) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘ba:dc:0f:fe:00:03’, ‘ip_address’: ‘192.168.10.2’}) 
 ip_route_add_del(is_add=True,is_multipath=True,route={‘table_id’: 0, ‘prefix’: {‘len’: 8, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’nx00x00x00’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 0, ‘nh’: {‘address’: {‘ip4’: b’xc0xa8nx02’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) 
 exec create loopback interface 
 exec set interface state loop0 up 
 exec set interface ip address VirtualFunctionEthernet3b/2/4 200.0.0.1/24 
 exec set ip neighbor VirtualFunctionEthernet3b/2/4 200.0.0.2 ba:dc:0f:fe:00:04 static 
 exec set interface ip address loop0 100.0.0.1/32 
 exec create ipip tunnel src 100.0.0.1 dst 200.0.0.2 p2p 
 exec ipsec sa add 0 spi 100000 crypto-alg aes-cbc-128 crypto-key 6a6f4f5941514e476371497a78434942 integ-alg sha-512-256 integ-key 4a657a4e6d6a756c52566e61766d784a78585a72556d665a426154666d72504f7665564c5a7376666f555a515164575242527043626e4d5374475a524d48556b esp 
 exec ipsec sa add 100000 spi 200000 crypto-alg aes-cbc-128 crypto-key 6a6f4f5941514e476371497a78434942 integ-alg sha-512-256 integ-key 4a657a4e6d6a756c52566e61766d784a78585a72556d665a426154666d72504f7665564c5a7376666f555a515164575242527043626e4d5374475a524d48556b esp 
 exec ipsec tunnel protect ipip0 sa-out 0 sa-in 100000 add 
 exec set interface ip address loop0 100.0.1.1/32 
 exec create ipip tunnel src 100.0.1.1 dst 200.0.0.2 p2p 
 exec ipsec sa add 1 spi 100001 crypto-alg aes-cbc-128 crypto-key 466e6c63555979524765765774704668 integ-alg sha-512-256 integ-key 635849497a694e6e526e6255564e6e6b69556853514d7355584c6e6e4b6c424c4649536e4e796d76757243724274566964687859436a6d5a73537376786e6274 esp 
 exec ipsec sa add 100001 spi 200001 crypto-alg aes-cbc-128 crypto-key 466e6c63555979524765765774704668 integ-alg sha-512-256 integ-key 635849497a694e6e526e6255564e6e6b69556853514d7355584c6e6e4b6c424c4649536e4e796d76757243724274566964687859436a6d5a73537376786e6274 esp 
 exec ipsec tunnel protect ipip1 sa-out 1 sa-in 100001 add 
 exec set interface ip address loop0 100.0.2.1/32 
 exec create ipip tunnel src 100.0.2.1 dst 200.0.0.2 p2p 
 exec ipsec sa add 2 spi 100002 crypto-alg aes-cbc-128 crypto-key 72424e76624c706d646258536c715877 integ-alg sha-512-256 integ-key 6e76624250516a736e4451624875647a7477465675535944484851546e744b75546e516d695866424a5466546c6f74485357757857574b6b706558554b666452 esp 
 exec ipsec sa add 100002 spi 200002 crypto-alg aes-cbc-128 crypto-key 72424e76624c706d646258536c715877 integ-alg sha-512-256 integ-key 6e76624250516a736e4451624875647a7477465675535944484851546e744b75546e516d695866424a5466546c6f74485357757857574b6b706558554b666452 esp 
 exec ipsec tunnel protect ipip2 sa-out 2 sa-in 100002 add 
 exec set interface ip address loop0 100.0.3.1/32 
 exec create ipip tunnel src 100.0.3.1 dst 200.0.0.2 p2p 
 exec ipsec sa add 3 spi 100003 crypto-alg aes-cbc-128 crypto-key 426a6e676772484d6578744a79685043 integ-alg sha-512-256 integ-key 584c7467636677765a5a7a716f57534d665061524577556b55526f7741456447766e69667a435569546a59626a77486e6f6b487775624a6269626b73576e4176 esp 
 exec ipsec sa add 100003 spi 200003 crypto-alg aes-cbc-128 crypto-key 426a6e676772484d6578744a79685043 integ-alg sha-512-256 integ-key 584c7467636677765a5a7a716f57534d665061524577556b55526f7741456447766e69667a435569546a59626a77486e6f6b487775624a6269626b73576e4176 esp 
 exec ipsec tunnel protect ipip3 sa-out 3 sa-in 100003 add 
 exec set interface ip address loop0 100.0.4.1/32 
 exec create ipip tunnel src 100.0.4.1 dst 200.0.0.2 p2p 
 exec ipsec sa add 4 spi 100004 crypto-alg aes-cbc-128 crypto-key 4d4848717a4a464a746a4e614c476a69 integ-alg sha-512-256 integ-key 5846625a4a6b766c63476163794a5351476262775072516479574663794a4a6a65436f67426c59716d75746e4c76684f7541664479647156484a634a44686c6c esp 
 exec ipsec sa add 100004 spi 200004 crypto-alg aes-cbc-128 crypto-key 4d4848717a4a464a746a4e614c476a69 integ-alg sha-512-256 integ-key 5846625a4a6b766c63476163794a5351476262775072516479574663794a4a6a65436f67426c59716d75746e4c76684f7541664479647156484a634a44686c6c esp 
 exec ipsec tunnel protect ipip4 sa-out 4 sa-in 100004 add 
 exec set interface ip address loop0 100.0.5.1/32 
 exec create ipip tunnel src 100.0.5.1 dst 200.0.0.2 p2p 
 exec ipsec sa add 5 spi 100005 crypto-alg aes-cbc-128 crypto-key 647153424175446b41446a696672565a integ-alg sha-512-256 integ-key 4273756b5252526b625a6b467267544c6f6c56707469525468706f46417271526e4f4165785453714b544b584d7a43786e61624a41434f514342677078526c48 esp 
 exec ipsec sa add 100005 spi 200005 crypto-alg aes-cbc-128 crypto-key 647153424175446b41446a696672565a integ-alg sha-512-256 integ-key 4273756b5252526b625a6b467267544c6f6c56707469525468706f46417271526e4f4165785453714b544b584d7a43786e61624a41434f514342677078526c48 esp 
 exec ipsec tunnel protect ipip5 sa-out 5 sa-in 100005 add 
 exec set interface ip address loop0 100.0.6.1/32 
 exec create ipip tunnel src 100.0.6.1 dst 200.0.0.2 p2p 
 exec ipsec sa add 6 spi 100006 crypto-alg aes-cbc-128 crypto-key 4343734e7171636e5344576771787072 integ-alg sha-512-256 integ-key 5178644d4e41547a655266507755534e626870476e764e52744d534e4a4f6c63674547464259794851517a774c49535551436f77504e77597845625962675348 esp 
 exec ipsec sa add 100006 spi 200006 crypto-alg aes-cbc-128 crypto-key 4343734e7171636e5344576771787072 integ-alg sha-512-256 integ-key 5178644d4e41547a655266507755534e626870476e764e52744d534e4a4f6c63674547464259794851517a774c49535551436f77504e77597845625962675348 esp 
 exec ipsec tunnel protect ipip6 sa-out 6 sa-in 100006 add 
 exec set interface ip address loop0 100.0.7.1/32 
 exec create ipip tunnel src 100.0.7.1 dst 200.0.0.2 p2p 
 exec ipsec sa add 7 spi 100007 crypto-alg aes-cbc-128 crypto-key 4c55624c65507864444a4d79766a6e53 integ-alg sha-512-256 integ-key 44526245626a70614652654d61695456646f6f6f714d4548557844666e5748575046464c784747506572447577484c4450686c564e56535a426753445a447679 esp 
 exec ipsec sa add 100007 spi 200007 crypto-alg aes-cbc-128 crypto-key 4c55624c65507864444a4d79766a6e53 integ-alg sha-512-256 integ-key 44526245626a70614652654d61695456646f6f6f714d4548557844666e5748575046464c784747506572447577484c4450686c564e56535a426753445a447679 esp 
 exec ipsec tunnel protect ipip7 sa-out 7 sa-in 100007 add 
 exec set interface ip address loop0 100.0.8.1/32 
 exec create ipip tunnel src 100.0.8.1 dst 200.0.0.2 p2p 
 exec ipsec sa add 8 spi 100008 crypto-alg aes-cbc-128 crypto-key 6e72436e4e736459445478566c657556 integ-alg sha-512-256 integ-key 576f494c675a585142574e677774706476477878635162575946764641474f585856504c6f536e545279565074514e6b456c6655447761796a486c636a714771 esp 
 exec ipsec sa add 100008 spi 200008 crypto-alg aes-cbc-128 crypto-key 6e72436e4e736459445478566c657556 integ-alg sha-512-256 integ-key 576f494c675a585142574e677774706476477878635162575946764641474f585856504c6f536e545279565074514e6b456c6655447761796a486c636a714771 esp 
 exec ipsec tunnel protect ipip8 sa-out 8 sa-in 100008 add 
 exec set interface ip address loop0 100.0.9.1/32 
 exec create ipip tunnel src 100.0.9.1 dst 200.0.0.2 p2p 
 exec ipsec sa add 9 spi 100009 crypto-alg aes-cbc-128 crypto-key 556e70756e76424975414a4846455367 integ-alg sha-512-256 integ-key 554f63774e4f5263726b43616f65724155724f41647a4472456e634f534e76784e456873524e6a67465a6d75687a5a4572484a616c4d63595a4d726741654176 esp 
 exec ipsec sa add 100009 spi 200009 crypto-alg aes-cbc-128 crypto-key 556e70756e76424975414a4846455367 integ-alg sha-512-256 integ-key 554f63774e4f5263726b43616f65724155724f41647a4472456e634f534e76784e456873524e6a67465a6d75687a5a4572484a616c4d63595a4d726741654176 esp 
 exec ipsec tunnel protect ipip9 sa-out 9 sa-in 100009 add 
 exec set interface ip address loop0 100.0.10.1/32 
 exec create ipip tunnel src 100.0.10.1 dst 200.0.0.2 p2p 
 exec ipsec sa add 10 spi 100010 crypto-alg aes-cbc-128 crypto-key 6e465171785753527348715376694d62 integ-alg sha-512-256 integ-key 644957416f786250465442715a576f4a4c4a566f504f76625546776757646847746b66446e65466d51777741554746596f655a4d506b6e746b6564794756564e esp 
 exec ipsec sa add 100010 spi 200010 crypto-alg aes-cbc-128 crypto-key 6e465171785753527348715376694d62 integ-alg sha-512-256 integ-key 644957416f786250465442715a576f4a4c4a566f504f76625546776757646847746b66446e65466d51777741554746596f655a4d506b6e746b6564794756564e esp 
 exec ipsec tunnel protect ipip10 sa-out 10 sa-in 100010 add 
 exec set interface unnumbered ipip0 use VirtualFunctionEthernet3b/2/4 
 exec set interface state ipip0 up 
 exec ip route add 20.0.0.0/32 via ipip0 
 exec set interface unnumbered ipip1 use VirtualFunctionEthernet3b/2/4 
 exec set interface state ipip1 up 
 exec ip route add 20.0.0.1/32 via ipip1 
 exec set interface unnumbered ipip2 use VirtualFunctionEthernet3b/2/4 
 exec set interface state ipip2 up 
 exec ip route add 20.0.0.2/32 via ipip2 
 exec set interface unnumbered ipip3 use VirtualFunctionEthernet3b/2/4 
 exec set interface state ipip3 up 
 exec ip route add 20.0.0.3/32 via ipip3 
 exec set interface unnumbered ipip4 use VirtualFunctionEthernet3b/2/4 
 exec set interface state ipip4 up 
 exec ip route add 20.0.0.4/32 via ipip4 
 exec set interface unnumbered ipip5 use VirtualFunctionEthernet3b/2/4 
 exec set interface state ipip5 up 
 exec ip route add 20.0.0.5/32 via ipip5 
 exec set interface unnumbered ipip6 use VirtualFunctionEthernet3b/2/4 
 exec set interface state ipip6 up 
 exec ip route add 20.0.0.6/32 via ipip6 
 exec set interface unnumbered ipip7 use VirtualFunctionEthernet3b/2/4 
 exec set interface state ipip7 up 
 exec ip route add 20.0.0.7/32 via ipip7 
 exec set interface unnumbered ipip8 use VirtualFunctionEthernet3b/2/4 
 exec set interface state ipip8 up 
 exec ip route add 20.0.0.8/32 via ipip8 
 exec set interface unnumbered ipip9 use VirtualFunctionEthernet3b/2/4 
 exec set interface state ipip9 up 
 exec ip route add 20.0.0.9/32 via ipip9 
 exec set interface unnumbered ipip10 use VirtualFunctionEthernet3b/2/4 
 exec set interface state ipip10 up 
 exec ip route add 20.0.0.10/32 via ipip10

2n1l-10ge2p1x710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-scapy¶

IPv4 IPsec tunnel mode test suite. [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes. [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode. [Ver] TG verification: ETH-IP4 packet is sent from TG to DUT1. Packet is received on TG from DUT1. [Ref] Applicable standard specifications: RFC4303.

 Test Name

 VPP API Test Commands History - Commands Used Per Test Case

 64b-0c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-scapy

 DUT1:  
 cli_inband(cmd=’show logging’) 
 show_version() 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 cli_inband(cmd=’trace add dpdk-input 50’) 
 cli_inband(cmd=’trace add vhost-user-input 50’) 
 cli_inband(cmd=’trace add memif-input 50’) 
 cli_inband(cmd=’trace add avf-input 50’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8nx01’}}}) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘ba:dc:0f:fe:00:03’, ‘ip_address’: ‘192.168.10.2’}) 
 ip_route_add_del(is_add=True,is_multipath=True,route={‘table_id’: 0, ‘prefix’: {‘len’: 8, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’nx00x00x00’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 0, ‘nh’: {‘address’: {‘ip4’: b’xc0xa8nx02’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) 
 create_loopback_instance(mac_address=0,is_specified=False,user_instance=0) 
 sw_interface_set_flags(sw_if_index=3,flags=1) 
 sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc8x00x00x01’}}}) 
 ip_neighbor_add_del(is_add=1,neighbor={‘sw_if_index’: 2, ‘flags’: 1, ‘mac_address’: ‘ba:dc:0f:fe:00:04’, ‘ip_address’: ‘200.0.0.2’}) 
 sw_interface_add_del_address(sw_if_index=3,is_add=True,del_all=False,prefix={‘len’: 32, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’dx00x00x01’}}}) 
 ipip_add_tunnel(tunnel={‘instance’: 4294967295, ‘src’: {‘af’: 0, ‘un’: {‘ip4’: b’dx00x00x01’}}, ‘dst’: {‘af’: 0, ‘un’: {‘ip4’: b’xc8x00x00x02’}}, ‘table_id’: 0, ‘flags’: 0, ‘mode’: 0, ‘dscp’: 0}) 
 ipsec_sad_entry_add_del_v3(is_add=True,entry={‘sad_id’: 0, ‘spi’: 100000, ‘protocol’: 50, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’ScJzFxZkKwWbmdKn’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’TCejYOqOOEUELNwAVKjfNcKdeczrTScFfNyCCcYqCdPjOXtGkYWtbZVzkVEMDFfY’}, ‘flags’: 0, ‘tunnel’: {‘src’: 0, ‘dst’: 0, ‘table_id’: 0, ‘encap_decap_flags’: 0, ‘dscp’: 0}, ‘salt’: 0, ‘udp_src_port’: 65535, ‘udp_dst_port’: 65535}) 
 ipsec_sad_entry_add_del_v3(is_add=True,entry={‘sad_id’: 100000, ‘spi’: 200000, ‘protocol’: 50, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’ScJzFxZkKwWbmdKn’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’TCejYOqOOEUELNwAVKjfNcKdeczrTScFfNyCCcYqCdPjOXtGkYWtbZVzkVEMDFfY’}, ‘flags’: 64, ‘tunnel’: {‘src’: 0, ‘dst’: 0, ‘table_id’: 0, ‘encap_decap_flags’: 0, ‘dscp’: 0}, ‘salt’: 0, ‘udp_src_port’: 65535, ‘udp_dst_port’: 65535}) 
 ipsec_tunnel_protect_update(tunnel={‘sw_if_index’: 4, ‘nh’: {‘address’: 0, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘sa_out’: 0, ‘n_sa_in’: 1, ‘sa_in’: [100000]}) 
 sw_interface_set_unnumbered(is_add=True,sw_if_index=2,unnumbered_sw_if_index=4) 
 sw_interface_set_flags(sw_if_index=4,flags=1) 
 ip_route_add_del(is_add=1,is_multipath=0,route={‘table_id’: 0, ‘prefix’: {‘len’: 32, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’x14x00x00x00’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 4, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 0, ‘nh’: {‘address’: 0, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]})

2n1l-10ge2p1x710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-scapy¶

IPv4 IPsec tunnel mode test suite. [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes. [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode. [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1. [Ref] Applicable standard specifications: RFC4303.

 Test Name

 VPP API Test Commands History - Commands Used Per Test Case

 64b-0c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-scapy

 DUT1:  
 cli_inband(cmd=’show logging’) 
 show_version() 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 cli_inband(cmd=’trace add dpdk-input 50’) 
 cli_inband(cmd=’trace add vhost-user-input 50’) 
 cli_inband(cmd=’trace add memif-input 50’) 
 cli_inband(cmd=’trace add avf-input 50’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}}) 
 sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x03’}}}) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘ba:dc:0f:fe:00:03’, ‘ip_address’: ‘192.168.100.2’}) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘ba:dc:0f:fe:00:04’, ‘ip_address’: ‘192.168.4.4’}) 
 ip_route_add_del(is_add=True,is_multipath=True,route={‘table_id’: 0, ‘prefix’: {‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x00’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 0, ‘nh’: {‘address’: {‘ip4’: b’xc0xa8dx02’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) 
 ipsec_sad_entry_add_del_v3(is_add=True,entry={‘sad_id’: 10, ‘spi’: 1001, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’Sw97OxXGyzUFBpYo’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’Xp38LmlUgFOS8L5ZpFju4Iff9oNEVU2sNnJduMh7uki7rfE8053l8fow9RHiuWAk’}, ‘flags’: 4, ‘tunnel’: {‘src’: ‘192.168.100.3’, ‘dst’: ‘192.168.100.2’, ‘table_id’: 0, ‘encap_decap_flags’: 0, ‘dscp’: 0}, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) 
 ipsec_sad_entry_add_del_v3(is_add=True,entry={‘sad_id’: 20, ‘spi’: 1000, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’Sw97OxXGyzUFBpYo’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’Xp38LmlUgFOS8L5ZpFju4Iff9oNEVU2sNnJduMh7uki7rfE8053l8fow9RHiuWAk’}, ‘flags’: 4, ‘tunnel’: {‘src’: ‘192.168.100.2’, ‘dst’: ‘192.168.100.3’, ‘table_id’: 0, ‘encap_decap_flags’: 0, ‘dscp’: 0}, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) 
 ipsec_spd_add_del(is_add=True,spd_id=1) 
 ipsec_interface_add_del_spd(is_add=True,sw_if_index=1,spd_id=1) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: False, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: True, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: False, ‘sa_id’: 20, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: True, ‘sa_id’: 10, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535})

2n1l-10ge2p1x710-ethip4ipsec1tptsw-ip4base-policy-aes128cbc-hmac512sha-scapy¶

IPv4 IPsec transport mode test suite. [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes. [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode. [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1. [Ref] Applicable standard specifications: RFC4303.

 Test Name

 VPP API Test Commands History - Commands Used Per Test Case

 64b-0c-ethip4ipsec1tptsw-ip4base- 
 policy-aes128cbc-hmac512sha-scapy

 DUT1:  
 cli_inband(cmd=’show logging’) 
 show_version() 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 cli_inband(cmd=’trace add dpdk-input 50’) 
 cli_inband(cmd=’trace add vhost-user-input 50’) 
 cli_inband(cmd=’trace add memif-input 50’) 
 cli_inband(cmd=’trace add avf-input 50’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}}) 
 sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x03’}}}) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘ba:dc:0f:fe:00:03’, ‘ip_address’: ‘192.168.100.2’}) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘ba:dc:0f:fe:00:04’, ‘ip_address’: ‘192.168.4.4’}) 
 ip_route_add_del(is_add=True,is_multipath=True,route={‘table_id’: 0, ‘prefix’: {‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x00’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 0, ‘nh’: {‘address’: {‘ip4’: b’xc0xa8dx02’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) 
 ipsec_sad_entry_add_del_v3(is_add=True,entry={‘sad_id’: 10, ‘spi’: 1001, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’Wu6J7fDFzNW248Q1’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’N2mSXjSUBvX6BSpKPLPHOJNU4GpGqeg32iJ2p4GN1ybvkJwiQdxBuMOZ0lGWwjZm’}, ‘flags’: 0, ‘tunnel’: {‘src’: ‘’, ‘dst’: ‘’, ‘table_id’: 0, ‘encap_decap_flags’: 0, ‘dscp’: 0}, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) 
 ipsec_sad_entry_add_del_v3(is_add=True,entry={‘sad_id’: 20, ‘spi’: 1000, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’Wu6J7fDFzNW248Q1’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’N2mSXjSUBvX6BSpKPLPHOJNU4GpGqeg32iJ2p4GN1ybvkJwiQdxBuMOZ0lGWwjZm’}, ‘flags’: 0, ‘tunnel’: {‘src’: ‘’, ‘dst’: ‘’, ‘table_id’: 0, ‘encap_decap_flags’: 0, ‘dscp’: 0}, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) 
 ipsec_spd_add_del(is_add=True,spd_id=1) 
 ipsec_interface_add_del_spd(is_add=True,sw_if_index=1,spd_id=1) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: False, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: True, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: False, ‘sa_id’: 20, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: True, ‘sa_id’: 10, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535})

ethip6¶

2n1l-10ge2p1x710-ethip6ipsec1tnlsw-ip6base-policy-aes128cbc-hmac512sha-scapy¶

IPv6 IPsec tunnel mode test suite. [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes. [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode. [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1. [Ref] Applicable standard specifications: RFC4303.

 Test Name

 VPP API Test Commands History - Commands Used Per Test Case

 78b-0c-ethip6ipsec1tnlsw-ip6base- 
 policy-aes128cbc-hmac512sha-scapy

 DUT1:  
 cli_inband(cmd=’show logging’) 
 show_version() 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 cli_inband(cmd=’trace add dpdk-input 50’) 
 cli_inband(cmd=’trace add vhost-user-input 50’) 
 cli_inband(cmd=’trace add memif-input 50’) 
 cli_inband(cmd=’trace add avf-input 50’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}}) 
 sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x03’}}}) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘ba:dc:0f:fe:00:03’, ‘ip_address’: ‘3ffe:5f::1’}) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘ba:dc:0f:fe:00:04’, ‘ip_address’: ‘3ffe:60::4’}) 
 ip_address_dump(sw_if_index=1,is_ipv6=True) 
 sw_interface_ip6nd_ra_config(sw_if_index=1,suppress=1) 
 ip_address_dump(sw_if_index=2,is_ipv6=True) 
 sw_interface_ip6nd_ra_config(sw_if_index=2,suppress=1) 
 ip_route_add_del(is_add=True,is_multipath=True,route={‘table_id’: 0, ‘prefix’: {‘len’: 128, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 1, ‘nh’: {‘address’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) 
 ipsec_sad_entry_add_del_v3(is_add=True,entry={‘sad_id’: 10, ‘spi’: 1001, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’0LmxeUwHvJFgFlWJ’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’EbfZ6Nma8wsRbKyh9Zu8qJWJh2AOe2KhCNnSaf35IKM7juFKxB5OA27a6yQhuW8s’}, ‘flags’: 12, ‘tunnel’: {‘src’: ‘3ffe:5f::2’, ‘dst’: ‘3ffe:5f::1’, ‘table_id’: 0, ‘encap_decap_flags’: 0, ‘dscp’: 0}, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) 
 ipsec_sad_entry_add_del_v3(is_add=True,entry={‘sad_id’: 20, ‘spi’: 1000, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’0LmxeUwHvJFgFlWJ’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’EbfZ6Nma8wsRbKyh9Zu8qJWJh2AOe2KhCNnSaf35IKM7juFKxB5OA27a6yQhuW8s’}, ‘flags’: 12, ‘tunnel’: {‘src’: ‘3ffe:5f::1’, ‘dst’: ‘3ffe:5f::2’, ‘table_id’: 0, ‘encap_decap_flags’: 0, ‘dscp’: 0}, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) 
 ipsec_spd_add_del(is_add=True,spd_id=1) 
 ipsec_interface_add_del_spd(is_add=True,sw_if_index=1,spd_id=1) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: False, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: True, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: False, ‘sa_id’: 20, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: True, ‘sa_id’: 10, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535})

2n1l-10ge2p1x710-ethip6ipsec1tptsw-ip6base-policy-aes128cbc-hmac512sha-scapy¶

IPv6 IPsec transport mode test suite. [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes. [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in transport mode. [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1. [Ref] Applicable standard specifications: RFC4303.

 Test Name

 VPP API Test Commands History - Commands Used Per Test Case

 78b-0c-ethip6ipsec1tptsw-ip6base- 
 policy-aes128cbc-hmac512sha-scapy

 DUT1:  
 cli_inband(cmd=’show logging’) 
 show_version() 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 cli_inband(cmd=’trace add dpdk-input 50’) 
 cli_inband(cmd=’trace add vhost-user-input 50’) 
 cli_inband(cmd=’trace add memif-input 50’) 
 cli_inband(cmd=’trace add avf-input 50’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}}) 
 sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x03’}}}) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘ba:dc:0f:fe:00:03’, ‘ip_address’: ‘3ffe:5f::1’}) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘ba:dc:0f:fe:00:04’, ‘ip_address’: ‘3ffe:60::4’}) 
 ip_address_dump(sw_if_index=1,is_ipv6=True) 
 sw_interface_ip6nd_ra_config(sw_if_index=1,suppress=1) 
 ip_address_dump(sw_if_index=2,is_ipv6=True) 
 sw_interface_ip6nd_ra_config(sw_if_index=2,suppress=1) 
 ip_route_add_del(is_add=True,is_multipath=True,route={‘table_id’: 0, ‘prefix’: {‘len’: 128, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 1, ‘nh’: {‘address’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) 
 ipsec_sad_entry_add_del_v3(is_add=True,entry={‘sad_id’: 10, ‘spi’: 1001, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’HQePOlOYqH2mcNi9’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’rA6vR16aTZBVPhCqPhexMNzxw4UAx8uOpPIVmbi4SEvGBUPWUr5J8Wszfm619CbL’}, ‘flags’: 0, ‘tunnel’: {‘src’: ‘’, ‘dst’: ‘’, ‘table_id’: 0, ‘encap_decap_flags’: 0, ‘dscp’: 0}, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) 
 ipsec_sad_entry_add_del_v3(is_add=True,entry={‘sad_id’: 20, ‘spi’: 1000, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’HQePOlOYqH2mcNi9’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’rA6vR16aTZBVPhCqPhexMNzxw4UAx8uOpPIVmbi4SEvGBUPWUr5J8Wszfm619CbL’}, ‘flags’: 0, ‘tunnel’: {‘src’: ‘’, ‘dst’: ‘’, ‘table_id’: 0, ‘encap_decap_flags’: 0, ‘dscp’: 0}, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) 
 ipsec_spd_add_del(is_add=True,spd_id=1) 
 ipsec_interface_add_del_spd(is_add=True,sw_if_index=1,spd_id=1) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: False, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: True, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: False, ‘sa_id’: 20, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) 
 ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: True, ‘sa_id’: 10, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535})