7.5.1. default

7.5.1.1. eth2p-ethip4ipsectnl-ip4base-func

IPv4 IPsec tunnel mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
• [Ref] Applicable standard specifications: RFC4303.

Name	Documentation	Status
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc02: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc03: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc04: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-256-128 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-256-128 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc06: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-256-128 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc07: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-384-192 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc08: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-384-192 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-384-192 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc10: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-512-256 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc11: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-512-256 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-512-256 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send an ESP packet encrypted by encryption key different from encryption key stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send an ESP packet authenticated by integrity key different from integrity key stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send an ESP packet authenticated by integrity key and encrypted by encryption key different from integrity and encryption keys stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. Then update SA keys - use new keys. [Ver] Send and receive ESP packet between TG and VPP node before and after SA keys update.	PASS
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. Then update SA keys - use new keys. [Ver] Send an ESP packet encrypted by encryption key different from encryption key stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. Then update SA keys - use new keys. [Ver] Send an ESP packet authenticated by integrity key different from integrity key stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. Then update SA keys - use new keys. [Ver] Send an ESP packet authenticated by integrity key and encrypted by encryption key different from integrity and encryption keys stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS

7.5.1.2. eth2p-ethip4ipsectpt-ip4base-func

IPv4 IPsec transport mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
• [Ref] Applicable standard specifications: RFC4303.

Name	Documentation	Status
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc02: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA1-96 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc03: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA1-96 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc04: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-256-128 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-256-128 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc06: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-256-128 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc07: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-384-192 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc08: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-384-192 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-384-192 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc10: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-512-256 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc11: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-512-256 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-512-256 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. [Ver] Send an ESP packet encrypted by encryption key different from encryption key stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. [Ver] Send an ESP packet authenticated by integrity key different from integrity key stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. [Ver] Send an ESP packet authenticated by integrity key and encrypted by encryption key different from integrity and encryption keys stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. Then update SA keys - use new keys. [Ver] Send and receive ESP packet between TG and VPP node before and after SA keys update.	PASS
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. Then update SA keys - use new keys. [Ver] Send an ESP packet encrypted by encryption key different from encryption key stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. Then update SA keys - use new keys. [Ver] Send an ESP packet authenticated by integrity key different from integrity key stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. Then update SA keys - use new keys. [Ver] Send an ESP packet authenticated by integrity key and encrypted by encryption key different from integrity and encryption keys stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS

7.5.1.3. eth2p-ethip4ipsectptlispgpe-ip4base-func

IPv4-ip4-ipsec-lispgpe-ip4 - main fib, vrf (gpe_vni-to-vrf)

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: ICMPv4-IPv4-IPSec-LISPGPE-IPv4-ICMPv4.
• [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
• [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
• [Ref] Applicable standard specifications: RFC6830, RFC4303.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-IPSec-LISPGPE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTs. [Ver] Case: ip4-lispgpe-ipsec-ip4 - main fib Make TG send ICMPv4 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv4 headers on received packets are correct. [Ref] RFC6830, RFC4303.	PASS
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) lisp_gpe0 int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-IPSec-LISPGPE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTs. [Ver] Case: ip4-ipsec-lispgpe-ip4 - main fib Make TG send ICMPv4 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv4 headers on received packets are correct. [Ref] RFC6830, RFC4303.	PASS
tc03: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int and vrf on eid is enabled.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-IPSec-LISPGPE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTs. [Ver] Case: ip4-lispgpe-ipsec-ip4 - vrf, main fib Make TG send ICMPv4 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv4 headers on received packets are correct. [Ref] RFC6830, RFC4303.	PASS
tc04: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int and vrf is enabled.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-IPSec-LISPGPE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTs. [Ver] Case: ip4-ipsec-lispgpe-ip4 - vrf, main fib Make TG send ICMPv4 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv4 headers on received packets are correct. [Ref] RFC6830, RFC4303.	PASS

7.5.1.4. eth2p-ethip4ipsectptlispgpe-ip6base-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
• [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
• [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
• [Ref] Applicable standard specifications: RFC6830, RFC4303.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP on DUT1-DUT2, Eth-IPv6-ICMP on TG-DUTn. [Cfg] Configure IPv6 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTS. [Ver] Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct. [Ref] RFC6830, RFC4303.	PASS
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-IPSec-LISPGPE-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMP on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTS. [Ver] Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct. [Ref] RFC6830, RFC4303.	PASS

7.5.1.5. eth2p-ethip4ipsectptlispgpe-ip6basevrf-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
• [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
• [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
• [Ref] Applicable standard specifications: RFC6830, RFC4303.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-IPSec-LISPGPE-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6, on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTS. [Ver] Case: ip4-ipsec-lispgpe-ip6 - vrf, phy2lisp Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct. [Ref] RFC6830, RFC4303.	PASS

7.5.1.6. eth2p-ethip6ipsectnl-ip6base-func

IPv6 IPsec tunnel mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
• [Ref] Applicable standard specifications: RFC4303.

Name	Documentation	Status
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc02: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc03: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc04: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-256-128 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-256-128 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc06: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-256-128 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc07: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-384-192 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc08: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-384-192 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-384-192 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc10: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-512-256 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc11: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-512-256 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-512-256 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send an ESP packet encrypted by encryption key different from encryption key stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send an ESP packet authenticated by integrity key different from integrity key stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send an ESP packet authenticated by integrity key and encrypted by encryption key different from integrity and encryption keys stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. Then update SA keys - use new keys. [Ver] Send and receive ESP packet between TG and VPP node before and after SA keys update.	PASS
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. Then update SA keys - use new keys. [Ver] Send an ESP packet encrypted by encryption key different from encryption key stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. Then update SA keys - use new keys. [Ver] Send an ESP packet authenticated by integrity key different from integrity key stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. Then update SA keys - use new keys. [Ver] Send an ESP packet authenticated by integrity key and encrypted by encryption key different from integrity and encryption keys stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS

7.5.1.7. eth2p-ethip6ipsectpt-ip6base-func

IPv6 IPsec transport mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
• [Ref] Applicable standard specifications: RFC4303.

Name	Documentation	Status
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc02: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA1-96 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc03: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA1-96 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc04: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-256-128 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-256-128 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc06: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-256-128 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc07: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-384-192 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc08: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-384-192 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-384-192 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc10: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-512-256 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc11: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-512-256 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-512-256 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. [Ver] Send an ESP packet encrypted by encryption key different from encryption key stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. [Ver] Send an ESP packet authenticated by integrity key different from integrity key stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. [Ver] Send an ESP packet authenticated by integrity key and encrypted by encryption key different from integrity and encryption keys stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. Then update SA keys - use new keys. [Ver] Send and receive ESP packet between TG and VPP node before and after SA keys update.	PASS
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. Then update SA keys - use new keys. [Ver] Send an ESP packet encrypted by encryption key different from encryption key stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. Then update SA keys - use new keys. [Ver] Send an ESP packet authenticated by integrity key different from integrity key stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. Then update SA keys - use new keys. [Ver] Send an ESP packet authenticated by integrity key and encrypted by encryption key different from integrity and encryption keys stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS

7.5.1.8. eth2p-ethip6ipsectptlispgpe-ip4base-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, virt2lisp, phy2lisp

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv6-LISPGPE-IPSec-IPv4-ICMP, Eth-IPv6-IPSec-LISPGPE-IPv4-ICMP
• [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
• [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
• [Ref] Applicable standard specifications: RFC6830, RFC4303.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-LISPGPE-IPSec-IPv4-ICMP on DUT1-DUT2, Eth-IPv4-ICMP on TG-DUTn. [Cfg] Configure IPv6 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTS. [Ver] Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv4 headers on received packets are correct. [Ref] RFC6830, RFC4303.	PASS
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-IPSec-LISPGPE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMP on TG-DUTn. [Cfg] Configure IPv6 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTS. [Ver] Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv4 headers on received packets are correct. [Ref] RFC6830, RFC4303.	PASS

7.5.1.9. eth2p-ethip6ipsectptlispgpe-ip6base-func

IPv6 - ip6-ipsec-lispgpe-ip6 - main fib, vrf (gpe_vni-to-vrf), phy2lisp, virt2lisp

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6,
• [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
• [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
• [Ref] Applicable standard specifications: RFC6830, RFC4303.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn. [Cfg] Configure IPv6 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTS. [Ver] Case: ip6-lispgpe-ipsec-ip6 - main fib, phys2lisp Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct. [Ref] RFC6830, RFC4303.	PASS
tc02: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using ipsec (transport) lisp_gpe0 int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn. [Cfg] Configure IPv6 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTS. [Ver] Case: ip6-ipsec-lispgpe-ip6 - main fib, phys2lisp Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct. [Ref] RFC6830, RFC4303.	PASS

7.5.2. sw device

7.5.2.1. eth2p-ethip4ipsectnlsw-ip4base-func

IPv4 SW cryptodev IPsec tunnel mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
• [Cfg] DUT configuration: With enabled SW crytodev on DUT1 create loopback interface, configure loopback and physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
• [Ref] Applicable standard specifications: RFC4303.

Name	Documentation	Status
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc02: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc03: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc04: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-256-128 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-256-128 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc06: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-256-128 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc07: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-384-192 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc08: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-384-192 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-384-192 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc10: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-512-256 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc11: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-512-256 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-512-256 in tunnel mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send an ESP packet encrypted by encryption key different from encryption key stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send an ESP packet authenticated by integrity key different from integrity key stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. [Ver] Send an ESP packet authenticated by integrity key and encrypted by encryption key different from integrity and encryption keys stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. Then update SA keys - use new keys. [Ver] Send and receive ESP packet between TG and VPP node before and after SA keys update.	PASS
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. Then update SA keys - use new keys. [Ver] Send an ESP packet encrypted by encryption key different from encryption key stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. Then update SA keys - use new keys. [Ver] Send an ESP packet authenticated by integrity key different from integrity key stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in tunnel mode. Then update SA keys - use new keys. [Ver] Send an ESP packet authenticated by integrity key and encrypted by encryption key different from integrity and encryption keys stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS

7.5.2.2. eth2p-ethip4ipsectptsw-ip4base-func

IPv4 IPsec transport mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
• [Cfg] DUT configuration: With enabled SW crytodev on DUT1 create loopback interface, configure loopback and physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
• [Ref] Applicable standard specifications: RFC4303.

Name	Documentation	Status
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc02: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA1-96 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc03: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha1-96 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA1-96 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc04: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-256-128 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-256-128 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc06: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-256-128 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-256-128 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc07: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-384-192 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc08: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-384-192 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-384-192 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc10: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA-512-256 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc11: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-192 and integrity algorithm SHA-512-256 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-256 and integrity algorithm SHA-512-256 in transport mode. [Ver] Send and receive ESP packet between TG and VPP node.	PASS
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. [Ver] Send an ESP packet encrypted by encryption key different from encryption key stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. [Ver] Send an ESP packet authenticated by integrity key different from integrity key stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used	[Top] TG-DUT1. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. [Ver] Send an ESP packet authenticated by integrity key and encrypted by encryption key different from integrity and encryption keys stored on VPP node from TG to VPP node and expect no response to be received on TG. [Ref] RFC4303.	PASS
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. Then update SA keys - use new keys. [Ver] Send and receive ESP packet between TG and VPP node before and after SA keys update.	PASS
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. Then update SA keys - use new keys. [Ver] Send an ESP packet encrypted by encryption key different from encryption key stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. Then update SA keys - use new keys. [Ver] Send an ESP packet authenticated by integrity key different from integrity key stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used	[Top] TG-DUT1. [Ref] RFC4303. [Cfg] On DUT1 configure IPsec manual keyed connection with encryption algorithm AES-CBC-128 and integrity algorithm SHA1-96 in transport mode. Then update SA keys - use new keys. [Ver] Send an ESP packet authenticated by integrity key and encrypted by encryption key different from integrity and encryption keys stored on VPP node from TG to VPP node and expect no response to be received on TG before and after SA keys update.	PASS

7.5.2.2.1. interfaces

7.5.3. api-crud-tap-func

Tap Interface CRUD Tests

• [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
• [Enc] Packet Encapsulations: No packet sent.
• [Cfg] DUT configuration: Add/Modify/Delete linux-TAP on DUT1.
• [Ver] Verification: Check dump of tap interfaces for correctness.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: tap interface modify and delete	[Top] TG-DUT1-TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] Set two TAP interfaces. [Ver] Verify that TAP interface can be modified, deleted, and no other TAP interface is affected.	PASS

7.5.4. eth2p-eth-l2bdbasemaclrn-eth-2tap-func

Tap Interface Traffic Tests

• [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) MAC learning enabled; Split Horizon Groups (SHG) are set depending on test case; Namespaces (NM) are set on DUT1 with attached linux-TAP.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent by TG on link to DUT1; On receipt TG verifies packets for correctness and their IPv4 src-addr, dst-addr, and MAC addresses.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: tap interface simple bd	[Top] TG-DUT1-TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 configure two L2BD with two if’s for each L2BD with MAC learning and one L2BD joining two linux-TAP interfaces created by VPP located in namespace. [Ver] Packet sent from TG is passed through all L2BD and received back on TG. Then src_ip, dst_ip and MAC are checked.	PASS

7.5.5. eth2p-eth-l2bdbasemaclrn-l2shg-eth-2tap-func

Tap Interface Traffic Tests

• [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) MAC learning enabled; Split Horizon Groups (SHG) are set depending on test case; Namespaces (NM) are set on DUT1 with attached linux-TAP.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent by TG on link to DUT1; On receipt TG verifies packets for correctness and their IPv4 src-addr, dst-addr, and MAC addresses.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: tap interface bd - different split horizon	[Top] TG-DUT1-TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 configure one if into L2BD with MAC learning. Add two TAP interfaces into this L2BD and assign them different SHG. Setup two namespaces and assign two linux-TAP interfaces to it respectively. [Ver] Packet is sent from TG to both linux-TAP interfaces and reply is checked. Ping from First linux-TAP to another should pass.	PASS
tc02: tap interface bd - same split horizon	[Top] TG-DUT1-TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 configure one if into L2BD with MAC learning. Add two TAP interfaces into this L2BD and assign them same SHG. Setup two namespaces and assign two linux-TAP interfaces to it respectively. [Ver] Packet is sent from TG to both linux-TAP interfaces and reply is checked. Ping from First linux-TAP to another should fail.	PASS

7.5.6. eth2p-ethip4-ip4base-eth-1tap-func

Tap Interface Traffic Tests

• [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) MAC learning enabled; Split Horizon Groups (SHG) are set depending on test case; Namespaces (NM) are set on DUT1 with attached linux-TAP.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent by TG on link to DUT1; On receipt TG verifies packets for correctness and their IPv4 src-addr, dst-addr, and MAC addresses.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: tap interface ip ping without namespace	[Top] TG-DUT1-TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 configure two interface addresses with IPv4 of which one is TAP interface (dut_to_tg_if and TAP) and one is linux-TAP. [Ver] Packet sent from TG gets to the destination and ICMP-reply is received on TG.	PASS
tc02: tap interface ip ping with namespace	[Top] TG-DUT1-TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 configure two interface addresses with IPv4 of which one is TAP interface (dut_to_tg_if and TAP) and one is linux-TAP in namespace. [Ver] Packet sent from TG gets to the destination and ICMP-reply is received on TG.	PASS

7.5.7. eth2p-dot1q-ip4base-func

IPv4 with VLAN subinterfaces

• [Top] Network Topologies: TG-DUT1-TG 2-node circular topology with double links between nodes.
• [Enc] Packet encapsulations: Eth-IPv4-ICMPv4 on TG-DUT1-IF1, Eth-dot1q-IPv4-ICMPv4 on TG-DUT1-IF2.
• [Cfg] DUT configuration: DUT1 is configured with 2 Vlan subinterfaces on DUT1-IF2. The subinterfaces and DUT1-IF1 have IP addresses set and corresponding IP neighbor entries are configured.
• [Ref] Applicable standard specifications: IEEE 802.1q.

Name	Documentation	Status
tc01: process untagged send tagged		PASS
tc02: process tagged send untagged		PASS
tc03: process tagged send tagged		PASS

7.5.8. eth2p-ethip4-ip4base-copblklistbase-func

COP Security IPv4 Blacklist Tests

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 on all links.
• [Cfg] DUT configuration: DUT1 is configured with IPv4 routing and static routes. COP security black-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: dut drops ipv4 pkts with cop blacklist set with ipv4 src-addr	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 configure interface IPv4 addresses and routes in the main routing domain, add COP blacklist on interface to TG with IPv4 src-addr matching packets generated by TG; on DUT2 configure L2 xconnect. [Ver] Make TG send ICMPv4 Echo Req on its interface to DUT1; verify no ICMPv4 Echo Req pkts are received. [Ref]	PASS

7.5.9. eth2p-ethip4-ip4base-copwhlistbase-func

COP Security IPv4 Whitelist Tests

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 on all links.
• [Cfg] DUT configuration: DUT1 is configured with IPv4 routing and static routes. COP security white-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: dut permits ipv4 pkts with cop whitelist set with ipv4 src-addr	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 configure interface IPv4 addresses and routes in the main routing domain, add COP whitelist on interface to TG with IPv4 src-addr matching packets generated by TG; on DUT2 configure L2 xconnect. [Ver] Make TG send ICMPv4 Echo Req on its interface to DUT1; verify received ICMPv4 Echo Req pkts are correct. [Ref]	PASS

7.5.10. eth2p-ethip4-ip4base-func

IPv4 routing test cases RFC791 IPv4, RFC826 ARP, RFC792 ICMPv4. Encapsulations: Eth-IPv4-ICMPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv4 routing tests use circular 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2 and received on TG links on the other side of circular topology. On receive TG verifies packets IPv4 src-addr, dst-addr and MAC addresses.

Name	Documentation	Status
tc01: dut replies to icmpv4 echo req to its ingress interface	Make TG send ICMPv4 Echo Req to DUT ingress interface. Make TG verify ICMP Echo Reply is correct.	PASS
tc02: dut routes ipv4 to its egress interface	Make TG send ICMPv4 Echo Req towards DUT1 egress interface connected to DUT2. Make TG verify ICMPv4 Echo Reply is correct.	PASS
tc03: dut1 routes ipv4 to dut2 ingress interface	Make TG send ICMPv4 Echo Req towards DUT2 ingress interface connected to DUT1. Make TG verify ICMPv4 Echo Reply is correct.	PASS
tc04: dut1 routes ipv4 to dut2 egress interface	Make TG send ICMPv4 Echo Req towards DUT2 egress interface connected to TG. Make TG verify ICMPv4 Echo Reply is correct.	PASS
tc05: dut1 and dut2 route ipv4 between tg interfaces	Make TG send ICMPv4 Echo Req between its interfaces across DUT1 and DUT2. Make TG verify ICMPv4 Echo Replies are correct.	PASS
tc06: dut replies to icmpv4 echo reqs with size 64b-to-1500b-incr-1b	Make TG send ICMPv4 Echo Reqs to DUT ingress interface, incrementating frame size from 64B to 1500B with increment step of 1Byte. Make TG verify ICMP Echo Replies are correct.	PASS
tc08: dut replies to arp request	Make TG send ARP Request to DUT and verify ARP Reply is correct.	PASS

7.5.11. eth2p-ethip4-ip4base-iaclbase-func

IPv4 routing with ingress ACL test cases Encapsulations: Eth-IPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv4 ingress ACL (iACL) tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. DUT1 is configured with iACL on link to TG, iACL classification and permit/deny action are configured on a per test case basis. Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped, or if received verifies packet IPv4 src-addr, dst-addr and MAC addresses.

Name	Documentation	Status
tc01: dut with iacl ipv4 src-addr drops matching pkts	On DUT1 add source IPv4 address to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc02: dut with iacl ipv4 dst-addr drops matching pkts	On DUT1 add destination IPv4 address to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc03: dut with iacl ipv4 src-addr and dst-addr drops matching pkts	On DUT1 add source and destination IPv4 addresses to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc04: dut with iacl ipv4 protocol set to tcp drops matching pkts	On DUT1 add protocol mask and TCP protocol (0x06) to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc05: dut with iacl ipv4 protocol set to udp drops matching pkts	On DUT1 add protocol mask and UDP protocol (0x11) to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc06: dut with iacl ipv4 tcp src-ports drops matching pkts	On DUT1 add TCP source ports to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc07: dut with iacl ipv4 tcp dst-ports drops matching pkts	On DUT1 add TCP destination ports to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc08: dut with iacl ipv4 tcp src-ports and dst-ports drops matching pkts	On DUT1 add TCP source and destination ports to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc09: dut with iacl ipv4 udp src-ports drops matching pkts	On DUT1 add UDP source ports to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc10: dut with iacl ipv4 udp dst-ports drops matching pkts	On DUT1 add TCP destination ports to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc11: dut with iacl ipv4 udp src-ports and dst-ports drops matching pkts	On DUT1 add UDP source and destination ports to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS

7.5.12. eth2p-ethip4-ip4base-ip4arp-func

IPv4 ARP test cases RFC826 ARP: Eth-IPv4 and Eth-ARP on links TG-DUT1, TG-DUT2, DUT1-DUT2: IPv4 ARP tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. DUT ARP functionality is tested by making TG send ICMPv4 Echo Requests towards its other interface via DUT1 and DUT2.

Name	Documentation	Status
tc01: dut sends arp request for unresolved locally connected ipv4 address	Make TG send test packet destined to IPv4 address of its other interface connected to DUT2. Make TG verify DUT2 sends ARP Request for locally connected TG IPv4 address.	PASS
tc02: dut sends arp request for route next hop ipv4 address	Make TG send test packet destined to IPv4 address matching static route on DUT2. Make TG verify DUT2 sends ARP Request for next hop of the static route.	PASS

7.5.13. eth2p-ethip4-ip4base-ip4dhcpclient-func

DHCPv4 Client related test cases

Name	Documentation	Status
tc01: vpp sends a dhcp discover	Configure DHCPv4 client on interface to TG without hostname and check if DHCPv4 DISCOVER message contains all required fields with expected values.	PASS
tc02: vpp sends a dhcpv4 discover with hostname	Configure DHCPv4 client on interface to TG with hostname and check if DHCPv4 DISCOVER message contains all required fields with expected values.	PASS
tc03: vpp sends dhcpv4 request after offer	Configure DHCPv4 client on interface to TG and check if DHCPv4 REQUEST message contains all required fields.	PASS
tc04: vpp doesn’t send dhcpv4 request after offer with wrong xid	Configure DHCPv4 client on interface to TG. If server sends DHCPv4 OFFER with different XID as in DHCPv4 DISCOVER, DHCPv4 REQUEST message shouldn’t be sent.	FAIL
tc05: vpp honors dhcpv4 lease time	Send IP configuration to the VPP client via DHCPv4. Address is checked with ICMP echo request and there should be no reply for echo request when lease has expired.	PASS

7.5.14. eth2p-ethip4-ip4base-ip4dhcpproxy-func

DHCPv4 proxy test cases

• [Top] Network Topologies: TG = DUT with two links between the nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-UDP-BOOTP-DHCP
• [Cfg] DUT configuration: DUT is configured with DHCPv4 proxy.
• [Ver] TG verification: Test DHCPv4 packets are sent on TG on first link to DUT and received on TG on second link. On receive TG verifies if DHCPv4 packets are valid.

Name	Documentation	Status
tc01: vpp proxies valid dhcpv4 request to dhcpv4 server	[Top] TG=DUT [Enc] Eth-IPv4-UDP-BOOTP-DHCP [Cfg] On DUT setup DHCPv4 proxy. [Ver] Make TG verify matching DHCPv4 packets between client and DHCPv4 server through DHCP proxy.	PASS
tc02: vpp proxy ignores invalid dhcpv4 request	[Top] TG=DUT [Enc] Eth-IPv4-UDP-BOOTP-DHCP [Cfg] On DUT setup DHCPv4 proxy. [Ver] Make TG verify matching invalid DHCPv4 packets are dropped.	PASS

7.5.15. eth2p-ethip4-ip4base-ip4ecmp-func

Ipv4 Multipath routing test cases

• [Top] Network topologies: TG=DUT 2-node topology with two links between nodes.
• [Cfg] DUT configuration: On DUT configure interfaces IPv4 adresses, and multipath routing.
• [Ver] TG verification: Test packets are sent from TG on the first link to DUT. Packet is received on TG on the second link from DUT1.

Name	Documentation	Status
tc01: ipv4 equal-cost multipath routing	[Top] TG=DUT [Cfg] On DUT configure multipath routing wiht two equal-cost paths. [Ver] TG sends 100 IPv4 ICMP packets traffic on the first link to DUT. On second link to TG verify if traffic is divided into two paths.	PASS

7.5.16. eth2p-ethip4-ip4base-ip4proxyarp-func

RFC1027 Proxy ARP test cases

• [Top] Network topologies: TG-DUT1 2-node topology with single link between nodes.
• [Cfg] DUT configuration: DUT1 is configured with Proxy ARP
• [Ver] TG verification: Test ARP Request packet is sent from TG on link to DUT1; on receive TG verifies ARP reply packet for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC1027.

Name	Documentation	Status
tc01: dut sends arp reply on behalf of another machine from the ip range	[Top] TG-DUT1. [Ref] RFC1027. [Cfg] On DUT1 configure interface IPv4 address and proxy ARP for IP range. [Ver] Make TG send ARP request to DUT1 interface, verify if DUT1 sends correct ARP reply on behalf of machine which IP is in range.	PASS
tc02: dut sends arp reply on behalf of another machine from beginning of the ip range	[Top] TG-DUT1. [Ref] RFC1027. [Cfg] On DUT1 configure interface IPv4 address and proxy ARP for IP range. [Ver] Make TG send ARP request to DUT1 interface, verify if DUT1 sends correct ARP reply on behalf of machine which IP is from beginning of the IP range.	PASS
tc03: dut sends arp reply on behalf of another machine from end of the ip range	[Top] TG-DUT1. [Ref] RFC1027. [Cfg] On DUT1 configure interface IPv4 address and proxy ARP for IP range. [Ver] Make TG send ARP request to DUT1 interface, verify if DUT1 sends correct ARP reply on behalf of machine which IP is from end of the IP range.	PASS
tc04: dut does not send arp reply on behalf of another machine from below of the ip range	[Top] TG-DUT1. [Ref] RFC1027. [Cfg] On DUT1 configure interface IPv4 address and proxy ARP for IP range. [Ver] Make TG send ARP request to DUT1 interface, verify if DUT1 does not send ARP reply on behalf of machine which IP is from below of the IP range.	PASS
tc05: dut does not send arp reply on behalf of another machine from above of the ip range	[Top] TG-DUT1. [Ref] RFC1027. [Cfg] On DUT1 configure interface IPv4 address and proxy ARP for IP range. [Ver] Make TG send ARP request to DUT1 interface, verify if DUT1 does not send ARP reply on behalf of machine which IP is from above of the IP range.	PASS

7.5.17. eth2p-ethip4-ip4base-ipolicemarkbase-func

IPv4 policer test cases

• [Top] Network topologies: TG=DUT1 2-node topology with two links between nodes.
• [Cfg] DUT configuration: On DUT1 configure interfaces IPv4 adresses, and static ARP record on the second interface.
• [Ver] TG verification: Test packet is sent from TG on the first link to DUT1. Packet is received on TG on the second link from DUT1.
• [Ref] Applicable standard specifications: RFC2474, RFC2697, RFC2698.

Name	Documentation	Status
tc01: vpp policer 2r3c color-aware marks packet	[Top] TG=DUT1. [Ref] RFC2474, RFC2698. [Cfg] On DUT1 configure 2R3C color-aware policer on the first interface. [Ver] TG sends IPv4 TCP packet on the first link to DUT1. On DUT1 packet is marked with DSCP tag. Verify if DUT1 sends correct IPv4 TCP packet with correct DSCP on the second link to TG.	PASS
tc02: vpp policer 2r3c color-blind marks packet	[Top] TG=DUT1. [Ref] RFC2474, RFC2698. [Cfg] On DUT1 configure 2R3C color-blind policer on the first interface. [Ver] TG sends IPv4 TCP packet on the first link to DUT1. On DUT1 packet is marked with DSCP tag. Verify if DUT1 sends correct IPv4 TCP packet with correct DSCP on the second link to TG.	PASS
tc03: vpp policer 1r3c color-aware marks packet	[Top] TG=DUT1. [Ref] RFC2474, RFC2697. [Cfg] On DUT1 configure 1R3C color-aware policer on the first interface. [Ver] TG sends IPv4 TCP packet on the first link to DUT1. On DUT1 packet is marked with DSCP tag. Verify if DUT1 sends correct IPv4 TCP packet with correct DSCP on the second link to TG.	PASS
tc04: vpp policer 1r3c color-blind marks packet	[Top] TG=DUT1. [Ref] RFC2474, RFC2697. [Cfg] On DUT1 configure 1R3C color-blind policer on the first interface. [Ver] TG sends IPv4 TCP packet on the first link to DUT1. On DUT1 packet is marked with DSCP tag. Verify if DUT1 sends correct IPv4 TCP packet with correct DSCP on the second link to TG.	PASS

7.5.18. eth2p-ethip4-ip4base-rpf-func

Source RPF check on IPv4 test cases

• [Top] Network Topologies: TG - DUT1 - DUT2 - TG with one link between the nodes.
• [Cfg] DUT configuration: DUT2 is configured with L2 Cross connect. DUT1 is configured with IP source check on link to TG,
• [Ver] TG verification: Test ICMP Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets which source address is not in routes are dropped.

Name	Documentation	Status
tc01: vpp source rpf check on ipv4 src-addr	[Top] TG-DUT1-DUT2-TG [Cfg] On DUT1 setup IP source check. [Ver] Make TG verify matching packets which source address is not in routes are dropped.	PASS
tc02: vpp pass traffic on non-enabled rpf interface	[Top] TG-DUT1-DUT2-TG [Cfg] On DUT1 setup IP source check. [Ver] Make TG verify matching packets on non-enabled RPF interface are passed.	PASS

7.5.19. eth2p-ethip4-ip4basevrf-func

Vpn routed forwarding - baseline IPv4

• [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node topology with two links in between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4.
• [Cfg] DUT configuration: Each DUT is configured with two VRF tables; Separation of traffic is tested by IP packets; Basic ARP and ROUTES are set on DUT nodes; IP addresses are set on DUT interfaces.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent by TG on link to DUT1, DUT2 or back to TG; On receipt TG verifies packets for correctness and their IPv4 src-addr, dst-addr, and MAC addresses.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: tg packets routed to dut ingress interface, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv4-ICMPv4. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. On every ingress and egress port on DUT is configured ARP and each DUT is configured with one route. [Ver] Packet is send from TG->DUT1-if1 to DUT1->TG-if1 and from TG->DUT1-if2 to DUT1->TG-if2 and checked if arrived.	PASS
tc02: tg packets routed to dut egress interface, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv4-ICMPv4. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. On every ingress and egress port on DUT is configured ARP and each DUT is configured with one route. [Ver] Packet is send from TG->DUT1-if1 to DUT1->DUT2-if1 and from TG->DUT1-if2 to DUT1->DUT2-if2 and checked if arrived.	PASS
tc03: tg packets routed to dut2 ingress interface through dut1, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv4-ICMPv4. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. On every ingress and egress port on DUT is configured ARP and each DUT is configured with one route. [Ver] Packet is send from TG->DUT1-if1 to DUT2->DUT1-if1 and from TG->DUT1-if2 to DUT2->DUT1-if2 and checked if arrived.	PASS
tc04: tg packets routed to dut2 egress interface through dut1, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv4-ICMPv4. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. On every ingress and egress port on DUT is configured ARP and each DUT is configured with one route. [Ver] Packet is send from TG->DUT1-if1 to DUT2->TG-if1 and from TG->DUT1-if2 to DUT2->TG-if2 and checked if arrived.	PASS
tc05: tg packets routed to tg through dut1 and dut2, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv4-ICMPv4. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. On every ingress and egress port on DUT is configured ARP and each DUT is configured with one route. [Ver] Packet is send from TG->DUT1-if1 to TG->DUT2-if1 and from TG->DUT1-if2 to TG->DUT2-if2 and checked if arrived.	PASS
tc06: tg packets not routed to dut ingress interface in different vrf, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv4-ICMPv4. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. On every ingress and egress port on DUT is configured ARP and each DUT is configured with one route. [Ver] Packet is send from TG->DUT1-if1 to DUT1->TG-if2 where it should not arrive.	PASS
tc07: tg packets not routed to dut egress interface in different vrf, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv4-ICMPv4. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. On every ingress and egress port on DUT is configured ARP and each DUT is configured with one route. [Ver] Packet is send from TG->DUT1-if1 to DUT1->DUT2-if2 where it should not arrive.	PASS
tc08: tg packets not routed to dut2 ingress interface in different vrf through dut1, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv4-ICMPv4. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. On every ingress and egress port on DUT is configured ARP and each DUT is configured with one route. [Ver] Packet is send from TG->DUT1-if1 to DUT2->DUT1-if2 where it should not arrive.	PASS
tc09: tg packets not routed to dut2 egress interface in different vrf through dut1, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv4-ICMPv4. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. On every ingress and egress port on DUT is configured ARP and each DUT is configured with one route. [Ver] Packet is send from TG->DUT1-if1 to DUT2->TG-if2 where it should not arrive.	PASS
tc10: tg packets not routed to tg in different vrf through dut1 and dut2, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. On every ingress and egress port on DUT is configured ARP and each DUT is configured with one route. [Ver] Packet is send from TG->DUT1-if1 to TG->DUT2-if2 where it should not arrive.	PASS

7.5.20. gre

7.5.20.1. eth2p-ethip4gre-ip4base-func

GREoIPv4 test cases

• [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes; TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-GRE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for routing over GRE tunnel; Eth-IPv4-ICMPv4 on TG_if1-DUT, Eth-IPv4-GRE-IPv4-ICMPv4 on TG_if2_DUT for GREoIPv4 encapsulation and decapsulation verification.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. GREoIPv4 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; GREoIPv4 encapsulation and decapsulation are verified separately by TG; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC2784.

Name	Documentation	Status
tc01: dut1 and dut2 route over greoipv4 tunnel between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-GRE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] On DUT1 and DUT2 configure GREoIPv4 tunnel with IPv4 routes towards each other. [Ver] Make TG send ICMPv4 Echo Req between its interfaces across both DUTs and GRE tunnel between them; verify IPv4 headers on received packets are correct. [Ref] RFC2784.	PASS
tc02: dut encapsulates ipv4 into greoipv4 tunnel - gre header verification	[Top] TG=DUT1. [Enc] Eth-IPv4-ICMPv4 on TG_if1-DUT, Eth-IPv4-GRE-IPv4-ICMPv4 on TG_if2_DUT. [Cfg] On DUT1 configure GREoIPv4 tunnel with IPv4 route towards TG. [Ver] Make TG send non-encapsulated ICMPv4 Echo Req to DUT; verify TG received GREoIPv4 encapsulated packet is correct. [Ref] RFC2784.	PASS
tc03: dut decapsulates ipv4 from greoipv4 tunnel - ipv4 header verification	[Top] TG=DUT1. [Enc] Eth-IPv4-ICMPv4 on TG_if1-DUT, Eth-IPv4-GRE-IPv4-ICMPv4 on TG_if2_DUT. [Cfg] On DUT1 configure GREoIPv4 tunnel towards TG. [Ver] Make TG send ICMPv4 Echo Req encapsulated into GREoIPv4 towards VPP; verify TG received IPv4 de-encapsulated packet is correct. [Ref] RFC2784.	PASS
tc04: dut encapsulates ipv4 into greoipv4 different tunnels - gre header verification	[Top] TG=DUT1. [Enc] Eth-IPv4-ICMPv4 on TG_if1-DUT, Eth-IPv4-GRE-IPv4-ICMPv4 on TG_if2_DUT. [Cfg] On DUT1 configure two GRE tunnels with loopback’s source address. Destination address of tunnels are routed via next hop address of DUT’s to TG if2, where should be only GRE encapsulated packets. Each tunnel has IPv4 address and configured prefix routed through the tunnel. [Ver] Make TG send non-encapsulated ICMPv4 Echo Req to DUT; verify TG received GREoIPv4 encapsulated packet is correct for each tunnel. [Ref] RFC2784.	PASS
tc05: dut re-encapsulates ipv4 gre into other gre tunnel - gre header verification	[Top] TG=DUT1. [Enc] Eth-IPv4-ICMPv4 on TG_if1-DUT, Eth-IPv4-GRE-IPv4-ICMPv4 on TG_if2_DUT. [Cfg] On DUT1 configure two GRE tunnels with loopback’s source address. Destination address of tunnels are routed via next hop address of DUT’s to TG if2, where should be only GRE encapsulated packets. Each tunnel has IPv4 address and configured prefix routed through the tunnel. [Ver] Make TG send encapsulated IPv4 UDP to DUT; Encapsulated IP source is behind configured tunnel same as destination; verify TG received GREoIPv4 encapsulated packet is correct. [Ref] RFC2784.	PASS
tc06: dut do not process gre with wrong tunnel destination ip	[Top] TG=DUT1. [Enc] Eth-IPv4-ICMPv4 on TG_if1-DUT, Eth-IPv4-GRE-IPv4-ICMPv4 on TG_if2_DUT. [Cfg] On DUT1 configure two GRE tunnels with loopback’s source address. Destination address of tunnels are routed via next hop address of DUT’s to TG if2, where should be only GRE encapsulated packets. On DUT’s to TG if1 interface is configured test destination host MAC address. [Ver] Make TG send GRE encapsulated ICMPv4 Echo Req to DUT; verify TG received de-capsulated packet is correct, then send packet with wrong tunnel destination address. [Ref] RFC2784.	PASS

7.5.21. lisp

7.5.21.1. api-crud-lisp-func

API test cases

• [Top] Network Topologies: DUT1 1-node topology.
• [Enc] Packet Encapsulations: None.
• [Cfg] DUT configuration: DUT1 gets configured with all LISP parameters.
• [Ver] Verification: DUT1 operational data gets verified following configuration.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: dut can enable and disable lisp	[Top] DUT1. [Enc] None. [Cfg1] Test LISP enable/disable API; On DUT1 enable LISP. [Ver1] Check DUT1 if LISP is enabled. [Cfg2] Then disable LISP. [Ver2] Check DUT1 if LISP is disabled. [Ref] RFC6830.	PASS
tc02: dut can add and delete locator_set	[Top] DUT1. [Enc] None. [Cfg1] Test LISP locator_set API; on DUT1 configure locator_set and locator. [Ver1] Check DUT1 configured locator_set and locator are correct. [Cfg2] Then remove locator_set and locator. [Ver2] check DUT1 locator_set and locator are removed. [Ref] RFC6830.	PASS
tc03: dut can add, reset and delete locator_set	[Top] DUT1. [Enc] None. [Cfg1] Test LISP locator_set API; on DUT1 configure locator_set and locator. [Ver1] Check DUT1 locator_set and locator are correct. [Cfg2] Then reset locator_set and set it again. [Ver2] Check DUT1 locator_set and locator are correct. [Cfg3] Then remove locator_set and locator. [Ver3] Check DUT1 all locator_set and locators are removed. [Ref] RFC6830.	PASS
tc04: dut can add and delete eid address	[Top] DUT1. [Enc] None. [Cfg1] Test LISP eid API; on DUT1 configure LISP eid IP address. [Ver1] Check DUT1 configured data is correct. [Cfg2] Remove configured data. [Ver2] Check DUT1 all eid IP addresses are removed. [Ref] RFC6830.	PASS
tc05: dut can add and delete lisp map resolver address	[Top] DUT1. [Enc] None. [Cfg1] Test LISP map resolver address API; on DUT1 configure LISP map resolver address. [Ver1] Check DUT1 configured data is correct. [Cfg2] Remove configured data. [Ver2] Check DUT1 all map resolver addresses are removed. [Ref] RFC6830.	PASS

7.5.21.2. eth2p-ethip4lisp-ip4base-func

IP AFI independent functional tests.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv4 over lispoipv4 tunnel after disable-enable	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg1] On DUT1 and DUT2 configure IPv4 LISP static adjacencies. [Ver1] Make TG send ICMPv4 Echo Req between its interfaces across both DUTs and LISP tunnel between them; verify IPv4 headers on received packets are correct. [Cfg2] Disable LISP. [Ver2] Verify packets are not received via LISP tunnel. [Cfg3] Re-enable LISP. [Ver3] Verify packets are received again via LISP tunnel. [Ref] RFC6830.	PASS

7.5.21.3. eth2p-ethip4lisp-l2bdbasemaclrn-func

ip4-lispgpe-ip4 encapsulation test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4-LISPGpe-IP4
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: route ipv4 packet through lisp with bridge domain setup.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-ICMPv4-LISPGpe-IP4 [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2. Also configure BD and assign it to LISP VNI. [Ver] Make TG send ICMPv4 Echo Req between its interfaces across both DUTs and LISP tunnel between them; verify IPv4, Ether headers on received packets are correct. [Ref] RFC6830.	PASS

7.5.21.4. eth2p-ethip4lispgpe-ip4base-func

ip4-lispgpe-ip4 encapsulation test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using physical interfaces	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-LISPGPE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2. [Ver] Case: ip4-lispgpe-ip4 - phy2lisp Make TG send ICMPv4 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv4 headers on received packets are correct. [Ref] RFC6830.	PASS

7.5.21.5. eth2p-ethip4lispgpe-ip4basevrf-func

ip4-lispgpe-ip4 encapsulation test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-LISPGPE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2. [Ver] Case: ip4-lispgpe-ip4 - vrf, phy2lisp Make TG send ICMPv4 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv4 headers on received packets are correct. [Ref] RFC6830.	PASS

7.5.21.6. eth2p-ethip4lispgpe-ip6base-func

LISP static adjacency test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv6 bidirectionally over lispoipv4 tunnel	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn. [Cfg] On DUT1 and DUT2 configure IPv4 LISP static adjacencies. [Ver] Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP tunnel between them; verify IPv6 headers on received packets are correct. [Cfg2] Reconf LISP. [Ver2] Verify packets are received again via LISP tunnel. [Ref] RFC6830.	PASS

7.5.21.7. eth2p-ethip4lispgpe-ip6basevrf-func

LISP static adjacency test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-LISPGPE-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2. [Ver] Case: ip6-lispgpe-ip4 - vrf, phy2lisp Make TG send ICMPv4 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct. [Ref] RFC6830.	PASS

7.5.22. softwire

7.5.22.1. eth2p-ethip4–ethip6ip4-ip4base–ip6base-swirelw46-func

Lightweight 4 over 6 test cases LW4o6 is a subset of MAP-E, with per-subscriber rules. It uses the same tunneling mechanism and configuration as MAP-E. It does not use embedded address bits.

• [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-UDP on TG_if1-DUT, Eth-IPv6-IPv4-UDP on TG_if2_DUT.
• [Cfg] DUT configuration: DUT1 is configured as lwAFTR.
• [Ver] TG verification: Test UDP ICMP Echo Request in IPv4 are sent to lwAFTR and are verified by TG for correctness their encapsulation in IPv6 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC7596 RFC7597.

Name	Documentation	Status
tc01: encapsulate ipv4 into ipv6. ipv6 dst depends on ipv4 and udp destination	[Top] TG=DUT1. [Enc] Eth-IPv4-UDP on TG_if1-DUT, Eth-IPv6-IPv4-UDP on TG_if2_DUT. [Cfg] On DUT1 configure Map domain and Map rule. [Ver] Make TG send non-encapsulated UDP to DUT; verify TG received IPv4oIPv6 encapsulated packet is correct. [Ref] RFC7596 RFC7597	PASS
tc02: encapsulate ipv4 icmp into ipv6. ipv6 dst depends on ipv4 addr and icmp id	[Top] TG=DUT1. [Enc] Eth-IPv4-ICMP(type 0 and 8) on TG_if1-DUT, Eth-IPv6-IPv4-ICMP on TG_if2_DUT. [Cfg] On DUT1 configure Map domain and Map rule. [Ver] Make TG send non-encapsulated ICMP to DUT; verify TG received IPv4oIPv6 encapsulated packet is correct. Checks IPv6 destination based on ICMP Identifier field. [Ref] RFC7596 section 8.1	PASS
tc03: decapsulate ipv4 udp from ipv6.	[Top] TG=DUT1. [Enc] Eth-IPv6-IPv4-UDP on TG_if2_DUT, Eth-IPv4-UDP on TG_if1-DUT. [Cfg] On DUT1 configure Map domain and Map rule. [Ver] Make TG send encapsulated UDP to DUT; verify TG received IPv4 non-encapsulated packet is correct. [Ref] RFC7596 RFC7597	PASS
tc04: hairpinning of traffic between two lwb4	[Top] DUT1-TG. [Enc] Eth-IPv6-IPv4-UDP on TG_if2_DUT, Eth-IPv6-IPv4-UDP on TG_if2_DUT. [Cfg] On DUT1 configure Map domain and two Map rules. [Ver] Make TG send encapsulated UDP to DUT; verify TG received encapsulated packet is correct. [Ref] RFC7596 RFC7597	PASS

7.5.22.2. eth2p-ethip4–ethip6ip4-ip4base–ip6base-swiremape-func

Test for Basic mapping rule for MAP-E

• [Top] Network Topologies: TG - DUT1 - TG with two links between the nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-UDP on TG-to-DUT-if1. Eth-IPv6-IPv4-UDP on TG-to-DUT-if2.
• [Cfg] DUT configuration: DUT is configured with IPv4 on one DUT-to-TG interface and IPv6 address on second DUT-to-TG interface. MAP-E domain is configured in test template based on test parameters.
• [Ver] TG verification: UDP packets in IPv4 are sent by TG to destination in MAP domain. IPv6 packets with encapsulated IPv4 are received on TG interface.
• [Ref] Applicable standard specifications: RFC7597.

Name	Documentation	Status
tc01: bmr, then an ipv4 prefix is assigned	Basic Mapping Rule https://tools.ietf.org/html/rfc7597#section-5.2 IPv4 prefix length + ea bits length < 32 (o + r < 32) psid_length = 0, ip6_prefix < 64, ip4_prefix <= 32 Arguments: - ipv4_pfx - ipv6_pfx - ipv6_src - ea_bit_len - psid_offset - psid_len - ipv4_dst - dst_port - expected_ipv6_dst	PASS
tc02: bmr, full ipv4 address is to be assigned	Basic Mapping Rule https://tools.ietf.org/html/rfc7597#section-5.2 IPv4 prefix length + ea bits length == 32 (o + r == 32) psid_length = 0, ip6_prefix < 64, ip4_prefix <= 32 Arguments: - ipv4_pfx - ipv6_pfx - ipv6_src - ea_bit_len - psid_offset - psid_len - ipv4_dst - dst_port - expected_ipv6_dst	PASS
tc03: bmr, shared ipv4 address is to be assigned	Basic Mapping Rule https://tools.ietf.org/html/rfc7597#section-5.2 IPv4 prefix length + ea bits length > 32 (o + r > 32) ip6_prefix < 64, ip4_prefix <= 32 Arguments: - ipv4_pfx - ipv6_pfx - ipv6_src - ea_bit_len - psid_offset - psid_len - ipv4_dst - dst_port - expected_ipv6_dst	PASS
tc04: end user ipv6 prefix is 64	Supported End-User IPv6 prefix length is 64 bit. Arguments: - ipv4_pfx - ipv6_pfx - ipv6_src - ea_bit_len - psid_offset - psid_len - ipv4_dst - dst_port	PASS
tc05: ipv4 prefix is 0		FAIL
tc06: multiple domain and check with traffic script ipv4 source ipv6 destination	[Top] TG=DUT1. [Cfg] Multiple MAP-E domains are configured, values from variable file. [Ver] Send IPv4 to destination in configured domain and receive IPv6 packet. [Ref] RFC7597.	PASS
tc07: multiple domain and check with traffic script ipv6 source ipv6 destination	[Top] TG=DUT1. [Cfg] Multiple MAP-E domains are configured, values from variable file. [Ver] Send IPv4 encapsulated in IPv6. Source and destination are from configured domains. Check if VPP translate IPv6 addresses. [Ref] RFC7597.	PASS
tc08: encapsulate ipv4 icmp into ipv6	[Top] TG=DUT1. [Enc] Eth-IPv4-ICMP(type 0 and 8) on TG_if1-DUT, Eth-IPv6-IPv4-ICMP on TG_if2_DUT. [Cfg] Multiple MAP-E domains are configured, values from variable file. [Ver] Make TG send non-encapsulated ICMP to DUT; verify TG received IPv4oIPv6 encapsulated packet is correct. Checks IPv6 destination based on ICMP Identifier field. [Ref] RFC7597 section 8.2.	PASS
tc09: repeated ip neighbor command doesnt put fib to broken state	Original issue described in https://jira.fd.io/browse/VPP-312. [Top] TG=DUT1. [Cfg] IP address are set on interfaces, ip neighbor multiple times [Ver] FIB is not in broken state. The steps are add route, check with traffic then add same route again and check with traffic script.	PASS
bug: vpp-318	qlen < psid length	FAIL

7.5.22.3. eth2p-ethip4–ethip6ip4-ip4base–ip6base-swiremapt-func

Test for Basic mapping rule for MAP-T

• [Top] Network Topologies: TG - DUT1 - TG with two links between the nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-UDP on TG-to-DUT-if1. Eth-IPv6-UDP on TG-to-DUT-if2.
• [Cfg] DUT configuration: DUT is configured with IPv4 on one DUT-to-TG interface and IPv6 address on second DUT-to-TG interface. MAP-T domain is configured in test template based on test parameters.
• [Ver] TG verification: UDP packets in IPv4 are sent by TG to destination in MAP domain. IPv6 packets with translated IPv4 addresses are received on TG interface.
• [Ref] Applicable standard specifications: RFC7599

Name	Documentation	Status
tc01: map-t test	Test to check map-t address translation. Arguments: - ipv4_pfx - ipv6_dst_pfx - ipv6_src_pfx - ea_bit_len - psid_offset - psid_len - ipv4_src - ipv4_dst - dst_port	PASS

7.5.23. vxlan

7.5.23.1. eth2p-dot1qip4vxlan-l2bdbasemaclrn-func

RFC7348 VXLAN: Bridge-domain with VXLAN over VLAN test cases

• [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet encapsulations: Eth-dot1q-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-dot1q-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with static MACs, MAC learning enabled and Split Horizon Groups (SHG) depending on test case; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC7348.

Name	Documentation	Status
tc01: dut1 and dut2 with l2bd and vxlanoipv4ovlan tunnels switch icmpv4 between tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2; Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] On DUT1 and DUT2 configure L2 bridge-domain (MAC learning enabled), each with one interface to TG and one VXLAN tunnel interface towards the other DUT over VLAN sub-interface. [Ver] Make TG send ICMPv4 Echo Req between two of its interfaces, verify all packets are received. [Ref] RFC7348.	PASS

7.5.23.2. eth2p-ethip4vxlan-l2bdbasemaclrn-func

Bridge-domain with VXLAN test cases - IPv4

• [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC7348.

Name	Documentation	Status
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels switch icmpv4 between tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2; Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] On DUT1 and DUT2 configure two i/fs into L2BD with MAC learning. [Ver] Make TG verify ICMPv4 Echo Req pkts are switched thru DUT1 and DUT2 in both directions and are correct on receive. [Ref] RFC7348.	PASS

7.5.23.3. eth2p-ethip4vxlan-l2xcbase-func

RFC7348 VXLAN: L2 cross-connect with VXLAN test cases

• [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching; VXLAN tunnels are configured between L2XCs on DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC7348.

Name	Documentation	Status
tc01: dut1 and dut2 with l2xc and vxlanoipv4 tunnels switch icmpv4 between tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on [Ref] RFC7348.DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] On DUT1 and DUT2 configure L2 cross-connect (L2XC), each with one interface to TG and one VXLAN tunnel interface towards the other DUT. [Ver] Make TG send ICMPv4 Echo Req between two of its interfaces; verify all packets are received. [Ref] RFC7348.	PASS

7.5.23.4. eth4p-ethip4vxlan-l2bdbasemaclrn-l2shg-func

L2BD with SHG combined with VXLAN test cases - IPv4

• [Top] Network topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
• [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG); VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC7348.

Name	Documentation	Status
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels in shg switch icmpv4 between tg links	[Top] TG=DUT1=DUT2=TG. [Enc] Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2; Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] On DUT1 configure L2 bridge-domain (MAC learning enabled) with two untagged interfaces to TG and two VXLAN interfaces towards the DUT2 and put both VXLAN interfaces into the same Split-Horizon-Group (SHG). On DUT2 configure two L2 bridge-domain (MAC learning enabled), each with one untagged interface to TG and one VXLAN interface towards the DUT1. [Ver] Make TG send ICMPv4 Echo Reqs between all four of its interfaces to be switched by DUT1 and DUT2; verify packets are not switched between TG interfaces connected to DUT2 that are isolated by SHG on DUT1. [Ref] RFC7348.	PASS
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels in different shgs switch icmpv4 between tg links	[Top] TG=DUT1=DUT2=TG. [Enc] Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2; Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] On DUT1 configure L2 bridge-domain (MAC learning enabled) with two untagged interfaces to TG and two VXLAN interfaces towards the DUT2 and put both VXLAN interfaces into the different Split-Horizon-Group (SHGs). On DUT2 configure two L2 bridge-domain (MAC learning enabled), each with one untagged interface to TG and one VXLAN interface towards the DUT1. [Ver] Make TG send ICMPv4 Echo Req between all four of its interfaces to be switched by DUT1 and DUT2; verify packets are switched between all TG interfaces. [Ref] RFC7348.	PASS

7.5.23.4.1. ip6

7.5.24. eth2p-ethip6-ip6base-copblklistbase-func

COP Security IPv6 Blacklist Tests

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6 on all links.
• [Cfg] DUT configuration: DUT1 is configured with IPv6 routing and static routes. COP security black-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
• [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: dut drops ipv6 pkts with cop blacklist set with ipv6 src-addr	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-ICMPv6. [Cfg] On DUT1 configure interface IPv6 addresses and routes in the main routing domain, add COP blacklist on interface to TG with IPv6 src-addr matching packets generated by TG; on DUT2 configure L2 xconnect. [Ver] Make TG send ICMPv6 Echo Req on its interface to DUT1; verify no ICMPv6 Echo Req pkts are received. [Ref]	PASS

7.5.25. eth2p-ethip6-ip6base-copwhlistbase-func

COP Security IPv6 Whitelist Tests

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6 on all links.
• [Cfg] DUT configuration: DUT1 is configured with IPv6 routing and static routes. COP security white-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
• [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: dut permits ipv6 pkts with cop whitelist set with ipv6 src-addr	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-ICMPv6. [Cfg] On DUT1 configure interface IPv6 addresses and routes in the main routing domain, add COP whitelist on interface to TG with IPv6 src-addr matching packets generated by TG; on DUT2 configure L2 xconnect. [Ver] Make TG send ICMPv6 Echo Req on its interface to DUT1; verify received ICMPv6 Echo Req pkts are correct. [Ref]	PASS

7.5.26. eth2p-ethip6-ip6base-func

IPv6 routing test cases RFC2460 IPv6, RFC4443 ICMPv6, RFC4861 Neighbor Discovery. Encapsulations: Eth-IPv6-ICMPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2; Eth-IPv6-NS/NA on links TG-DUT. IPv6 routing tests use circular 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2 and received on TG links on the other side of circular topology. On receive TG verifies packets IPv6 src-addr, dst-addr and MAC addresses.

Name	Documentation	Status
tc01: dut replies to icmpv6 echo req to its ingress interface	Make TG send ICMPv6 Echo Req to DUT ingress interface. Make TG verify ICMPv6 Echo Reply is correct.	PASS
tc02: dut replies to icmpv6 echo req pkt with size 64b-to-1500b-incr-1b	Make TG send ICMPv6 Echo Reqs to DUT ingress interface, incrementating frame size from 64B to 1500B with increment step of 1Byte. Make TG verify ICMP Echo Replies are correct.	PASS
tc04: dut routes to its egress interface	Make TG send ICMPv6 Echo Req towards DUT1 egress interface connected to DUT2. Make TG verify ICMPv6 Echo Reply is correct.	PASS
tc05: dut1 routes to dut2 ingress interface	Make TG send ICMPv6 Echo Req towards DUT2 ingress interface connected to DUT1. Make TG verify ICMPv6 Echo Reply is correct.	PASS
tc06: dut1 routes to dut2 egress interface	Make TG send ICMPv6 Echo Req towards DUT2 egress interface connected to TG. Make TG verify ICMPv6 Echo Reply is correct.	PASS
tc07: dut1 and dut2 route between tg interfaces	Make TG send ICMPv6 Echo Req between its interfaces across DUT1 and DUT2. Make TG verify ICMPv6 Echo Replies are correct.	PASS
tc08: dut replies to ipv6 neighbor solicitation	On DUT configure interface IPv6 address in the main routing domain. Make TG send Neighbor Solicitation message on the link to DUT and verify DUT Neighbor Advertisement reply is correct.	PASS

7.5.27. eth2p-ethip6-ip6base-iaclbase-func

IPv6 routing with ingress ACL test cases Encapsulations: Eth-IPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv6 ingress ACL (iACL) tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. DUT1 is configured with iACL on link to TG, iACL classification and permit/deny action are configured on a per test case basis. Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped, or if received verifies packet IPv6 src-addr, dst-addr and MAC addresses.

Name	Documentation	Status
tc01: dut with iacl ipv6 src-addr drops matching pkts	On DUT1 add source IPv6 address to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc02: dut with iacl ipv6 dst-addr drops matching pkts	On DUT1 add destination IPv6 address to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc03: dut with iacl ipv6 src-addr and dst-addr drops matching pkts	On DUT1 add source and destination IPv6 addresses to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc04: dut with iacl ipv6 protocol set to tcp drops matching pkts	On DUT1 add protocol mask and TCP protocol (0x06) to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc05: dut with iacl ipv6 protocol set to udp drops matching pkts	On DUT1 add protocol mask and UDP protocol (0x11) to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc06: dut with iacl ipv6 tcp src-ports drops matching pkts	On DUT1 add TCP source ports to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc07: dut with iacl ipv6 tcp dst-ports drops matching pkts	On DUT1 add TCP destination ports to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc08: dut with iacl ipv6 tcp src-ports and dst-ports drops matching pkts	On DUT1 add TCP source and destination ports to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc09: dut with iacl ipv6 udp src-ports drops matching pkts	On DUT1 add UDP source ports to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc10: dut with iacl ipv6 udp dst-ports drops matching pkts	On DUT1 add TCP destination ports to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc11: dut with iacl ipv6 udp src-ports and dst-ports drops matching pkts	On DUT1 add UDP source and destination ports to classify table with ‘deny’. Make TG verify matching packets are dropped.	PASS
tc12: dut with iacl mac src-addr and iacl ipv6 udp src-ports and dst-ports drops matching pkts	On DUT1 add source MAC address to classify (L2) table and add UDP source and destination ports to classify (hex) table with ‘deny’. Make TG verify matching packets are dropped.	PASS

7.5.28. eth2p-ethip6-ip6base-ip6dhcpproxy-func

DHCPv6 proxy test cases

• [Top] Network Topologies: TG = DUT with two links between the nodes.
• [Cfg] DUT configuration: DUT is configured with DHCPv6 proxy.
• [Ver] TG verification: Test DHCPv6 packets are sent on TG on first link to DUT and received on TG on second link. On receive TG verifies if DHCPv6 packets are valid
• [Ref] Applicable standard specifications: RFC 3315

Name	Documentation	Status
tc01: vpp proxies valid dhcpv6 request to dhcpv6 server	[Top] TG=DUT [Cfg] On DUT setup DHCP proxy. [Ver] Make TG verify matching DHCPv6 packets between client and DHCPv6 server through DHCPv6 proxy. [Ref] RFC 3315	PASS

7.5.29. eth2p-ethip6-ip6base-ip6ecmp-func

Ipv6 Multipath routing test cases

• [Top] Network topologies: TG=DUT 2-node topology with two links between nodes.
• [Cfg] DUT configuration: On DUT configure interfaces IPv4 adresses, and multipath routing.
• [Ver] TG verification: Test packets are sent from TG on the first link to DUT. Packet is received on TG on the second link from DUT1.

Name	Documentation	Status
tc01: ipv6 equal-cost multipath routing	[Top] TG=DUT [Cfg] On DUT configure multipath routing wiht two equal-cost paths. [Ver] TG sends 100 IPv6 ICMP packets traffic on the first link to DUT. On second link to TG verify if traffic is divided into two paths.	PASS

7.5.30. eth2p-ethip6-ip6base-ip6ra-func

IPv6 Router Advertisement test cases RFC4861 Neighbor Discovery. Encapsulations: Eth-IPv6-RA on links TG-DUT1. IPv6 Router Advertisement tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. TG verifies received RA packets.

Name	Documentation	Status
tc01: dut transmits ra on ipv6 enabled interface	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPv6 interface on the link to TG. [Ver] Make TG wait for IPv6 Router Advertisement packet to be sent by DUT1 and verify the received RA packet is correct.	PASS
tc02: dut retransmits ra on ipv6 enabled interface after a set interval	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPv6 interface on the link to TG. [Ver] Make TG wait for two IPv6 Router Advertisement packets to be sent by DUT1 and verify the received RA packets are correct.	PASS
tc03: dut responds to router solicitation request	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPv6 interface on the link to TG and suppress sending of Router Advertisement packets periodically. [Ver] Make TG send IPv6 Router Solicitation request to DUT1, listen for response from DUT1 and verify the received RA packet is correct.	FAIL
tc04: dut responds to router solicitation request sent from link local address	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPv6 interface on the link to TG and suppress sending of Router Advertisement packets periodically. [Ver] Make TG send IPv6 Router Solicitation request to DUT1, listen for response from DUT1 and verify the received RA packet is correct.	FAIL

7.5.31. eth2p-ethip6-ip6base-ipolicemarkbase-func

IPv6 policer test cases

• [Top] Network topologies: TG=DUT1 2-node topology with two links between nodes.
• [Cfg] DUT configuration: On DUT1 configure interfaces IPv6 adresses, and static neighbor record on the second interface.
• [Ver] TG verification: Test packet is sent from TG on the first link to DUT1. Packet is received on TG on the second link from DUT1.
• [Ref] Applicable standard specifications: RFC2474, RFC2697, RFC2698.

Name	Documentation	Status
tc01: vpp policer 2r3c color-aware marks packet	[Top] TG=DUT1. [Ref] RFC2474, RFC2698. [Cfg] On DUT1 configure 2R3C color-aware policer on the first interface. [Ver] TG sends IPv6 TCP packet on the first link to DUT1. On DUT1 packet is marked with DSCP tag. Verify if DUT1 sends correct IPv6 TCP packet with correct DSCP on the second link to TG.	PASS
tc02: vpp policer 2r3c color-blind marks packet	[Top] TG=DUT1. [Ref] RFC2474, RFC2698. [Cfg] On DUT1 configure 2R3C color-blind policer on the first interface. [Ver] TG sends IPv6 TCP packet on the first link to DUT1. On DUT1 packet is marked with DSCP tag. Verify if DUT1 sends correct IPv6 TCP packet with correct DSCP on the second link to TG.	PASS
tc03: vpp policer 1r3c color-aware marks packet	[Top] TG=DUT1. [Ref] RFC2474, RFC2697. [Cfg] On DUT1 configure 1R3C color-aware policer on the first interface. [Ver] TG sends IPv6 TCP packet on the first link to DUT1. On DUT1 packet is marked with DSCP tag. Verify if DUT1 sends correct IPv6 TCP packet with correct DSCP on the second link to TG.	PASS
tc04: vpp policer 1r3c color-blind marks packet	[Top] TG=DUT1. [Ref] RFC2474, RFC2697. [Cfg] On DUT1 configure 1R3C color-blind policer on the first interface. [Ver] TG sends IPv6 TCP packet on the first link to DUT1. On DUT1 packet is marked with DSCP tag. Verify if DUT1 sends correct IPv6 TCP packet with correct DSCP on the second link to TG.	PASS

7.5.32. eth2p-ethip6-ip6basevrf-func

Vpn routed forwarding - baseline IPv6

• [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node topology with two links in between nodes.
• [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6
• [Cfg] DUT configuration: Each DUT is configured with two VRF tables; Separation of traffic is tested by IP packets; Neighbors and Routes are set on DUT nodes; IP addresses are set on DUT interfaces.
• [Ver] TG verification: Test ICMPv6 Echo Request packets are sent by TG on link to DUT1, DUT2 or back to TG; On receipt TG verifies packets for correctness and their IPv6 src-addr, dst-addr, and MAC addresses.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: tg packets routed to dut ingress interface, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv6-ICMPv6. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. Neighbors are configured for each DUTs ingress/egress ports, and each VRF is configured with just one route. [Ver] Packet is sent from TG->DUT1-if1 to DUT1->TG-if1 and from TG->DUT1-if2 to DUT1->TG-if2 and checked if arrived.	PASS
tc02: tg packets routed to dut egress interface, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv6-ICMPv6. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. Neighbors are configured for each DUTs ingress/egress ports, and each VRF is configured with just one route. [Ver] Packet is sent from TG->DUT1-if1 to DUT1->DUT2-if1 and from TG->DUT1-if2 to DUT1->DUT2-if2 and checked if arrived.	PASS
tc03: tg packets routed to dut2 ingress interface through dut1, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv6-ICMPv6. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. Neighbors are configured for each DUTs ingress/egress ports, and each VRF is configured with just one route. [Ver] Packet is sent from TG->DUT1-if1 to DUT2->DUT1-if1 and from TG->DUT1-if2 to DUT2->DUT1-if2 and checked if arrived.	PASS
tc04: tg packets routed to dut2 egress interface through dut1, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv6-ICMPv6. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. Neighbors are configured for each DUTs ingress/egress ports, and each VRF is configured with just one route. [Ver] Packet is sent from TG->DUT1-if1 to DUT2->TG-if1 and from TG->DUT1-if2 to DUT2->TG-if2 and checked if arrived.	PASS
tc05: tg packets routed to tg through dut1 and dut2, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv6-ICMPv6. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. Neighbors are configured for each DUTs ingress/egress ports, and each VRF is configured with just one route. [Ver] Packet is sent from TG->DUT1-if1 to TG->DUT2-if1 and from TG->DUT1-if2 to TG->DUT2-if2 and checked if arrived.	PASS
tc06: tg packets not routed to dut ingress interface in different vrf, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv6-ICMPv6. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. Neighbors are configured for each DUTs ingress/egress ports, and each VRF is configured with just one route. [Ver] Packet is sent from TG->DUT1-if1 to DUT1->TG-if2 where it should not arrive.	PASS
tc07: tg packets not routed to dut egress interface in different vrf, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv6-ICMPv6. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. Neighbors are configured for each DUTs ingress/egress ports, and each VRF is configured with just one route. [Ver] Packet is sent from TG->DUT1-if1 to DUT1->DUT2-if2 where it should not arrive.	PASS
tc08: tg packets not routed to dut2 ingress interface in different vrf through dut1, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv6-ICMPv6. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. Neighbors are configured for each DUTs ingress/egress ports, and each VRF is configured with just one route. [Ver] Packet is sent from TG->DUT1-if1 to DUT2->DUT1-if2 where it should not arrive.	PASS
tc09: tg packets not routed to dut2 egress interface in different vrf through dut1, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG [Enc] Eth-IPv6-ICMPv6. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. Neighbors are configured for each DUTs ingress/egress ports, and each VRF is configured with just one route. [Ver] Packet is sent from TG->DUT1-if1 to DUT2->TG-if2 where it should not arrive.	PASS
tc10: tg packets not routed to tg in different vrf through dut1 and dut2, vpp configured with two vrfs	[Top] TG=DUT1=DUT2=TG. [Enc] Eth-IPv6-ICMPv6. [Cfg] DUT1 and DUT2 are both configured with two fib tables. Each table is assigned to 2 interfaces to separate the traffic. Interfaces are configured with IP addresses from Variables. Neighbors are configured for each DUTs ingress/egress ports, and each VRF is configured with just one route. [Ver] Packet is sent from TG->DUT1-if1 to TG->DUT2-if2 where it should not arrive.	PASS

7.5.33. lisp

7.5.33.1. eth2p-ethip6lisp-l2bdbasemaclrn-func

l2-lispgpe-ip6 encapsulation test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IP6-ICMPv6-LISPGpe-IP6
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge domains and neighbors. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: route ipv6 packet through lisp with bridge domain setup.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IP6-ICMPv6-LISPGpe-IP6 [Cfg] Configure IPv6 LISP static adjacencies on DUT1 and DUT2. Also configure BD and assign it to LISP VNI. [Ver] Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP tunnel between them; verify IPv6, Ether headers on received packets are correct. [Ref] RFC6830.	PASS

7.5.33.2. eth2p-ethip6lispgpe-ip4base-func

LISP static adjacency test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv6 tunnel.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv4 bidirectionally over lispoipv6 tunnel	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] On DUT1 and DUT2 configure IPv6 LISP static adjacencies. [Ver] Make TG send ICMPv4 Echo Req between its interfaces across both DUTs and LISP tunnel between them; verify IPv4 headers on received packets are correct. [Cfg2] Reconf LISP. [Ver2] Verify packets are received again via LISP tunnel. [Ref] RFC6830.	PASS

7.5.33.3. eth2p-ethip6lispgpe-ip6base-func

ip6-lispgpe-ip6 encapsulation test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-LISPGPE-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn. [Cfg] Configure IPv6 LISP static adjacencies on DUT1 and DUT2. [Ver] Case: ip6-lispgpe-ip6 - phy2lisp Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct. [Ref] RFC6830.	PASS

7.5.33.4. eth2p-ethip6lispgpe-ip6basevrf-func

ip6-lispgpe-ip6 encapsulation test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-LISPGPE-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn. [Cfg] Configure IPv6 LISP static adjacencies on DUT1 and DUT2. [Ver] Case: ip6-lispgpe-ip6 - vrf, phy2lisp Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct. [Ref] RFC6830.	PASS

7.5.34. vxlan

7.5.34.1. eth2p-ethip6vxlan-l2bdbasemaclrn-func

Bridge-domain with VXLAN test cases - IPv6

• [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet encapsulations: Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC7348.

Name	Documentation	Status
tc01: dut1 and dut2 with l2bd and vxlanoipv6 tunnels switch icmpv6 between tg links	[Top] TG=DUT1=DUT2=TG. [Enc] Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn. [Cfg] On DUT1 and DUT2 configure L2 bridge-domain (MAC learning enabled), each with one interface to TG and one VXLAN tunnel interface towards the other DUT. [Ver] Make TG send ICMPv6 Echo Req between two of its interfaces to be switched by DUT1 and DUT2; verify all packets are received. [Ref] RFC7348.	PASS

7.5.34.2. eth4p-ethip6vxlan-l2bdbasemaclrn-l2shg-func

L2BD with SHG combined with VXLAN test cases - IPv6

• [Top] Network topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
• [Enc] Packet encapsulations: th-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG); VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC7348.

Name	Documentation	Status
tc01: dut1 and dut2 with l2bd and vxlanoipv6 tunnels in shg switch icmpv6 between tg links	[Top] TG=DUT1=DUT2=TG. [Enc] Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2; Eth-IPv6-ICMPv6 on TG-DUTn. [Cfg] On DUT1 configure L2 bridge-domain (MAC learning enabled) with two untagged interfaces to TG and two VXLAN interfaces towards the DUT2 and put both VXLAN interfaces into the same Split-Horizon-Group (SHG). On DUT2 configure two L2 bridge-domain (MAC learning enabled), each with one untagged interface to TG and one VXLAN interface towards the DUT1. [Ver] Make TG send ICMPv6 Echo Reqs between all four of its interfaces to be switched by DUT1 and DUT2; verify packets are not switched between TG interfaces connected to DUT2 that are isolated by SHG on DUT1. [Ref] RFC7348.	PASS
tc02: dut1 and dut2 with l2bd and vxlanoipv6 tunnels in different shgs switch icmpv6 between tg links	[Top] TG=DUT1=DUT2=TG. [Enc] Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2; Eth-IPv6-ICMPv6 on TG-DUTn. [Cfg] On DUT1 configure L2 bridge-domain (MAC learning enabled) with two untagged interfaces to TG and two VXLAN interfaces towards the DUT2 and put both VXLAN interfaces into the different Split-Horizon-Group (SHGs). On DUT2 configure two L2 bridge-domain (MAC learning enabled), each with one untagged interface to TG and one VXLAN interface towards the DUT1. [Ver] Make TG send ICMPv6 Echo Req between all four of its interfaces to be switched by DUT1 and DUT2; verify packets are switched between all TG interfaces. [Ref] RFC7348.	PASS

7.5.34.2.1. l2bd

7.5.35. eth2p-dot1ad–dot1q-l2bdbasemaclrn-vlantrans21-func

L2BD with VLAN tag rewrite test cases - transalte-2-1

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
• [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-2-1 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.

Name	Documentation	Status
tc01: dut1 and dut2 with l2bd and vlan translate-2-1 (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv4-ICMPv4 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-1 method; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag rewrite pop-1 method. [Ver] Make TG send ICMPv4 Echo Req tagged with Dot1ad tags from one of its interfaces to another one via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc02: dut1 and dut2 with l2bd and vlan translate-2-1 with wrong tag used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv4-ICMPv4 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-1 method to set tag different from tag set on VLAN sub-interface of DUT2; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag rewrite pop-1 method. [Ver] Make TG send ICMPv4 Echo Req tagged with Dot1ad tags from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc03: dut1 and dut2 with l2bd and vlan translate-2-1 (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-1 method; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag rewrite pop-1 method. [Ver] Make TG send ICMPv6 Echo Req tagged with Dot1ad tags from one of its interfaces to another one via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc04: dut1 and dut2 with l2bd and vlan translate-2-1 with wrong tag used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-1 method to set tag different from tag set on VLAN sub-interface of DUT2; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag rewrite pop-1 method. [Ver] Make TG send ICMPv6 Echo Req tagged with Dot1ad tags from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS

7.5.36. eth2p-dot1ad-l2bdbasemaclrn-vlantrans22-func

L2BD with VLAN tag rewrite test cases - translate-2-2

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
• [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-2-2 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.

Name	Documentation	Status
tc01: dut1 and dut2 with l2bd and vlan translate-2-2 switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv4-ICMPv4 on TG-DUT1 and on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 tagged with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv4 Echo Req via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1ad	PASS
tc02: dut1 and dut2 with l2bd and vlan translate-2-2 with wrong inner tag used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv4-ICMPv4 on TG-DUT1 and on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method to set inner tag different from inner tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 tagged with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv4 Echo Req via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1ad	PASS
tc03: dut1 and dut2 with l2bd and vlan translate-2-2 with wrong outer tag used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv4-ICMPv4 on TG-DUT1 and on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method to set outer tag different from outer tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 tagged with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv4 Echo Req via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1ad	PASS
tc04: dut1 and dut2 with l2bd and vlan translate-2-2 with wrong outer and inner tags used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv4-ICMPv4 on TG-DUT1 and on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method to set tags different from tags set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 tagged with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv4 Echo Req via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1ad	PASS
tc05: dut1 and dut2 with l2bd and vlan translate-2-2 switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-1 tagged with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv6 Echo Req via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1ad	PASS
tc06: dut1 and dut2 with l2bd and vlan translate-2-2 with wrong inner tag used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method to set inner tag different from inner tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-1 tagged with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv6 Echo Req via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1ad	PASS
tc07: dut1 and dut2 with l2bd and vlan translate-2-2 with wrong outer tag used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method to set outer tag different from outer tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-1 tagged with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv6 Echo Req via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1ad	PASS
tc08: dut1 and dut2 with l2bd and vlan translate-2-2 with wrong outer and inner tags used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method to set tags different from tags set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-1 tagged with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv6 Echo Req via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1ad	PASS

7.5.37. eth2p-dot1q–dot1ad-l2bdbasemaclrn-vlantrans12-func

L2BD with VLAN tag rewrite test cases - translate-1-2

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
• [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-1-2 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.

Name	Documentation	Status
tc01: dut1 and dut2 with l2bd and vlan translate-1-2 (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv4-ICMPv4 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv4 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc02: dut1 and dut2 with l2bd and vlan translate-1-2 with wrong inner tag used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv4-ICMPv4 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method to set inner tag different from inner tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 bridge domain with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv4 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc03: dut1 and dut2 with l2bd and vlan translate-1-2 with wrong outer tag used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv4-ICMPv4 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method to set outer tag different from outer tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 bridge domain with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv4 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc04: dut1 and dut2 with l2bd and vlan translate-1-2 with wrong outer and inner tag used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv4-ICMPv4 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method to set outer and inner tags different from tags set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 bridge domain with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv4 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc05: dut1 and dut2 with l2bd and vlan translate-1-2 (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv6 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc06: dut1 and dut2 with l2bd and vlan translate-1-2 with wrong inner tag used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method to set inner tag different from inner tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 bridge domain with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv6 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc07: dut1 and dut2 with l2bd and vlan translate-1-2 with wrong outer tag used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method to set outer tag different from outer tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 bridge domain with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv6 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc08: dut1 and dut2 with l2bd and vlan translate-1-2 with wrong outer and inner tag used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method to set outer and inner tags different from tags set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 bridge domain with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv6 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS

7.5.38. eth2p-dot1q-l2bdbasemaclrn-vlantrans11-func

L2BD with VLAN tag rewrite test cases - translate-1-1

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
• [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-1-1 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.

Name	Documentation	Status
tc01: dut1 and dut2 with l2bd and vlan translate-1-1 (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv4-ICMPv4 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-1 method; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag rewrite pop-1 method. [Ver] Make TG send ICMPv4 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1q	PASS
tc02: dut1 and dut2 with l2bd and vlan translate-1-1 with wrong tag used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv4-ICMPv4 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-1 method to set tag different from tag set on VLAN sub-interface of DUT2; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag rewrite pop-1 method. [Ver] Make TG send ICMPv4 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q	PASS
tc03: dut1 and dut2 with l2bd and vlan translate-1-1 (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-1 method; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag rewrite pop-1 method. [Ver] Make TG send ICMPv6 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1q	PASS
tc04: dut1 and dut2 with l2bd and vlan translate-1-1 with wrong tag used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 bridge domain (L2BD) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-1 method to set tag different from tag set on VLAN sub-interface of DUT2; on DUT2 configure L2 bridge domain (L2BD) with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag rewrite pop-1 method. [Ver] Make TG send ICMPv6 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q	PASS

7.5.39. eth2p-eth-l2bdbasemaclrn-func

L2 bridge-domain test cases

• [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes; TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled.
• [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: dut reports active interfaces	[Top] TG=DUT1; TG-DUT1-DUT2-TG. [Enc] None. [Cfg] Discovered active interfaces. [Ver] Report active interfaces on DUT. [Ref]	PASS
tc02: dut with l2bd (mac learning) switch icmpv4 between two tg links	[Top] TG=DUT1. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 configure two i/fs into L2BD with MAC learning. [Ver] Make TG verify ICMPv4 Echo Req pkts are switched thru DUT1 in both directions and are correct on receive. [Ref]	PASS
tc03: dut1 and dut2 with l2bd (mac learning) switch between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 and DUT2 configure two i/fs into L2BD with MAC learning. [Ver] Make TG verify ICMPv4 Echo Req pkts are switched thru DUT1 and DUT2 in both directions and are correct on receive. [Ref]	PASS

7.5.40. eth2p-eth-l2bdbasemacstc-func

L2 bridge-domain test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with static MACs.
• [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: dut1 and dut2 with l2bd (static macs) switch between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 and DUT2 configure two i/fs into L2BD with static MACs. [Ver] Make TG verify ICMPv4 Echo Req pkts are switched thru DUT1 and DUT2 in both directions and are correct on receive. [Ref]	PASS

7.5.41. eth4p-eth-l2bdbasemaclrn-l2shg-func

L2 bridge-domain test cases

• [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
• [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG).
• [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: dut1 and dut2 with l2bd (mac learn) and shg switch between four tg links	[Top] TG=DUT1=DUT2=TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 and DUT2 configure four i/fs into L2BD with MAC learning and the same SHG on i/fs towards TG. [Ver] Make TG verify ICMPv4 Echo Req pkts are switched thru DUT1 and DUT2 in both directions and are correct on receive; verify no pkts are switched thru SHG isolated interfaces. [Ref]	PASS

7.5.42. eth2p-dot1ad–dot1q-l2xcbase-vlantrans21-func

L2XC with VLAN tag rewrite test cases - translate-2-1

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 or Eth-dot1aq-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2 for L2 switching of IPv4/IPv6.
• [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-2-1 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.

Name	Documentation	Status
tc01: dut1 and dut2 with l2xc and vlan translate-2-1 (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv4-ICMPv4 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-1 method; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag rewrite pop-1 method. [Ver] Make TG send ICMPv4 Echo Req tagged with Dot1ad tags from one of its interfaces to another one via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc02: dut1 and dut2 with l2xc and vlan translate-2-1 with wrong tag used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv4-ICMPv4 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-1 method to set tag different from tag set on VLAN sub-interface of DUT2; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag rewrite pop-1 method. [Ver] Make TG send ICMPv4 Echo Req tagged with Dot1ad tags from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc03: dut1 and dut2 with l2xc and vlan translate-2-1 (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-1 method; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag rewrite pop-1 method. [Ver] Make TG send ICMPv6 Echo Req tagegd with Dot1ad tags from one of its interfaces to another one via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc04: dut1 and dut2 with l2xc and vlan translate-2-1 with wrong tag used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-1 method to set tag different from tag set on VLAN sub-interface of DUT2; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag rewrite pop-1 method. [Ver] Make TG send ICMPv6 Echo Req tagegd with Dot1ad tags from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS

7.5.43. eth2p-dot1ad-l2xcbase-func

L2 cross-connect with QinQ test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching with 802.1ad QinQ VLAN tag push and pop.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: IEEE 802.1ad.

Name	Documentation	Status
tc01: dut1 and dut2 with l2xc and two vlan push-pop switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] On DUT1 and DUT2 configure L2 cross-connect (L2XC), each with one interface to TG and one Ethernet interface towards the other DUT; each DUT pushes two VLAN tags on packets received from local TG, and popping two VLAN tags on packets transmitted to local TG. [Ver] Make TG send ICMPv4 Echo Req in both directions between two of its interfaces to be switched by DUT1 and DUT2; verify all packets are received. [Ref] IEEE 802.1ad.	PASS

7.5.44. eth2p-dot1ad-l2xcbase-vlantrans22-func

L2XC with VLAN tag rewrite test cases - translate-2-2

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
• [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-2-2 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.

Name	Documentation	Status
tc01: dut1 and dut2 with l2xc and vlan translate-2-2 switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv4-ICMPv4 on TG-DUT1 and on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-1 tagged with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv4 Echo Req via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1ad	PASS
tc02: dut1 and dut2 with l2xc and vlan translate-2-2 with wrong inner tag used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv4-ICMPv4 on TG-DUT1 and on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method to set inner tag different from inner tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-1 tagged with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv4 Echo Req via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1ad	PASS
tc03: dut1 and dut2 with l2xc and vlan translate-2-2 with wrong outer tag used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv4-ICMPv4 on TG-DUT1 and on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method to set outer tag different from outer tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-1 tagged with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv4 Echo Req via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1ad	PASS
tc04: dut1 and dut2 with l2xc and vlan translate-2-2 with wrong outer and inner tags used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv4-ICMPv4 on TG-DUT1 and on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method to set tags different from tags set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-1 tagged with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv4 Echo Req via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1ad	PASS
tc05: dut1 and dut2 with l2xc and vlan translate-2-2 switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-1 tagegd with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv6 Echo Req via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1ad	PASS
tc06: dut1 and dut2 with l2xc and vlan translate-2-2 with wrong inner tag used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method to set inner tag different from inner tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-1 tagegd with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv6 Echo Req via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1ad	PASS
tc07: dut1 and dut2 with l2xc and vlan translate-2-2 with wrong outer tag used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method to set outer tag different from outer tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-1 tagegd with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv6 Echo Req via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1ad	PASS
tc08: dut1 and dut2 with l2xc and vlan translate-2-2 with wrong outer and inner tags used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one Dot1ad sub-interface towards TG with VLAN tag rewrite translate-2-2 method to set tags different from tags set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-1 tagegd with Dot1ad tags from one of its interfaces to another one method. [Ver] Make TG send ICMPv6 Echo Req via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1ad	PASS

7.5.45. eth2p-dot1q–dot1ad-l2xcbase-vlantrans12-func

L2XC with VLAN tag rewrite test cases - translate-1-2

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
• [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-1-2 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.

Name	Documentation	Status
tc01: dut1 and dut2 with l2xc and vlan translate-1-2 (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv4-ICMPv4 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv4 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc02: dut1 and dut2 with l2xc and vlan translate-1-2 with wrong inner tag used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv4-ICMPv4 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method to set inner tag different from inner tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 cross-connect with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv4 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc03: dut1 and dut2 with l2xc and vlan translate-1-2 with wrong outer tag used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv4-ICMPv4 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method to set outer tag different from outer tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 cross-connect with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv4 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc04: dut1 and dut2 with l2xc and vlan translate-1-2 with wrong outer and inner tag used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv4-ICMPv4 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method to set outer and inner tags different from tags set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 cross-connect with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv4 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc05: dut1 and dut2 with l2xc and vlan translate-1-2 (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv6 Echo Req tagegd with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc06: dut1 and dut2 with l2xc and vlan translate-1-2 with wrong inner tag used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method to set inner tag different from inner tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 cross-connect with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv6 Echo Req tagegd with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc07: dut1 and dut2 with l2xc and vlan translate-1-2 with wrong outer tag used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method to set outer tag different from outer tag set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 cross-connect with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv6 Echo Req tagegd with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS
tc08: dut1 and dut2 with l2xc and vlan translate-1-2 with wrong outer and inner tag used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-2 method to set outer and inner tags different from tags set on Dot1ad sub-interface of DUT2; on DUT2 configure L2 cross-connect with one interface to TG and one Dot1ad sub-interface towards DUT1 with VLAN tag rewrite pop-2 method. [Ver] Make TG send ICMPv6 Echo Req tagegd with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q, IEEE 802.1ad	PASS

7.5.46. eth2p-dot1q-l2xcbase-vlantrans11-func

L2XC with VLAN tag rewrite test cases - translate-1-1

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv4-ICMPv4 on TG-DUT2 for L2 switching of IPv4/IPv6.
• [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-1-1 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.

Name	Documentation	Status
tc01: dut1 and dut2 with l2xc and vlan translate-1-1 (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv4-ICMPv4 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-1 method; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag rewrite pop-1 method. [Ver] Make TG send ICMPv4 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1q	PASS
tc02: dut1 and dut2 with l2xc and vlan translate-1-1 with wrong tag used (dut1) switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv4-ICMPv4 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one VLAN tagged sub-interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite (translate-1-1) on sub-interface to DUT2; on DUT2 configure L2XC with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag pop-1. [Ver] Make TG send ICMPv4 Echo Req tagged with one dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q	PASS
tc03: dut1 and dut2 with l2xc and vlan translate-1-1 (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-1 method; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag rewrite pop-1 method. [Ver] Make TG send ICMPv6 Echo Req tagegd with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is received. [Ref] IEEE 802.1q	PASS
tc04: dut1 and dut2 with l2xc and vlan translate-1-1 with wrong tag used (dut1) switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUT2. [Cfg] On DUT1 configure L2 cross-connect (L2XC) with one interface to DUT2 and one VLAN sub-interface towards TG with VLAN tag rewrite translate-1-1 method to set tag different from tag set on VLAN sub-interface of DUT2; on DUT2 configure L2 cross-connect (L2XC) with one interface to TG and one VLAN sub-interface towards DUT1 with VLAN tag rewrite pop-1 method. [Ver] Make TG send ICMPv6 Echo Req tagegd with one Dot1q tag from one of its interfaces to another one via DUT1 and DUT2; verify that packet is not received. [Ref] IEEE 802.1q	PASS

7.5.47. eth2p-eth-l2xcbase-func

L2 cross-connect test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching.
• [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: dut1 and dut2 with l2xc switch icmpv4 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 and DUT2 configure L2 cross-connect (L2XC), each with one interface to TG and one Ethernet interface towards the other DUT. [Ver] Make TG send ICMPv4 Echo Req in both directions between two of its interfaces to be switched by DUT1 and DUT2; verify all packets are received. [Ref]	PASS
tc02: dut1 and dut2 with l2xc switch icmpv6 between two tg links	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-ICMPv6. [Cfg] On DUT1 and DUT2 configure L2 cross-connect (L2XC), each with one interface to TG and one Ethernet interface towards the other DUT. [Ver] Make TG send ICMPv6 Echo Req in both directions between two of its interfaces to be switched by DUT1 and DUT2; verify all packets are received. [Ref]	PASS

7.5.48. eth2p-eth-l2xcbase-iaclbase-func

Ingress ACL test cases

• [Top] Network Topologies: TG - DUT1 - DUT2 - TG with one link between the nodes.
• [Cfg] DUT configuration: DUT2 is configured with L2 Cross connect. DUT1 is configured with iACL classification on link to TG,
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped.

Name	Documentation	Status
tc01: dut with iacl mac src-addr drops matching pkts	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 add source MAC address to classify table with ‘deny’. [Ver] Make TG verify matching packets are dropped.	PASS
tc02: dut with iacl mac dst-addr drops matching pkts	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 add destination MAC address to classify table with ‘deny’. [Ver] Make TG verify matching packets are dropped.	PASS
tc03: dut with iacl mac src-addr and dst-addr drops matching pkts	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 add source and destination MAC address to classify table with ‘deny’. [Ver] Make TG verify matching packets are dropped.	PASS
tc04: dut with iacl ethertype drops matching pkts	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 add EtherType IPv4(0x0800) to classify table with ‘deny’. [Ver] Make TG verify matching packets are dropped.	PASS

7.5.49. eth2p-ethip4-ip4base-ip4ipfixbase-func

IPFIX ipv4 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector. Test packets are sent from TG to DUT1. TG listens for flow report packets and verifies that they contains flow record of test packets sent.

Name	Documentation	Status
tc01: dut sends ipfix template and data packets	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPFIX with TG interface address as collector and a basic classify session. [Ver] Make TG listen for IPFIX template and data packets, verify that packet is received and correct. No packets are sent from TG. [Ref] RFC 7011	PASS
tc02: dut reports packet flow for traffic by source address	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPFIX with TG interface address as collector and add classify session with TG source address. [Ver] Make TG send a packet to DUT1, then listen for IPFIX template and data packets, verify that IPFIX reported the received packet. [Ref] RFC 7011	PASS
tc03: dut reports packet flow for traffic with local destination address	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPFIX with TG interface address as collector and add classify session with destination address of DUT1. [Ver] Make TG send a packet to DUT1, then listen for IPFIX template and data packets, verify that IPFIX reported the received packet. [Ref] RFC 7011	PASS
tc04: dut reports packet flow for traffic with remote destination address	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPFIX with TG interface address as collector and add classify session with destination address of DUT2. [Ver] Make TG send a packet to DUT2 through DUT1, then listen for IPFIX template and data packets, verify that IPFIX reported the received packet. [Ref] RFC 7011	PASS
tc05: dut reports packet flow for traffic by source and destination port	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPFIX with TG interface address as collector and add classify session with TG source address and source and destination ports. [Ver] Make TG send a packet to DUT1, then listen for IPFIX template and data packets, verify that IPFIX reported the received packet. [Ref] RFC 7011	PASS

7.5.50. eth2p-ethip4-ip4base-ip4ipfixscale-func

IPFIX ipv4 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector. Test packets are sent from TG to DUT1. TG listens for flow report packets and verifies that they contains flow record of test packets sent.

Name	Documentation	Status
tc01: dut reports packet flow with a large number of packets	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPFIX with TG interface address as collector and add classify session with TG source address. [Ver] Make TG send packets to DUT1, then listen for IPFIX template and data packets, verify that IPFIX reported the received packets. [Ref] RFC 7011	PASS
tc02: dut reports packet flow when multiple sessions are configured	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPFIX with TG interface address as collector and add several classify sessions with different ports. [Ver] Make TG send packets to DUT1 using a range of ports matching configured sessions, then listen for IPFIX template and data packets, verify that IPFIX reported the received packets for each session. [Ref] RFC 7011	PASS

7.5.51. eth2p-ethip4-ip4base-spanrx-func

SPAN test suite

• [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
• [Cfg] DUT configuration: DUT1 is configured with SPAN mirroring from the first DUT1-TG interface to the second one.
• [Ver] TG verification: Test ARP or ICMP packets are sent by TG on first link to DUT1; On receipt through second link TG verifies the copy of packet sent and the copy of DUT’s reply packet.
• [Ref] Applicable standard specifications: None?

Name	Documentation	Status
tc01: dut mirrors l2 packets from one interface to another	[Top] TG=DUT1 [Cfg] On DUT1 configure IPv4 address and set SPAN mirroring from one DUT interface to the other. [Ver] Make TG send an ARP packet to DUT through one interface, then receive a copy of sent packet and of DUT’s ARP reply on the second interface.	PASS
tc02: dut mirrors ipv4 packets from one interface to another	[Top] TG=DUT1 [Cfg] On DUT1 configure IPv4 address, add ARP entry for one TG interface and set SPAN mirroring from one DUT interface to the other. [Ver] Make TG send an ICMP packet to DUT through one interface, then receive a copy of sent packet and of DUT’s ICMP reply on the other interface.	PASS

7.5.52. eth2p-ethip6-ip6base-ip6ipfixbase-func

IPFIX ipv6 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 and IPV6 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector.Test packets are sent from TG to or through DUT1. TG listens for flow report packets and verifies that they contains flow records of test packets sent.

Name	Documentation	Status
tc01: dut reports packet flow for traffic by source address	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPFIX with TG interface address as collector and add classify session with TG source address. [Ver] Make TG send a packet to DUT1, then listen for IPFIX template and data packets, verify that IPFIX reported the received packet. [Ref] RFC 7011	PASS
tc02: dut reports packet flow for traffic with local destination address	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPFIX with TG interface address as collector and add classify session with destination address of DUT1. [Ver] Make TG send a packet to DUT1, then listen for IPFIX template and data packets, verify that IPFIX reported the received packet. [Ref] RFC 7011	PASS
tc03: dut reports packet flow for traffic with remote destination address	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPFIX with TG interface address as collector and add classify session with destination address of DUT2. [Ver] Make TG send a packet to DUT2 through DUT1, then listen for IPFIX template and data packets, verify that IPFIX reported the received packet. [Ref] RFC 7011	PASS
tc04: dut reports packet flow for traffic by source and destination port	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPFIX with TG interface address as collector and add classify session with TG source address and source and destination ports. [Ver] Make TG send a packet to DUT1, then listen for IPFIX template and data packets, verify that IPFIX reported the received packet. [Ref] RFC 7011	PASS

7.5.53. eth2p-ethip6-ip6base-ip6ipfixscale-func

IPFIX ipv6 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 and IPV6 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector.Test packets are sent from TG to or through DUT1. TG listens for flow report packets and verifies that they contains flow records of test packets sent.

Name	Documentation	Status
tc01: dut reports packet flow with a large number of packets	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPFIX with TG interface address as collector and add classify session with TG source address. [Ver] Make TG send packets to DUT1, then listen for IPFIX template and data packets, verify that IPFIX reported the received packets. [Ref] RFC 7011	PASS
tc02: dut reports packet flow when multiple sessions are configured	[Top] TG-DUT1-DUT2-TG. [Cfg] On DUT1 configure IPFIX with TG interface address as collector and add several classify sessions with different ports. [Ver] Make TG send packets to DUT1 using a range of ports matching configured sessions, then listen for IPFIX template and data packets, verify that IPFIX reported the received packets for each session. [Ref] RFC 7011	PASS

7.5.54. eth2p-ethip6-ip6base-spanrx-func

SPAN test suite

• [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
• [Cfg] DUT configuration: DUT1 is configured with SPAN mirroring from the first DUT1-TG interface to the second one.
• [Ver] TG verification: Test ARP or ICMP packets are sent by TG on first link to DUT1; On receipt through second link TG verifies the copy of packet sent and the copy of DUT’s reply packet.
• [Ref] Applicable standard specifications: None?

Name	Documentation	Status
tc01: dut mirrors ipv6 packets from one interface to another	[Top] TG=DUT1 [Cfg] On DUT1 configure IPv6 address, add ARP entry for one TG interface and set SPAN mirroring from one DUT interface to the other. [Ver] Make TG send an ICMP packet to DUT through one interface, then receive a copy of sent packet and of DUT’s ICMP reply on the other interface.	PASS

7.5.55. ip4

7.5.55.1. eth2p-ethip4-ip4base-eth-2vhost-1vm

IPv4 routing test cases with vhost user interface RFC791 IPv4, RFC826 ARP, RFC792 ICMPv4. Encapsulations: Eth-IPv4-ICMPv4 on links TG=DUT1. IPv4 routing tests use circular 2-node topology TG - DUT1 - TG with two link between the nodes. DUT is configured with IPv4 routing and static routes. Test sends packets by TG on links to DUT and received on TG link on the other side of circular topology. On receive TG verifies packets IPv4 src-addr, dst-addr and MAC addresses.

Name	Documentation	Status
tc01: ipv4 forward via vhost to another vrf	Test uses VRF to route IPv4 traffic through 2 vhost user interfaces. Both have IP addresses from same network. On VM is set bridge to pass packet from a one vhost user interface to another one.	PASS

7.5.55.2. eth2p-ethip4ipsectptlispgpe-ip4base-eth-2vhost-1vm-func

IPv4-ip4-ipsec-lispgpe-ip4 - main fib, vrf (gpe_vni-to-vrf)

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: ICMPv4-IPv4-IPSec-LISPGPE-IPv4-ICMPv4.
• [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
• [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
• [Ref] Applicable standard specifications: RFC6830, RFC4303.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-IPSec-LISPGPE-IPv4-ICMP on DUT1-DUT2, Eth-IPv4-ICMP on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTS. Create Qemu vm on DUT1 and configure bridge between two vhosts. [Ver] Case: ip4-ipsec-lispgpe-ip4 - main fib, virt2lisp Make TG send ICMPv4 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv4 headers on received packets are correct. [Ref] RFC6830, RFC4303.	FAIL
tc02: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-IPSec-LISPGPE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTS. [Ver] Case: ip4-ipsec-lispgpe-ip4 - main fib, virt2lisp Make TG send ICMPv4 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv4 headers on received packets are correct. [Ref] RFC6830, RFC4303.	FAIL

7.5.55.3. eth2p-ethip4ipsectptlispgpe-ip6base-eth-2vhost-1vm-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
• [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
• [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
• [Ref] Applicable standard specifications: RFC6830, RFC4303.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP on DUT1-DUT2, Eth-IPv6-ICMP on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTS. Create Qemu vm on DUT1 and configure bridge between two vhosts. [Ver] Case: ip4-ipsec-lispgpe-ip6 - main fib, virt2lisp Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct. [Ref] RFC6830, RFC4303.	PASS
tc02: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-IPSec-LISPGPE-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6, on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTS. [Ver] Case: ip4-ipsec-lispgpe-ip6 - main fib, virt2lisp Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct. [Ref] RFC6830, RFC4303.	PASS

7.5.55.4. eth2p-ethip4lispgpe-ip4base-eth-2vhost-1vm-func

ip4-lispgpe-ip4 encapsulation test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using vhost interfaces	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-LISPGPE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2. [Ver] Case: ip4-lispgpe-ip4 - main fib, virt2lisp Make TG send ICMPv4 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv4 headers on received packets are correct.	PASS

7.5.55.5. eth2p-ethip4lispgpe-ip4basevrf-eth-2vhost-1vm-func

ip4-lispgpe-ip4 encapsulation test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using vhost interfaces and vrf is enabled	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-LISPGPE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2. [Ver] Case: ip4-lispgpe-ip4 - vrf, virt2lisp Make TG send ICMPv4 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv4 headers on received packets are correct. [Ref] RFC6830.	PASS

7.5.55.6. eth2p-ethip4lispgpe-ip6base-eth-2vhost-1vm-func

LISP static adjacency test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-LISPGPE-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn. [Cfg] Configure IPv4 LISP static adjacencies on DUT1 and DUT2. [Ver] Case: ip6-lispgpe-ip4 - main fib, virt2lisp Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct.	PASS

7.5.56. ip6

7.5.56.1. eth2p-ethip6ipsectptlispgpe-ip4base-eth-2vhost-1vm-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, virt2lisp, phy2lisp

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv6-LISPGPE-IPSec-IPv4-ICMP, Eth-IPv6-IPSec-LISPGPE-IPv4-ICMP
• [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Test cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
• [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
• [Ref] Applicable standard specifications: RFC6830, RFC4303.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-LISPGPE-IPSec-IPv4-ICMP on DUT1-DUT2, Eth-IPv4-ICMP on TG-DUTn. [Cfg] Configure IPv6 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTS. Create Qemu vm on DUT1 and configure bridge between two vhosts. [Ver] Case: ip6-ipsec-lispgpe-ip4 - main fib, virt2lisp Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct. [Ref] RFC6830, RFC4303.	PASS
tc02: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6, on TG-DUTn. [Cfg] Configure IPv6 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTS. [Ver] Case: ip6-ipsec-lispgpe-ip4 - main fib, virt2lisp Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct. [Ref] RFC6830, RFC4303.	PASS

7.5.56.2. eth2p-ethip6ipsectptlispgpe-ip6base-eth-2vhost-1vm-func

IPv6 - ip6-ipsec-lispgpe-ip6 - main fib, vrf (gpe_vni-to-vrf), phy2lisp, virt2lisp

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6,
• [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
• [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
• [Ref] Applicable standard specifications: RFC6830, RFC4303.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-IPSec-LISPGPE-IPv6-ICMP on DUT1-DUT2, Eth-IPv6-ICMP on TG-DUTn. [Cfg] Configure IPv6 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTS. Create Qemu vm on DUT1 and configure bridge between two vhosts. [Ver] Case: ip6-ipsec-lispgpe-ip6 - main fib, virt2lisp Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct. [Ref] RFC6830, RFC4303.	FAIL
tc02: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int.	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn. [Cfg] Configure IPv6 LISP static adjacencies on DUT1 and DUT2 with IPsec in between DUTS. [Ver] Case: ip6-ipsec-lispgpe-ip6 - main fib, virt2lisp Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct. [Ref] RFC6830, RFC4303.	FAIL

7.5.56.3. eth2p-ethip6lispgpe-ip6base-eth-2vhost-1vm-func

ip6-lispgpe-ip6 encapsulation test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-LISPGPE-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn. [Cfg] Configure IPv6 LISP static adjacencies on DUT1 and DUT2. [Ver] Case: ip6-ipsec-lispgpe-ip6 - main fib, virt2lisp Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct.	PASS

7.5.56.4. eth2p-ethip6lispgpe-ip6basevrf-eth-2vhost-1vm-func

ip6-lispgpe-ip6 encapsulation test cases

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC6830.

Name	Documentation	Status
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces and vrf is enabled	[Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-LISPGPE-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn. [Cfg] Configure IPv6 LISP static adjacencies on DUT1 and DUT2. [Ver] Case: ip6-lispgpe-ip6 - vrf, virt2lisp Make TG send ICMPv6 Echo Req between its interfaces across both DUTs and LISP GPE tunnel between them; verify IPv6 headers on received packets are correct. [Ref] RFC6830.	PASS

7.5.57. l2bd

7.5.57.1. eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm-func

L2 bridge domain with VLAN tag over VM test cases

• [Top] Network Topologies: TG=DUT 2-node circular topology with double links between nodes.
• [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG=DUT and on DUT=VM.
• [Cfg] DUT configuration: DUT is configured with two bridge domains (L2BD) with MAC learning enabled; each one with added VLAN sub-interface towards TG and vhost-user interface to local VM. Configure linux bridge on VM to pass traffic between both vhost-user interfaces.
• [Ver] TG verification: Make TG send ICMPv4/ICMPv6 Echo Req between two of its interfaces to be switched by DUT via VM; verify packets are switched between these TG interfaces; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr, MAC addresses and VLAN tag.
• [Ref] Applicable standard specifications: IEEE 802.1q.

Name	Documentation	Status
tc01: eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm - ipv4	[Top] TG=DUT. [Enc] Eth-dot1q-IPv4-ICMPv4 on TG=DUT and on DUT=VM. [Cfg] On DUT configure two L2BDs (MAC learning enabled); first L2BD with Dot1Q tagged interface to TG-if1 and vhost-user interface to local VM, second one with vhost-user interface to local VM and Dot1Q tagged interface towards TG-if2. Configure linux bridge on VM to pass traffic between both vhost-user interfaces. [Ver] Make TG send ICMPv4 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT and VM; verify that packet is received. [Ref] IEEE 802.1q	PASS
tc01: eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm - ipv6	[Top] TG=DUT. [Enc] Eth-dot1q-IPv6-ICMPv6 on TG=DUT and on DUT=VM. [Cfg] On DUT configure two L2BDs (MAC learning enabled); first L2BD with Dot1Q tagged interface to TG-if1 and vhost-user interface to local VM, second one with vhost-user interface to local VM and Dot1Q tagged interface towards TG-if2. Configure linux bridge on VM to pass traffic between both vhost-user interfaces. [Ver] Make TG send ICMPv6 Echo Req tagged with one Dot1q tag from one of its interfaces to another one via DUT and VM; verify that packet is received. [Ref] IEEE 802.1q	PASS

7.5.57.2. eth2p-dot1q-l2bdbasemaclrn-eth-4vhost-2vm-fds-provider-nets-func

Provider network FDS related. Test suite uses 3-node topology TG - DUT1 - DUT2 - TG with one link between nodes. Test packets are sent in both directions between namespaces in DUT1 and DUT2 with both positive and negative scenarios tested.

Name	Documentation	Status
provider network test cases with provider physical networks (vlan)	Ping among all ports inside the same network should pass. a) test l2 connectivity inside every network b) test l2 connectivity between networks	PASS

7.5.57.3. eth2p-eth-l2bdbasemaclrn-eth-2vhost-1vm-func

L2 bridge-domain test cases

• [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
• [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
• [Cfg] DUT configuration: DUT1 is configured with two L2 bridge-domains (L2BD) switching combined with MAC learning enabled.
• [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: dut with two l2bds (mac learn) switches icmpv4 between tg and vm links	[Top] TG=DUT=VM. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 configure two L2BDs with MAC learning, each with vhost-user i/f to local VM and i/f to TG; configure VM to loop pkts back betwen its two virtio i/fs. [Ver] Make TG verify ICMPv4 Echo Req pkts are switched thru DUT1 and VM in both directions and are correct on receive. [Ref]	PASS
tc02: dut with two l2bds (mac learn) switches icmpv6 between tg and vm links	[Top] TG=DUT=VM. [Enc] Eth-IPv6-ICMPv6. [Cfg] On DUT1 configure two L2BDs with MAC learning, each with vhost-user i/f to local VM and i/f to TG; configure VM to loop pkts back betwen its two virtio i/fs. [Ver] Make TG verify ICMPv6 Echo Req pkts are switched thru DUT1 and VM in both directions and are correct on receive. [Ref]	PASS

7.5.57.4. eth2p-eth-l2bdbasemacstc-eth-2vhost-1vm-func

L2 bridge-domain test cases

• [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
• [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
• [Cfg] DUT configuration: DUT1 is configured with two L2 bridge-domains (L2BD) switching combined with static MACs.
• [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: dut with two l2bds (static macs) switches icmpv4 between tg and vm links	[Top] TG=DUT=VM. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 configure two L2BDs with static MACs, each with vhost-user i/f to local VM and i/f to TG; configure VM to loop pkts back betwen its two virtio i/fs. [Ver] Make TG verify ICMPv4 Echo Req pkts are switched thru DUT1 and VM in both directions and are correct on receive. [Ref]	PASS
tc02: dut with two l2bds (static macs) switches icmpv6 between tg and vm links	[Top] TG=DUT=VM. [Enc] Eth-IPv6-ICMPv6. [Cfg] On DUT1 configure two L2BDs with static MACs, each with vhost-user i/f to local VM and i/f to TG; configure VM to loop pkts back betwen its two virtio i/fs. [Ver] Make TG verify ICMPv6 Echo Req pkts are switched thru DUT1 and VM in both directions and are correct on receive. [Ref]	PASS

7.5.57.5. eth2p-ethip4-l2bdbase-vhost-client-reconnect-2vm-func

Vhost-User Interface Traffic Tests

• [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
• [Enc] Packet Encapsulations: Eth-IPv4-VXLAN-ETH-IP on TG-DUT link. ETH-IP on VirtualEthernet-VM interface.
• [Cfg] DUT configuration: On DUT is running 2 VM with 2 vhost-user interface on each VM. DUT is configured with VXLAN and vhost-user interfaces in bridge-domain (L2BD).
• [Cfg] VM configuration: VM has both vhost-user interfaces added into Linux Bridge.
• [Ver] TG verification: VXLAN packet is send to DUT where is decapsulated and send bridged to vhost-user inteface. VM forwards frame to its second interface and VPP encapsulates it to another VXLAN tunnel. Packets are sent and received by TG on link to DUT.

Name	Documentation	Status
tc01: qemu reconnects to vpps vhost-user when qemu is killed and restarted		PASS
tc02: vpp reconnects to qemu vhost-user when restart vpp and reconfigured	Failing: Qemu doesn’t support reconnect prior to version 2.7.	FAIL

7.5.57.6. eth2p-ethip4vxlan-l2bdbasemaclrn–eth-4vhost-2vm-fds-tenant-nets-func

Tenant network FDS related. Test suite uses 3-node topology TG - DUT1 - DUT2 - TG with one link between nodes. Test packets are sent in both directions between namespaces in DUT1 and DUT2 with both positive and negative scenarios tested.

Name	Documentation	Status
l2 test cases with tenant networks (vxlan)	Ping among all ports inside the same network should pass. a) test l2 connectivity inside every network b) test l2 connectivity between networks	PASS

7.5.57.7. eth2p-ethip4vxlan-l2bdbasemaclrn-eth-2vhost-1vm-func

L2BD with VM combined with VXLAN test cases - IPv4

• [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC7348.

Name	Documentation	Status
tc01:dut1 and dut2 with two l2bds and vxlanoipv4 tunnel switch icmpv4 between tg links and vm links	[Top] TG-DUT1-VM-DUT1-DUT2-VM-DUT2-TG. [Enc] Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2; Eth-IPv4-ICMPv4 on TG-DUTn and DUTn=VM. [Cfg] On both DUTs configure two L2BDs (MAC learning enabled); first L2BD with untagged interface to TG and vhost-user interface to local VM, second one with vhost-user interface to local VM and VXLAN interface towards the other DUT. Configure linux bridge on both VMs to pass traffic between both vhost-user interfaces. [Ver] Make TG send ICMPv4 Echo Req between two of its interfaces to be switched by DUT1 and DUT2; verify packets are switched between these TG interfaces. [Ref] RFC7348.	PASS

7.5.57.8. eth2p-ethip6vxlan-l2bdbasemaclrn-eth-2vhost-1vm-func

L2BD with VM combined with VXLAN test cases - IPv6

• [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
• [Enc] Packet encapsulations: Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
• [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
• [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications: RFC7348.

Name	Documentation	Status
tc01:dut1 and dut2 with two l2bds and vxlanoipv6 tunnel switch icmpv6 between tg links and vm links	[Top] TG-DUT1-VM-DUT1-DUT2-VM-DUT2-TG. [Enc] Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2; Eth-IPv4-ICMPv4 on TG-DUTn and DUTn=VM. [Cfg] On both DUTs configure two L2BDs (MAC learning enabled); first L2BD with untagged interface to TG and vhost-user interface to local VM, second one with vhost-user interface to local VM and VXLAN interface towards the other DUT. Configure linux bridge on both VMs to pass traffic between both vhost-user interfaces. [Ver] Make TG send ICMPv6 Echo Req between two of its interfaces to be switched by DUT1 and DUT2; verify packets are switched between these TG interfaces. [Ref] RFC7348.	PASS

7.5.58. l2xc

7.5.58.1. eth2p-eth-l2xcbase-eth-2vhost-1vm-func

L2 cross-connect test cases

• [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
• [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
• [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching.
• [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
• [Ref] Applicable standard specifications:

Name	Documentation	Status
tc01: dut with two l2xcs switches icmpv4 between tg and local vm links	[Top] TG=DUT=VM. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT configure two L2 cross-connects (L2XC), each with one untagged interface to TG and untagged i/f to local VM over vhost-user. [Ver] Make TG send ICMPv4 Echo Reqs in both directions between two of its i/fs to be switched by DUT to and from VM; verify all packets are received. [Ref]	PASS
tc02: dut with two l2xcs switches icmpv6 between tg and local vm links	[Top] TG=DUT=VM. [Enc] Eth-IPv6-ICMPv6. [Cfg] On DUT configure two L2 cross-connects (L2XC), each with one untagged i/f to TG and untagged i/f to local VM over vhost-user. [Ver] Make TG send ICMPv6 Echo Reqs in both directions between two of its i/fs to be switched by DUT to and from VM; verify all packets are received. [Ref]	PASS