func

crypto

default

eth2p-ethip4ipsectnl-ip4base-func

IPv4 IPsec tunnel mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5770543464486f6f5a6a4d694135584b integ-alg sha1-96 integ-key 4835454777427a6f793970656231506530565266 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5770543464486f6f5a6a4d694135584b integ-alg sha1-96 integ-key 4835454777427a6f793970656231506530565266 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 333834466837345062614a4e70476e6e6b7268564a6d6963 integ-alg sha-256-128 integ-key 487130736462496d477942626543626f683930346c75526455437052354f6e44 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 333834466837345062614a4e70476e6e6b7268564a6d6963 integ-alg sha-256-128 integ-key 487130736462496d477942626543626f683930346c75526455437052354f6e44 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 345155756d44624b6777594a425a644764683145477671354d5545323851464f integ-alg sha-384-192 integ-key 64737747577462636842764f355a34706b6253386a37714a786541767655724e7459317079307238436649566b315570 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 345155756d44624b6777594a425a644764683145477671354d5545323851464f integ-alg sha-384-192 integ-key 64737747577462636842764f355a34706b6253386a37714a786541767655724e7459317079307238436649566b315570 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 465649557a757832534f715a74417539444d5541716f6b5676423378686f6967 integ-alg sha-512-256 integ-key 416c3939533679334145795052674e4c7a74376b384568393037566b4650786669646b6d49664e654564654757764b53424e4a35545a50363671464c48635a63 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 465649557a757832534f715a74417539444d5541716f6b5676423378686f6967 integ-alg sha-512-256 integ-key 416c3939533679334145795052674e4c7a74376b384568393037566b4650786669646b6d49664e654564654757764b53424e4a35545a50363671464c48635a63 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 41347871393872344144793532527a73 integ-alg sha1-96 integ-key 375a54574c6b443437305665644e385a7632694e tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 41347871393872344144793532527a73 integ-alg sha1-96 integ-key 375a54574c6b443437305665644e385a7632694e tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4f4b433466524e683359767942693537 integ-alg sha1-96 integ-key 70416543757a31313272544a41626a4b574f354f tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4f4b433466524e683359767942693537 integ-alg sha1-96 integ-key 70416543757a31313272544a41626a4b574f354f tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 33483845686e6e427638706b59736663 integ-alg sha1-96 integ-key 705672426b364854576c46467551706554466133 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 33483845686e6e427638706b59736663 integ-alg sha1-96 integ-key 705672426b364854576c46467551706554466133 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4f55626b456245467779586c7830616a integ-alg sha1-96 integ-key 4b6f766b754a6b5365714b536f72354256554577 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4f55626b456245467779586c7830616a integ-alg sha1-96 integ-key 4b6f766b754a6b5365714b536f72354256554577 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 38325761626832743863645234587644 integ-key 71326458736b6d41735536416c70537856643943 
 exec set ipsec sa 20 crypto-key 38325761626832743863645234587644 integ-key 71326458736b6d41735536416c70537856643943 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 347668384e474830597476384e644858 integ-alg sha1-96 integ-key 6c4b636b63737433624658566f66494532396c43 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 347668384e474830597476384e644858 integ-alg sha1-96 integ-key 6c4b636b63737433624658566f66494532396c43 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 74783842736c31394641583563523439 integ-key 7961707363586773704e6d703672645048537568 
 exec set ipsec sa 20 crypto-key 74783842736c31394641583563523439 integ-key 7961707363586773704e6d703672645048537568 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 696172527a6a42564c53565363444b4a integ-alg sha1-96 integ-key 38514c4e513579504e6d75757a4c766758527567 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 696172527a6a42564c53565363444b4a integ-alg sha1-96 integ-key 38514c4e513579504e6d75757a4c766758527567 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 4e4a73374a314f4f7573323276665a76 integ-key 366c464d6448476d4b71734e344f487978773337 
 exec set ipsec sa 20 crypto-key 4e4a73374a314f4f7573323276665a76 integ-key 366c464d6448476d4b71734e344f487978773337 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6b6933367164363933664a366262326c integ-alg sha1-96 integ-key 514738524e723342383354364661703351676851 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6b6933367164363933664a366262326c integ-alg sha1-96 integ-key 514738524e723342383354364661703351676851 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 596739625056476a7774477157563437 integ-key 7670346f3966474863526b344b5638504a376559 
 exec set ipsec sa 20 crypto-key 596739625056476a7774477157563437 integ-key 7670346f3966474863526b344b5638504a376559 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectpt-ip4base-func

IPv4 IPsec transport mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 306736475458734b4737575468576a77 integ-alg sha1-96 integ-key 626870794541384333494549546f72773544324c  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 306736475458734b4737575468576a77 integ-alg sha1-96 integ-key 626870794541384333494549546f72773544324c  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 50466b4a584a4b496c6b63746a45736543625772646b7076 integ-alg sha-256-128 integ-key 4475625169564a564263744f6230434c53646f434448426239564a794d647a42  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 50466b4a584a4b496c6b63746a45736543625772646b7076 integ-alg sha-256-128 integ-key 4475625169564a564263744f6230434c53646f434448426239564a794d647a42  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 72637837514f354448567635633359306863674331504f64363751693662576f integ-alg sha-384-192 integ-key 6b4661507669376e4241724658666232537a42577445674d5749414677594c30463132685a5565757962314549543530  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 72637837514f354448567635633359306863674331504f64363751693662576f integ-alg sha-384-192 integ-key 6b4661507669376e4241724658666232537a42577445674d5749414677594c30463132685a5565757962314549543530  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 6f4a424761364c494b4f366e743637474666726b7751644f4348384d464c7a35 integ-alg sha-512-256 integ-key 5242506e3037503667484e354e6a585466624459684a7a52797846433948463064774638377767714270444a447777546f4f6a314c3741534e79613965697172  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 6f4a424761364c494b4f366e743637474666726b7751644f4348384d464c7a35 integ-alg sha-512-256 integ-key 5242506e3037503667484e354e6a585466624459684a7a52797846433948463064774638377767714270444a447777546f4f6a314c3741534e79613965697172  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4145334534436d69456b626f46386c79 integ-alg sha1-96 integ-key 476c453841647a654c6f5337574368636d6a7943  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4145334534436d69456b626f46386c79 integ-alg sha1-96 integ-key 476c453841647a654c6f5337574368636d6a7943  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6558474b65374c495a6c4650726a7366 integ-alg sha1-96 integ-key 6f6d4d36336976364f5854523534676252367635  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6558474b65374c495a6c4650726a7366 integ-alg sha1-96 integ-key 6f6d4d36336976364f5854523534676252367635  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 754b5675564235645263733651664530 integ-alg sha1-96 integ-key 386d305a42516a586f636f425049656855446859  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 754b5675564235645263733651664530 integ-alg sha1-96 integ-key 386d305a42516a586f636f425049656855446859  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 7a45485854377336564667674c6d5937 integ-alg sha1-96 integ-key 6238436861564564384567494a63485236784751  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 7a45485854377336564667674c6d5937 integ-alg sha1-96 integ-key 6238436861564564384567494a63485236784751  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 6e504c3870763348787a727556475a39 integ-key 59524a577544306558356844456867544851415a 
 exec set ipsec sa 20 crypto-key 6e504c3870763348787a727556475a39 integ-key 59524a577544306558356844456867544851415a 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4c50754f304c57625175563047777858 integ-alg sha1-96 integ-key 73667846434234535962774c726e54326d686361  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4c50754f304c57625175563047777858 integ-alg sha1-96 integ-key 73667846434234535962774c726e54326d686361  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 445534464f646d334367347945586e48 integ-key 53396e6c48524d305468736b615338376a714637 
 exec set ipsec sa 20 crypto-key 445534464f646d334367347945586e48 integ-key 53396e6c48524d305468736b615338376a714637 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3753554a677173664f703967624f6178 integ-alg sha1-96 integ-key 466566563736784c3873514a763161355151686a  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3753554a677173664f703967624f6178 integ-alg sha1-96 integ-key 466566563736784c3873514a763161355151686a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 3368427a684675777862544565373475 integ-key 344f5035345a636c6f41556d526369326559566d 
 exec set ipsec sa 20 crypto-key 3368427a684675777862544565373475 integ-key 344f5035345a636c6f41556d526369326559566d 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 7456623576646b355670784f31566670 integ-alg sha1-96 integ-key 746735674632486c43447749573247677a6d4564  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 7456623576646b355670784f31566670 integ-alg sha1-96 integ-key 746735674632486c43447749573247677a6d4564  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 4e34486b394836544e56477539727271 integ-key 78373875323579525a30624b503756506e4b7164 
 exec set ipsec sa 20 crypto-key 4e34486b394836544e56477539727271 integ-key 78373875323579525a30624b503756506e4b7164 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip4base-func

IPv4-ip4-ipsec-lispgpe-ip4 - main fib, vrf (gpe_vni-to-vrf)

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: ICMPv4-IPv4-IPSec-LISPGPE-IPv4-ICMPv4.
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:e4:9c:3d 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:e9:5b:ae 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6970624237676a713071547071593847 integ-alg sha1-96 integ-key 723632374158527750743465436649616e44514f  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6970624237676a713071547071593847 integ-alg sha1-96 integ-key 723632374158527750743465436649616e44514f  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:03:75:00 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:69:7d:a1 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6970624237676a713071547071593847 integ-alg sha1-96 integ-key 723632374158527750743465436649616e44514f  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6970624237676a713071547071593847 integ-alg sha1-96 integ-key 723632374158527750743465436649616e44514f  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:e4:9c:3d 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:e9:5b:ae 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 766664743844356d4372585570466479 integ-alg sha1-96 integ-key 723277726b4e753737703446476966635537664d  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 766664743844356d4372585570466479 integ-alg sha1-96 integ-key 723277726b4e753737703446476966635537664d  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:03:75:00 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:69:7d:a1 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 766664743844356d4372585570466479 integ-alg sha1-96 integ-key 723277726b4e753737703446476966635537664d  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 766664743844356d4372585570466479 integ-alg sha1-96 integ-key 723277726b4e753737703446476966635537664d  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec show trace
tc03: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int and vrf on eid is enabled. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:e4:9c:3d 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:e9:5b:ae 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 1 reid 6.6.2.0/24 leid 6.6.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 414d6c6a4a5846547252444e66445857 integ-alg sha1-96 integ-key 326457624d796178544d784c79734f7452796374  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 414d6c6a4a5846547252444e66445857 integ-alg sha1-96 integ-key 326457624d796178544d784c79734f7452796374  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:03:75:00 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:69:7d:a1 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 1 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 414d6c6a4a5846547252444e66445857 integ-alg sha1-96 integ-key 326457624d796178544d784c79734f7452796374  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 414d6c6a4a5846547252444e66445857 integ-alg sha1-96 integ-key 326457624d796178544d784c79734f7452796374  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc04: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int and vrf is enabled. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:e4:9c:3d 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:e9:5b:ae 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 1 reid 6.6.2.0/24 leid 6.6.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 425877514c635a7741626973326f6f62 integ-alg sha1-96 integ-key 356e4c4d4138327a4a457a6749583432765a507a  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 425877514c635a7741626973326f6f62 integ-alg sha1-96 integ-key 356e4c4d4138327a4a457a6749583432765a507a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:03:75:00 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:69:7d:a1 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 1 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 425877514c635a7741626973326f6f62 integ-alg sha1-96 integ-key 356e4c4d4138327a4a457a6749583432765a507a  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 425877514c635a7741626973326f6f62 integ-alg sha1-96 integ-key 356e4c4d4138327a4a457a6749583432765a507a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip6base-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:e9:5b:ae 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 453372376133526a5a6b76355051684d integ-alg sha1-96 integ-key 374942584e48714736655967717443486b533534  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 453372376133526a5a6b76355051684d integ-alg sha1-96 integ-key 374942584e48714736655967717443486b533534  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:03:75:00 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:69:7d:a1 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 453372376133526a5a6b76355051684d integ-alg sha1-96 integ-key 374942584e48714736655967717443486b533534  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 453372376133526a5a6b76355051684d integ-alg sha1-96 integ-key 374942584e48714736655967717443486b533534  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:e9:5b:ae 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 54643879737839755263626e4a387741 integ-alg sha1-96 integ-key 73745078735376315a64757244417934794e796c  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 54643879737839755263626e4a387741 integ-alg sha1-96 integ-key 73745078735376315a64757244417934794e796c  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:03:75:00 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:69:7d:a1 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 54643879737839755263626e4a387741 integ-alg sha1-96 integ-key 73745078735376315a64757244417934794e796c  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 54643879737839755263626e4a387741 integ-alg sha1-96 integ-key 73745078735376315a64757244417934794e796c  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip6basevrf-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 706c3646474e7634335a34715a6f7576 integ-alg sha1-96 integ-key 46624c76356e74387250314c42415659387a7251  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 706c3646474e7634335a34715a6f7576 integ-alg sha1-96 integ-key 46624c76356e74387250314c42415659387a7251  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:e9:5b:ae 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 706c3646474e7634335a34715a6f7576 integ-alg sha1-96 integ-key 46624c76356e74387250314c42415659387a7251  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 706c3646474e7634335a34715a6f7576 integ-alg sha1-96 integ-key 46624c76356e74387250314c42415659387a7251  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:03:75:00 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:69:7d:a1 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

eth2p-ethip6ipsectnl-ip6base-func

IPv6 IPsec tunnel mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6f654859313555496248456842636530 integ-alg sha1-96 integ-key 68713253696b55736c4837706956636953415a69 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6f654859313555496248456842636530 integ-alg sha1-96 integ-key 68713253696b55736c4837706956636953415a69 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 786d6b3936315265447732526c576857445275534f6a6c61 integ-alg sha-256-128 integ-key 62535434495946444e57775261425a316554497651664668503561397a54424e tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 786d6b3936315265447732526c576857445275534f6a6c61 integ-alg sha-256-128 integ-key 62535434495946444e57775261425a316554497651664668503561397a54424e tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 747941565a6164303054447264357a38515570644c704674656850766a314361 integ-alg sha-384-192 integ-key 785a4c4b36485649554568494875486d63523834496376714f414d32706b6453455137634a726251513063636d345634 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 747941565a6164303054447264357a38515570644c704674656850766a314361 integ-alg sha-384-192 integ-key 785a4c4b36485649554568494875486d63523834496376714f414d32706b6453455137634a726251513063636d345634 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 597144555248766f496a75423479544444464864524a46493035396730734247 integ-alg sha-512-256 integ-key 544347724c49666e454148396651426848684236533243315078686d4849525574736b52795677647565656f6a4b4a7846324d556462713830727a376c314a4b tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 597144555248766f496a75423479544444464864524a46493035396730734247 integ-alg sha-512-256 integ-key 544347724c49666e454148396651426848684236533243315078686d4849525574736b52795677647565656f6a4b4a7846324d556462713830727a376c314a4b tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 35744b3975553052534767596f334768 integ-alg sha1-96 integ-key 7975364f314f636b6b4e55584e5a655638475877 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 35744b3975553052534767596f334768 integ-alg sha1-96 integ-key 7975364f314f636b6b4e55584e5a655638475877 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 305278394a67687769354e7676636967 integ-alg sha1-96 integ-key 584c6c327947674673313047436243506d417a56 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 305278394a67687769354e7676636967 integ-alg sha1-96 integ-key 584c6c327947674673313047436243506d417a56 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 56666d6b50747278356444643541646b integ-alg sha1-96 integ-key 68696c567a6452494e3346344154353457674a66 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 56666d6b50747278356444643541646b integ-alg sha1-96 integ-key 68696c567a6452494e3346344154353457674a66 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4a4133744359797a314f714c416c4958 integ-alg sha1-96 integ-key 51715769685330396e6655426c72647455776e55 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4a4133744359797a314f714c416c4958 integ-alg sha1-96 integ-key 51715769685330396e6655426c72647455776e55 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 614f426b4838684b64536c4a62557858 integ-key 683478426436636565416c5248694a4372686a48 
 exec set ipsec sa 20 crypto-key 614f426b4838684b64536c4a62557858 integ-key 683478426436636565416c5248694a4372686a48 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5941486d316e77363655474d36333265 integ-alg sha1-96 integ-key 6863523445463639496859733430316431343664 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5941486d316e77363655474d36333265 integ-alg sha1-96 integ-key 6863523445463639496859733430316431343664 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 444e6c64764e345a6249713742314f6f integ-key 754b4d68375471344a5850314574524a756c6d50 
 exec set ipsec sa 20 crypto-key 444e6c64764e345a6249713742314f6f integ-key 754b4d68375471344a5850314574524a756c6d50 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 706474524f745433626f7a6b626e4447 integ-alg sha1-96 integ-key 434a77486846356c514b7a31444a4a776c4d5579 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 706474524f745433626f7a6b626e4447 integ-alg sha1-96 integ-key 434a77486846356c514b7a31444a4a776c4d5579 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 79464a6b7a7754514566514265554559 integ-key 61474249577a756e41326359714d6d3051696844 
 exec set ipsec sa 20 crypto-key 79464a6b7a7754514566514265554559 integ-key 61474249577a756e41326359714d6d3051696844 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4478754e7a59794b44754e734a6e7049 integ-alg sha1-96 integ-key 536a774a356a6a566b444d6a444f7a644f696561 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4478754e7a59794b44754e734a6e7049 integ-alg sha1-96 integ-key 536a774a356a6a566b444d6a444f7a644f696561 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 666f57767950556b47684a6d5965354f integ-key 316c4d654f6c64763830576d527357726b614966 
 exec set ipsec sa 20 crypto-key 666f57767950556b47684a6d5965354f integ-key 316c4d654f6c64763830576d527357726b614966 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6ipsectpt-ip6base-func

IPv6 IPsec transport mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 66724954596470564153536832496c33 integ-alg sha1-96 integ-key 7a5631666a4571634d5a38554d5a776c33435536  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 66724954596470564153536832496c33 integ-alg sha1-96 integ-key 7a5631666a4571634d5a38554d5a776c33435536  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 393436336778525a7444477535545362794e4c36576a6e41 integ-alg sha-256-128 integ-key 4137746e7051554e6e4e684c753672527062574363376f71766835417a615749  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 393436336778525a7444477535545362794e4c36576a6e41 integ-alg sha-256-128 integ-key 4137746e7051554e6e4e684c753672527062574363376f71766835417a615749  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 4150645a377a675a5661393446317352366c6336757553346b344f3471786972 integ-alg sha-384-192 integ-key 6770656a6332415452565a69796e417435717233664442745a6f6e34463241454f4f7535423639643957734b36354c48  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 4150645a377a675a5661393446317352366c6336757553346b344f3471786972 integ-alg sha-384-192 integ-key 6770656a6332415452565a69796e417435717233664442745a6f6e34463241454f4f7535423639643957734b36354c48  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 4e38687879754c664f6f78746e59726f4f67716b6833515a6e365549305a4c35 integ-alg sha-512-256 integ-key 3662467376437466574b62776b7334723958635a3546554b30396146536b6542464e444d4b793359764a4c5037764443664949366a39524441644b3877465a41  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 4e38687879754c664f6f78746e59726f4f67716b6833515a6e365549305a4c35 integ-alg sha-512-256 integ-key 3662467376437466574b62776b7334723958635a3546554b30396146536b6542464e444d4b793359764a4c5037764443664949366a39524441644b3877465a41  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 63566a61327958724177436251713936 integ-alg sha1-96 integ-key 703937794e58393856717079517968776b62334d  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 63566a61327958724177436251713936 integ-alg sha1-96 integ-key 703937794e58393856717079517968776b62334d  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 7579644851444e594b647a394d527a56 integ-alg sha1-96 integ-key 7a757565656e433874617638514b653950647533  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 7579644851444e594b647a394d527a56 integ-alg sha1-96 integ-key 7a757565656e433874617638514b653950647533  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 454f68506e484369643071516b6e376f integ-alg sha1-96 integ-key 3643754c335865305479416b59586e5236554b4f  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 454f68506e484369643071516b6e376f integ-alg sha1-96 integ-key 3643754c335865305479416b59586e5236554b4f  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 7a4c464a4e31747a6c31703733373157 integ-alg sha1-96 integ-key 385746485a7941375a42354c506d4a3372704977  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 7a4c464a4e31747a6c31703733373157 integ-alg sha1-96 integ-key 385746485a7941375a42354c506d4a3372704977  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 77777a6437724947697a6d4655745772 integ-key 647975715a497375695a57455045537656396751 
 exec set ipsec sa 20 crypto-key 77777a6437724947697a6d4655745772 integ-key 647975715a497375695a57455045537656396751 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5130716d346f766675446d635049494d integ-alg sha1-96 integ-key 57417a4d7246314738784e695456774279784a78  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5130716d346f766675446d635049494d integ-alg sha1-96 integ-key 57417a4d7246314738784e695456774279784a78  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 526331326a574f6648474b4a4e4d7768 integ-key 6f4d447762724a6c577651646b59335971696435 
 exec set ipsec sa 20 crypto-key 526331326a574f6648474b4a4e4d7768 integ-key 6f4d447762724a6c577651646b59335971696435 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 444f6a63304c6f4e73744666657a3664 integ-alg sha1-96 integ-key 756f706137796b32794755535844384879565850  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 444f6a63304c6f4e73744666657a3664 integ-alg sha1-96 integ-key 756f706137796b32794755535844384879565850  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 435256716e30774367507079674a6d48 integ-key 774c674d5857496c70756e6d74474a414b453345 
 exec set ipsec sa 20 crypto-key 435256716e30774367507079674a6d48 integ-key 774c674d5857496c70756e6d74474a414b453345 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4c38356b356e764d4135334874534645 integ-alg sha1-96 integ-key 78376671374241614831347748484a6f48675573  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4c38356b356e764d4135334874534645 integ-alg sha1-96 integ-key 78376671374241614831347748484a6f48675573  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 55684d6c3448553179686b665232666a integ-key 6f784e703944524a4473544263487777617a776c 
 exec set ipsec sa 20 crypto-key 55684d6c3448553179686b665232666a integ-key 6f784e703944524a4473544263487777617a776c 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6ipsectptlispgpe-ip4base-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISPGPE-IPSec-IPv4-ICMP, Eth-IPv6-IPSec-LISPGPE-IPv4-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:e9:5b:ae 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 31695531527451454f567a5259414138 integ-alg sha1-96 integ-key 4e36676d697263354a7a664543764f6267613764  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 31695531527451454f567a5259414138 integ-alg sha1-96 integ-key 4e36676d697263354a7a664543764f6267613764  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:03:75:00 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:69:7d:a1 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 31695531527451454f567a5259414138 integ-alg sha1-96 integ-key 4e36676d697263354a7a664543764f6267613764  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 31695531527451454f567a5259414138 integ-alg sha1-96 integ-key 4e36676d697263354a7a664543764f6267613764  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:e9:5b:ae 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:e4:9c:3d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 763135686468694d5161524b7873304f integ-alg sha1-96 integ-key 327264477267657a5073506e374c7a53687a7832  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 763135686468694d5161524b7873304f integ-alg sha1-96 integ-key 327264477267657a5073506e374c7a53687a7832  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:03:75:00 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:69:7d:a1 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 763135686468694d5161524b7873304f integ-alg sha1-96 integ-key 327264477267657a5073506e374c7a53687a7832  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 763135686468694d5161524b7873304f integ-alg sha1-96 integ-key 327264477267657a5073506e374c7a53687a7832  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace

eth2p-ethip6ipsectptlispgpe-ip6base-func

IPv6 - ip6-ipsec-lispgpe-ip6 - main fib, vrf (gpe_vni-to-vrf), phy2lisp, virt2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6,
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:e4:9c:3d 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:e9:5b:ae 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 437066367767756154764f554243694a integ-alg sha1-96 integ-key 32526c6f6231574e4e72384f307537716776794a  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 437066367767756154764f554243694a integ-alg sha1-96 integ-key 32526c6f6231574e4e72384f307537716776794a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:03:75:00 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:69:7d:a1 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 437066367767756154764f554243694a integ-alg sha1-96 integ-key 32526c6f6231574e4e72384f307537716776794a  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 437066367767756154764f554243694a integ-alg sha1-96 integ-key 32526c6f6231574e4e72384f307537716776794a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using ipsec (transport) lisp_gpe0 int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:e4:9c:3d 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:e9:5b:ae 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6f4138596461636e6a737a44494b3248 integ-alg sha1-96 integ-key 7a7753315930366278554d65346f6b41696c7565  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6f4138596461636e6a737a44494b3248 integ-alg sha1-96 integ-key 7a7753315930366278554d65346f6b41696c7565  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:1::2 - 2001:cdba:1::2 remote-ip-range 2001:cdba:2::2 - 2001:cdba:2::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:1::2 - 2001:cdba:1::2 remote-ip-range 2001:cdba:2::2 - 2001:cdba:2::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:03:75:00 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:69:7d:a1 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6f4138596461636e6a737a44494b3248 integ-alg sha1-96 integ-key 7a7753315930366278554d65346f6b41696c7565  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6f4138596461636e6a737a44494b3248 integ-alg sha1-96 integ-key 7a7753315930366278554d65346f6b41696c7565  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:2::2 - 2001:cdba:2::2 remote-ip-range 2001:cdba:1::2 - 2001:cdba:1::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:2::2 - 2001:cdba:2::2 remote-ip-range 2001:cdba:1::2 - 2001:cdba:1::2  
 exec show trace

sw device

eth2p-ethip4ipsectnlsw-ip4base-func

IPv4 SW cryptodev IPsec tunnel mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: With enabled SW crytodev on DUT1 create loopback interface, configure loopback and physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 715836357a76786e4b5143576b456f6e integ-alg sha1-96 integ-key 435449433668346d6f6c4c486931556b5631574a tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 715836357a76786e4b5143576b456f6e integ-alg sha1-96 integ-key 435449433668346d6f6c4c486931556b5631574a tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 37636a4571506e57595063745651726a7a32336f646e586b integ-alg sha-256-128 integ-key 4f6c6772733575474639644f75586a6d727330635836474f5663597957655269 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 37636a4571506e57595063745651726a7a32336f646e586b integ-alg sha-256-128 integ-key 4f6c6772733575474639644f75586a6d727330635836474f5663597957655269 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 734268593676794263636a38453759664e494951316b667a73616f51504c4952 integ-alg sha-384-192 integ-key 454734376f6371616f556c49655349754f587954696b52637530545669527042757539695048366c3841676147383236 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 734268593676794263636a38453759664e494951316b667a73616f51504c4952 integ-alg sha-384-192 integ-key 454734376f6371616f556c49655349754f587954696b52637530545669527042757539695048366c3841676147383236 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 53656c77696d52364444336273584b4237456e636c4d74447831573641443069 integ-alg sha-512-256 integ-key 6b76427853617248326b7645487662717a79563647425154536e4f675572696436594855526e437a4b6173516b444262736a4a76515250507230663659544968 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 53656c77696d52364444336273584b4237456e636c4d74447831573641443069 integ-alg sha-512-256 integ-key 6b76427853617248326b7645487662717a79563647425154536e4f675572696436594855526e437a4b6173516b444262736a4a76515250507230663659544968 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 736d73574c5537536c704f5a4e74676c integ-alg sha1-96 integ-key 6c625150354e6852453559446952724d346a7432 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 736d73574c5537536c704f5a4e74676c integ-alg sha1-96 integ-key 6c625150354e6852453559446952724d346a7432 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 55327767544344536346727450304359 integ-alg sha1-96 integ-key 6545546a684775636b6a4535626d677936513056 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 55327767544344536346727450304359 integ-alg sha1-96 integ-key 6545546a684775636b6a4535626d677936513056 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 49656e4935415a39364f516832336468 integ-alg sha1-96 integ-key 5363624c536f5a7570735a476b4e4a5164764b57 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 49656e4935415a39364f516832336468 integ-alg sha1-96 integ-key 5363624c536f5a7570735a476b4e4a5164764b57 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 45445731394144796430646f58527953 integ-alg sha1-96 integ-key 3132664948687378725a5830623742674f494d4e tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 45445731394144796430646f58527953 integ-alg sha1-96 integ-key 3132664948687378725a5830623742674f494d4e tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 6a63786d526f4338446d674b794f4370 integ-key 597137443945444f48513742695a707076494549 
 exec set ipsec sa 20 crypto-key 6a63786d526f4338446d674b794f4370 integ-key 597137443945444f48513742695a707076494549 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4768516a4b4179565a684f4d74304334 integ-alg sha1-96 integ-key 774c6d7a79677655333756464d48636759696550 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4768516a4b4179565a684f4d74304334 integ-alg sha1-96 integ-key 774c6d7a79677655333756464d48636759696550 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 5651663468713933557a61514839316c integ-key 4839397a474e3849315747765a33685951304465 
 exec set ipsec sa 20 crypto-key 5651663468713933557a61514839316c integ-key 4839397a474e3849315747765a33685951304465 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 304a4754317a7a6669556a6662355167 integ-alg sha1-96 integ-key 6a616c69634c44774f5633455469334d72655145 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 304a4754317a7a6669556a6662355167 integ-alg sha1-96 integ-key 6a616c69634c44774f5633455469334d72655145 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 5652696f4358686e3733657677533858 integ-key 52413555366d646b37706446655656726670434b 
 exec set ipsec sa 20 crypto-key 5652696f4358686e3733657677533858 integ-key 52413555366d646b37706446655656726670434b 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5743337368386c36626c4a35656d4c67 integ-alg sha1-96 integ-key 42526144576656526f4942305456526370527174 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5743337368386c36626c4a35656d4c67 integ-alg sha1-96 integ-key 42526144576656526f4942305456526370527174 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 4b596b517438566d7754593043594130 integ-key 6c3973477167785250545174577872577148655a 
 exec set ipsec sa 20 crypto-key 4b596b517438566d7754593043594130 integ-key 6c3973477167785250545174577872577148655a 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectptsw-ip4base-func

IPv4 IPsec transport mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: With enabled SW crytodev on DUT1 create loopback interface, configure loopback and physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 7135355a65694143335851304d595665 integ-alg sha1-96 integ-key 6b72714a4e6d7053687442683163335736506773  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 7135355a65694143335851304d595665 integ-alg sha1-96 integ-key 6b72714a4e6d7053687442683163335736506773  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 4c447a5633546d6b4454746a764a32476f73586c5a716c75 integ-alg sha-256-128 integ-key 3865764c5a30697049334f37583479335a6273677379626d4342304979614561  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 4c447a5633546d6b4454746a764a32476f73586c5a716c75 integ-alg sha-256-128 integ-key 3865764c5a30697049334f37583479335a6273677379626d4342304979614561  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 66483664384d687745765672624e78306247634a616d5367496a473441617532 integ-alg sha-384-192 integ-key 3758713648317248717456516449473956666e496d5277456d614978695433557042525637505047617a4a377670734b  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 66483664384d687745765672624e78306247634a616d5367496a473441617532 integ-alg sha-384-192 integ-key 3758713648317248717456516449473956666e496d5277456d614978695433557042525637505047617a4a377670734b  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 346479456d5670707543534a326c4f4351324970596430306257447336564e63 integ-alg sha-512-256 integ-key 6563376c686e4c49337178716163416c514d52787a52374d626e6673357a536950713941674c73684677687874777066556166577a44717137536b4d73515268  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 346479456d5670707543534a326c4f4351324970596430306257447336564e63 integ-alg sha-512-256 integ-key 6563376c686e4c49337178716163416c514d52787a52374d626e6673357a536950713941674c73684677687874777066556166577a44717137536b4d73515268  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 676f4c3661767655756d74664e753651 integ-alg sha1-96 integ-key 4b663953524e46524f7472734e66334d644c5353  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 676f4c3661767655756d74664e753651 integ-alg sha1-96 integ-key 4b663953524e46524f7472734e66334d644c5353  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 684a6b7852765630736365616a767a67 integ-alg sha1-96 integ-key 43364e7963416467563438546831394455774d36  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 684a6b7852765630736365616a767a67 integ-alg sha1-96 integ-key 43364e7963416467563438546831394455774d36  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6a696a5330365841567a7956444a5531 integ-alg sha1-96 integ-key 4a41387463486b7943756f6a68314e4b30517670  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6a696a5330365841567a7956444a5531 integ-alg sha1-96 integ-key 4a41387463486b7943756f6a68314e4b30517670  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5644337559644864467a65716147336a integ-alg sha1-96 integ-key 36394c63517170565a3576526c794f59556f6676  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5644337559644864467a65716147336a integ-alg sha1-96 integ-key 36394c63517170565a3576526c794f59556f6676  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 594c6572475139676574307a63464c41 integ-key 546c45475466657861664152794e615a5055704d 
 exec set ipsec sa 20 crypto-key 594c6572475139676574307a63464c41 integ-key 546c45475466657861664152794e615a5055704d 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 45314b4136546f526c656a3758757377 integ-alg sha1-96 integ-key 42647761794b4e67746235694431456139454c37  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 45314b4136546f526c656a3758757377 integ-alg sha1-96 integ-key 42647761794b4e67746235694431456139454c37  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 3433585250347a42774f544d63377855 integ-key 6b77466f45387465436b4b6e51334a576e467479 
 exec set ipsec sa 20 crypto-key 3433585250347a42774f544d63377855 integ-key 6b77466f45387465436b4b6e51334a576e467479 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 684a683669777a694469564f4e334532 integ-alg sha1-96 integ-key 53325832625072716d6b56674d4d4f6661476a73  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 684a683669777a694469564f4e334532 integ-alg sha1-96 integ-key 53325832625072716d6b56674d4d4f6661476a73  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 316b7852434d59675a426e6f74357762 integ-key 684a5a353461323159534f765375496f7666356a 
 exec set ipsec sa 20 crypto-key 316b7852434d59675a426e6f74357762 integ-key 684a5a353461323159534f765375496f7666356a 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:e4:9c:3d 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 444279376e49434b7037316871753454 integ-alg sha1-96 integ-key 3170613937774658736373563342475663517a49  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 444279376e49434b7037316871753454 integ-alg sha1-96 integ-key 3170613937774658736373563342475663517a49  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 57734a4b344d46353874736b474f5261 integ-key 4875474571426577594b724a50446c6934393862 
 exec set ipsec sa 20 crypto-key 57734a4b344d46353874736b474f5261 integ-key 4875474571426577594b724a50446c6934393862 
 exec show trace  
  
 DUT2:  
 exec show trace

ip4

eth2p-dot1q-ip4base-func

IPv4 with VLAN subinterfaces

  • [Top] Network Topologies: TG-DUT1-TG 2-node circular topology with double links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-ICMPv4 on TG-DUT1-IF1, Eth-dot1q-IPv4-ICMPv4 on TG-DUT1-IF2.
  • [Cfg] DUT configuration: DUT1 is configured with 2 Vlan subinterfaces on DUT1-IF2. The subinterfaces and DUT1-IF1 have IP addresses set and corresponding IP neighbor entries are configured.
  • [Ref] Applicable standard specifications: IEEE 802.1q.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: process untagged send tagged 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 5 vlan 20 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 192.168.100.1/24 
 sw_interface_add_del_address sw_if_index 6 192.168.200.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:82:3d:9c 
 ip_neighbor_add_del sw_if_index 5 dst 192.168.100.2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 6 dst 192.168.200.2 mac fa:16:3e:33:b9:11 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: process tagged send untagged 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 5 vlan 20 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 192.168.100.1/24 
 sw_interface_add_del_address sw_if_index 6 192.168.200.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:82:3d:9c 
 ip_neighbor_add_del sw_if_index 5 dst 192.168.100.2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 6 dst 192.168.200.2 mac fa:16:3e:33:b9:11 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: process tagged send tagged 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 5 vlan 20 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 192.168.100.1/24 
 sw_interface_add_del_address sw_if_index 6 192.168.200.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:82:3d:9c 
 ip_neighbor_add_del sw_if_index 5 dst 192.168.100.2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 6 dst 192.168.200.2 mac fa:16:3e:33:b9:11 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-copblklistbase-func

COP Security IPv4 Blacklist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv4 routing and static routes. COP security black-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut drops ipv4 pkts with cop blacklist set with ipv4 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:5f:74:4b 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_table_add_del table 1  
 cop_whitelist_enable_disable sw_if_index 1 ip4 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-copwhlistbase-func

COP Security IPv4 Whitelist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv4 routing and static routes. COP security white-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut permits ipv4 pkts with cop whitelist set with ipv4 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:5f:74:4b 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_table_add_del table 1  
 ip_add_del_route 16.0.0.0/24  vrf 1  resolve-attempts 10 count 1    local 
 cop_whitelist_enable_disable sw_if_index 1 ip4 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-func

IPv4 routing test cases RFC791 IPv4, RFC826 ARP, RFC792 ICMPv4. Encapsulations: Eth-IPv4-ICMPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv4 routing tests use circular 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2 and received on TG links on the other side of circular topology. On receive TG verifies packets IPv4 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut replies to icmpv4 echo req to its ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc02: dut routes ipv4 to its egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc03: dut1 routes ipv4 to dut2 ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc04: dut1 routes ipv4 to dut2 egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc05: dut1 and dut2 route ipv4 between tg interfaces 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc06: dut replies to icmpv4 echo reqs with size 64b-to-1500b-incr-1b 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc08: dut replies to arp request 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace

eth2p-ethip4-ip4base-iaclbase-func

IPv4 routing with ingress ACL test cases Encapsulations: Eth-IPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv4 ingress ACL (iACL) tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. DUT1 is configured with iACL on link to TG, iACL classification and permit/deny action are configured on a per test case basis. Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped, or if received verifies packet IPv4 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with iacl ipv4 src-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:5f:74:4b 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match l3 ip4 src 16.0.0.1 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: dut with iacl ipv4 dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:5f:74:4b 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 33.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 2 match l3 ip4 dst 32.0.0.1 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc03: dut with iacl ipv4 src-addr and dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:5f:74:4b 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 33.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match l3 ip4 src 16.0.0.1 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 1 match_n 2 match l3 ip4 dst 32.0.0.1 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 input_acl_set_interface sw_if_index 1 ip4-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc04: dut with iacl ipv4 protocol set to tcp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:5f:74:4b 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000000000006 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc05: dut with iacl ipv4 protocol set to udp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:5f:74:4b 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000000000011 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc06: dut with iacl ipv4 tcp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:5f:74:4b 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc07: dut with iacl ipv4 tcp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:5f:74:4b 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc08: dut with iacl ipv4 tcp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:5f:74:4b 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc09: dut with iacl ipv4 udp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:5f:74:4b 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc10: dut with iacl ipv4 udp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:5f:74:4b 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc11: dut with iacl ipv4 udp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:5f:74:4b 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-ip4arp-func

IPv4 ARP test cases RFC826 ARP: Eth-IPv4 and Eth-ARP on links TG-DUT1, TG-DUT2, DUT1-DUT2: IPv4 ARP tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. DUT ARP functionality is tested by making TG send ICMPv4 Echo Requests towards its other interface via DUT1 and DUT2.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut sends arp request for unresolved locally connected ipv4 address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: dut sends arp request for route next hop ipv4 address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3  count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-ip4dhcpclient-func

DHCPv4 Client related test cases

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp sends a dhcp discover 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 dhcp_client_config sw_if_index 2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp sends a dhcpv4 discover with hostname 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 dhcp_client_config sw_if_index 2 hostname dhcp-client 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: vpp sends dhcpv4 request after offer 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 dhcp_client_config sw_if_index 2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: vpp doesn’t send dhcpv4 request after offer with wrong xid 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 dhcp_client_config sw_if_index 2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp honors dhcpv4 lease time 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 dhcp_client_config sw_if_index 2  
 ip_neighbor_add_del sw_if_index 2 dst 192.168.23.1 mac fa:16:3e:82:3d:9c 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-ip4dhcpproxy-func

DHCPv4 proxy test cases

  • [Top] Network Topologies: TG = DUT with two links between the nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-UDP-BOOTP-DHCP
  • [Cfg] DUT configuration: DUT is configured with DHCPv4 proxy.
  • [Ver] TG verification: Test DHCPv4 packets are sent on TG on first link to DUT and received on TG on second link. On receive TG verifies if DHCPv4 packets are valid.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp proxies valid dhcpv4 request to dhcpv4 server 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 sw_interface_add_del_address sw_if_index 2 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.0.100 mac fa:16:3e:33:b9:11 
 dhcp_proxy_config svr 192.168.0.100 src 172.16.0.1 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp proxy ignores invalid dhcpv4 request 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 sw_interface_add_del_address sw_if_index 2 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.0.100 mac fa:16:3e:33:b9:11 
 dhcp_proxy_config svr 192.168.0.100 src 172.16.0.1 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-ip4ecmp-func

Ipv4 Multipath routing test cases

  • [Top] Network topologies: TG=DUT 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT configure interfaces IPv4 adresses, and multipath routing.
  • [Ver] TG verification: Test packets are sent from TG on the first link to DUT. Packet is received on TG on the second link from DUT1.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: ipv4 equal-cost multipath routing 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.2.10 mac 02:00:00:00:00:02 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.2.20 mac 02:00:00:00:00:03 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.10  sw_if_index 2  count 1  multipath   
 ip_add_del_route 32.0.0.1/24 via 192.168.2.20  sw_if_index 2  count 1  multipath   
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-ip4proxyarp-func

RFC1027 Proxy ARP test cases

  • [Top] Network topologies: TG-DUT1 2-node topology with single link between nodes.
  • [Cfg] DUT configuration: DUT1 is configured with Proxy ARP
  • [Ver] TG verification: Test ARP Request packet is sent from TG on link to DUT1; on receive TG verifies ARP reply packet for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC1027.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut sends arp reply on behalf of another machine from the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut sends arp reply on behalf of another machine from beginning of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut sends arp reply on behalf of another machine from end of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut does not send arp reply on behalf of another machine from below of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc05: dut does not send arp reply on behalf of another machine from above of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip4-ip4base-ipolicemarkbase-func

IPv4 policer test cases

  • [Top] Network topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT1 configure interfaces IPv4 adresses, and static ARP record on the second interface.
  • [Ver] TG verification: Test packet is sent from TG on the first link to DUT1. Packet is received on TG on the second link from DUT1.
  • [Ref] Applicable standard specifications: RFC2474, RFC2697, RFC2698.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp policer 2r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:33:b9:11 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp policer 2r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:33:b9:11 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: vpp policer 1r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:33:b9:11 
 policer_add_del name policer1  cir 1 eir 0 cb 2 eb 300 rate_type pps round_type closest type 1r3c conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: vpp policer 1r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:33:b9:11 
 policer_add_del name policer1  cir 100 eir 0 cb 200 eb 300 rate_type pps round_type closest type 1r3c conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-rpf-func

Source RPF check on IPv4 test cases

  • [Top] Network Topologies: TG - DUT1 - DUT2 - TG with one link between the nodes.
  • [Cfg] DUT configuration: DUT2 is configured with L2 Cross connect. DUT1 is configured with IP source check on link to TG,
  • [Ver] TG verification: Test ICMP Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets which source address is not in routes are dropped.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp source rpf check on ipv4 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:5f:74:4b 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3  count 1     
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:33:b9:11 
 ip_add_del_route 16.0.0.1/24 via 192.168.1.2  sw_if_index 1  count 1     
 exec set interface ip source-check GigabitEthernet0/4/0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: vpp pass traffic on non-enabled rpf interface 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:5f:74:4b 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3  count 1     
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:33:b9:11 
 ip_add_del_route 16.0.0.1/24 via 192.168.1.2  sw_if_index 1  count 1     
 exec set interface ip source-check GigabitEthernet0/4/0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4basevrf-func

Vpn routed forwarding - baseline IPv4

  • [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node topology with two links in between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4.
  • [Cfg] DUT configuration: Each DUT is configured with two VRF tables; Separation of traffic is tested by IP packets; Basic ARP and ROUTES are set on DUT nodes; IP addresses are set on DUT interfaces.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent by TG on link to DUT1, DUT2 or back to TG; On receipt TG verifies packets for correctness and their IPv4 src-addr, dst-addr, and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: tg packets routed to dut ingress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:82:3d:9c 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:49:56:fd 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:1a:5c:e6 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:fa:7b:6a 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:ea:e9:37 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:16:46:7b 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc02: tg packets routed to dut egress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:82:3d:9c 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:49:56:fd 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:1a:5c:e6 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:fa:7b:6a 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:ea:e9:37 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:16:46:7b 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc03: tg packets routed to dut2 ingress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:82:3d:9c 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:49:56:fd 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:1a:5c:e6 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:fa:7b:6a 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:ea:e9:37 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:16:46:7b 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc04: tg packets routed to dut2 egress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:82:3d:9c 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:49:56:fd 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:1a:5c:e6 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:fa:7b:6a 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:ea:e9:37 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:16:46:7b 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc05: tg packets routed to tg through dut1 and dut2, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:82:3d:9c 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:49:56:fd 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:1a:5c:e6 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:fa:7b:6a 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:ea:e9:37 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:16:46:7b 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace

ip4 tunnels

gre

eth2p-ethip4gre-ip4base-func

GREoIPv4 test cases

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes; TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-GRE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for routing over GRE tunnel; Eth-IPv4-ICMPv4 on TG_if1-DUT, Eth-IPv4-GRE-IPv4-ICMPv4 on TG_if2_DUT for GREoIPv4 encapsulation and decapsulation verification.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. GREoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; GREoIPv4 encapsulation and decapsulation are verified separately by TG; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC2784.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route over greoipv4 tunnel between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.0.1/24 
 gre_add_del_tunnel src 192.168.1.1 dst 192.168.1.2 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 5 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 192.168.1.2/24 
 sw_interface_add_del_address sw_if_index 1 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.2.100 mac fa:16:3e:5f:74:4b 
 gre_add_del_tunnel src 192.168.1.2 dst 192.168.1.1 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.2/24 
 exec show trace
tc02: dut encapsulates ipv4 into greoipv4 tunnel - gre header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:33:b9:11 
 gre_add_del_tunnel src 192.168.1.1 dst 192.168.1.2 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 5 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: dut decapsulates ipv4 from greoipv4 tunnel - ipv4 header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.100 mac fa:16:3e:82:3d:9c 
 gre_add_del_tunnel src 192.168.1.1 dst 192.168.1.2 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: dut encapsulates ipv4 into greoipv4 different tunnels - gre header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.0.1/32 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:33:b9:11 
 ip_add_del_route 10.0.0.2/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.3/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.2 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.3 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_add_del_address sw_if_index 6 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 7 172.16.1.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 6 resolve-attempts 10 count 1     
 ip_add_del_route 192.168.3.0/24 via 172.16.1.2  sw_if_index 7 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: dut re-encapsulates ipv4 gre into other gre tunnel - gre header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.0.1/32 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:33:b9:11 
 ip_add_del_route 10.0.0.2/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.3/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.2 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.3 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_add_del_address sw_if_index 6 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 7 172.16.1.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 6 resolve-attempts 10 count 1     
 ip_add_del_route 192.168.3.0/24 via 172.16.1.2  sw_if_index 7 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 exec show trace
tc06: dut do not process gre with wrong tunnel destination ip 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.0.1/32 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.100 mac fa:16:3e:82:3d:9c 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:33:b9:11 
 ip_add_del_route 10.0.0.2/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.3/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.2 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.3 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_add_del_address sw_if_index 6 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 7 172.16.1.1/24 
 exec show trace  
  
 DUT2:  
 exec show trace

lisp

api-crud-lisp-func

API test cases

  • [Top] Network Topologies: DUT1 1-node topology.
  • [Enc] Packet Encapsulations: None.
  • [Cfg] DUT configuration: DUT1 gets configured with all LISP parameters.
  • [Ver] Verification: DUT1 operational data gets verified following configuration.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut can enable and disable lisp 
 DUT1:  
 lisp_enable_disable enable 
 lisp_enable_disable disable 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut can add and delete locator_set 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_locator_set_dump local 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_locator_set_dump  
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: dut can add, reset and delete locator_set 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_locator_set_dump local 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_locator_set_dump  
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: dut can add and delete eid address 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.0.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.1.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.2.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.3.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 10:1::/64 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 10:2::/64 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 10:3::/64 locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.0.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 192.168.1.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 192.168.2.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 192.168.3.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 10:1::/64 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 10:2::/64 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 10:3::/64 locator-set ls1 del 
 lisp_add_del_locator_set locator-set ls1 del 
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: dut can add and delete lisp map resolver address 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_map_resolver 192.169.0.1 
 lisp_add_del_map_resolver 192.169.1.1 
 lisp_add_del_map_resolver 192.169.2.1 
 lisp_add_del_map_resolver 12:1::1 
 lisp_add_del_map_resolver 12:2::1 
 lisp_add_del_map_resolver 192.169.0.1 del 
 lisp_add_del_map_resolver 192.169.1.1 del 
 lisp_add_del_map_resolver 192.169.2.1 del 
 lisp_add_del_map_resolver 12:1::1 del 
 lisp_add_del_map_resolver 12:2::1 del 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4lisp-ip4base-func

IP AFI independent functional tests.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 over lispoipv4 tunnel after disable-enable 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:33:b9:11 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 lisp_enable_disable disable 
 lisp_enable_disable enable 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:5f:74:4b 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec show trace

eth2p-ethip4lisp-l2bdbasemaclrn-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4-LISPGpe-IP4
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: route ipv4 packet through lisp with bridge domain setup. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 10.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 10.0.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.1.2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 10.0.3.2 mac fa:16:3e:1a:5c:e6 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:11 locator-set tst_locator 
 lisp_add_del_map_resolver 10.0.0.2 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:22 seid 08:22:22:22:22:11 rloc 10.0.3.2 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:22 leid 08:22:22:22:22:11 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 10.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 10.0.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.2.2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 10.0.3.1 mac fa:16:3e:16:46:7b 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:22 locator-set tst_locator 
 lisp_add_del_map_resolver 10.0.0.1 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:11 seid 08:22:22:22:22:22 rloc 10.0.3.1 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:11 leid 08:22:22:22:22:22 
 exec show trace

eth2p-ethip4lispgpe-ip4base-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using physical interfaces 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:1a:5c:e6 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 0 reid 6.0.5.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:16:46:7b 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip4basevrf-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:1a:5c:e6 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 1 reid 6.0.5.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:16:46:7b 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 1 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip6base-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lispoipv4 tunnel 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6:0:1::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:1::2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.2 mac fa:16:3e:1a:5c:e6 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6:0:1::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 lisp_add_del_remote_mapping del vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency del vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.20 mac fa:16:3e:1a:5c:e6 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.20 
 lisp_add_del_adjacency add vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6:0:2::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:2::2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:16:46:7b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6:0:2::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:1::0/64 seid 6:0:2::0/64 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 0 reid 6:0:1::0/64 leid 6:0:2::0/64 
 sw_interface_add_del_address sw_if_index 3 del-all 
 sw_interface_add_del_address sw_if_index 3 6.0.3.20/24 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:16:46:7b 
 exec show trace

eth2p-ethip4lispgpe-ip6basevrf-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:1::2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.2 mac fa:16:3e:1a:5c:e6 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6:0:1::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6:0:1::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 1 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 1 reid 6:0:2::0/64 leid 6:0:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:2::2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:16:46:7b 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6:0:2::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6:0:2::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 1 eid 6:0:1::0/64 seid 6:0:2::0/64 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 1 reid 6:0:1::0/64 leid 6:0:2::0/64 
 exec show trace

vxlan

eth2p-dot1qip4vxlan-l2bdbasemaclrn-func

RFC7348 VXLAN: Bridge-domain with VXLAN over VLAN test cases

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-dot1q-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with static MACs, MAC learning enabled and Split Horizon Groups (SHG) depending on test case; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv4ovlan tunnels switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vlan_subif sw_if_index 3 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 ip_neighbor_add_del sw_if_index 5 dst 172.16.0.2 mac fa:16:3e:e9:5b:ae 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=23,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=23) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=23) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vlan_subif sw_if_index 3 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 5 172.16.0.2/24 
 ip_neighbor_add_del sw_if_index 5 dst 172.16.0.1 mac fa:16:3e:69:7d:a1 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=23,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=23) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=23) 
 exec show trace

eth2p-ethip4vxlan-l2bdbasemaclrn-func

Bridge-domain with VXLAN test cases - IPv4

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.2 mac fa:16:3e:e9:5b:ae 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.1 mac fa:16:3e:69:7d:a1 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace

eth2p-ethip4vxlan-l2xcbase-func

RFC7348 VXLAN: L2 cross-connect with VXLAN test cases

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching; VXLAN tunnels are configured between L2XCs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vxlanoipv4 tunnels switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.2 mac fa:16:3e:e9:5b:ae 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 24 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.1 mac fa:16:3e:69:7d:a1 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 24 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth4p-ethip4vxlan-l2bdbasemaclrn-l2shg-func

L2BD with SHG combined with VXLAN test cases - IPv4

  • [Top] Network topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG); VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels in shg switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=1,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels in different shgs switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=2,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace

ip6

eth2p-ethip6-ip6base-copblklistbase-func

COP Security IPv6 Blacklist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv6 routing and static routes. COP security black-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut drops ipv6 pkts with cop blacklist set with ipv6 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:62::2 mac fa:16:3e:18:33:8b 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:ee:d1:37 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_table_add_del table 1 ipv6 
 cop_whitelist_enable_disable sw_if_index 1 ip6 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_add_del_address sw_if_index 3 3ffe:72::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:73::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-copwhlistbase-func

COP Security IPv6 Whitelist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv6 routing and static routes. COP security white-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut permits ipv6 pkts with cop whitelist set with ipv6 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:62::2 mac fa:16:3e:18:33:8b 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:ee:d1:37 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_table_add_del table 1 ipv6 
 ip_add_del_route 3ffe:61::/64  vrf 1  resolve-attempts 10 count 1    local 
 cop_whitelist_enable_disable sw_if_index 1 ip6 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_add_del_address sw_if_index 3 3ffe:72::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:73::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-func

IPv6 routing test cases RFC2460 IPv6, RFC4443 ICMPv6, RFC4861 Neighbor Discovery. Encapsulations: Eth-IPv6-ICMPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2; Eth-IPv6-NS/NA on links TG-DUT. IPv6 routing tests use circular 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2 and received on TG links on the other side of circular topology. On receive TG verifies packets IPv6 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut replies to icmpv6 echo req to its ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc02: dut replies to icmpv6 echo req pkt with size 64b-to-1500b-incr-1b 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc04: dut routes to its egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc05: dut1 routes to dut2 ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc06: dut1 routes to dut2 egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc07: dut1 and dut2 route between tg interfaces 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc08: dut replies to ipv6 neighbor solicitation 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace

eth2p-ethip6-ip6base-iaclbase-func

IPv6 routing with ingress ACL test cases Encapsulations: Eth-IPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv6 ingress ACL (iACL) tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. DUT1 is configured with iACL on link to TG, iACL classification and permit/deny action are configured on a per test case basis. Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped, or if received verifies packet IPv6 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with iacl ipv6 src-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:ee:d1:37 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:61::1 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc02: dut with iacl ipv6 dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:ee:d1:37 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 3ffe:54::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 2 match l3 ip6 dst 3ffe:64::1 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc03: dut with iacl ipv6 src-addr and dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:ee:d1:37 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 3ffe:54::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:61::1 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 2 match_n 2 match l3 ip6 dst 3ffe:64::1 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 input_acl_set_interface sw_if_index 1 ip6-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc04: dut with iacl ipv6 protocol set to tcp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:ee:d1:37 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000006 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: dut with iacl ipv6 protocol set to udp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:ee:d1:37 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000011 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc06: dut with iacl ipv6 tcp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:ee:d1:37 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc07: dut with iacl ipv6 tcp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:ee:d1:37 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc08: dut with iacl ipv6 tcp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:ee:d1:37 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc09: dut with iacl ipv6 udp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:ee:d1:37 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc10: dut with iacl ipv6 udp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:ee:d1:37 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc11: dut with iacl ipv6 udp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:ee:d1:37 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc12: dut with iacl mac src-addr and iacl ipv6 udp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l2 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 src fa:16:3e:18:33:8b 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 l2-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-ip6dhcpproxy-func

DHCPv6 proxy test cases

  • [Top] Network Topologies: TG = DUT with two links between the nodes.
  • [Cfg] DUT configuration: DUT is configured with DHCPv6 proxy.
  • [Ver] TG verification: Test DHCPv6 packets are sent on TG on first link to DUT and received on TG on second link. On receive TG verifies if DHCPv6 packets are valid
  • [Ref] Applicable standard specifications: RFC 3315
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp proxies valid dhcpv6 request to dhcpv6 server 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_add_del_route ff02::1:2/128   local  count 1     
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:63::2 mac fa:16:3e:18:33:8b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 dhcp_proxy_config svr 3ffe:63::2 src 3ffe:62::1 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-ip6ecmp-func

Ipv6 Multipath routing test cases

  • [Top] Network topologies: TG=DUT 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT configure interfaces IPv4 adresses, and multipath routing.
  • [Ver] TG verification: Test packets are sent from TG on the first link to DUT. Packet is received on TG on the second link from DUT1.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: ipv6 equal-cost multipath routing 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:61::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 2 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 ip_neighbor_add_del sw_if_index 2 dst 3ffe:62::2 mac 02:00:00:00:00:02 
 ip_neighbor_add_del sw_if_index 2 dst 3ffe:62::3 mac 02:00:00:00:00:03 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:71::1/64 via 3ffe:62::2  sw_if_index 2  count 1  multipath   
 ip_add_del_route 3ffe:71::1/64 via 3ffe:62::3  sw_if_index 2  count 1  multipath   
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-ip6ra-func

IPv6 Router Advertisement test cases RFC4861 Neighbor Discovery. Encapsulations: Eth-IPv6-RA on links TG-DUT1. IPv6 Router Advertisement tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. TG verifies received RA packets.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut transmits ra on ipv6 enabled interface 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 interval 2 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut retransmits ra on ipv6 enabled interface after a set interval 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 interval 2 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut responds to router solicitation request 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut responds to router solicitation request sent from link local address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip6-ip6base-ipolicemarkbase-func

IPv6 policer test cases

  • [Top] Network topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT1 configure interfaces IPv6 adresses, and static neighbor record on the second interface.
  • [Ver] TG verification: Test packet is sent from TG on the first link to DUT1. Packet is received on TG on the second link from DUT1.
  • [Ref] Applicable standard specifications: RFC2474, RFC2697, RFC2698.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp policer 2r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:18:33:8b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc02: vpp policer 2r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:18:33:8b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc03: vpp policer 1r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:18:33:8b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 1 eir 0 cb 2 eb 300 rate_type pps round_type closest type 1r3c conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc04: vpp policer 1r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:18:33:8b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 100 eir 0 cb 200 eb 0 rate_type pps round_type closest type 1r3c conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6basevrf-func

Vpn routed forwarding - baseline IPv6

  • [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node topology with two links in between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6
  • [Cfg] DUT configuration: Each DUT is configured with two VRF tables; Separation of traffic is tested by IP packets; Neighbors and Routes are set on DUT nodes; IP addresses are set on DUT interfaces.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent by TG on link to DUT1, DUT2 or back to TG; On receipt TG verifies packets for correctness and their IPv6 src-addr, dst-addr, and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: tg packets routed to dut ingress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:48:e1:6b 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:1e:dd:97 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:18:33:8b 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:22:28:c6 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:0f:5d:f6 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:6b:cb:fe 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:ee:d1:37 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:3f:40:e2 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc02: tg packets routed to dut egress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:48:e1:6b 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:1e:dd:97 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:18:33:8b 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:22:28:c6 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:0f:5d:f6 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:6b:cb:fe 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:ee:d1:37 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:3f:40:e2 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc03: tg packets routed to dut2 ingress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:48:e1:6b 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:1e:dd:97 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:18:33:8b 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:22:28:c6 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:0f:5d:f6 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:6b:cb:fe 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:ee:d1:37 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:3f:40:e2 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc04: tg packets routed to dut2 egress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:48:e1:6b 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:1e:dd:97 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:18:33:8b 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:22:28:c6 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:0f:5d:f6 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:6b:cb:fe 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:ee:d1:37 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:3f:40:e2 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: tg packets routed to tg through dut1 and dut2, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:48:e1:6b 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:1e:dd:97 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:18:33:8b 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:22:28:c6 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:0f:5d:f6 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:6b:cb:fe 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:ee:d1:37 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:3f:40:e2 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

ip6 tunnels

lisp

eth2p-ethip6lisp-l2bdbasemaclrn-func

l2-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IP6-ICMPv6-LISPGpe-IP6
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge domains and neighbors. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: route ipv6 packet through lisp with bridge domain setup. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:1a:5c:e6 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:11 locator-set tst_locator 
 lisp_add_del_map_resolver 2001:cdba:2::2 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:22 seid 08:22:22:22:22:11 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:22 leid 08:22:22:22:22:11 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:16:46:7b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:22 locator-set tst_locator 
 lisp_add_del_map_resolver 2001:cdba:1::2 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:11 seid 08:22:22:22:22:22 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:11 leid 08:22:22:22:22:22 
 exec show trace

eth2p-ethip6lispgpe-ip4base-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lispoipv6 tunnel 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6:0:3::1/64 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:33:b9:11 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6:0:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 lisp_add_del_remote_mapping del vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6:0:3::2 
 lisp_add_del_adjacency del vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 ip_neighbor_add_del sw_if_index 3 dst 6:0:3::20 mac fa:16:3e:1a:5c:e6 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6:0:3::20 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6:0:3::2/64 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:5f:74:4b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 6:0:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 sw_interface_add_del_address sw_if_index 3 del-all 
 sw_interface_add_del_address sw_if_index 3 6:0:3::20/64 
 ip_neighbor_add_del sw_if_index 3 dst 6:0:3::1 mac fa:16:3e:16:46:7b 
 exec show trace

eth2p-ethip6lispgpe-ip6base-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:1a:5c:e6 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:16:46:7b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

eth2p-ethip6lispgpe-ip6basevrf-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:1a:5c:e6 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:16:46:7b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

vxlan

eth2p-ethip6vxlan-l2bdbasemaclrn-func

Bridge-domain with VXLAN test cases - IPv6

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv6 tunnels switch icmpv6 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace

eth4p-ethip6vxlan-l2bdbasemaclrn-l2shg-func

L2BD with SHG combined with VXLAN test cases - IPv6

  • [Top] Network topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
  • [Enc] Packet encapsulations: th-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG); VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv6 tunnels in shg switch icmpv6 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=1,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace
tc02: dut1 and dut2 with l2bd and vxlanoipv6 tunnels in different shgs switch icmpv6 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=2,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace

l2bd

eth2p-dot1ad–dot1q-l2bdbasemaclrn-vlantrans21-func

L2BD with VLAN tag rewrite test cases - transalte-2-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-2-1 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-2-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc03: dut1 and dut2 with l2bd and vlan translate-2-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-dot1ad-l2bdbasemaclrn-vlantrans22-func

L2BD with VLAN tag rewrite test cases - translate-2-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-2-2 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-2-2 switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc05: dut1 and dut2 with l2bd and vlan translate-2-2 switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-dot1q–dot1ad-l2bdbasemaclrn-vlantrans12-func

L2BD with VLAN tag rewrite test cases - translate-1-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-1-2 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-1-2 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=210,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc05: dut1 and dut2 with l2bd and vlan translate-1-2 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-dot1q-l2bdbasemaclrn-vlantrans11-func

L2BD with VLAN tag rewrite test cases - translate-1-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-1-1 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-1-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc03: dut1 and dut2 with l2bd and vlan translate-1-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-eth-l2bdbasemaclrn-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes; TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports active interfaces 
 DUT1:  
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with l2bd (mac learning) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: dut1 and dut2 with l2bd (mac learning) switch between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace

eth2p-eth-l2bdbasemacstc-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with static MACs.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd (static macs) switch between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>3x8b,sw_if_index=1,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>xeexd17,sw_if_index=3,bvi_mac=0) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=2) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>3x8b,sw_if_index=3,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>xeexd17,sw_if_index=1,bvi_mac=0) 
 exec show trace

eth4p-eth-l2bdbasemaclrn-l2shg-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG).
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd (mac learn) and shg switch between four tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=3,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=3,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=4,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=4,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace

l2xc

eth2p-dot1ad–dot1q-l2xcbase-vlantrans21-func

L2XC with VLAN tag rewrite test cases - translate-2-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 or Eth-dot1aq-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-2-1 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-2-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc03: dut1 and dut2 with l2xc and vlan translate-2-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1ad-l2xcbase-func

L2 cross-connect with QinQ test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching with 802.1ad QinQ VLAN tag push and pop.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and two vlan push-pop switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 100 inner_vlan_id 200 two_tags 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 100 inner_vlan_id 200 two_tags 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1ad-l2xcbase-vlantrans22-func

L2XC with VLAN tag rewrite test cases - translate-2-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-2-2 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-2-2 switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc05: dut1 and dut2 with l2xc and vlan translate-2-2 switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1q–dot1ad-l2xcbase-vlantrans12-func

L2XC with VLAN tag rewrite test cases - translate-1-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-1-2 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-1-2 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=210,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc05: dut1 and dut2 with l2xc and vlan translate-1-2 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1q-l2xcbase-vlantrans11-func

L2XC with VLAN tag rewrite test cases - translate-1-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv4-ICMPv4 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-1-1 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-1-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc03: dut1 and dut2 with l2xc and vlan translate-1-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-eth-l2xcbase-func

L2 cross-connect test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_dump 
 exec show trace
tc02: dut1 and dut2 with l2xc switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_dump 
 exec show trace

eth2p-eth-l2xcbase-iaclbase-func

Ingress ACL test cases

  • [Top] Network Topologies: TG - DUT1 - DUT2 - TG with one link between the nodes.
  • [Cfg] DUT configuration: DUT2 is configured with L2 Cross connect. DUT1 is configured with iACL classification on link to TG,
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with iacl mac src-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask l2 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 src fa:16:3e:18:33:8b 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: dut with iacl mac dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask l2 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 dst fa:16:3e:ee:d1:37 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc03: dut with iacl mac src-addr and dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask l2 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 src fa:16:3e:18:33:8b 
 classify_add_del_table mask l2 dst 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 0 match_n 1 match l2 dst fa:16:3e:18:33:8b 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 input_acl_set_interface sw_if_index 1 l2-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc04: dut with iacl ethertype drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask hex 000000000000000000000000ffff 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match hex 0000000000000000000000000800 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

telemetry

eth2p-ethip4-ip4base-ip4ipfixbase-func

IPFIX ipv4 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector. Test packets are sent from TG to DUT1. TG listens for flow report packets and verifies that they contains flow record of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut sends ipfix template and data packets 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:18:33:8b 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.1.2 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow for traffic by source address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:18:33:8b 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.1.2 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut reports packet flow for traffic with local destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:18:33:8b 
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 dst 192.168.1.1 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut reports packet flow for traffic with remote destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:18:33:8b 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.1 mac fa:16:3e:22:28:c6 
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 dst 192.168.2.1 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc05: dut reports packet flow for traffic by source and destination port 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:18:33:8b 
 classify_add_del_table mask l3 ip4 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 80 dst_port 80 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip4-ip4base-ip4ipfixscale-func

IPFIX ipv4 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector. Test packets are sent from TG to DUT1. TG listens for flow report packets and verifies that they contains flow record of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports packet flow with a large number of packets 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:18:33:8b 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.1.2 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow when multiple sessions are configured 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:18:33:8b 
 classify_add_del_table mask l3 ip4 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 0 dst_port 0 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 1 dst_port 1 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 2 dst_port 2 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 3 dst_port 3 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 4 dst_port 4 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 5 dst_port 5 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 6 dst_port 6 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 7 dst_port 7 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 8 dst_port 8 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 9 dst_port 9 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 10 dst_port 10 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 11 dst_port 11 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 12 dst_port 12 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 13 dst_port 13 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 14 dst_port 14 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 15 dst_port 15 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 16 dst_port 16 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 17 dst_port 17 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 18 dst_port 18 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 19 dst_port 19 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 20 dst_port 20 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 21 dst_port 21 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 22 dst_port 22 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 23 dst_port 23 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 24 dst_port 24 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 25 dst_port 25 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 26 dst_port 26 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 27 dst_port 27 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 28 dst_port 28 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 29 dst_port 29 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 30 dst_port 30 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 31 dst_port 31 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 32 dst_port 32 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 33 dst_port 33 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 34 dst_port 34 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 35 dst_port 35 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 36 dst_port 36 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 37 dst_port 37 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 38 dst_port 38 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 39 dst_port 39 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 40 dst_port 40 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 41 dst_port 41 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 42 dst_port 42 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 43 dst_port 43 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 44 dst_port 44 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 45 dst_port 45 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 46 dst_port 46 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 47 dst_port 47 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 48 dst_port 48 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 49 dst_port 49 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 50 dst_port 50 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 51 dst_port 51 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 52 dst_port 52 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 53 dst_port 53 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 54 dst_port 54 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 55 dst_port 55 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 56 dst_port 56 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 57 dst_port 57 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 58 dst_port 58 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 59 dst_port 59 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 60 dst_port 60 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 61 dst_port 61 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 62 dst_port 62 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 63 dst_port 63 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 64 dst_port 64 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 65 dst_port 65 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 66 dst_port 66 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 67 dst_port 67 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 68 dst_port 68 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 69 dst_port 69 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 70 dst_port 70 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 71 dst_port 71 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 72 dst_port 72 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 73 dst_port 73 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 74 dst_port 74 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 75 dst_port 75 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 76 dst_port 76 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 77 dst_port 77 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 78 dst_port 78 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 79 dst_port 79 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1  path_mtu 1450 template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip4-ip4base-spanrx-func

SPAN test suite

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: DUT1 is configured with SPAN mirroring from the first DUT1-TG interface to the second one.
  • [Ver] TG verification: Test ARP or ICMP packets are sent by TG on first link to DUT1; On receipt through second link TG verifies the copy of packet sent and the copy of DUT’s reply packet.
  • [Ref] Applicable standard specifications: None?
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut mirrors l2 packets from one interface to another 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.1.2/24 
 sw_interface_span_enable_disable src_sw_if_index 2 dst_sw_if_index 1 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut mirrors ipv4 packets from one interface to another 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.1.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.1.1 mac fa:16:3e:48:e1:6b 
 sw_interface_span_enable_disable src_sw_if_index 2 dst_sw_if_index 1 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip6-ip6base-ip6ipfixbase-func

IPFIX ipv6 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 and IPV6 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector.Test packets are sent from TG to or through DUT1. TG listens for flow report packets and verifies that they contains flow records of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports packet flow for traffic by source address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:18:33:8b 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:18:33:8b 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip6 src 12::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow for traffic with local destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:18:33:8b 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:18:33:8b 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 2 match_n 2 match l3 ip6 dst 10::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut reports packet flow for traffic with remote destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:18:33:8b 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:18:33:8b 
 ip_neighbor_add_del sw_if_index 3 dst 11::10 mac fa:16:3e:22:28:c6 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 2 match_n 2 match l3 ip6 dst 11::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut reports packet flow for traffic by source and destination port 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:18:33:8b 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:18:33:8b 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 80 dst_port 80 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip6-ip6base-ip6ipfixscale-func

IPFIX ipv6 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 and IPV6 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector.Test packets are sent from TG to or through DUT1. TG listens for flow report packets and verifies that they contains flow records of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports packet flow with a large number of packets 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:18:33:8b 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:18:33:8b 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip6 src 12::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow when multiple sessions are configured 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:18:33:8b 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:18:33:8b 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 0 dst_port 0 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 1 dst_port 1 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 2 dst_port 2 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 3 dst_port 3 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 4 dst_port 4 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 5 dst_port 5 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 6 dst_port 6 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 7 dst_port 7 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 8 dst_port 8 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 9 dst_port 9 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 10 dst_port 10 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 11 dst_port 11 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 12 dst_port 12 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 13 dst_port 13 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 14 dst_port 14 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 15 dst_port 15 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 16 dst_port 16 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 17 dst_port 17 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 18 dst_port 18 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 19 dst_port 19 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 20 dst_port 20 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 21 dst_port 21 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 22 dst_port 22 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 23 dst_port 23 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 24 dst_port 24 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 25 dst_port 25 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 26 dst_port 26 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 27 dst_port 27 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 28 dst_port 28 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 29 dst_port 29 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 30 dst_port 30 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 31 dst_port 31 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 32 dst_port 32 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 33 dst_port 33 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 34 dst_port 34 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 35 dst_port 35 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 36 dst_port 36 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 37 dst_port 37 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 38 dst_port 38 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 39 dst_port 39 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 40 dst_port 40 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 41 dst_port 41 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 42 dst_port 42 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 43 dst_port 43 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 44 dst_port 44 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1  path_mtu 1450 template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip6-ip6base-spanrx-func

SPAN test suite

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: DUT1 is configured with SPAN mirroring from the first DUT1-TG interface to the second one.
  • [Ver] TG verification: Test ARP or ICMP packets are sent by TG on first link to DUT1; On receipt through second link TG verifies the copy of packet sent and the copy of DUT’s reply packet.
  • [Ref] Applicable standard specifications: None?
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut mirrors ipv6 packets from one interface to another 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_add_del_address sw_if_index 2 10::1/24 
 sw_interface_set_flags sw_if_index 2 admin-up 
 ip_neighbor_add_del sw_if_index 2 dst 11::1 mac fa:16:3e:48:e1:6b 
 ip_add_del_route 11::1/24 via 10::1  sw_if_index 2 resolve-attempts 10 count 1     
 sw_interface_span_enable_disable src_sw_if_index 2 dst_sw_if_index 1 
 exec show trace  
  
 DUT2:  
 exec show trace

vm vhost

ip4

eth2p-ethip4-ip4base-eth-2vhost-1vm

eth2p-ethip4-ip4base-eth-2vhost-1vm

IPv4 routing test cases with vhost user interface RFC791 IPv4, RFC826 ARP, RFC792 ICMPv4. Encapsulations: Eth-IPv4-ICMPv4 on links TG=DUT1. IPv4 routing tests use circular 2-node topology TG - DUT1 - TG with two link between the nodes. DUT is configured with IPv4 routing and static routes. Test sends packets by TG on links to DUT and received on TG link on the other side of circular topology. On receive TG verifies packets IPv4 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: ipv4 forward via vhost to another vrf 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 ip_table_add_del table 20  
 sw_interface_set_table sw_if_index 6 vrf 20  
 sw_interface_set_table sw_if_index 1 vrf 20  
 sw_interface_add_del_address sw_if_index 2 10.0.1.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.2.1/24 
 sw_interface_add_del_address sw_if_index 6 10.0.2.2/24 
 sw_interface_add_del_address sw_if_index 1 10.0.3.1/24 
 sw_interface_dump 
 ip_add_del_route 10.0.3.0/24 via 10.0.2.2  sw_if_index 5       
 ip_add_del_route 10.0.1.0/24 via 10.0.2.1 vrf 20 sw_if_index 6       
 ip_neighbor_add_del sw_if_index 5 dst 10.0.2.2 mac 02:fe:78:33:22:8d 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.3.2 mac fa:16:3e:33:b9:11 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip4base-eth-2vhost-1vm-func

IPv4-ip4-ipsec-lispgpe-ip4 - main fib, vrf (gpe_vni-to-vrf)

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: ICMPv4-IPv4-IPSec-LISPGPE-IPv4-ICMPv4.
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:1a:5c:e6 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 6.6.1.9/24 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 64526f6f667a735a5867313551554176 integ-alg sha1-96 integ-key 576a68725a5a4255716851484c38694f68665262  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 64526f6f667a735a5867313551554176 integ-alg sha1-96 integ-key 576a68725a5a4255716851484c38694f68665262  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:16:46:7b 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 64526f6f667a735a5867313551554176 integ-alg sha1-96 integ-key 576a68725a5a4255716851484c38694f68665262  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 64526f6f667a735a5867313551554176 integ-alg sha1-96 integ-key 576a68725a5a4255716851484c38694f68665262  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:1a:5c:e6 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 6.6.1.9/24 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5155493834433765356d636650443471 integ-alg sha1-96 integ-key 5a79674e647a577736515255666c4c3266414b61  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5155493834433765356d636650443471 integ-alg sha1-96 integ-key 5a79674e647a577736515255666c4c3266414b61  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 7 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:16:46:7b 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5155493834433765356d636650443471 integ-alg sha1-96 integ-key 5a79674e647a577736515255666c4c3266414b61  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5155493834433765356d636650443471 integ-alg sha1-96 integ-key 5a79674e647a577736515255666c4c3266414b61  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip6base-eth-2vhost-1vm-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:1a:5c:e6 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:33:b9:11 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 2001:cdba:6::3/64 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 8 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 74756f546c586f61706e6c6c754e7846 integ-alg sha1-96 integ-key 3947646c73426f6a5543353378364a74764f4a75  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 74756f546c586f61706e6c6c754e7846 integ-alg sha1-96 integ-key 3947646c73426f6a5543353378364a74764f4a75  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:16:46:7b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 74756f546c586f61706e6c6c754e7846 integ-alg sha1-96 integ-key 3947646c73426f6a5543353378364a74764f4a75  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 74756f546c586f61706e6c6c754e7846 integ-alg sha1-96 integ-key 3947646c73426f6a5543353378364a74764f4a75  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:1a:5c:e6 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:33:b9:11 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 2001:cdba:6::3/64 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 8 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4b364937494836446b5a506633496179 integ-alg sha1-96 integ-key 6850726f67686f61645a6757456c7a586d637a49  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4b364937494836446b5a506633496179 integ-alg sha1-96 integ-key 6850726f67686f61645a6757456c7a586d637a49  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:16:46:7b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4b364937494836446b5a506633496179 integ-alg sha1-96 integ-key 6850726f67686f61645a6757456c7a586d637a49  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4b364937494836446b5a506633496179 integ-alg sha1-96 integ-key 6850726f67686f61645a6757456c7a586d637a49  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace

eth2p-ethip4lispgpe-ip4base-eth-2vhost-1vm-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using vhost interfaces 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:1a:5c:e6 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 0 reid 6.0.5.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 8 vrf 0  
 sw_interface_add_del_address sw_if_index 8 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:16:46:7b 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip4basevrf-eth-2vhost-1vm-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using vhost interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:1a:5c:e6 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 1 reid 6.0.5.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 9 vrf 1  
 sw_interface_add_del_address sw_if_index 9 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:16:46:7b 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 1 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip6base-eth-2vhost-1vm-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6:0:1::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:1::2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.2 mac fa:16:3e:1a:5c:e6 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6:0:1::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 6:6:1::3/64 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6:0:2::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:2::2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:16:46:7b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6:0:2::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:1::0/64 seid 6:0:2::0/64 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 0 reid 6:0:1::0/64 leid 6:0:2::0/64 
 exec show trace

ip6

eth2p-ethip6ipsectptlispgpe-ip4base-eth-2vhost-1vm-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISPGPE-IPSec-IPv4-ICMP, Eth-IPv6-IPSec-LISPGPE-IPv4-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Test cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:1a:5c:e6 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:33:b9:11 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3462787a5757717149696566466a7344 integ-alg sha1-96 integ-key 4e44575a47554c613835504161746b376c566c34  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3462787a5757717149696566466a7344 integ-alg sha1-96 integ-key 4e44575a47554c613835504161746b376c566c34  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:16:46:7b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3462787a5757717149696566466a7344 integ-alg sha1-96 integ-key 4e44575a47554c613835504161746b376c566c34  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3462787a5757717149696566466a7344 integ-alg sha1-96 integ-key 4e44575a47554c613835504161746b376c566c34  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:1a:5c:e6 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:33:b9:11 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e736f515331696d6458576d38714e6e integ-alg sha1-96 integ-key 733471444357444a47614f694b48426d6873504e  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e736f515331696d6458576d38714e6e integ-alg sha1-96 integ-key 733471444357444a47614f694b48426d6873504e  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:16:46:7b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e736f515331696d6458576d38714e6e integ-alg sha1-96 integ-key 733471444357444a47614f694b48426d6873504e  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e736f515331696d6458576d38714e6e integ-alg sha1-96 integ-key 733471444357444a47614f694b48426d6873504e  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace

eth2p-ethip6ipsectptlispgpe-ip6base-eth-2vhost-1vm-func

IPv6 - ip6-ipsec-lispgpe-ip6 - main fib, vrf (gpe_vni-to-vrf), phy2lisp, virt2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6,
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:1a:5c:e6 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 2001:cdba:1::9/64 
 sw_interface_set_flags sw_if_index 6 admin-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 706e364261523736555a4958335a4177 integ-alg sha1-96 integ-key 5875444639546d396b70424c525a526965594575  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 706e364261523736555a4958335a4177 integ-alg sha1-96 integ-key 5875444639546d396b70424c525a526965594575  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:16:46:7b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 706e364261523736555a4958335a4177 integ-alg sha1-96 integ-key 5875444639546d396b70424c525a526965594575  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 706e364261523736555a4958335a4177 integ-alg sha1-96 integ-key 5875444639546d396b70424c525a526965594575  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:1a:5c:e6 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 2001:cdba:1::9/64 
 sw_interface_set_flags sw_if_index 6 admin-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 50694b41715643773543583064647972 integ-alg sha1-96 integ-key 74414d4f71567966355342636d6b79704f4b5275  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 50694b41715643773543583064647972 integ-alg sha1-96 integ-key 74414d4f71567966355342636d6b79704f4b5275  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 7 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:16:46:7b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 50694b41715643773543583064647972 integ-alg sha1-96 integ-key 74414d4f71567966355342636d6b79704f4b5275  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 50694b41715643773543583064647972 integ-alg sha1-96 integ-key 74414d4f71567966355342636d6b79704f4b5275  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace

eth2p-ethip6lispgpe-ip6base-eth-2vhost-1vm-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:1a:5c:e6 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 0 ipv6 
 sw_interface_set_table sw_if_index 8 vrf 0 ipv6 
 sw_interface_add_del_address sw_if_index 8 2001:cdba:6::9/64 
 sw_interface_set_flags sw_if_index 8 admin-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:16:46:7b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

eth2p-ethip6lispgpe-ip6basevrf-eth-2vhost-1vm-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces and vrf is enabled 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:33:b9:11 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:1a:5c:e6 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 9 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 9 2001:cdba:6::9/64 
 sw_interface_set_flags sw_if_index 9 admin-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:5f:74:4b 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:16:46:7b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

l2bd

eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm-func

L2 bridge domain with VLAN tag over VM test cases

  • [Top] Network Topologies: TG=DUT 2-node circular topology with double links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG=DUT and on DUT=VM.
  • [Cfg] DUT configuration: DUT is configured with two bridge domains (L2BD) with MAC learning enabled; each one with added VLAN sub-interface towards TG and vhost-user interface to local VM. Configure linux bridge on VM to pass traffic between both vhost-user interfaces.
  • [Ver] TG verification: Make TG send ICMPv4/ICMPv6 Echo Req between two of its interfaces to be switched by DUT via VM; verify packets are switched between these TG interfaces; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr, MAC addresses and VLAN tag.
  • [Ref] Applicable standard specifications: IEEE 802.1q.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm - ipv4 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 create_vlan_subif sw_if_index 2 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc01: eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm - ipv6 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 create_vlan_subif sw_if_index 2 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-eth-l2bdbasemaclrn-eth-2vhost-1vm-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 is configured with two L2 bridge-domains (L2BD) switching combined with MAC learning enabled.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with two l2bds (mac learn) switches icmpv4 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with two l2bds (mac learn) switches icmpv6 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-eth-l2bdbasemacstc-eth-2vhost-1vm-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 is configured with two L2 bridge-domains (L2BD) switching combined with static MACs.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with two l2bds (static macs) switches icmpv4 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>Hxe1k,sw_if_index=2,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>3x8b,sw_if_index=5,bvi_mac=0) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>3x8b,sw_if_index=1,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>Hxe1k,sw_if_index=6,bvi_mac=0) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with two l2bds (static macs) switches icmpv6 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>Hxe1k,sw_if_index=2,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>3x8b,sw_if_index=5,bvi_mac=0) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>3x8b,sw_if_index=1,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>Hxe1k,sw_if_index=6,bvi_mac=0) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-l2bdbase-vhost-client-reconnect-2vm-func

Vhost-User Interface Traffic Tests

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-VXLAN-ETH-IP on TG-DUT link. ETH-IP on VirtualEthernet-VM interface.
  • [Cfg] DUT configuration: On DUT is running 2 VM with 2 vhost-user interface on each VM. DUT is configured with VXLAN and vhost-user interfaces in bridge-domain (L2BD).
  • [Cfg] VM configuration: VM has both vhost-user interfaces added into Linux Bridge.
  • [Ver] TG verification: VXLAN packet is send to DUT where is decapsulated and send bridged to vhost-user inteface. VM forwards frame to its second interface and VPP encapsulates it to another VXLAN tunnel. Packets are sent and received by TG on link to DUT.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: qemu reconnects to vpps vhost-user when qemu is killed and restarted 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.1 mac fa:16:3e:48:e1:6b 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 101 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 102 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 103 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 104 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock3 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock4 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 sw_interface_set_flags sw_if_index 10 admin-up link-up 
 sw_interface_set_flags sw_if_index 11 admin-up link-up 
 sw_interface_set_flags sw_if_index 12 admin-up link-up 
 bridge_domain_add_del(bd_id=101,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=101) 
 sw_interface_set_l2_bridge(rx_sw_if_index=9,enable=1,shg=0,port_type=0,bd_id=101) 
 bridge_domain_add_del(bd_id=102,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=102) 
 sw_interface_set_l2_bridge(rx_sw_if_index=10,enable=1,shg=0,port_type=0,bd_id=102) 
 bridge_domain_add_del(bd_id=103,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=103) 
 sw_interface_set_l2_bridge(rx_sw_if_index=11,enable=1,shg=0,port_type=0,bd_id=103) 
 bridge_domain_add_del(bd_id=104,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_l2_bridge(rx_sw_if_index=12,enable=1,shg=0,port_type=0,bd_id=104) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp reconnects to qemu vhost-user when restart vpp and reconfigured 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.1 mac fa:16:3e:48:e1:6b 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 101 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 102 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 103 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 104 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock3 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock4 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 sw_interface_set_flags sw_if_index 10 admin-up link-up 
 sw_interface_set_flags sw_if_index 11 admin-up link-up 
 sw_interface_set_flags sw_if_index 12 admin-up link-up 
 bridge_domain_add_del(bd_id=101,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=101) 
 sw_interface_set_l2_bridge(rx_sw_if_index=9,enable=1,shg=0,port_type=0,bd_id=101) 
 bridge_domain_add_del(bd_id=102,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=102) 
 sw_interface_set_l2_bridge(rx_sw_if_index=10,enable=1,shg=0,port_type=0,bd_id=102) 
 bridge_domain_add_del(bd_id=103,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=103) 
 sw_interface_set_l2_bridge(rx_sw_if_index=11,enable=1,shg=0,port_type=0,bd_id=103) 
 bridge_domain_add_del(bd_id=104,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_l2_bridge(rx_sw_if_index=12,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.1 mac fa:16:3e:48:e1:6b 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 101 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 102 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 103 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 104 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock3 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock4 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 sw_interface_set_flags sw_if_index 10 admin-up link-up 
 sw_interface_set_flags sw_if_index 11 admin-up link-up 
 sw_interface_set_flags sw_if_index 12 admin-up link-up 
 bridge_domain_add_del(bd_id=101,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=101) 
 sw_interface_set_l2_bridge(rx_sw_if_index=9,enable=1,shg=0,port_type=0,bd_id=101) 
 bridge_domain_add_del(bd_id=102,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=102) 
 sw_interface_set_l2_bridge(rx_sw_if_index=10,enable=1,shg=0,port_type=0,bd_id=102) 
 bridge_domain_add_del(bd_id=103,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=103) 
 sw_interface_set_l2_bridge(rx_sw_if_index=11,enable=1,shg=0,port_type=0,bd_id=103) 
 bridge_domain_add_del(bd_id=104,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_l2_bridge(rx_sw_if_index=12,enable=1,shg=0,port_type=0,bd_id=104) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4vxlan-l2bdbasemaclrn-eth-2vhost-1vm-func

L2BD with VM combined with VXLAN test cases - IPv4

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01:dut1 and dut2 with two l2bds and vxlanoipv4 tunnel switch icmpv4 between tg links and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace

eth2p-ethip6vxlan-l2bdbasemaclrn-eth-2vhost-1vm-func

L2BD with VM combined with VXLAN test cases - IPv6

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01:dut1 and dut2 with two l2bds and vxlanoipv6 tunnel switch icmpv6 between tg links and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace

l2xc

eth2p-eth-l2xcbase-eth-2vhost-1vm-func

L2 cross-connect test cases

  • [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with two l2xcs switches icmpv4 between tg and local vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=2,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=2) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=6) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=6,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with two l2xcs switches icmpv6 between tg and local vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=2,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=2) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=6) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=6,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 exec show trace