func

crypto

default

eth2p-ethip4ipsectnl-ip4base-func

IPv4 IPsec tunnel mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 45426446684b6132437958527932767a integ-alg sha1-96 integ-key 6f7a695068597574706d337541736265674f437a tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 45426446684b6132437958527932767a integ-alg sha1-96 integ-key 6f7a695068597574706d337541736265674f437a tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 4a7a304f7845366978554671517042774a676a7a496c3745 integ-alg sha-256-128 integ-key 644a336777353143717a6173334d4e78316f3671567650697857636e38304e71 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 4a7a304f7845366978554671517042774a676a7a496c3745 integ-alg sha-256-128 integ-key 644a336777353143717a6173334d4e78316f3671567650697857636e38304e71 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 4e376a685a7633736346344f43626854476b476a6441457862636f6e69516536 integ-alg sha-384-192 integ-key 714e7063783432414865694f74526b417a77436a353361767345484e50584b7a3036423530464e486676765266316f42 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 4e376a685a7633736346344f43626854476b476a6441457862636f6e69516536 integ-alg sha-384-192 integ-key 714e7063783432414865694f74526b417a77436a353361767345484e50584b7a3036423530464e486676765266316f42 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 5933677a487a37666373714842787563436a63384e6f437a453969337674456f integ-alg sha-512-256 integ-key 364a43504c324e34786f39585a4b455770615942763356546444444e7a4645553671484f6154653767793944464a4a43365077434b43676b356a396e304a375a tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 5933677a487a37666373714842787563436a63384e6f437a453969337674456f integ-alg sha-512-256 integ-key 364a43504c324e34786f39585a4b455770615942763356546444444e7a4645553671484f6154653767793944464a4a43365077434b43676b356a396e304a375a tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 34394c4b7858334d477432646e626e51 integ-alg sha1-96 integ-key 763554307a35486372696e4a505279565258334a tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 34394c4b7858334d477432646e626e51 integ-alg sha1-96 integ-key 763554307a35486372696e4a505279565258334a tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4673734233436f6e68794c4c556f5441 integ-alg sha1-96 integ-key 35516a524a5635756e6b37364346696d37514675 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4673734233436f6e68794c4c556f5441 integ-alg sha1-96 integ-key 35516a524a5635756e6b37364346696d37514675 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3676444c4b72624e6543706279785136 integ-alg sha1-96 integ-key 597042385470476839313058414e6e696e634e6c tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3676444c4b72624e6543706279785136 integ-alg sha1-96 integ-key 597042385470476839313058414e6e696e634e6c tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 646f6d616a68454a6345484858337274 integ-alg sha1-96 integ-key 4a4c304e545a497930546964614864744e524872 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 646f6d616a68454a6345484858337274 integ-alg sha1-96 integ-key 4a4c304e545a497930546964614864744e524872 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 674b513062725a7856796b653343314a integ-key 676e31573944554c50664a6b306e307169566f52 
 exec set ipsec sa 20 crypto-key 674b513062725a7856796b653343314a integ-key 676e31573944554c50664a6b306e307169566f52 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 714841315431643143365a4d74353458 integ-alg sha1-96 integ-key 485058415442476a4a6a4472706e316371493763 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 714841315431643143365a4d74353458 integ-alg sha1-96 integ-key 485058415442476a4a6a4472706e316371493763 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 6439796330714b35334f68503354764f integ-key 6f68624f7755517471456b596b736b62466f4161 
 exec set ipsec sa 20 crypto-key 6439796330714b35334f68503354764f integ-key 6f68624f7755517471456b596b736b62466f4161 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 42656f6755647559467652666e4a7556 integ-alg sha1-96 integ-key 73587949784238633143756f7438696c706c6a4a tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 42656f6755647559467652666e4a7556 integ-alg sha1-96 integ-key 73587949784238633143756f7438696c706c6a4a tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 384f45754932446d466a364167624f6d integ-key 6d494d4149744c6f54546c485a6c703152695850 
 exec set ipsec sa 20 crypto-key 384f45754932446d466a364167624f6d integ-key 6d494d4149744c6f54546c485a6c703152695850 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 594739646c724f72434c514f49576f56 integ-alg sha1-96 integ-key 5255376c376d534f4b6c414e3864697756594367 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 594739646c724f72434c514f49576f56 integ-alg sha1-96 integ-key 5255376c376d534f4b6c414e3864697756594367 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 794b513433674c7a5046754f68457468 integ-key 45613177346a5479674c5477684f764b66764867 
 exec set ipsec sa 20 crypto-key 794b513433674c7a5046754f68457468 integ-key 45613177346a5479674c5477684f764b66764867 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectpt-ip4base-func

IPv4 IPsec transport mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5143507a57495774724837687a477765 integ-alg sha1-96 integ-key 71633352376f7842586a417a6f686f7650687451  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5143507a57495774724837687a477765 integ-alg sha1-96 integ-key 71633352376f7842586a417a6f686f7650687451  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 5979616356345071596c353130336e4f7070476646696841 integ-alg sha-256-128 integ-key 33554f704d4e61516146626871495537463470796f347561444b647469624f4d  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 5979616356345071596c353130336e4f7070476646696841 integ-alg sha-256-128 integ-key 33554f704d4e61516146626871495537463470796f347561444b647469624f4d  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 706e4b6c4448524d52704f51637070467953456c6b32714e666f746c31525333 integ-alg sha-384-192 integ-key 684c544b73567636756c6e766d444858536e534a32484e6b767671526a6b45434f4a736e6272337a6d7331546d763332  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 706e4b6c4448524d52704f51637070467953456c6b32714e666f746c31525333 integ-alg sha-384-192 integ-key 684c544b73567636756c6e766d444858536e534a32484e6b767671526a6b45434f4a736e6272337a6d7331546d763332  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 5063504570317a7465705a366d4f596b624f337475396662356778376c6d4d69 integ-alg sha-512-256 integ-key 7a4850714e496756747561537347553536504c4e564873576958587344444d6e68504e78415737556e5275396d6830464d3552447042554941434f324547486b  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 5063504570317a7465705a366d4f596b624f337475396662356778376c6d4d69 integ-alg sha-512-256 integ-key 7a4850714e496756747561537347553536504c4e564873576958587344444d6e68504e78415737556e5275396d6830464d3552447042554941434f324547486b  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e464232633539485259516a62736871 integ-alg sha1-96 integ-key 57784f65633972753675625146693346494a7531  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e464232633539485259516a62736871 integ-alg sha1-96 integ-key 57784f65633972753675625146693346494a7531  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 72383474415056696663506438334b33 integ-alg sha1-96 integ-key 4135447a4343464850395a686735344264305651  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 72383474415056696663506438334b33 integ-alg sha1-96 integ-key 4135447a4343464850395a686735344264305651  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 333653515763417868417539744c4a4b integ-alg sha1-96 integ-key 784e4a66614c74424230366e506770414e775043  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 333653515763417868417539744c4a4b integ-alg sha1-96 integ-key 784e4a66614c74424230366e506770414e775043  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4f5065346c31524b5874523942553533 integ-alg sha1-96 integ-key 48697a65354c54504638546a5730726e5979486c  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4f5065346c31524b5874523942553533 integ-alg sha1-96 integ-key 48697a65354c54504638546a5730726e5979486c  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 4e5145685450635a5a424f7546574b4d integ-key 4b5a614a38514e447664513437454b474b524464 
 exec set ipsec sa 20 crypto-key 4e5145685450635a5a424f7546574b4d integ-key 4b5a614a38514e447664513437454b474b524464 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 7134486158533357706e4c6c5865347a integ-alg sha1-96 integ-key 715255466c666a42327832336167376a55346c51  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 7134486158533357706e4c6c5865347a integ-alg sha1-96 integ-key 715255466c666a42327832336167376a55346c51  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 667a635462334c614259497274376269 integ-key 72724746737568667a746e43557661664171327a 
 exec set ipsec sa 20 crypto-key 667a635462334c614259497274376269 integ-key 72724746737568667a746e43557661664171327a 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6c424a52676530636559304258374f4e integ-alg sha1-96 integ-key 4c34366d4846466d427153565a4b79783162686b  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6c424a52676530636559304258374f4e integ-alg sha1-96 integ-key 4c34366d4846466d427153565a4b79783162686b  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 4b72516e3050525452574f776a7a6c51 integ-key 39376b6d4b38697933547075386d474a46386745 
 exec set ipsec sa 20 crypto-key 4b72516e3050525452574f776a7a6c51 integ-key 39376b6d4b38697933547075386d474a46386745 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4b4842744e51526765514e51566f3241 integ-alg sha1-96 integ-key 594c6c3561494b7a39334547436e506433416f58  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4b4842744e51526765514e51566f3241 integ-alg sha1-96 integ-key 594c6c3561494b7a39334547436e506433416f58  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 667a4e6f34336c324551496e7239566e integ-key 394e4c37575554493467454e7a746a384258724f 
 exec set ipsec sa 20 crypto-key 667a4e6f34336c324551496e7239566e integ-key 394e4c37575554493467454e7a746a384258724f 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip4base-func

IPv4-ip4-ipsec-lispgpe-ip4 - main fib, vrf (gpe_vni-to-vrf)

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: ICMPv4-IPv4-IPSec-LISPGPE-IPv4-ICMPv4.
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:4e:27:10 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:31:66 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 414d494159456676304b7a3870757950 integ-alg sha1-96 integ-key 5831594c46544a3777515870306d664435674658  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 414d494159456676304b7a3870757950 integ-alg sha1-96 integ-key 5831594c46544a3777515870306d664435674658  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:27:c6:8f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:cf:eb:5b 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 414d494159456676304b7a3870757950 integ-alg sha1-96 integ-key 5831594c46544a3777515870306d664435674658  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 414d494159456676304b7a3870757950 integ-alg sha1-96 integ-key 5831594c46544a3777515870306d664435674658  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:4e:27:10 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:31:66 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5975586e51567a756e5a585a35364c38 integ-alg sha1-96 integ-key 6e78346a364478644c34774c4a656d31566a7547  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5975586e51567a756e5a585a35364c38 integ-alg sha1-96 integ-key 6e78346a364478644c34774c4a656d31566a7547  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:27:c6:8f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:cf:eb:5b 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5975586e51567a756e5a585a35364c38 integ-alg sha1-96 integ-key 6e78346a364478644c34774c4a656d31566a7547  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5975586e51567a756e5a585a35364c38 integ-alg sha1-96 integ-key 6e78346a364478644c34774c4a656d31566a7547  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec show trace
tc03: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int and vrf on eid is enabled. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:4e:27:10 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:31:66 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 1 reid 6.6.2.0/24 leid 6.6.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 426e5334615a6c4738634d6c6d6d5963 integ-alg sha1-96 integ-key 4b313556654f443661475a4e4d7a68704954426d  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 426e5334615a6c4738634d6c6d6d5963 integ-alg sha1-96 integ-key 4b313556654f443661475a4e4d7a68704954426d  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:27:c6:8f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:cf:eb:5b 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 1 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 426e5334615a6c4738634d6c6d6d5963 integ-alg sha1-96 integ-key 4b313556654f443661475a4e4d7a68704954426d  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 426e5334615a6c4738634d6c6d6d5963 integ-alg sha1-96 integ-key 4b313556654f443661475a4e4d7a68704954426d  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc04: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int and vrf is enabled. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:4e:27:10 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:31:66 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 1 reid 6.6.2.0/24 leid 6.6.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4275644e6a6c6555304570464e474744 integ-alg sha1-96 integ-key 454c42436d4f646e7a6b78536a516a5a69344b68  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4275644e6a6c6555304570464e474744 integ-alg sha1-96 integ-key 454c42436d4f646e7a6b78536a516a5a69344b68  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:27:c6:8f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:cf:eb:5b 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 1 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4275644e6a6c6555304570464e474744 integ-alg sha1-96 integ-key 454c42436d4f646e7a6b78536a516a5a69344b68  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4275644e6a6c6555304570464e474744 integ-alg sha1-96 integ-key 454c42436d4f646e7a6b78536a516a5a69344b68  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip6base-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:31:66 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6c50565870336d366131524a62693430 integ-alg sha1-96 integ-key 497765766c7a6c74775254505a554d394132346b  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6c50565870336d366131524a62693430 integ-alg sha1-96 integ-key 497765766c7a6c74775254505a554d394132346b  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:27:c6:8f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:cf:eb:5b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6c50565870336d366131524a62693430 integ-alg sha1-96 integ-key 497765766c7a6c74775254505a554d394132346b  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6c50565870336d366131524a62693430 integ-alg sha1-96 integ-key 497765766c7a6c74775254505a554d394132346b  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:31:66 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4d556234466251797479466c63476b44 integ-alg sha1-96 integ-key 446e4776454766474b5a4d42435a586c78473538  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4d556234466251797479466c63476b44 integ-alg sha1-96 integ-key 446e4776454766474b5a4d42435a586c78473538  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:27:c6:8f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:cf:eb:5b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4d556234466251797479466c63476b44 integ-alg sha1-96 integ-key 446e4776454766474b5a4d42435a586c78473538  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4d556234466251797479466c63476b44 integ-alg sha1-96 integ-key 446e4776454766474b5a4d42435a586c78473538  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip6basevrf-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 674a4e5572416d4c707862397343694e integ-alg sha1-96 integ-key 656c74415662734f394f6d674b6f4537756b6556  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 674a4e5572416d4c707862397343694e integ-alg sha1-96 integ-key 656c74415662734f394f6d674b6f4537756b6556  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b6:31:66 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 674a4e5572416d4c707862397343694e integ-alg sha1-96 integ-key 656c74415662734f394f6d674b6f4537756b6556  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 674a4e5572416d4c707862397343694e integ-alg sha1-96 integ-key 656c74415662734f394f6d674b6f4537756b6556  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:27:c6:8f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:cf:eb:5b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

eth2p-ethip6ipsectnl-ip6base-func

IPv6 IPsec tunnel mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6a7830334c3449344e72517276746f49 integ-alg sha1-96 integ-key 6d516f6c6b4c48586835587a4c686d6870795242 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6a7830334c3449344e72517276746f49 integ-alg sha1-96 integ-key 6d516f6c6b4c48586835587a4c686d6870795242 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 7051654d627a5154453067746b456d306e754b5068514c66 integ-alg sha-256-128 integ-key 4139395270575642634374724f497a577847496766454d384875794666706d38 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 7051654d627a5154453067746b456d306e754b5068514c66 integ-alg sha-256-128 integ-key 4139395270575642634374724f497a577847496766454d384875794666706d38 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 51474a31416139457534716a7a47516a36467572516d4547684a454c354b4964 integ-alg sha-384-192 integ-key 65595679534c315234413630783238626473746531564b5745664a323937496353636e595766416b6733394731714c55 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 51474a31416139457534716a7a47516a36467572516d4547684a454c354b4964 integ-alg sha-384-192 integ-key 65595679534c315234413630783238626473746531564b5745664a323937496353636e595766416b6733394731714c55 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 41536d6f4869556d6f68574c756a474f77674945746a6f575a424e4348694e70 integ-alg sha-512-256 integ-key 66567239794d3039477577684142463449436169534d597253567936457231346a4c3751437a384d367557556e6d4138644649714e47545a526b6a664241474b tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 41536d6f4869556d6f68574c756a474f77674945746a6f575a424e4348694e70 integ-alg sha-512-256 integ-key 66567239794d3039477577684142463449436169534d597253567936457231346a4c3751437a384d367557556e6d4138644649714e47545a526b6a664241474b tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6b626d3261616a596855643065427171 integ-alg sha1-96 integ-key 675933614b54723538306c7172306a6572676b73 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6b626d3261616a596855643065427171 integ-alg sha1-96 integ-key 675933614b54723538306c7172306a6572676b73 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5535454a345332687054687837553652 integ-alg sha1-96 integ-key 497a7a366e4769694943334a6174345248767876 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5535454a345332687054687837553652 integ-alg sha1-96 integ-key 497a7a366e4769694943334a6174345248767876 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 78535768654b683747525963787a5969 integ-alg sha1-96 integ-key 355831414c43366d75326358454d31584e495a4c tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 78535768654b683747525963787a5969 integ-alg sha1-96 integ-key 355831414c43366d75326358454d31584e495a4c tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 52707165666e41526b4650495a747443 integ-alg sha1-96 integ-key 39795474304d5442784f6f43686e434250706551 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 52707165666e41526b4650495a747443 integ-alg sha1-96 integ-key 39795474304d5442784f6f43686e434250706551 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 636f4e4c3951757653724834335a736f integ-key 4361423372554447494c496b53695a39494a7176 
 exec set ipsec sa 20 crypto-key 636f4e4c3951757653724834335a736f integ-key 4361423372554447494c496b53695a39494a7176 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5a764e465a77666d5667684d66564b77 integ-alg sha1-96 integ-key 43647766703147666b637a4a4234334465543178 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5a764e465a77666d5667684d66564b77 integ-alg sha1-96 integ-key 43647766703147666b637a4a4234334465543178 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 7a59544270564c486766333031346676 integ-key 67584b744d346e6d46667a573837385a48416166 
 exec set ipsec sa 20 crypto-key 7a59544270564c486766333031346676 integ-key 67584b744d346e6d46667a573837385a48416166 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5a377a4d75754f505546634c4131546d integ-alg sha1-96 integ-key 546b6877347142395044417365454d45534b6e6b tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5a377a4d75754f505546634c4131546d integ-alg sha1-96 integ-key 546b6877347142395044417365454d45534b6e6b tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 304f68704e3243784f547152476a765a integ-key 79685856325238707857596d736363324c4f774d 
 exec set ipsec sa 20 crypto-key 304f68704e3243784f547152476a765a integ-key 79685856325238707857596d736363324c4f774d 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 417167583770476651336572494d6235 integ-alg sha1-96 integ-key 7233594c51506f54657a6e4f68566e5054694658 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 417167583770476651336572494d6235 integ-alg sha1-96 integ-key 7233594c51506f54657a6e4f68566e5054694658 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 416c784f70696c6b304b514353793368 integ-key 724f314e6769326b7a3443443342694964306e79 
 exec set ipsec sa 20 crypto-key 416c784f70696c6b304b514353793368 integ-key 724f314e6769326b7a3443443342694964306e79 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6ipsectpt-ip6base-func

IPv6 IPsec transport mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 31566738426979586b69566f795a4645 integ-alg sha1-96 integ-key 687952316d444130534949385354576975457678  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 31566738426979586b69566f795a4645 integ-alg sha1-96 integ-key 687952316d444130534949385354576975457678  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 577051546e713549446445447669755067336e39427a7178 integ-alg sha-256-128 integ-key 663945524251567167567263657a32353573544d766270306551456247514955  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 577051546e713549446445447669755067336e39427a7178 integ-alg sha-256-128 integ-key 663945524251567167567263657a32353573544d766270306551456247514955  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 42394c556d6e4d414e31536a79704d5671696a424f7946796665716f36314b65 integ-alg sha-384-192 integ-key 7336744b31656d61356a5175524c3252504c5259644a3855416c4d5843756279314f636b656735556c4a515a50735073  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 42394c556d6e4d414e31536a79704d5671696a424f7946796665716f36314b65 integ-alg sha-384-192 integ-key 7336744b31656d61356a5175524c3252504c5259644a3855416c4d5843756279314f636b656735556c4a515a50735073  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 6e727730627158666639596d6834633453764939454c3852566b56745a484348 integ-alg sha-512-256 integ-key 367a3343654557416a3766426d7648614c43586e36774c614a7035324e56536a5373464374617932687a756a5a544d4550766e454749706a36395970334a747a  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 6e727730627158666639596d6834633453764939454c3852566b56745a484348 integ-alg sha-512-256 integ-key 367a3343654557416a3766426d7648614c43586e36774c614a7035324e56536a5373464374617932687a756a5a544d4550766e454749706a36395970334a747a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 577734773762306a424a457a7747396c integ-alg sha1-96 integ-key 674b4d626f4769776e4869614f44596f39664c6a  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 577734773762306a424a457a7747396c integ-alg sha1-96 integ-key 674b4d626f4769776e4869614f44596f39664c6a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 43337471356c776a3372537861516448 integ-alg sha1-96 integ-key 4a41484b71484473394c44633330315634704b4b  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 43337471356c776a3372537861516448 integ-alg sha1-96 integ-key 4a41484b71484473394c44633330315634704b4b  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 667233355053305a5365316566776353 integ-alg sha1-96 integ-key 4b5a54637077455230386e4f697845675641546d  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 667233355053305a5365316566776353 integ-alg sha1-96 integ-key 4b5a54637077455230386e4f697845675641546d  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4c75524d514f7654324d5450786d5279 integ-alg sha1-96 integ-key 75534b5a51567741506131325433684366554673  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4c75524d514f7654324d5450786d5279 integ-alg sha1-96 integ-key 75534b5a51567741506131325433684366554673  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 736b474c4572776b6b4e655a70486d45 integ-key 6e68654c435936457a4565324e4165756d39476c 
 exec set ipsec sa 20 crypto-key 736b474c4572776b6b4e655a70486d45 integ-key 6e68654c435936457a4565324e4165756d39476c 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 7755326c6d4231555a4954486e636f4a integ-alg sha1-96 integ-key 576f777a6c6a316347367351787a75356c6e5167  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 7755326c6d4231555a4954486e636f4a integ-alg sha1-96 integ-key 576f777a6c6a316347367351787a75356c6e5167  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 55764e7843754d515961544f7663474f integ-key 467754426e52644561754a6e324d636270566a6e 
 exec set ipsec sa 20 crypto-key 55764e7843754d515961544f7663474f integ-key 467754426e52644561754a6e324d636270566a6e 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 35346e38427742736b7777366b6f3057 integ-alg sha1-96 integ-key 33556569623437574d6362644c393245796d6635  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 35346e38427742736b7777366b6f3057 integ-alg sha1-96 integ-key 33556569623437574d6362644c393245796d6635  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 515a596a55496b303148444e35524735 integ-key 59717734687963426a704a3443316572346a6c34 
 exec set ipsec sa 20 crypto-key 515a596a55496b303148444e35524735 integ-key 59717734687963426a704a3443316572346a6c34 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5448436e587849654e79506453657445 integ-alg sha1-96 integ-key 706b5a583232695445786f4571724c63684d6b56  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5448436e587849654e79506453657445 integ-alg sha1-96 integ-key 706b5a583232695445786f4571724c63684d6b56  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 745956416e63764c6845513553384162 integ-key 464e4b477442524a656a50413953337155675653 
 exec set ipsec sa 20 crypto-key 745956416e63764c6845513553384162 integ-key 464e4b477442524a656a50413953337155675653 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6ipsectptlispgpe-ip4base-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISPGPE-IPSec-IPv4-ICMP, Eth-IPv6-IPSec-LISPGPE-IPv4-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:31:66 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 465a44594c7848474d6745576e70354e integ-alg sha1-96 integ-key 346643766f6e6e7a41424e4161564657484b6b39  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 465a44594c7848474d6745576e70354e integ-alg sha1-96 integ-key 346643766f6e6e7a41424e4161564657484b6b39  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:27:c6:8f 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:cf:eb:5b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 465a44594c7848474d6745576e70354e integ-alg sha1-96 integ-key 346643766f6e6e7a41424e4161564657484b6b39  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 465a44594c7848474d6745576e70354e integ-alg sha1-96 integ-key 346643766f6e6e7a41424e4161564657484b6b39  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:31:66 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:4e:27:10 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 38636c3231645a364971427247793064 integ-alg sha1-96 integ-key 50627a47675467734e644167534f6d636c507674  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 38636c3231645a364971427247793064 integ-alg sha1-96 integ-key 50627a47675467734e644167534f6d636c507674  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:27:c6:8f 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:cf:eb:5b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 38636c3231645a364971427247793064 integ-alg sha1-96 integ-key 50627a47675467734e644167534f6d636c507674  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 38636c3231645a364971427247793064 integ-alg sha1-96 integ-key 50627a47675467734e644167534f6d636c507674  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace

eth2p-ethip6ipsectptlispgpe-ip6base-func

IPv6 - ip6-ipsec-lispgpe-ip6 - main fib, vrf (gpe_vni-to-vrf), phy2lisp, virt2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6,
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:4e:27:10 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:31:66 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3568485a4d61464279346f3935743659 integ-alg sha1-96 integ-key 6a37506c34655943786e47634a43663568384862  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3568485a4d61464279346f3935743659 integ-alg sha1-96 integ-key 6a37506c34655943786e47634a43663568384862  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:27:c6:8f 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:cf:eb:5b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3568485a4d61464279346f3935743659 integ-alg sha1-96 integ-key 6a37506c34655943786e47634a43663568384862  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3568485a4d61464279346f3935743659 integ-alg sha1-96 integ-key 6a37506c34655943786e47634a43663568384862  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using ipsec (transport) lisp_gpe0 int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:4e:27:10 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b6:31:66 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 536141596e50375874446c7779623054 integ-alg sha1-96 integ-key 706754474c6546557967327563584c70474e3745  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 536141596e50375874446c7779623054 integ-alg sha1-96 integ-key 706754474c6546557967327563584c70474e3745  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:1::2 - 2001:cdba:1::2 remote-ip-range 2001:cdba:2::2 - 2001:cdba:2::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:1::2 - 2001:cdba:1::2 remote-ip-range 2001:cdba:2::2 - 2001:cdba:2::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:27:c6:8f 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:cf:eb:5b 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 536141596e50375874446c7779623054 integ-alg sha1-96 integ-key 706754474c6546557967327563584c70474e3745  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 536141596e50375874446c7779623054 integ-alg sha1-96 integ-key 706754474c6546557967327563584c70474e3745  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:2::2 - 2001:cdba:2::2 remote-ip-range 2001:cdba:1::2 - 2001:cdba:1::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:2::2 - 2001:cdba:2::2 remote-ip-range 2001:cdba:1::2 - 2001:cdba:1::2  
 exec show trace

sw device

eth2p-ethip4ipsectnlsw-ip4base-func

IPv4 SW cryptodev IPsec tunnel mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: With enabled SW crytodev on DUT1 create loopback interface, configure loopback and physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 36496e7a5a334941324a745531344633 integ-alg sha1-96 integ-key 534d43393152516431433230536d7a44784f4147 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 36496e7a5a334941324a745531344633 integ-alg sha1-96 integ-key 534d43393152516431433230536d7a44784f4147 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 5530644f38487157573447345756485137364b6b5946675a integ-alg sha-256-128 integ-key 4a3272583567433555585056584e34354233446635377936694643797342796a tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 5530644f38487157573447345756485137364b6b5946675a integ-alg sha-256-128 integ-key 4a3272583567433555585056584e34354233446635377936694643797342796a tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 767879357a715478566a49774b723367426653424e6441356343324d56576d33 integ-alg sha-384-192 integ-key 656c674f664b4c756b4c41624746397742754a4741713368326b416d787058654d414e51344e6d696d7a48303831456b tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 767879357a715478566a49774b723367426653424e6441356343324d56576d33 integ-alg sha-384-192 integ-key 656c674f664b4c756b4c41624746397742754a4741713368326b416d787058654d414e51344e6d696d7a48303831456b tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 52746f6c57685549506344615a6e796d41584e77645379686e6c584f47356346 integ-alg sha-512-256 integ-key 674c6f585736696d7a766242494d72357a6a3354335a375932455a466d5648587776636b525138464d78536953627548616b766e71763369666d326a7866524d tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 52746f6c57685549506344615a6e796d41584e77645379686e6c584f47356346 integ-alg sha-512-256 integ-key 674c6f585736696d7a766242494d72357a6a3354335a375932455a466d5648587776636b525138464d78536953627548616b766e71763369666d326a7866524d tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 33483671425557754266614b444f4757 integ-alg sha1-96 integ-key 39776354544f464c72323979346a4b617a33346c tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 33483671425557754266614b444f4757 integ-alg sha1-96 integ-key 39776354544f464c72323979346a4b617a33346c tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 666d7852764947424b78733952366b57 integ-alg sha1-96 integ-key 4f584d644b36336162715a41547141796858454f tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 666d7852764947424b78733952366b57 integ-alg sha1-96 integ-key 4f584d644b36336162715a41547141796858454f tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3171754d463054546e365974344b4550 integ-alg sha1-96 integ-key 5a386955736c43447a784d637865375659477344 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3171754d463054546e365974344b4550 integ-alg sha1-96 integ-key 5a386955736c43447a784d637865375659477344 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4356384f707a72504f70554c55686672 integ-alg sha1-96 integ-key 7742575041624a6d656d3971657a3579706b4959 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4356384f707a72504f70554c55686672 integ-alg sha1-96 integ-key 7742575041624a6d656d3971657a3579706b4959 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 64716c723774524c4b4336444c417951 integ-key 4368397a54534677553231446336756c6b734433 
 exec set ipsec sa 20 crypto-key 64716c723774524c4b4336444c417951 integ-key 4368397a54534677553231446336756c6b734433 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5141443436784176506e3168534d4867 integ-alg sha1-96 integ-key 4b3445394f365970646f794d4b7347775864724c tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5141443436784176506e3168534d4867 integ-alg sha1-96 integ-key 4b3445394f365970646f794d4b7347775864724c tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 5a6a6e6a59375a764268427043666846 integ-key 41707276346843674832665855586b7a7a74516d 
 exec set ipsec sa 20 crypto-key 5a6a6e6a59375a764268427043666846 integ-key 41707276346843674832665855586b7a7a74516d 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 55366a75365965643031756441496451 integ-alg sha1-96 integ-key 754c304a77367269584d4d76615455494e50376c tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 55366a75365965643031756441496451 integ-alg sha1-96 integ-key 754c304a77367269584d4d76615455494e50376c tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 45754e62686277627975543767694b61 integ-key 677136314d7634625636657349756c396d67716a 
 exec set ipsec sa 20 crypto-key 45754e62686277627975543767694b61 integ-key 677136314d7634625636657349756c396d67716a 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 53396f524c534a7a6439614331765744 integ-alg sha1-96 integ-key 37713757307331695630457464796c706e44474f tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 53396f524c534a7a6439614331765744 integ-alg sha1-96 integ-key 37713757307331695630457464796c706e44474f tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 4d6f76526d6d6264436f456968484b6b integ-key 4476775a394d4d69375130793533447845313043 
 exec set ipsec sa 20 crypto-key 4d6f76526d6d6264436f456968484b6b integ-key 4476775a394d4d69375130793533447845313043 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectptsw-ip4base-func

IPv4 IPsec transport mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: With enabled SW crytodev on DUT1 create loopback interface, configure loopback and physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 35667441474d7a48374c45654f743351 integ-alg sha1-96 integ-key 3268515230755264326774366d3058683041776f  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 35667441474d7a48374c45654f743351 integ-alg sha1-96 integ-key 3268515230755264326774366d3058683041776f  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 6a437875614f334b6337784a64725076775a323071515543 integ-alg sha-256-128 integ-key 796467524967765267515670673046687948724b4d707335694470326b347076  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 6a437875614f334b6337784a64725076775a323071515543 integ-alg sha-256-128 integ-key 796467524967765267515670673046687948724b4d707335694470326b347076  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 51446e416f47455478456b3656714e556d7448567450755a505439354a6e586f integ-alg sha-384-192 integ-key 336f6f52467874586330323579516a757476676d4f30504532744272326476505067665163656a746f306963496e3754  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 51446e416f47455478456b3656714e556d7448567450755a505439354a6e586f integ-alg sha-384-192 integ-key 336f6f52467874586330323579516a757476676d4f30504532744272326476505067665163656a746f306963496e3754  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 55563168497a74734e784253347455794a7347355474534b7456424d67355a68 integ-alg sha-512-256 integ-key 734b473476556e723534434c5a4d5750504f4c306c576978646f6e643972786e5159566558534878564f6c54454f6959746d473542785038684b7a4835757279  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 55563168497a74734e784253347455794a7347355474534b7456424d67355a68 integ-alg sha-512-256 integ-key 734b473476556e723534434c5a4d5750504f4c306c576978646f6e643972786e5159566558534878564f6c54454f6959746d473542785038684b7a4835757279  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 664f534a6b316e6a70623448536b6757 integ-alg sha1-96 integ-key 5857584165704f4c543255355a69453954737347  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 664f534a6b316e6a70623448536b6757 integ-alg sha1-96 integ-key 5857584165704f4c543255355a69453954737347  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3569746d615659305867346b416e5964 integ-alg sha1-96 integ-key 5079484c564a533966513138507866314a555464  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3569746d615659305867346b416e5964 integ-alg sha1-96 integ-key 5079484c564a533966513138507866314a555464  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e46666e6d5277343652506846777561 integ-alg sha1-96 integ-key 31424357396b746d43396d68514868324663446b  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e46666e6d5277343652506846777561 integ-alg sha1-96 integ-key 31424357396b746d43396d68514868324663446b  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 786d77436634345462455a3045364d67 integ-alg sha1-96 integ-key 544a35334664535a36494966386f4b4359444b70  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 786d77436634345462455a3045364d67 integ-alg sha1-96 integ-key 544a35334664535a36494966386f4b4359444b70  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 6f4b706b6353784f63494638414a4470 integ-key 5450415861547a43645a62625a4a566f636e4777 
 exec set ipsec sa 20 crypto-key 6f4b706b6353784f63494638414a4470 integ-key 5450415861547a43645a62625a4a566f636e4777 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 427938377467356d34747a4439484467 integ-alg sha1-96 integ-key 516b79705557773973413264696e505a36666a50  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 427938377467356d34747a4439484467 integ-alg sha1-96 integ-key 516b79705557773973413264696e505a36666a50  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 50375644686a41414e435857594d7536 integ-key 78443059756637326f3169703230726f75473264 
 exec set ipsec sa 20 crypto-key 50375644686a41414e435857594d7536 integ-key 78443059756637326f3169703230726f75473264 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6a674b52346d43515678654957766738 integ-alg sha1-96 integ-key 78724d4c4a55344f527847366c38314761563762  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6a674b52346d43515678654957766738 integ-alg sha1-96 integ-key 78724d4c4a55344f527847366c38314761563762  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 6b5a7934736976614f64447441596273 integ-key 4546345a52784e674b724c71616f42564b4d4d54 
 exec set ipsec sa 20 crypto-key 6b5a7934736976614f64447441596273 integ-key 4546345a52784e674b724c71616f42564b4d4d54 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:4e:27:10 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 51435662395932724e666f3465796b65 integ-alg sha1-96 integ-key 4c314c57444639766a45626b697234346733556e  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 51435662395932724e666f3465796b65 integ-alg sha1-96 integ-key 4c314c57444639766a45626b697234346733556e  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 6969797044336a374d527936356e4250 integ-key 554751695a67477032526a786f6d74356c496b4d 
 exec set ipsec sa 20 crypto-key 6969797044336a374d527936356e4250 integ-key 554751695a67477032526a786f6d74356c496b4d 
 exec show trace  
  
 DUT2:  
 exec show trace

ip4

eth2p-dot1q-ip4base-func

IPv4 with VLAN subinterfaces

  • [Top] Network Topologies: TG-DUT1-TG 2-node circular topology with double links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-ICMPv4 on TG-DUT1-IF1, Eth-dot1q-IPv4-ICMPv4 on TG-DUT1-IF2.
  • [Cfg] DUT configuration: DUT1 is configured with 2 Vlan subinterfaces on DUT1-IF2. The subinterfaces and DUT1-IF1 have IP addresses set and corresponding IP neighbor entries are configured.
  • [Ref] Applicable standard specifications: IEEE 802.1q.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: process untagged send tagged 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 5 vlan 20 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 192.168.100.1/24 
 sw_interface_add_del_address sw_if_index 6 192.168.200.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:25:38:d2 
 ip_neighbor_add_del sw_if_index 5 dst 192.168.100.2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 6 dst 192.168.200.2 mac fa:16:3e:ab:fa:5d 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: process tagged send untagged 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 5 vlan 20 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 192.168.100.1/24 
 sw_interface_add_del_address sw_if_index 6 192.168.200.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:25:38:d2 
 ip_neighbor_add_del sw_if_index 5 dst 192.168.100.2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 6 dst 192.168.200.2 mac fa:16:3e:ab:fa:5d 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: process tagged send tagged 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 5 vlan 20 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 192.168.100.1/24 
 sw_interface_add_del_address sw_if_index 6 192.168.200.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:25:38:d2 
 ip_neighbor_add_del sw_if_index 5 dst 192.168.100.2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 6 dst 192.168.200.2 mac fa:16:3e:ab:fa:5d 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-copblklistbase-func

COP Security IPv4 Blacklist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv4 routing and static routes. COP security black-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut drops ipv4 pkts with cop blacklist set with ipv4 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:58:b6:d5 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_table_add_del table 1  
 cop_whitelist_enable_disable sw_if_index 1 ip4 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-copwhlistbase-func

COP Security IPv4 Whitelist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv4 routing and static routes. COP security white-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut permits ipv4 pkts with cop whitelist set with ipv4 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:58:b6:d5 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_table_add_del table 1  
 ip_add_del_route 16.0.0.0/24  vrf 1  resolve-attempts 10 count 1    local 
 cop_whitelist_enable_disable sw_if_index 1 ip4 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-func

IPv4 routing test cases RFC791 IPv4, RFC826 ARP, RFC792 ICMPv4. Encapsulations: Eth-IPv4-ICMPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv4 routing tests use circular 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2 and received on TG links on the other side of circular topology. On receive TG verifies packets IPv4 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut replies to icmpv4 echo req to its ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc02: dut routes ipv4 to its egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc03: dut1 routes ipv4 to dut2 ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc04: dut1 routes ipv4 to dut2 egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc05: dut1 and dut2 route ipv4 between tg interfaces 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc06: dut replies to icmpv4 echo reqs with size 64b-to-1500b-incr-1b 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc08: dut replies to arp request 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace

eth2p-ethip4-ip4base-iaclbase-func

IPv4 routing with ingress ACL test cases Encapsulations: Eth-IPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv4 ingress ACL (iACL) tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. DUT1 is configured with iACL on link to TG, iACL classification and permit/deny action are configured on a per test case basis. Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped, or if received verifies packet IPv4 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with iacl ipv4 src-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:58:b6:d5 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match l3 ip4 src 16.0.0.1 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: dut with iacl ipv4 dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:58:b6:d5 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 33.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 2 match l3 ip4 dst 32.0.0.1 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc03: dut with iacl ipv4 src-addr and dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:58:b6:d5 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 33.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match l3 ip4 src 16.0.0.1 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 1 match_n 2 match l3 ip4 dst 32.0.0.1 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 input_acl_set_interface sw_if_index 1 ip4-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc04: dut with iacl ipv4 protocol set to tcp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:58:b6:d5 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000000000006 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc05: dut with iacl ipv4 protocol set to udp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:58:b6:d5 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000000000011 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc06: dut with iacl ipv4 tcp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:58:b6:d5 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc07: dut with iacl ipv4 tcp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:58:b6:d5 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc08: dut with iacl ipv4 tcp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:58:b6:d5 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc09: dut with iacl ipv4 udp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:58:b6:d5 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc10: dut with iacl ipv4 udp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:58:b6:d5 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc11: dut with iacl ipv4 udp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:58:b6:d5 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-ip4arp-func

IPv4 ARP test cases RFC826 ARP: Eth-IPv4 and Eth-ARP on links TG-DUT1, TG-DUT2, DUT1-DUT2: IPv4 ARP tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. DUT ARP functionality is tested by making TG send ICMPv4 Echo Requests towards its other interface via DUT1 and DUT2.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut sends arp request for unresolved locally connected ipv4 address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: dut sends arp request for route next hop ipv4 address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3  count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-ip4dhcpclient-func

DHCPv4 Client related test cases

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp sends a dhcp discover 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 dhcp_client_config sw_if_index 2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp sends a dhcpv4 discover with hostname 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 dhcp_client_config sw_if_index 2 hostname dhcp-client 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: vpp sends dhcpv4 request after offer 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 dhcp_client_config sw_if_index 2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: vpp doesn’t send dhcpv4 request after offer with wrong xid 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 dhcp_client_config sw_if_index 2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp honors dhcpv4 lease time 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 dhcp_client_config sw_if_index 2  
 ip_neighbor_add_del sw_if_index 2 dst 192.168.23.1 mac fa:16:3e:25:38:d2 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-ip4dhcpproxy-func

DHCPv4 proxy test cases

  • [Top] Network Topologies: TG = DUT with two links between the nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-UDP-BOOTP-DHCP
  • [Cfg] DUT configuration: DUT is configured with DHCPv4 proxy.
  • [Ver] TG verification: Test DHCPv4 packets are sent on TG on first link to DUT and received on TG on second link. On receive TG verifies if DHCPv4 packets are valid.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp proxies valid dhcpv4 request to dhcpv4 server 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 sw_interface_add_del_address sw_if_index 2 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.0.100 mac fa:16:3e:ab:fa:5d 
 dhcp_proxy_config svr 192.168.0.100 src 172.16.0.1 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp proxy ignores invalid dhcpv4 request 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 sw_interface_add_del_address sw_if_index 2 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.0.100 mac fa:16:3e:ab:fa:5d 
 dhcp_proxy_config svr 192.168.0.100 src 172.16.0.1 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-ip4ecmp-func

Ipv4 Multipath routing test cases

  • [Top] Network topologies: TG=DUT 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT configure interfaces IPv4 adresses, and multipath routing.
  • [Ver] TG verification: Test packets are sent from TG on the first link to DUT. Packet is received on TG on the second link from DUT1.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: ipv4 equal-cost multipath routing 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.2.10 mac 02:00:00:00:00:02 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.2.20 mac 02:00:00:00:00:03 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.10  sw_if_index 2  count 1  multipath   
 ip_add_del_route 32.0.0.1/24 via 192.168.2.20  sw_if_index 2  count 1  multipath   
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-ip4proxyarp-func

RFC1027 Proxy ARP test cases

  • [Top] Network topologies: TG-DUT1 2-node topology with single link between nodes.
  • [Cfg] DUT configuration: DUT1 is configured with Proxy ARP
  • [Ver] TG verification: Test ARP Request packet is sent from TG on link to DUT1; on receive TG verifies ARP reply packet for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC1027.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut sends arp reply on behalf of another machine from the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut sends arp reply on behalf of another machine from beginning of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut sends arp reply on behalf of another machine from end of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut does not send arp reply on behalf of another machine from below of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc05: dut does not send arp reply on behalf of another machine from above of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip4-ip4base-ipolicemarkbase-func

IPv4 policer test cases

  • [Top] Network topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT1 configure interfaces IPv4 adresses, and static ARP record on the second interface.
  • [Ver] TG verification: Test packet is sent from TG on the first link to DUT1. Packet is received on TG on the second link from DUT1.
  • [Ref] Applicable standard specifications: RFC2474, RFC2697, RFC2698.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp policer 2r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:ab:fa:5d 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp policer 2r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:ab:fa:5d 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: vpp policer 1r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:ab:fa:5d 
 policer_add_del name policer1  cir 1 eir 0 cb 2 eb 300 rate_type pps round_type closest type 1r3c conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: vpp policer 1r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:ab:fa:5d 
 policer_add_del name policer1  cir 100 eir 0 cb 200 eb 300 rate_type pps round_type closest type 1r3c conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-rpf-func

Source RPF check on IPv4 test cases

  • [Top] Network Topologies: TG - DUT1 - DUT2 - TG with one link between the nodes.
  • [Cfg] DUT configuration: DUT2 is configured with L2 Cross connect. DUT1 is configured with IP source check on link to TG,
  • [Ver] TG verification: Test ICMP Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets which source address is not in routes are dropped.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp source rpf check on ipv4 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:58:b6:d5 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3  count 1     
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ab:fa:5d 
 ip_add_del_route 16.0.0.1/24 via 192.168.1.2  sw_if_index 1  count 1     
 exec set interface ip source-check GigabitEthernet0/4/0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: vpp pass traffic on non-enabled rpf interface 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:58:b6:d5 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3  count 1     
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ab:fa:5d 
 ip_add_del_route 16.0.0.1/24 via 192.168.1.2  sw_if_index 1  count 1     
 exec set interface ip source-check GigabitEthernet0/4/0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4basevrf-func

Vpn routed forwarding - baseline IPv4

  • [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node topology with two links in between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4.
  • [Cfg] DUT configuration: Each DUT is configured with two VRF tables; Separation of traffic is tested by IP packets; Basic ARP and ROUTES are set on DUT nodes; IP addresses are set on DUT interfaces.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent by TG on link to DUT1, DUT2 or back to TG; On receipt TG verifies packets for correctness and their IPv4 src-addr, dst-addr, and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: tg packets routed to dut ingress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:25:38:d2 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:6d:23:69 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:e9:b5:8e 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:8d:e4:2c 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:6d:a1:4c 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:70:89:60 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc02: tg packets routed to dut egress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:25:38:d2 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:6d:23:69 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:e9:b5:8e 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:8d:e4:2c 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:6d:a1:4c 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:70:89:60 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc03: tg packets routed to dut2 ingress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:25:38:d2 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:6d:23:69 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:e9:b5:8e 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:8d:e4:2c 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:6d:a1:4c 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:70:89:60 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc04: tg packets routed to dut2 egress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:25:38:d2 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:6d:23:69 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:e9:b5:8e 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:8d:e4:2c 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:6d:a1:4c 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:70:89:60 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc05: tg packets routed to tg through dut1 and dut2, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:25:38:d2 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:6d:23:69 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:e9:b5:8e 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:8d:e4:2c 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:6d:a1:4c 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:70:89:60 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace

ip4 tunnels

gre

eth2p-ethip4gre-ip4base-func

GREoIPv4 test cases

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes; TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-GRE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for routing over GRE tunnel; Eth-IPv4-ICMPv4 on TG_if1-DUT, Eth-IPv4-GRE-IPv4-ICMPv4 on TG_if2_DUT for GREoIPv4 encapsulation and decapsulation verification.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. GREoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; GREoIPv4 encapsulation and decapsulation are verified separately by TG; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC2784.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route over greoipv4 tunnel between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.0.1/24 
 gre_add_del_tunnel src 192.168.1.1 dst 192.168.1.2 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 5 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 192.168.1.2/24 
 sw_interface_add_del_address sw_if_index 1 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.2.100 mac fa:16:3e:58:b6:d5 
 gre_add_del_tunnel src 192.168.1.2 dst 192.168.1.1 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.2/24 
 exec show trace
tc02: dut encapsulates ipv4 into greoipv4 tunnel - gre header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ab:fa:5d 
 gre_add_del_tunnel src 192.168.1.1 dst 192.168.1.2 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 5 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: dut decapsulates ipv4 from greoipv4 tunnel - ipv4 header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.100 mac fa:16:3e:25:38:d2 
 gre_add_del_tunnel src 192.168.1.1 dst 192.168.1.2 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: dut encapsulates ipv4 into greoipv4 different tunnels - gre header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.0.1/32 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ab:fa:5d 
 ip_add_del_route 10.0.0.2/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.3/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.2 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.3 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_add_del_address sw_if_index 6 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 7 172.16.1.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 6 resolve-attempts 10 count 1     
 ip_add_del_route 192.168.3.0/24 via 172.16.1.2  sw_if_index 7 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: dut re-encapsulates ipv4 gre into other gre tunnel - gre header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.0.1/32 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ab:fa:5d 
 ip_add_del_route 10.0.0.2/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.3/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.2 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.3 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_add_del_address sw_if_index 6 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 7 172.16.1.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 6 resolve-attempts 10 count 1     
 ip_add_del_route 192.168.3.0/24 via 172.16.1.2  sw_if_index 7 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 exec show trace
tc06: dut do not process gre with wrong tunnel destination ip 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.0.1/32 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.100 mac fa:16:3e:25:38:d2 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ab:fa:5d 
 ip_add_del_route 10.0.0.2/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.3/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.2 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.3 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_add_del_address sw_if_index 6 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 7 172.16.1.1/24 
 exec show trace  
  
 DUT2:  
 exec show trace

lisp

api-crud-lisp-func

API test cases

  • [Top] Network Topologies: DUT1 1-node topology.
  • [Enc] Packet Encapsulations: None.
  • [Cfg] DUT configuration: DUT1 gets configured with all LISP parameters.
  • [Ver] Verification: DUT1 operational data gets verified following configuration.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut can enable and disable lisp 
 DUT1:  
 lisp_enable_disable enable 
 lisp_enable_disable disable 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut can add and delete locator_set 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_locator_set_dump local 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_locator_set_dump  
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: dut can add, reset and delete locator_set 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_locator_set_dump local 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_locator_set_dump  
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: dut can add and delete eid address 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.0.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.1.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.2.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.3.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 10:1::/64 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 10:2::/64 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 10:3::/64 locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.0.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 192.168.1.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 192.168.2.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 192.168.3.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 10:1::/64 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 10:2::/64 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 10:3::/64 locator-set ls1 del 
 lisp_add_del_locator_set locator-set ls1 del 
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: dut can add and delete lisp map resolver address 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_map_resolver 192.169.0.1 
 lisp_add_del_map_resolver 192.169.1.1 
 lisp_add_del_map_resolver 192.169.2.1 
 lisp_add_del_map_resolver 12:1::1 
 lisp_add_del_map_resolver 12:2::1 
 lisp_add_del_map_resolver 192.169.0.1 del 
 lisp_add_del_map_resolver 192.169.1.1 del 
 lisp_add_del_map_resolver 192.169.2.1 del 
 lisp_add_del_map_resolver 12:1::1 del 
 lisp_add_del_map_resolver 12:2::1 del 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4lisp-ip4base-func

IP AFI independent functional tests.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 over lispoipv4 tunnel after disable-enable 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:ab:fa:5d 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 lisp_enable_disable disable 
 lisp_enable_disable enable 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:58:b6:d5 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec show trace

eth2p-ethip4lisp-l2bdbasemaclrn-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4-LISPGpe-IP4
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: route ipv4 packet through lisp with bridge domain setup. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 10.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 10.0.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.1.2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 10.0.3.2 mac fa:16:3e:e9:b5:8e 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:11 locator-set tst_locator 
 lisp_add_del_map_resolver 10.0.0.2 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:22 seid 08:22:22:22:22:11 rloc 10.0.3.2 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:22 leid 08:22:22:22:22:11 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 10.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 10.0.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.2.2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 10.0.3.1 mac fa:16:3e:70:89:60 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:22 locator-set tst_locator 
 lisp_add_del_map_resolver 10.0.0.1 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:11 seid 08:22:22:22:22:22 rloc 10.0.3.1 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:11 leid 08:22:22:22:22:22 
 exec show trace

eth2p-ethip4lispgpe-ip4base-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using physical interfaces 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:e9:b5:8e 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 0 reid 6.0.5.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:70:89:60 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip4basevrf-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:e9:b5:8e 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 1 reid 6.0.5.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:70:89:60 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 1 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip6base-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lispoipv4 tunnel 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6:0:1::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:1::2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.2 mac fa:16:3e:e9:b5:8e 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6:0:1::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 lisp_add_del_remote_mapping del vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency del vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.20 mac fa:16:3e:e9:b5:8e 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.20 
 lisp_add_del_adjacency add vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6:0:2::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:2::2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:70:89:60 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6:0:2::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:1::0/64 seid 6:0:2::0/64 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 0 reid 6:0:1::0/64 leid 6:0:2::0/64 
 sw_interface_add_del_address sw_if_index 3 del-all 
 sw_interface_add_del_address sw_if_index 3 6.0.3.20/24 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:70:89:60 
 exec show trace

eth2p-ethip4lispgpe-ip6basevrf-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:1::2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.2 mac fa:16:3e:e9:b5:8e 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6:0:1::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6:0:1::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 1 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 1 reid 6:0:2::0/64 leid 6:0:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:2::2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:70:89:60 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6:0:2::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6:0:2::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 1 eid 6:0:1::0/64 seid 6:0:2::0/64 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 1 reid 6:0:1::0/64 leid 6:0:2::0/64 
 exec show trace

vxlan

eth2p-dot1qip4vxlan-l2bdbasemaclrn-func

RFC7348 VXLAN: Bridge-domain with VXLAN over VLAN test cases

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-dot1q-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with static MACs, MAC learning enabled and Split Horizon Groups (SHG) depending on test case; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv4ovlan tunnels switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vlan_subif sw_if_index 3 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 ip_neighbor_add_del sw_if_index 5 dst 172.16.0.2 mac fa:16:3e:b6:31:66 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=23,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=23) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=23) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vlan_subif sw_if_index 3 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 5 172.16.0.2/24 
 ip_neighbor_add_del sw_if_index 5 dst 172.16.0.1 mac fa:16:3e:cf:eb:5b 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=23,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=23) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=23) 
 exec show trace

eth2p-ethip4vxlan-l2bdbasemaclrn-func

Bridge-domain with VXLAN test cases - IPv4

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.2 mac fa:16:3e:b6:31:66 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.1 mac fa:16:3e:cf:eb:5b 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace

eth2p-ethip4vxlan-l2xcbase-func

RFC7348 VXLAN: L2 cross-connect with VXLAN test cases

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching; VXLAN tunnels are configured between L2XCs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vxlanoipv4 tunnels switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.2 mac fa:16:3e:b6:31:66 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 24 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.1 mac fa:16:3e:cf:eb:5b 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 24 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth4p-ethip4vxlan-l2bdbasemaclrn-l2shg-func

L2BD with SHG combined with VXLAN test cases - IPv4

  • [Top] Network topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG); VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels in shg switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=1,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels in different shgs switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=2,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace

ip6

eth2p-ethip6-ip6base-copblklistbase-func

COP Security IPv6 Blacklist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv6 routing and static routes. COP security black-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut drops ipv6 pkts with cop blacklist set with ipv6 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:62::2 mac fa:16:3e:e3:1b:ee 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:91:42:15 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_table_add_del table 1 ipv6 
 cop_whitelist_enable_disable sw_if_index 1 ip6 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_add_del_address sw_if_index 3 3ffe:72::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:73::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-copwhlistbase-func

COP Security IPv6 Whitelist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv6 routing and static routes. COP security white-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut permits ipv6 pkts with cop whitelist set with ipv6 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:62::2 mac fa:16:3e:e3:1b:ee 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:91:42:15 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_table_add_del table 1 ipv6 
 ip_add_del_route 3ffe:61::/64  vrf 1  resolve-attempts 10 count 1    local 
 cop_whitelist_enable_disable sw_if_index 1 ip6 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_add_del_address sw_if_index 3 3ffe:72::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:73::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-func

IPv6 routing test cases RFC2460 IPv6, RFC4443 ICMPv6, RFC4861 Neighbor Discovery. Encapsulations: Eth-IPv6-ICMPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2; Eth-IPv6-NS/NA on links TG-DUT. IPv6 routing tests use circular 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2 and received on TG links on the other side of circular topology. On receive TG verifies packets IPv6 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut replies to icmpv6 echo req to its ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc02: dut replies to icmpv6 echo req pkt with size 64b-to-1500b-incr-1b 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc04: dut routes to its egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc05: dut1 routes to dut2 ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc06: dut1 routes to dut2 egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc07: dut1 and dut2 route between tg interfaces 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc08: dut replies to ipv6 neighbor solicitation 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace

eth2p-ethip6-ip6base-iaclbase-func

IPv6 routing with ingress ACL test cases Encapsulations: Eth-IPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv6 ingress ACL (iACL) tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. DUT1 is configured with iACL on link to TG, iACL classification and permit/deny action are configured on a per test case basis. Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped, or if received verifies packet IPv6 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with iacl ipv6 src-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:91:42:15 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:61::1 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc02: dut with iacl ipv6 dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:91:42:15 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 3ffe:54::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 2 match l3 ip6 dst 3ffe:64::1 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc03: dut with iacl ipv6 src-addr and dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:91:42:15 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 3ffe:54::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:61::1 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 2 match_n 2 match l3 ip6 dst 3ffe:64::1 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 input_acl_set_interface sw_if_index 1 ip6-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc04: dut with iacl ipv6 protocol set to tcp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:91:42:15 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000006 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: dut with iacl ipv6 protocol set to udp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:91:42:15 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000011 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc06: dut with iacl ipv6 tcp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:91:42:15 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc07: dut with iacl ipv6 tcp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:91:42:15 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc08: dut with iacl ipv6 tcp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:91:42:15 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc09: dut with iacl ipv6 udp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:91:42:15 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc10: dut with iacl ipv6 udp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:91:42:15 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc11: dut with iacl ipv6 udp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:91:42:15 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc12: dut with iacl mac src-addr and iacl ipv6 udp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l2 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 src fa:16:3e:e3:1b:ee 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 l2-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-ip6dhcpproxy-func

DHCPv6 proxy test cases

  • [Top] Network Topologies: TG = DUT with two links between the nodes.
  • [Cfg] DUT configuration: DUT is configured with DHCPv6 proxy.
  • [Ver] TG verification: Test DHCPv6 packets are sent on TG on first link to DUT and received on TG on second link. On receive TG verifies if DHCPv6 packets are valid
  • [Ref] Applicable standard specifications: RFC 3315
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp proxies valid dhcpv6 request to dhcpv6 server 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_add_del_route ff02::1:2/128   local  count 1     
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:63::2 mac fa:16:3e:e3:1b:ee 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 dhcp_proxy_config svr 3ffe:63::2 src 3ffe:62::1 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-ip6ecmp-func

Ipv6 Multipath routing test cases

  • [Top] Network topologies: TG=DUT 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT configure interfaces IPv4 adresses, and multipath routing.
  • [Ver] TG verification: Test packets are sent from TG on the first link to DUT. Packet is received on TG on the second link from DUT1.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: ipv6 equal-cost multipath routing 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:61::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 2 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 ip_neighbor_add_del sw_if_index 2 dst 3ffe:62::2 mac 02:00:00:00:00:02 
 ip_neighbor_add_del sw_if_index 2 dst 3ffe:62::3 mac 02:00:00:00:00:03 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:71::1/64 via 3ffe:62::2  sw_if_index 2  count 1  multipath   
 ip_add_del_route 3ffe:71::1/64 via 3ffe:62::3  sw_if_index 2  count 1  multipath   
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-ip6ra-func

IPv6 Router Advertisement test cases RFC4861 Neighbor Discovery. Encapsulations: Eth-IPv6-RA on links TG-DUT1. IPv6 Router Advertisement tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. TG verifies received RA packets.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut transmits ra on ipv6 enabled interface 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 interval 2 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut retransmits ra on ipv6 enabled interface after a set interval 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 interval 2 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut responds to router solicitation request 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut responds to router solicitation request sent from link local address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip6-ip6base-ipolicemarkbase-func

IPv6 policer test cases

  • [Top] Network topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT1 configure interfaces IPv6 adresses, and static neighbor record on the second interface.
  • [Ver] TG verification: Test packet is sent from TG on the first link to DUT1. Packet is received on TG on the second link from DUT1.
  • [Ref] Applicable standard specifications: RFC2474, RFC2697, RFC2698.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp policer 2r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:e3:1b:ee 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc02: vpp policer 2r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:e3:1b:ee 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc03: vpp policer 1r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:e3:1b:ee 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 1 eir 0 cb 2 eb 300 rate_type pps round_type closest type 1r3c conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc04: vpp policer 1r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:e3:1b:ee 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 100 eir 0 cb 200 eb 0 rate_type pps round_type closest type 1r3c conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6basevrf-func

Vpn routed forwarding - baseline IPv6

  • [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node topology with two links in between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6
  • [Cfg] DUT configuration: Each DUT is configured with two VRF tables; Separation of traffic is tested by IP packets; Neighbors and Routes are set on DUT nodes; IP addresses are set on DUT interfaces.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent by TG on link to DUT1, DUT2 or back to TG; On receipt TG verifies packets for correctness and their IPv6 src-addr, dst-addr, and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: tg packets routed to dut ingress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:a8:91:85 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:af:4c:06 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:e3:1b:ee 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:de:cc:66 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:6f:48:8b 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:ab:9b:1f 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:91:42:15 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:7e:91:34 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc02: tg packets routed to dut egress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:a8:91:85 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:af:4c:06 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:e3:1b:ee 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:de:cc:66 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:6f:48:8b 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:ab:9b:1f 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:91:42:15 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:7e:91:34 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc03: tg packets routed to dut2 ingress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:a8:91:85 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:af:4c:06 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:e3:1b:ee 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:de:cc:66 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:6f:48:8b 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:ab:9b:1f 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:91:42:15 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:7e:91:34 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc04: tg packets routed to dut2 egress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:a8:91:85 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:af:4c:06 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:e3:1b:ee 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:de:cc:66 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:6f:48:8b 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:ab:9b:1f 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:91:42:15 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:7e:91:34 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: tg packets routed to tg through dut1 and dut2, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:a8:91:85 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:af:4c:06 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:e3:1b:ee 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:de:cc:66 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:6f:48:8b 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:ab:9b:1f 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:91:42:15 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:7e:91:34 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

ip6 tunnels

lisp

eth2p-ethip6lisp-l2bdbasemaclrn-func

l2-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IP6-ICMPv6-LISPGpe-IP6
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge domains and neighbors. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: route ipv6 packet through lisp with bridge domain setup. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:e9:b5:8e 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:11 locator-set tst_locator 
 lisp_add_del_map_resolver 2001:cdba:2::2 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:22 seid 08:22:22:22:22:11 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:22 leid 08:22:22:22:22:11 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:70:89:60 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:22 locator-set tst_locator 
 lisp_add_del_map_resolver 2001:cdba:1::2 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:11 seid 08:22:22:22:22:22 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:11 leid 08:22:22:22:22:22 
 exec show trace

eth2p-ethip6lispgpe-ip4base-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lispoipv6 tunnel 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6:0:3::1/64 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:ab:fa:5d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6:0:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 lisp_add_del_remote_mapping del vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6:0:3::2 
 lisp_add_del_adjacency del vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 ip_neighbor_add_del sw_if_index 3 dst 6:0:3::20 mac fa:16:3e:e9:b5:8e 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6:0:3::20 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6:0:3::2/64 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:58:b6:d5 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 6:0:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 sw_interface_add_del_address sw_if_index 3 del-all 
 sw_interface_add_del_address sw_if_index 3 6:0:3::20/64 
 ip_neighbor_add_del sw_if_index 3 dst 6:0:3::1 mac fa:16:3e:70:89:60 
 exec show trace

eth2p-ethip6lispgpe-ip6base-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:e9:b5:8e 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:70:89:60 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

eth2p-ethip6lispgpe-ip6basevrf-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:e9:b5:8e 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:70:89:60 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

vxlan

eth2p-ethip6vxlan-l2bdbasemaclrn-func

Bridge-domain with VXLAN test cases - IPv6

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv6 tunnels switch icmpv6 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace

eth4p-ethip6vxlan-l2bdbasemaclrn-l2shg-func

L2BD with SHG combined with VXLAN test cases - IPv6

  • [Top] Network topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
  • [Enc] Packet encapsulations: th-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG); VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv6 tunnels in shg switch icmpv6 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=1,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace
tc02: dut1 and dut2 with l2bd and vxlanoipv6 tunnels in different shgs switch icmpv6 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=2,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace

l2bd

eth2p-dot1ad–dot1q-l2bdbasemaclrn-vlantrans21-func

L2BD with VLAN tag rewrite test cases - transalte-2-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-2-1 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-2-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc03: dut1 and dut2 with l2bd and vlan translate-2-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-dot1ad-l2bdbasemaclrn-vlantrans22-func

L2BD with VLAN tag rewrite test cases - translate-2-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-2-2 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-2-2 switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc05: dut1 and dut2 with l2bd and vlan translate-2-2 switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-dot1q–dot1ad-l2bdbasemaclrn-vlantrans12-func

L2BD with VLAN tag rewrite test cases - translate-1-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-1-2 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-1-2 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=210,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc05: dut1 and dut2 with l2bd and vlan translate-1-2 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-dot1q-l2bdbasemaclrn-vlantrans11-func

L2BD with VLAN tag rewrite test cases - translate-1-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-1-1 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-1-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc03: dut1 and dut2 with l2bd and vlan translate-1-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-eth-l2bdbasemaclrn-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes; TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports active interfaces 
 DUT1:  
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with l2bd (mac learning) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: dut1 and dut2 with l2bd (mac learning) switch between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace

eth2p-eth-l2bdbasemacstc-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with static MACs.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd (static macs) switch between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>xe3xee,sw_if_index=1,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>x91B,sw_if_index=3,bvi_mac=0) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=2) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>xe3xee,sw_if_index=3,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>x91B,sw_if_index=1,bvi_mac=0) 
 exec show trace

eth4p-eth-l2bdbasemaclrn-l2shg-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG).
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd (mac learn) and shg switch between four tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=3,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=3,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=4,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=4,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace

l2xc

eth2p-dot1ad–dot1q-l2xcbase-vlantrans21-func

L2XC with VLAN tag rewrite test cases - translate-2-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 or Eth-dot1aq-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-2-1 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-2-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc03: dut1 and dut2 with l2xc and vlan translate-2-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1ad-l2xcbase-func

L2 cross-connect with QinQ test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching with 802.1ad QinQ VLAN tag push and pop.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and two vlan push-pop switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 100 inner_vlan_id 200 two_tags 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 100 inner_vlan_id 200 two_tags 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1ad-l2xcbase-vlantrans22-func

L2XC with VLAN tag rewrite test cases - translate-2-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-2-2 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-2-2 switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc05: dut1 and dut2 with l2xc and vlan translate-2-2 switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1q–dot1ad-l2xcbase-vlantrans12-func

L2XC with VLAN tag rewrite test cases - translate-1-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-1-2 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-1-2 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=210,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc05: dut1 and dut2 with l2xc and vlan translate-1-2 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1q-l2xcbase-vlantrans11-func

L2XC with VLAN tag rewrite test cases - translate-1-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv4-ICMPv4 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-1-1 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-1-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc03: dut1 and dut2 with l2xc and vlan translate-1-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-eth-l2xcbase-func

L2 cross-connect test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_dump 
 exec show trace
tc02: dut1 and dut2 with l2xc switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_dump 
 exec show trace

eth2p-eth-l2xcbase-iaclbase-func

Ingress ACL test cases

  • [Top] Network Topologies: TG - DUT1 - DUT2 - TG with one link between the nodes.
  • [Cfg] DUT configuration: DUT2 is configured with L2 Cross connect. DUT1 is configured with iACL classification on link to TG,
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with iacl mac src-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask l2 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 src fa:16:3e:e3:1b:ee 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: dut with iacl mac dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask l2 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 dst fa:16:3e:91:42:15 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc03: dut with iacl mac src-addr and dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask l2 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 src fa:16:3e:e3:1b:ee 
 classify_add_del_table mask l2 dst 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 0 match_n 1 match l2 dst fa:16:3e:e3:1b:ee 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 input_acl_set_interface sw_if_index 1 l2-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc04: dut with iacl ethertype drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask hex 000000000000000000000000ffff 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match hex 0000000000000000000000000800 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

telemetry

eth2p-ethip4-ip4base-ip4ipfixbase-func

IPFIX ipv4 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector. Test packets are sent from TG to DUT1. TG listens for flow report packets and verifies that they contains flow record of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut sends ipfix template and data packets 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:e3:1b:ee 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.1.2 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow for traffic by source address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:e3:1b:ee 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.1.2 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut reports packet flow for traffic with local destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:e3:1b:ee 
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 dst 192.168.1.1 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut reports packet flow for traffic with remote destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:e3:1b:ee 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.1 mac fa:16:3e:de:cc:66 
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 dst 192.168.2.1 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc05: dut reports packet flow for traffic by source and destination port 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:e3:1b:ee 
 classify_add_del_table mask l3 ip4 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 80 dst_port 80 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip4-ip4base-ip4ipfixscale-func

IPFIX ipv4 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector. Test packets are sent from TG to DUT1. TG listens for flow report packets and verifies that they contains flow record of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports packet flow with a large number of packets 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:e3:1b:ee 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.1.2 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow when multiple sessions are configured 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:e3:1b:ee 
 classify_add_del_table mask l3 ip4 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 0 dst_port 0 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 1 dst_port 1 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 2 dst_port 2 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 3 dst_port 3 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 4 dst_port 4 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 5 dst_port 5 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 6 dst_port 6 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 7 dst_port 7 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 8 dst_port 8 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 9 dst_port 9 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 10 dst_port 10 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 11 dst_port 11 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 12 dst_port 12 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 13 dst_port 13 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 14 dst_port 14 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 15 dst_port 15 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 16 dst_port 16 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 17 dst_port 17 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 18 dst_port 18 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 19 dst_port 19 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 20 dst_port 20 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 21 dst_port 21 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 22 dst_port 22 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 23 dst_port 23 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 24 dst_port 24 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 25 dst_port 25 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 26 dst_port 26 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 27 dst_port 27 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 28 dst_port 28 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 29 dst_port 29 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 30 dst_port 30 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 31 dst_port 31 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 32 dst_port 32 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 33 dst_port 33 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 34 dst_port 34 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 35 dst_port 35 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 36 dst_port 36 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 37 dst_port 37 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 38 dst_port 38 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 39 dst_port 39 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 40 dst_port 40 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 41 dst_port 41 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 42 dst_port 42 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 43 dst_port 43 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 44 dst_port 44 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 45 dst_port 45 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 46 dst_port 46 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 47 dst_port 47 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 48 dst_port 48 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 49 dst_port 49 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 50 dst_port 50 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 51 dst_port 51 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 52 dst_port 52 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 53 dst_port 53 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 54 dst_port 54 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 55 dst_port 55 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 56 dst_port 56 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 57 dst_port 57 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 58 dst_port 58 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 59 dst_port 59 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 60 dst_port 60 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 61 dst_port 61 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 62 dst_port 62 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 63 dst_port 63 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 64 dst_port 64 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 65 dst_port 65 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 66 dst_port 66 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 67 dst_port 67 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 68 dst_port 68 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 69 dst_port 69 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 70 dst_port 70 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 71 dst_port 71 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 72 dst_port 72 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 73 dst_port 73 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 74 dst_port 74 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 75 dst_port 75 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 76 dst_port 76 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 77 dst_port 77 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 78 dst_port 78 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 79 dst_port 79 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1  path_mtu 1450 template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip4-ip4base-spanrx-func

SPAN test suite

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: DUT1 is configured with SPAN mirroring from the first DUT1-TG interface to the second one.
  • [Ver] TG verification: Test ARP or ICMP packets are sent by TG on first link to DUT1; On receipt through second link TG verifies the copy of packet sent and the copy of DUT’s reply packet.
  • [Ref] Applicable standard specifications: None?
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut mirrors l2 packets from one interface to another 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.1.2/24 
 sw_interface_span_enable_disable src_sw_if_index 2 dst_sw_if_index 1 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut mirrors ipv4 packets from one interface to another 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.1.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.1.1 mac fa:16:3e:a8:91:85 
 sw_interface_span_enable_disable src_sw_if_index 2 dst_sw_if_index 1 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip6-ip6base-ip6ipfixbase-func

IPFIX ipv6 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 and IPV6 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector.Test packets are sent from TG to or through DUT1. TG listens for flow report packets and verifies that they contains flow records of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports packet flow for traffic by source address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:e3:1b:ee 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:e3:1b:ee 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip6 src 12::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow for traffic with local destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:e3:1b:ee 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:e3:1b:ee 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 2 match_n 2 match l3 ip6 dst 10::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut reports packet flow for traffic with remote destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:e3:1b:ee 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:e3:1b:ee 
 ip_neighbor_add_del sw_if_index 3 dst 11::10 mac fa:16:3e:de:cc:66 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 2 match_n 2 match l3 ip6 dst 11::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut reports packet flow for traffic by source and destination port 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:e3:1b:ee 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:e3:1b:ee 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 80 dst_port 80 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip6-ip6base-ip6ipfixscale-func

IPFIX ipv6 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 and IPV6 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector.Test packets are sent from TG to or through DUT1. TG listens for flow report packets and verifies that they contains flow records of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports packet flow with a large number of packets 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:e3:1b:ee 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:e3:1b:ee 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip6 src 12::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow when multiple sessions are configured 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:e3:1b:ee 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:e3:1b:ee 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 0 dst_port 0 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 1 dst_port 1 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 2 dst_port 2 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 3 dst_port 3 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 4 dst_port 4 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 5 dst_port 5 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 6 dst_port 6 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 7 dst_port 7 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 8 dst_port 8 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 9 dst_port 9 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 10 dst_port 10 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 11 dst_port 11 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 12 dst_port 12 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 13 dst_port 13 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 14 dst_port 14 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 15 dst_port 15 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 16 dst_port 16 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 17 dst_port 17 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 18 dst_port 18 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 19 dst_port 19 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 20 dst_port 20 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 21 dst_port 21 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 22 dst_port 22 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 23 dst_port 23 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 24 dst_port 24 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 25 dst_port 25 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 26 dst_port 26 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 27 dst_port 27 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 28 dst_port 28 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 29 dst_port 29 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 30 dst_port 30 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 31 dst_port 31 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 32 dst_port 32 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 33 dst_port 33 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 34 dst_port 34 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 35 dst_port 35 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 36 dst_port 36 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 37 dst_port 37 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 38 dst_port 38 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 39 dst_port 39 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 40 dst_port 40 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 41 dst_port 41 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 42 dst_port 42 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 43 dst_port 43 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 44 dst_port 44 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1  path_mtu 1450 template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip6-ip6base-spanrx-func

SPAN test suite

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: DUT1 is configured with SPAN mirroring from the first DUT1-TG interface to the second one.
  • [Ver] TG verification: Test ARP or ICMP packets are sent by TG on first link to DUT1; On receipt through second link TG verifies the copy of packet sent and the copy of DUT’s reply packet.
  • [Ref] Applicable standard specifications: None?
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut mirrors ipv6 packets from one interface to another 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_add_del_address sw_if_index 2 10::1/24 
 sw_interface_set_flags sw_if_index 2 admin-up 
 ip_neighbor_add_del sw_if_index 2 dst 11::1 mac fa:16:3e:a8:91:85 
 ip_add_del_route 11::1/24 via 10::1  sw_if_index 2 resolve-attempts 10 count 1     
 sw_interface_span_enable_disable src_sw_if_index 2 dst_sw_if_index 1 
 exec show trace  
  
 DUT2:  
 exec show trace

vm vhost

ip4

eth2p-ethip4-ip4base-eth-2vhost-1vm

eth2p-ethip4-ip4base-eth-2vhost-1vm

IPv4 routing test cases with vhost user interface RFC791 IPv4, RFC826 ARP, RFC792 ICMPv4. Encapsulations: Eth-IPv4-ICMPv4 on links TG=DUT1. IPv4 routing tests use circular 2-node topology TG - DUT1 - TG with two link between the nodes. DUT is configured with IPv4 routing and static routes. Test sends packets by TG on links to DUT and received on TG link on the other side of circular topology. On receive TG verifies packets IPv4 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: ipv4 forward via vhost to another vrf 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 ip_table_add_del table 20  
 sw_interface_set_table sw_if_index 6 vrf 20  
 sw_interface_set_table sw_if_index 1 vrf 20  
 sw_interface_add_del_address sw_if_index 2 10.0.1.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.2.1/24 
 sw_interface_add_del_address sw_if_index 6 10.0.2.2/24 
 sw_interface_add_del_address sw_if_index 1 10.0.3.1/24 
 sw_interface_dump 
 ip_add_del_route 10.0.3.0/24 via 10.0.2.2  sw_if_index 5       
 ip_add_del_route 10.0.1.0/24 via 10.0.2.1 vrf 20 sw_if_index 6       
 ip_neighbor_add_del sw_if_index 5 dst 10.0.2.2 mac 02:fe:15:7d:73:f1 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.3.2 mac fa:16:3e:ab:fa:5d 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip4base-eth-2vhost-1vm-func

IPv4-ip4-ipsec-lispgpe-ip4 - main fib, vrf (gpe_vni-to-vrf)

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: ICMPv4-IPv4-IPSec-LISPGPE-IPv4-ICMPv4.
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:e9:b5:8e 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 6.6.1.9/24 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 774f3978454e6f7556686365564e4344 integ-alg sha1-96 integ-key 7a466f6c6a374a35725a4446576a6a3964464345  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 774f3978454e6f7556686365564e4344 integ-alg sha1-96 integ-key 7a466f6c6a374a35725a4446576a6a3964464345  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:70:89:60 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 774f3978454e6f7556686365564e4344 integ-alg sha1-96 integ-key 7a466f6c6a374a35725a4446576a6a3964464345  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 774f3978454e6f7556686365564e4344 integ-alg sha1-96 integ-key 7a466f6c6a374a35725a4446576a6a3964464345  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:e9:b5:8e 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 6.6.1.9/24 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4b3731394c393145496f4e33626f3571 integ-alg sha1-96 integ-key 684544627967594e576a364e6d426f4c374e3050  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4b3731394c393145496f4e33626f3571 integ-alg sha1-96 integ-key 684544627967594e576a364e6d426f4c374e3050  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 7 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:70:89:60 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4b3731394c393145496f4e33626f3571 integ-alg sha1-96 integ-key 684544627967594e576a364e6d426f4c374e3050  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4b3731394c393145496f4e33626f3571 integ-alg sha1-96 integ-key 684544627967594e576a364e6d426f4c374e3050  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip6base-eth-2vhost-1vm-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:e9:b5:8e 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ab:fa:5d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 2001:cdba:6::3/64 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 8 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e634f696d7547535841344150733765 integ-alg sha1-96 integ-key 5a706d3665616936524f7931336c4342576e324a  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e634f696d7547535841344150733765 integ-alg sha1-96 integ-key 5a706d3665616936524f7931336c4342576e324a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:70:89:60 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e634f696d7547535841344150733765 integ-alg sha1-96 integ-key 5a706d3665616936524f7931336c4342576e324a  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e634f696d7547535841344150733765 integ-alg sha1-96 integ-key 5a706d3665616936524f7931336c4342576e324a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:e9:b5:8e 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ab:fa:5d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 2001:cdba:6::3/64 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 8 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6f715a753164626269566842566f3068 integ-alg sha1-96 integ-key 7464677738596678434a65424130507a454b6453  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6f715a753164626269566842566f3068 integ-alg sha1-96 integ-key 7464677738596678434a65424130507a454b6453  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:70:89:60 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6f715a753164626269566842566f3068 integ-alg sha1-96 integ-key 7464677738596678434a65424130507a454b6453  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6f715a753164626269566842566f3068 integ-alg sha1-96 integ-key 7464677738596678434a65424130507a454b6453  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace

eth2p-ethip4lispgpe-ip4base-eth-2vhost-1vm-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using vhost interfaces 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:e9:b5:8e 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 0 reid 6.0.5.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 8 vrf 0  
 sw_interface_add_del_address sw_if_index 8 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:70:89:60 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip4basevrf-eth-2vhost-1vm-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using vhost interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:e9:b5:8e 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 1 reid 6.0.5.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 9 vrf 1  
 sw_interface_add_del_address sw_if_index 9 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:70:89:60 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 1 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip6base-eth-2vhost-1vm-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6:0:1::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:1::2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.2 mac fa:16:3e:e9:b5:8e 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6:0:1::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 6:6:1::3/64 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6:0:2::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:2::2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:70:89:60 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6:0:2::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:1::0/64 seid 6:0:2::0/64 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 0 reid 6:0:1::0/64 leid 6:0:2::0/64 
 exec show trace

ip6

eth2p-ethip6ipsectptlispgpe-ip4base-eth-2vhost-1vm-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISPGPE-IPSec-IPv4-ICMP, Eth-IPv6-IPSec-LISPGPE-IPv4-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Test cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:e9:b5:8e 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:ab:fa:5d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4c4d314a64625252706b4b476d6c5741 integ-alg sha1-96 integ-key 4b37614b6145345859474861645a326d4770736f  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4c4d314a64625252706b4b476d6c5741 integ-alg sha1-96 integ-key 4b37614b6145345859474861645a326d4770736f  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:70:89:60 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4c4d314a64625252706b4b476d6c5741 integ-alg sha1-96 integ-key 4b37614b6145345859474861645a326d4770736f  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4c4d314a64625252706b4b476d6c5741 integ-alg sha1-96 integ-key 4b37614b6145345859474861645a326d4770736f  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:e9:b5:8e 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:ab:fa:5d 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 32745a5851487543796c5543305a504c integ-alg sha1-96 integ-key 673653466374687a323546343662666d3156396d  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 32745a5851487543796c5543305a504c integ-alg sha1-96 integ-key 673653466374687a323546343662666d3156396d  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:70:89:60 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 32745a5851487543796c5543305a504c integ-alg sha1-96 integ-key 673653466374687a323546343662666d3156396d  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 32745a5851487543796c5543305a504c integ-alg sha1-96 integ-key 673653466374687a323546343662666d3156396d  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace

eth2p-ethip6ipsectptlispgpe-ip6base-eth-2vhost-1vm-func

IPv6 - ip6-ipsec-lispgpe-ip6 - main fib, vrf (gpe_vni-to-vrf), phy2lisp, virt2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6,
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:e9:b5:8e 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 2001:cdba:1::9/64 
 sw_interface_set_flags sw_if_index 6 admin-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 596b656c6d384356626c554d69476b43 integ-alg sha1-96 integ-key 3871574769534971394572645444476567385557  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 596b656c6d384356626c554d69476b43 integ-alg sha1-96 integ-key 3871574769534971394572645444476567385557  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:70:89:60 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 596b656c6d384356626c554d69476b43 integ-alg sha1-96 integ-key 3871574769534971394572645444476567385557  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 596b656c6d384356626c554d69476b43 integ-alg sha1-96 integ-key 3871574769534971394572645444476567385557  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:e9:b5:8e 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 2001:cdba:1::9/64 
 sw_interface_set_flags sw_if_index 6 admin-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3941304a4e4c4d576f776b506838634e integ-alg sha1-96 integ-key 42714f4c4850424e4e454c6371657a6139765946  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3941304a4e4c4d576f776b506838634e integ-alg sha1-96 integ-key 42714f4c4850424e4e454c6371657a6139765946  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 7 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:70:89:60 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3941304a4e4c4d576f776b506838634e integ-alg sha1-96 integ-key 42714f4c4850424e4e454c6371657a6139765946  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3941304a4e4c4d576f776b506838634e integ-alg sha1-96 integ-key 42714f4c4850424e4e454c6371657a6139765946  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace

eth2p-ethip6lispgpe-ip6base-eth-2vhost-1vm-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:e9:b5:8e 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 0 ipv6 
 sw_interface_set_table sw_if_index 8 vrf 0 ipv6 
 sw_interface_add_del_address sw_if_index 8 2001:cdba:6::9/64 
 sw_interface_set_flags sw_if_index 8 admin-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:70:89:60 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

eth2p-ethip6lispgpe-ip6basevrf-eth-2vhost-1vm-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces and vrf is enabled 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ab:fa:5d 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:e9:b5:8e 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 9 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 9 2001:cdba:6::9/64 
 sw_interface_set_flags sw_if_index 9 admin-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:58:b6:d5 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:70:89:60 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

l2bd

eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm-func

L2 bridge domain with VLAN tag over VM test cases

  • [Top] Network Topologies: TG=DUT 2-node circular topology with double links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG=DUT and on DUT=VM.
  • [Cfg] DUT configuration: DUT is configured with two bridge domains (L2BD) with MAC learning enabled; each one with added VLAN sub-interface towards TG and vhost-user interface to local VM. Configure linux bridge on VM to pass traffic between both vhost-user interfaces.
  • [Ver] TG verification: Make TG send ICMPv4/ICMPv6 Echo Req between two of its interfaces to be switched by DUT via VM; verify packets are switched between these TG interfaces; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr, MAC addresses and VLAN tag.
  • [Ref] Applicable standard specifications: IEEE 802.1q.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm - ipv4 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 create_vlan_subif sw_if_index 2 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc01: eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm - ipv6 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 create_vlan_subif sw_if_index 2 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-eth-l2bdbasemaclrn-eth-2vhost-1vm-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 is configured with two L2 bridge-domains (L2BD) switching combined with MAC learning enabled.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with two l2bds (mac learn) switches icmpv4 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with two l2bds (mac learn) switches icmpv6 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-eth-l2bdbasemacstc-eth-2vhost-1vm-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 is configured with two L2 bridge-domains (L2BD) switching combined with static MACs.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with two l2bds (static macs) switches icmpv4 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>xa8x91x85,sw_if_index=2,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>xe3xee,sw_if_index=5,bvi_mac=0) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>xe3xee,sw_if_index=1,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>xa8x91x85,sw_if_index=6,bvi_mac=0) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with two l2bds (static macs) switches icmpv6 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>xa8x91x85,sw_if_index=2,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>xe3xee,sw_if_index=5,bvi_mac=0) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>xe3xee,sw_if_index=1,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>xa8x91x85,sw_if_index=6,bvi_mac=0) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-l2bdbase-vhost-client-reconnect-2vm-func

Vhost-User Interface Traffic Tests

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-VXLAN-ETH-IP on TG-DUT link. ETH-IP on VirtualEthernet-VM interface.
  • [Cfg] DUT configuration: On DUT is running 2 VM with 2 vhost-user interface on each VM. DUT is configured with VXLAN and vhost-user interfaces in bridge-domain (L2BD).
  • [Cfg] VM configuration: VM has both vhost-user interfaces added into Linux Bridge.
  • [Ver] TG verification: VXLAN packet is send to DUT where is decapsulated and send bridged to vhost-user inteface. VM forwards frame to its second interface and VPP encapsulates it to another VXLAN tunnel. Packets are sent and received by TG on link to DUT.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: qemu reconnects to vpps vhost-user when qemu is killed and restarted 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.1 mac fa:16:3e:a8:91:85 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 101 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 102 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 103 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 104 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock3 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock4 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 sw_interface_set_flags sw_if_index 10 admin-up link-up 
 sw_interface_set_flags sw_if_index 11 admin-up link-up 
 sw_interface_set_flags sw_if_index 12 admin-up link-up 
 bridge_domain_add_del(bd_id=101,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=101) 
 sw_interface_set_l2_bridge(rx_sw_if_index=9,enable=1,shg=0,port_type=0,bd_id=101) 
 bridge_domain_add_del(bd_id=102,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=102) 
 sw_interface_set_l2_bridge(rx_sw_if_index=10,enable=1,shg=0,port_type=0,bd_id=102) 
 bridge_domain_add_del(bd_id=103,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=103) 
 sw_interface_set_l2_bridge(rx_sw_if_index=11,enable=1,shg=0,port_type=0,bd_id=103) 
 bridge_domain_add_del(bd_id=104,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_l2_bridge(rx_sw_if_index=12,enable=1,shg=0,port_type=0,bd_id=104) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp reconnects to qemu vhost-user when restart vpp and reconfigured 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.1 mac fa:16:3e:a8:91:85 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 101 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 102 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 103 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 104 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock3 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock4 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 sw_interface_set_flags sw_if_index 10 admin-up link-up 
 sw_interface_set_flags sw_if_index 11 admin-up link-up 
 sw_interface_set_flags sw_if_index 12 admin-up link-up 
 bridge_domain_add_del(bd_id=101,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=101) 
 sw_interface_set_l2_bridge(rx_sw_if_index=9,enable=1,shg=0,port_type=0,bd_id=101) 
 bridge_domain_add_del(bd_id=102,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=102) 
 sw_interface_set_l2_bridge(rx_sw_if_index=10,enable=1,shg=0,port_type=0,bd_id=102) 
 bridge_domain_add_del(bd_id=103,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=103) 
 sw_interface_set_l2_bridge(rx_sw_if_index=11,enable=1,shg=0,port_type=0,bd_id=103) 
 bridge_domain_add_del(bd_id=104,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_l2_bridge(rx_sw_if_index=12,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.1 mac fa:16:3e:a8:91:85 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 101 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 102 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 103 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 104 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock3 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock4 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 sw_interface_set_flags sw_if_index 10 admin-up link-up 
 sw_interface_set_flags sw_if_index 11 admin-up link-up 
 sw_interface_set_flags sw_if_index 12 admin-up link-up 
 bridge_domain_add_del(bd_id=101,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=101) 
 sw_interface_set_l2_bridge(rx_sw_if_index=9,enable=1,shg=0,port_type=0,bd_id=101) 
 bridge_domain_add_del(bd_id=102,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=102) 
 sw_interface_set_l2_bridge(rx_sw_if_index=10,enable=1,shg=0,port_type=0,bd_id=102) 
 bridge_domain_add_del(bd_id=103,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=103) 
 sw_interface_set_l2_bridge(rx_sw_if_index=11,enable=1,shg=0,port_type=0,bd_id=103) 
 bridge_domain_add_del(bd_id=104,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_l2_bridge(rx_sw_if_index=12,enable=1,shg=0,port_type=0,bd_id=104) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4vxlan-l2bdbasemaclrn-eth-2vhost-1vm-func

L2BD with VM combined with VXLAN test cases - IPv4

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01:dut1 and dut2 with two l2bds and vxlanoipv4 tunnel switch icmpv4 between tg links and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace

eth2p-ethip6vxlan-l2bdbasemaclrn-eth-2vhost-1vm-func

L2BD with VM combined with VXLAN test cases - IPv6

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01:dut1 and dut2 with two l2bds and vxlanoipv6 tunnel switch icmpv6 between tg links and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace

l2xc

eth2p-eth-l2xcbase-eth-2vhost-1vm-func

L2 cross-connect test cases

  • [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with two l2xcs switches icmpv4 between tg and local vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=2,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=2) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=6) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=6,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with two l2xcs switches icmpv6 between tg and local vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=2,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=2) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=6) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=6,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 exec show trace