func

crypto

default

eth2p-ethip4ipsectnl-ip4base-func

IPv4 IPsec tunnel mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 65466b473656446a7850445638684d43 integ-alg sha1-96 integ-key 746b46626244416550386f6669517769574d6138 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 65466b473656446a7850445638684d43 integ-alg sha1-96 integ-key 746b46626244416550386f6669517769574d6138 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 4b556539507a7954424e5a54544c72776345534842687535 integ-alg sha-256-128 integ-key 37587a6c6559783841774e65534477474e32575a54676765364d394955727476 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 4b556539507a7954424e5a54544c72776345534842687535 integ-alg sha-256-128 integ-key 37587a6c6559783841774e65534477474e32575a54676765364d394955727476 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 546144366e7352546a3441586275763843746866756248727777526630784965 integ-alg sha-384-192 integ-key 4b55746138415043756334486d4e53496362556537676a416c6d4a555a4847465247496e5a39686b4a6f716a67645536 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 546144366e7352546a3441586275763843746866756248727777526630784965 integ-alg sha-384-192 integ-key 4b55746138415043756334486d4e53496362556537676a416c6d4a555a4847465247496e5a39686b4a6f716a67645536 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 4d714c746c666266577a786752563041525a6d79414b655a49395a6d4577306a integ-alg sha-512-256 integ-key 636e6e784f3072524773727a756f4850636c6a7957516841374534566146694166537a63523365554445504a6d71565339486c674e6333444d4f715841674972 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 4d714c746c666266577a786752563041525a6d79414b655a49395a6d4577306a integ-alg sha-512-256 integ-key 636e6e784f3072524773727a756f4850636c6a7957516841374534566146694166537a63523365554445504a6d71565339486c674e6333444d4f715841674972 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4155724f707474394248757836466578 integ-alg sha1-96 integ-key 4d686f6e5773534959777a397a4b4162716c5562 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4155724f707474394248757836466578 integ-alg sha1-96 integ-key 4d686f6e5773534959777a397a4b4162716c5562 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 763159584871716542727739566d6552 integ-alg sha1-96 integ-key 7a703076424b6f4a645157614e57364637687458 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 763159584871716542727739566d6552 integ-alg sha1-96 integ-key 7a703076424b6f4a645157614e57364637687458 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 65446c34367353355961707a69366571 integ-alg sha1-96 integ-key 4c49354b5645524565514a6e736c623251745968 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 65446c34367353355961707a69366571 integ-alg sha1-96 integ-key 4c49354b5645524565514a6e736c623251745968 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6e5359336456774e656f493370486b30 integ-alg sha1-96 integ-key 667746776131306d67383970743261386f58614a tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6e5359336456774e656f493370486b30 integ-alg sha1-96 integ-key 667746776131306d67383970743261386f58614a tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 6b435944555a576a7870396657565949 integ-key 3046734b644a4b68415777674632516167563035 
 exec set ipsec sa 20 crypto-key 6b435944555a576a7870396657565949 integ-key 3046734b644a4b68415777674632516167563035 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 653131346252756f79546d6a48514244 integ-alg sha1-96 integ-key 66686c505a4646535a6d62574f74364952374263 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 653131346252756f79546d6a48514244 integ-alg sha1-96 integ-key 66686c505a4646535a6d62574f74364952374263 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 567839434b7867795a68495152356e57 integ-key 7048393472667667757566437a706f6770706e54 
 exec set ipsec sa 20 crypto-key 567839434b7867795a68495152356e57 integ-key 7048393472667667757566437a706f6770706e54 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 726d3132346b30525152303059556f75 integ-alg sha1-96 integ-key 7655324e3076755355584b594b365373584e4365 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 726d3132346b30525152303059556f75 integ-alg sha1-96 integ-key 7655324e3076755355584b594b365373584e4365 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 776a7966596861376444516e79315a46 integ-key 326b5263376e6d45685679476336766769635047 
 exec set ipsec sa 20 crypto-key 776a7966596861376444516e79315a46 integ-key 326b5263376e6d45685679476336766769635047 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6e56797147634b555653455871375733 integ-alg sha1-96 integ-key 623470444237714b364530354949506834394c37 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6e56797147634b555653455871375733 integ-alg sha1-96 integ-key 623470444237714b364530354949506834394c37 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 5a664a384d6e50563449757335317438 integ-key 4a784b53664f5153527772516167635035356138 
 exec set ipsec sa 20 crypto-key 5a664a384d6e50563449757335317438 integ-key 4a784b53664f5153527772516167635035356138 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectpt-ip4base-func

IPv4 IPsec transport mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4d376b5449437048526d4a386b744639 integ-alg sha1-96 integ-key 3548304f4d6f4e59304e42775447777432334d32  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4d376b5449437048526d4a386b744639 integ-alg sha1-96 integ-key 3548304f4d6f4e59304e42775447777432334d32  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 646473425744516658524846543545594c47446470354e78 integ-alg sha-256-128 integ-key 526c795a62504e6f5857724d30646c6f6944414a41547a434864486d4a557274  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 646473425744516658524846543545594c47446470354e78 integ-alg sha-256-128 integ-key 526c795a62504e6f5857724d30646c6f6944414a41547a434864486d4a557274  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 5162756635517046357674705738494f424b3335515047694133614b556d357a integ-alg sha-384-192 integ-key 47655a3234646239484b4d6762336b38315855784c436479694474365a636e756675703145387a5172664f66716d3076  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 5162756635517046357674705738494f424b3335515047694133614b556d357a integ-alg sha-384-192 integ-key 47655a3234646239484b4d6762336b38315855784c436479694474365a636e756675703145387a5172664f66716d3076  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 67633449495a516c6572705176556e425676774e537548517a4b3172534a7453 integ-alg sha-512-256 integ-key 33353056434c544838746f45644f6b3361734f3366525348686170566842764a305248744e5442456c4d6978474d717a4b6a38303972385435443050557a4c51  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 67633449495a516c6572705176556e425676774e537548517a4b3172534a7453 integ-alg sha-512-256 integ-key 33353056434c544838746f45644f6b3361734f3366525348686170566842764a305248744e5442456c4d6978474d717a4b6a38303972385435443050557a4c51  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 61617047474e61774959564673375063 integ-alg sha1-96 integ-key 736b487a494c714d6e48306542464f4172334456  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 61617047474e61774959564673375063 integ-alg sha1-96 integ-key 736b487a494c714d6e48306542464f4172334456  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 667954574954354c4f55495a31786c59 integ-alg sha1-96 integ-key 6e6b4175754c6a62583077504a63694a4b444b49  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 667954574954354c4f55495a31786c59 integ-alg sha1-96 integ-key 6e6b4175754c6a62583077504a63694a4b444b49  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 73556f6f357375744c4230517552684d integ-alg sha1-96 integ-key 4534426b4c766644774a74306e4d70323942474f  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 73556f6f357375744c4230517552684d integ-alg sha1-96 integ-key 4534426b4c766644774a74306e4d70323942474f  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 67394855323833785262394b4572776d integ-alg sha1-96 integ-key 51484e5750763473347a4f444f534e7a65384e4a  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 67394855323833785262394b4572776d integ-alg sha1-96 integ-key 51484e5750763473347a4f444f534e7a65384e4a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 5a72776f76383467553338383245505a integ-key 58754a415a7a7034306f43744342717444526c72 
 exec set ipsec sa 20 crypto-key 5a72776f76383467553338383245505a integ-key 58754a415a7a7034306f43744342717444526c72 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 7236474934657957714a523578755442 integ-alg sha1-96 integ-key 6372737a4d663655583371344a6f546b39494e65  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 7236474934657957714a523578755442 integ-alg sha1-96 integ-key 6372737a4d663655583371344a6f546b39494e65  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 3535797a6769434b7850786e685a4a77 integ-key 754b785368636d524d4e63636138715879574945 
 exec set ipsec sa 20 crypto-key 3535797a6769434b7850786e685a4a77 integ-key 754b785368636d524d4e63636138715879574945 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e30616d4a78726872426234456d456d integ-alg sha1-96 integ-key 536d4c5a68555638624968565353693258364257  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e30616d4a78726872426234456d456d integ-alg sha1-96 integ-key 536d4c5a68555638624968565353693258364257  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 565268547564397138776d726d664753 integ-key 4b506a6562374b596f66666a4e7058493233694c 
 exec set ipsec sa 20 crypto-key 565268547564397138776d726d664753 integ-key 4b506a6562374b596f66666a4e7058493233694c 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4b4853357059343930707162545a3535 integ-alg sha1-96 integ-key 5750594c4e674e4e746c4d4f45526f544f467a79  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4b4853357059343930707162545a3535 integ-alg sha1-96 integ-key 5750594c4e674e4e746c4d4f45526f544f467a79  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 46545934644d394239664433364a4163 integ-key 756b7071774938554e59446a36706e4f544d4b56 
 exec set ipsec sa 20 crypto-key 46545934644d394239664433364a4163 integ-key 756b7071774938554e59446a36706e4f544d4b56 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip4base-func

IPv4-ip4-ipsec-lispgpe-ip4 - main fib, vrf (gpe_vni-to-vrf)

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: ICMPv4-IPv4-IPSec-LISPGPE-IPv4-ICMPv4.
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:ea:c5:59 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:85:07:29 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 72397152346a754b5231704738755864 integ-alg sha1-96 integ-key 346c4151447730614a513555706d487246347272  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 72397152346a754b5231704738755864 integ-alg sha1-96 integ-key 346c4151447730614a513555706d487246347272  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:7f:44:de 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:6d:0f:8f 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 72397152346a754b5231704738755864 integ-alg sha1-96 integ-key 346c4151447730614a513555706d487246347272  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 72397152346a754b5231704738755864 integ-alg sha1-96 integ-key 346c4151447730614a513555706d487246347272  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:ea:c5:59 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:85:07:29 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6d505a667464345533514e4d72326756 integ-alg sha1-96 integ-key 3673555936334e53684d77704e4867456c6a6b42  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6d505a667464345533514e4d72326756 integ-alg sha1-96 integ-key 3673555936334e53684d77704e4867456c6a6b42  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:7f:44:de 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:6d:0f:8f 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6d505a667464345533514e4d72326756 integ-alg sha1-96 integ-key 3673555936334e53684d77704e4867456c6a6b42  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6d505a667464345533514e4d72326756 integ-alg sha1-96 integ-key 3673555936334e53684d77704e4867456c6a6b42  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec show trace
tc03: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int and vrf on eid is enabled. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:ea:c5:59 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:85:07:29 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 1 reid 6.6.2.0/24 leid 6.6.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 49797846666167764b55614b3531576a integ-alg sha1-96 integ-key 58786863574e557775726442766f466672394b72  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 49797846666167764b55614b3531576a integ-alg sha1-96 integ-key 58786863574e557775726442766f466672394b72  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:7f:44:de 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:6d:0f:8f 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 1 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 49797846666167764b55614b3531576a integ-alg sha1-96 integ-key 58786863574e557775726442766f466672394b72  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 49797846666167764b55614b3531576a integ-alg sha1-96 integ-key 58786863574e557775726442766f466672394b72  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc04: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int and vrf is enabled. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:ea:c5:59 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:85:07:29 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 1 reid 6.6.2.0/24 leid 6.6.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4175437563534d6550435551704e6673 integ-alg sha1-96 integ-key 695343714e4673624453675557494b6d70345068  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4175437563534d6550435551704e6673 integ-alg sha1-96 integ-key 695343714e4673624453675557494b6d70345068  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:7f:44:de 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:6d:0f:8f 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 1 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4175437563534d6550435551704e6673 integ-alg sha1-96 integ-key 695343714e4673624453675557494b6d70345068  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4175437563534d6550435551704e6673 integ-alg sha1-96 integ-key 695343714e4673624453675557494b6d70345068  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip6base-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:85:07:29 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 50785a486c6931666d59627777787972 integ-alg sha1-96 integ-key 555573516b627945596f67674f464d4c41316c4a  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 50785a486c6931666d59627777787972 integ-alg sha1-96 integ-key 555573516b627945596f67674f464d4c41316c4a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:7f:44:de 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:6d:0f:8f 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 50785a486c6931666d59627777787972 integ-alg sha1-96 integ-key 555573516b627945596f67674f464d4c41316c4a  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 50785a486c6931666d59627777787972 integ-alg sha1-96 integ-key 555573516b627945596f67674f464d4c41316c4a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:85:07:29 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e504745727869573036485168633532 integ-alg sha1-96 integ-key 696552445a4435436b74454d6a444c5564354c4a  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e504745727869573036485168633532 integ-alg sha1-96 integ-key 696552445a4435436b74454d6a444c5564354c4a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:7f:44:de 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:6d:0f:8f 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e504745727869573036485168633532 integ-alg sha1-96 integ-key 696552445a4435436b74454d6a444c5564354c4a  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e504745727869573036485168633532 integ-alg sha1-96 integ-key 696552445a4435436b74454d6a444c5564354c4a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip6basevrf-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6c686655476a533837473156324c7279 integ-alg sha1-96 integ-key 3973624231694d586654733172585638534e7939  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6c686655476a533837473156324c7279 integ-alg sha1-96 integ-key 3973624231694d586654733172585638534e7939  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:85:07:29 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6c686655476a533837473156324c7279 integ-alg sha1-96 integ-key 3973624231694d586654733172585638534e7939  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6c686655476a533837473156324c7279 integ-alg sha1-96 integ-key 3973624231694d586654733172585638534e7939  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:7f:44:de 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:6d:0f:8f 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

eth2p-ethip6ipsectnl-ip6base-func

IPv6 IPsec tunnel mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 645155465953475455514d7549664138 integ-alg sha1-96 integ-key 754967516b33553174624e58414f6961534e5435 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 645155465953475455514d7549664138 integ-alg sha1-96 integ-key 754967516b33553174624e58414f6961534e5435 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 6a4179517a73525a36547a6f487852677065557146677839 integ-alg sha-256-128 integ-key 696366476b4552305979534b664849696f38754b3776345a523071446c74596a tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 6a4179517a73525a36547a6f487852677065557146677839 integ-alg sha-256-128 integ-key 696366476b4552305979534b664849696f38754b3776345a523071446c74596a tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 534d5264493757467153525454315034613034586c4a676b7566436a39776375 integ-alg sha-384-192 integ-key 43583874506a634c4374376776316f426e47773168567550766c4c51354872365657343465337657556b6c6a33435553 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 534d5264493757467153525454315034613034586c4a676b7566436a39776375 integ-alg sha-384-192 integ-key 43583874506a634c4374376776316f426e47773168567550766c4c51354872365657343465337657556b6c6a33435553 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 677a4d6538714f734e694547566955684e6630624a75797475516b4644624e66 integ-alg sha-512-256 integ-key 3872417576503651436655594f567a56423833794267444c32484e574c524433536b3573756b433745345170353439706377326c336c326766687231304a5475 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 677a4d6538714f734e694547566955684e6630624a75797475516b4644624e66 integ-alg sha-512-256 integ-key 3872417576503651436655594f567a56423833794267444c32484e574c524433536b3573756b433745345170353439706377326c336c326766687231304a5475 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 7065647536434e734233356a37646667 integ-alg sha1-96 integ-key 7933537a573863504a746d7744374e6a70623774 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 7065647536434e734233356a37646667 integ-alg sha1-96 integ-key 7933537a573863504a746d7744374e6a70623774 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 354d36546b314756466a684a6a507257 integ-alg sha1-96 integ-key 4937797964444a6e61666b4f433756376e413561 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 354d36546b314756466a684a6a507257 integ-alg sha1-96 integ-key 4937797964444a6e61666b4f433756376e413561 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6a416352715978336c703666576c4d71 integ-alg sha1-96 integ-key 39346847454271796b7061536d5743714f644b34 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6a416352715978336c703666576c4d71 integ-alg sha1-96 integ-key 39346847454271796b7061536d5743714f644b34 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3667514a746830585433653369357479 integ-alg sha1-96 integ-key 466c62535176773254464f384a31586236585a5a tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3667514a746830585433653369357479 integ-alg sha1-96 integ-key 466c62535176773254464f384a31586236585a5a tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 72434e5461666f546a62574f62455962 integ-key 37484f765648566835365330544467584e55785a 
 exec set ipsec sa 20 crypto-key 72434e5461666f546a62574f62455962 integ-key 37484f765648566835365330544467584e55785a 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 494b4c6768664a5679576156586e7942 integ-alg sha1-96 integ-key 595835535a6a52655167656f3336315779764972 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 494b4c6768664a5679576156586e7942 integ-alg sha1-96 integ-key 595835535a6a52655167656f3336315779764972 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 5655567a324d50465877653841373941 integ-key 69643542744e387a69544e4c4577355052453363 
 exec set ipsec sa 20 crypto-key 5655567a324d50465877653841373941 integ-key 69643542744e387a69544e4c4577355052453363 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3445674d5a38484f73516c6c7a564453 integ-alg sha1-96 integ-key 72496d62315074506e76517a4138544b6634356b tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3445674d5a38484f73516c6c7a564453 integ-alg sha1-96 integ-key 72496d62315074506e76517a4138544b6634356b tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 6e6d62457746314a5543424348584754 integ-key 39336a4a426a435278317646315362794a6f7268 
 exec set ipsec sa 20 crypto-key 6e6d62457746314a5543424348584754 integ-key 39336a4a426a435278317646315362794a6f7268 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3477367648416172326a567033535569 integ-alg sha1-96 integ-key 75557665576355414f6c317a6766574679413077 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3477367648416172326a567033535569 integ-alg sha1-96 integ-key 75557665576355414f6c317a6766574679413077 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 5679474b444f673552535a484d427161 integ-key 54496633754252634b4576446f49597871646f51 
 exec set ipsec sa 20 crypto-key 5679474b444f673552535a484d427161 integ-key 54496633754252634b4576446f49597871646f51 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6ipsectpt-ip6base-func

IPv6 IPsec transport mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6f7853586435376758345275584c6354 integ-alg sha1-96 integ-key 7772736947554e395352546a53714e4637544661  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6f7853586435376758345275584c6354 integ-alg sha1-96 integ-key 7772736947554e395352546a53714e4637544661  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 5a54624461344b6f654c4a44784358595342465972374e74 integ-alg sha-256-128 integ-key 4c4571784f57437579636758583266563059396c427042665650706f45433765  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 5a54624461344b6f654c4a44784358595342465972374e74 integ-alg sha-256-128 integ-key 4c4571784f57437579636758583266563059396c427042665650706f45433765  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 5463556b614b557a6d584138313374434a34417877554150414b51764e676871 integ-alg sha-384-192 integ-key 6451537855447871666b67714c67705734524244697776314b4a713155454b57763362653866794f484959444c785266  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 5463556b614b557a6d584138313374434a34417877554150414b51764e676871 integ-alg sha-384-192 integ-key 6451537855447871666b67714c67705734524244697776314b4a713155454b57763362653866794f484959444c785266  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 5a683156494a33504963584130756555395a7353703164553048474f556c3870 integ-alg sha-512-256 integ-key 4a724872386d3631545143464e66586a53537a6b727552576d485947494c5845556b484a714f344f7146626e397169546c4169436c757a477a4946786d425568  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 5a683156494a33504963584130756555395a7353703164553048474f556c3870 integ-alg sha-512-256 integ-key 4a724872386d3631545143464e66586a53537a6b727552576d485947494c5845556b484a714f344f7146626e397169546c4169436c757a477a4946786d425568  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 71526f75696c676b4b52374750376a67 integ-alg sha1-96 integ-key 4f3175744356614a70764c4f4139373873734f41  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 71526f75696c676b4b52374750376a67 integ-alg sha1-96 integ-key 4f3175744356614a70764c4f4139373873734f41  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 414468757352494d4549566977394e66 integ-alg sha1-96 integ-key 7a46667370374e42446f486f57394d396d386a65  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 414468757352494d4549566977394e66 integ-alg sha1-96 integ-key 7a46667370374e42446f486f57394d396d386a65  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3371626745386c57646a6a6c38646262 integ-alg sha1-96 integ-key 384a7568774c7961726a4b487238736664386f74  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3371626745386c57646a6a6c38646262 integ-alg sha1-96 integ-key 384a7568774c7961726a4b487238736664386f74  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6b624d5432624163324b69543372746a integ-alg sha1-96 integ-key 59426c45324b55784a554655354e6a724b515136  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6b624d5432624163324b69543372746a integ-alg sha1-96 integ-key 59426c45324b55784a554655354e6a724b515136  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 4e416b30573231536643656b7838756d integ-key 774c34574958364954757a34494a6e6a68663053 
 exec set ipsec sa 20 crypto-key 4e416b30573231536643656b7838756d integ-key 774c34574958364954757a34494a6e6a68663053 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 395966314a31524c366d75486b543559 integ-alg sha1-96 integ-key 735554754c5a313570517a347064387458415438  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 395966314a31524c366d75486b543559 integ-alg sha1-96 integ-key 735554754c5a313570517a347064387458415438  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 454b4e694578745a4c536b544b545062 integ-key 63394e58616d6e30387064614a426c3156476474 
 exec set ipsec sa 20 crypto-key 454b4e694578745a4c536b544b545062 integ-key 63394e58616d6e30387064614a426c3156476474 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 367256393858736a344a425a79745650 integ-alg sha1-96 integ-key 6947326371506a3972356e687a67473479567873  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 367256393858736a344a425a79745650 integ-alg sha1-96 integ-key 6947326371506a3972356e687a67473479567873  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 757637386666543431646f566d6f7565 integ-key 6e52364c335934584b51566365706937556f7039 
 exec set ipsec sa 20 crypto-key 757637386666543431646f566d6f7565 integ-key 6e52364c335934584b51566365706937556f7039 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6c76586c3676575338427576704d3451 integ-alg sha1-96 integ-key 364d625a6e70586e6b6f6439444377706a6b4677  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6c76586c3676575338427576704d3451 integ-alg sha1-96 integ-key 364d625a6e70586e6b6f6439444377706a6b4677  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 354777614d4176673964396c5a6a6f53 integ-key 686c42614742745a614d716e50596a4c5144546f 
 exec set ipsec sa 20 crypto-key 354777614d4176673964396c5a6a6f53 integ-key 686c42614742745a614d716e50596a4c5144546f 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6ipsectptlispgpe-ip4base-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISPGPE-IPSec-IPv4-ICMP, Eth-IPv6-IPSec-LISPGPE-IPv4-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:85:07:29 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 38624d76525353376c4f41334b6d5442 integ-alg sha1-96 integ-key 5a693836344d646c4d334b746b4e4a756c786854  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 38624d76525353376c4f41334b6d5442 integ-alg sha1-96 integ-key 5a693836344d646c4d334b746b4e4a756c786854  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:7f:44:de 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:6d:0f:8f 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 38624d76525353376c4f41334b6d5442 integ-alg sha1-96 integ-key 5a693836344d646c4d334b746b4e4a756c786854  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 38624d76525353376c4f41334b6d5442 integ-alg sha1-96 integ-key 5a693836344d646c4d334b746b4e4a756c786854  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:85:07:29 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:ea:c5:59 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 726e554b5558476a7163704358677774 integ-alg sha1-96 integ-key 4a6e4d5949327455424a426d774a324a695a4375  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 726e554b5558476a7163704358677774 integ-alg sha1-96 integ-key 4a6e4d5949327455424a426d774a324a695a4375  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:7f:44:de 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:6d:0f:8f 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 726e554b5558476a7163704358677774 integ-alg sha1-96 integ-key 4a6e4d5949327455424a426d774a324a695a4375  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 726e554b5558476a7163704358677774 integ-alg sha1-96 integ-key 4a6e4d5949327455424a426d774a324a695a4375  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace

eth2p-ethip6ipsectptlispgpe-ip6base-func

IPv6 - ip6-ipsec-lispgpe-ip6 - main fib, vrf (gpe_vni-to-vrf), phy2lisp, virt2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6,
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ea:c5:59 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:85:07:29 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 59706a676e46516233487162564c5153 integ-alg sha1-96 integ-key 543861773962486849597738647a314a7566706d  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 59706a676e46516233487162564c5153 integ-alg sha1-96 integ-key 543861773962486849597738647a314a7566706d  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:7f:44:de 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:6d:0f:8f 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 59706a676e46516233487162564c5153 integ-alg sha1-96 integ-key 543861773962486849597738647a314a7566706d  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 59706a676e46516233487162564c5153 integ-alg sha1-96 integ-key 543861773962486849597738647a314a7566706d  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using ipsec (transport) lisp_gpe0 int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ea:c5:59 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:85:07:29 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e7444377069566e49464d61684e576d integ-alg sha1-96 integ-key 746b376f34597763425863704d6969673543424a  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e7444377069566e49464d61684e576d integ-alg sha1-96 integ-key 746b376f34597763425863704d6969673543424a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:1::2 - 2001:cdba:1::2 remote-ip-range 2001:cdba:2::2 - 2001:cdba:2::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:1::2 - 2001:cdba:1::2 remote-ip-range 2001:cdba:2::2 - 2001:cdba:2::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:7f:44:de 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:6d:0f:8f 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e7444377069566e49464d61684e576d integ-alg sha1-96 integ-key 746b376f34597763425863704d6969673543424a  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e7444377069566e49464d61684e576d integ-alg sha1-96 integ-key 746b376f34597763425863704d6969673543424a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:2::2 - 2001:cdba:2::2 remote-ip-range 2001:cdba:1::2 - 2001:cdba:1::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:2::2 - 2001:cdba:2::2 remote-ip-range 2001:cdba:1::2 - 2001:cdba:1::2  
 exec show trace

sw device

eth2p-ethip4ipsectnlsw-ip4base-func

IPv4 SW cryptodev IPsec tunnel mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: With enabled SW crytodev on DUT1 create loopback interface, configure loopback and physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 344a304c4a7973683979597a6d4d4853 integ-alg sha1-96 integ-key 32654f5745567a5348733549366d4b4367773533 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 344a304c4a7973683979597a6d4d4853 integ-alg sha1-96 integ-key 32654f5745567a5348733549366d4b4367773533 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 6d31486e4c75336e47635357314462554451643857565635 integ-alg sha-256-128 integ-key 496e4872533166423934386954333471394e506162434a425a344d5247785337 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 6d31486e4c75336e47635357314462554451643857565635 integ-alg sha-256-128 integ-key 496e4872533166423934386954333471394e506162434a425a344d5247785337 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 58304b6a4b6342616f5a336174507249355a58494f37384944504c52717a4635 integ-alg sha-384-192 integ-key 575a544c4f3257663631764c7975756d523058467a32756f3068784c58373462757a616d7a4b396967356c634934504b tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 58304b6a4b6342616f5a336174507249355a58494f37384944504c52717a4635 integ-alg sha-384-192 integ-key 575a544c4f3257663631764c7975756d523058467a32756f3068784c58373462757a616d7a4b396967356c634934504b tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 304578727051544c3430375830633245736f725a564571416372704b50586d43 integ-alg sha-512-256 integ-key 66736c4e704a663643556461614b4e61427865644c7647545846504c514e3178475a655751743366797632466835765a57783053714665397249534c68796845 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 304578727051544c3430375830633245736f725a564571416372704b50586d43 integ-alg sha-512-256 integ-key 66736c4e704a663643556461614b4e61427865644c7647545846504c514e3178475a655751743366797632466835765a57783053714665397249534c68796845 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 654e774b32373772624848787a4c3145 integ-alg sha1-96 integ-key 4762345569724c707978756b70336377744a7754 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 654e774b32373772624848787a4c3145 integ-alg sha1-96 integ-key 4762345569724c707978756b70336377744a7754 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4c76323173456e62565231625264537a integ-alg sha1-96 integ-key 666644374d4d4538705749685745463058553464 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4c76323173456e62565231625264537a integ-alg sha1-96 integ-key 666644374d4d4538705749685745463058553464 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3852693731556842365636497476346c integ-alg sha1-96 integ-key 474634377376664572304c706237337731617047 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3852693731556842365636497476346c integ-alg sha1-96 integ-key 474634377376664572304c706237337731617047 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 625247754258417073586c634c766e7a integ-alg sha1-96 integ-key 6c4f5432433275437774517158506639586f6743 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 625247754258417073586c634c766e7a integ-alg sha1-96 integ-key 6c4f5432433275437774517158506639586f6743 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 6c7154464430514452717662765a3432 integ-key 456b70446739574b625533556b5359576c39797a 
 exec set ipsec sa 20 crypto-key 6c7154464430514452717662765a3432 integ-key 456b70446739574b625533556b5359576c39797a 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 72794756316742514447763954384568 integ-alg sha1-96 integ-key 62683336755079714a553130335659444434507a tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 72794756316742514447763954384568 integ-alg sha1-96 integ-key 62683336755079714a553130335659444434507a tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 506b74496a684e4e6e4266305269484a integ-key 64455441474e454d50526341665679744d627870 
 exec set ipsec sa 20 crypto-key 506b74496a684e4e6e4266305269484a integ-key 64455441474e454d50526341665679744d627870 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4d3654763936773749554c4d62395144 integ-alg sha1-96 integ-key 76666157555a774b6e6a7a32613065726a574369 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4d3654763936773749554c4d62395144 integ-alg sha1-96 integ-key 76666157555a774b6e6a7a32613065726a574369 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 413936557570336d356731316d6d3577 integ-key 59625250756a763142523751677530795a476c74 
 exec set ipsec sa 20 crypto-key 413936557570336d356731316d6d3577 integ-key 59625250756a763142523751677530795a476c74 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 704869343372307a6462334b7243314a integ-alg sha1-96 integ-key 325a4e4b7a6e48794152594956334766576b4550 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 704869343372307a6462334b7243314a integ-alg sha1-96 integ-key 325a4e4b7a6e48794152594956334766576b4550 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 5537743232347a4b3445383266704531 integ-key 77574377626f5270414d537142653475626b4942 
 exec set ipsec sa 20 crypto-key 5537743232347a4b3445383266704531 integ-key 77574377626f5270414d537142653475626b4942 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectptsw-ip4base-func

IPv4 IPsec transport mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: With enabled SW crytodev on DUT1 create loopback interface, configure loopback and physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 45344c32674c714e4d6a67395a59514e integ-alg sha1-96 integ-key 525a693965697762704a5a477237547773527235  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 45344c32674c714e4d6a67395a59514e integ-alg sha1-96 integ-key 525a693965697762704a5a477237547773527235  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 687051427a7052346e4378684b6753484658335954365673 integ-alg sha-256-128 integ-key 4a4b6d326a3963656d70736b6d694b6b776549696a486a703455356e44414344  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 687051427a7052346e4378684b6753484658335954365673 integ-alg sha-256-128 integ-key 4a4b6d326a3963656d70736b6d694b6b776549696a486a703455356e44414344  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 786365437a5a44624958314c544c3872344e333234564c3257455431524b6d78 integ-alg sha-384-192 integ-key 5a43575072737842565a453678776d697564524759535843325a513757635939526d4e553375455831475577456f6d57  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 786365437a5a44624958314c544c3872344e333234564c3257455431524b6d78 integ-alg sha-384-192 integ-key 5a43575072737842565a453678776d697564524759535843325a513757635939526d4e553375455831475577456f6d57  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 7964624331645745654a65614266736c506b485361305361627a587170625047 integ-alg sha-512-256 integ-key 6232476b556e52785a756a6f44304a57375177636b666d39524676556e437057475576614a41536a324b4d714263436e51314b486e413530367041324a48496a  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 7964624331645745654a65614266736c506b485361305361627a587170625047 integ-alg sha-512-256 integ-key 6232476b556e52785a756a6f44304a57375177636b666d39524676556e437057475576614a41536a324b4d714263436e51314b486e413530367041324a48496a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 554159325953396e46466e426a544858 integ-alg sha1-96 integ-key 6c43787276624152536256576749596b51416b48  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 554159325953396e46466e426a544858 integ-alg sha1-96 integ-key 6c43787276624152536256576749596b51416b48  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 52416136706d486c64654e58446f7a6f integ-alg sha1-96 integ-key 47444c41386a6b346c5350764d526f6d755a6873  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 52416136706d486c64654e58446f7a6f integ-alg sha1-96 integ-key 47444c41386a6b346c5350764d526f6d755a6873  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6a4e4b43645a696b78514277504d3438 integ-alg sha1-96 integ-key 3341434449516b37426e47436e324c4636647974  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6a4e4b43645a696b78514277504d3438 integ-alg sha1-96 integ-key 3341434449516b37426e47436e324c4636647974  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4d6c386a7a3278696f35743372413371 integ-alg sha1-96 integ-key 7851544e4c575659375a455276357159507a6e78  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4d6c386a7a3278696f35743372413371 integ-alg sha1-96 integ-key 7851544e4c575659375a455276357159507a6e78  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 5a696142514b3345446250366357306d integ-key 6c5a4679687965613575724157637141577a3336 
 exec set ipsec sa 20 crypto-key 5a696142514b3345446250366357306d integ-key 6c5a4679687965613575724157637141577a3336 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 77596943455668464e316d6e62714a6a integ-alg sha1-96 integ-key 546d464a3756766c30355250487a676469556655  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 77596943455668464e316d6e62714a6a integ-alg sha1-96 integ-key 546d464a3756766c30355250487a676469556655  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 3632356c6735417371447a7150507175 integ-key 504436737a704758714773513749386344535275 
 exec set ipsec sa 20 crypto-key 3632356c6735417371447a7150507175 integ-key 504436737a704758714773513749386344535275 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 553556437730495836766f374a35386c integ-alg sha1-96 integ-key 57577a5152344c56425849654b714c524d6a6b75  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 553556437730495836766f374a35386c integ-alg sha1-96 integ-key 57577a5152344c56425849654b714c524d6a6b75  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 3744714d6e4c755877753254685a6430 integ-key 314c66574a7146624b616372513468574e356a62 
 exec set ipsec sa 20 crypto-key 3744714d6e4c755877753254685a6430 integ-key 314c66574a7146624b616372513468574e356a62 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:ea:c5:59 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 64597061496a4c5a624c464e48307939 integ-alg sha1-96 integ-key 6643565a6d556e6f526b6c506e70415864494435  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 64597061496a4c5a624c464e48307939 integ-alg sha1-96 integ-key 6643565a6d556e6f526b6c506e70415864494435  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 345743306b4137416b6c4e5a4944524e integ-key 68466b615459634c41327a4e776b424f4e664556 
 exec set ipsec sa 20 crypto-key 345743306b4137416b6c4e5a4944524e integ-key 68466b615459634c41327a4e776b424f4e664556 
 exec show trace  
  
 DUT2:  
 exec show trace

ip4

eth2p-dot1q-ip4base-func

IPv4 with VLAN subinterfaces

  • [Top] Network Topologies: TG-DUT1-TG 2-node circular topology with double links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-ICMPv4 on TG-DUT1-IF1, Eth-dot1q-IPv4-ICMPv4 on TG-DUT1-IF2.
  • [Cfg] DUT configuration: DUT1 is configured with 2 Vlan subinterfaces on DUT1-IF2. The subinterfaces and DUT1-IF1 have IP addresses set and corresponding IP neighbor entries are configured.
  • [Ref] Applicable standard specifications: IEEE 802.1q.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: process untagged send tagged 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 5 vlan 20 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 192.168.100.1/24 
 sw_interface_add_del_address sw_if_index 6 192.168.200.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:66:b2:60 
 ip_neighbor_add_del sw_if_index 5 dst 192.168.100.2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 6 dst 192.168.200.2 mac fa:16:3e:ba:ec:6f 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: process tagged send untagged 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 5 vlan 20 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 192.168.100.1/24 
 sw_interface_add_del_address sw_if_index 6 192.168.200.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:66:b2:60 
 ip_neighbor_add_del sw_if_index 5 dst 192.168.100.2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 6 dst 192.168.200.2 mac fa:16:3e:ba:ec:6f 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: process tagged send tagged 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 5 vlan 20 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 192.168.100.1/24 
 sw_interface_add_del_address sw_if_index 6 192.168.200.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:66:b2:60 
 ip_neighbor_add_del sw_if_index 5 dst 192.168.100.2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 6 dst 192.168.200.2 mac fa:16:3e:ba:ec:6f 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-copblklistbase-func

COP Security IPv4 Blacklist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv4 routing and static routes. COP security black-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut drops ipv4 pkts with cop blacklist set with ipv4 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:41:e1:ec 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_table_add_del table 1  
 cop_whitelist_enable_disable sw_if_index 1 ip4 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-copwhlistbase-func

COP Security IPv4 Whitelist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv4 routing and static routes. COP security white-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut permits ipv4 pkts with cop whitelist set with ipv4 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:41:e1:ec 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_table_add_del table 1  
 ip_add_del_route 16.0.0.0/24  vrf 1  resolve-attempts 10 count 1    local 
 cop_whitelist_enable_disable sw_if_index 1 ip4 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-func

IPv4 routing test cases RFC791 IPv4, RFC826 ARP, RFC792 ICMPv4. Encapsulations: Eth-IPv4-ICMPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv4 routing tests use circular 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2 and received on TG links on the other side of circular topology. On receive TG verifies packets IPv4 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut replies to icmpv4 echo req to its ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc02: dut routes ipv4 to its egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc03: dut1 routes ipv4 to dut2 ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc04: dut1 routes ipv4 to dut2 egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc05: dut1 and dut2 route ipv4 between tg interfaces 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc06: dut replies to icmpv4 echo reqs with size 64b-to-1500b-incr-1b 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc08: dut replies to arp request 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace

eth2p-ethip4-ip4base-iaclbase-func

IPv4 routing with ingress ACL test cases Encapsulations: Eth-IPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv4 ingress ACL (iACL) tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. DUT1 is configured with iACL on link to TG, iACL classification and permit/deny action are configured on a per test case basis. Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped, or if received verifies packet IPv4 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with iacl ipv4 src-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:41:e1:ec 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match l3 ip4 src 16.0.0.1 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: dut with iacl ipv4 dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:41:e1:ec 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 33.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 2 match l3 ip4 dst 32.0.0.1 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc03: dut with iacl ipv4 src-addr and dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:41:e1:ec 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 33.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match l3 ip4 src 16.0.0.1 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 1 match_n 2 match l3 ip4 dst 32.0.0.1 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 input_acl_set_interface sw_if_index 1 ip4-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc04: dut with iacl ipv4 protocol set to tcp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:41:e1:ec 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000000000006 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc05: dut with iacl ipv4 protocol set to udp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:41:e1:ec 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000000000011 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc06: dut with iacl ipv4 tcp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:41:e1:ec 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc07: dut with iacl ipv4 tcp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:41:e1:ec 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc08: dut with iacl ipv4 tcp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:41:e1:ec 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc09: dut with iacl ipv4 udp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:41:e1:ec 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc10: dut with iacl ipv4 udp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:41:e1:ec 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc11: dut with iacl ipv4 udp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:41:e1:ec 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-ip4arp-func

IPv4 ARP test cases RFC826 ARP: Eth-IPv4 and Eth-ARP on links TG-DUT1, TG-DUT2, DUT1-DUT2: IPv4 ARP tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. DUT ARP functionality is tested by making TG send ICMPv4 Echo Requests towards its other interface via DUT1 and DUT2.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut sends arp request for unresolved locally connected ipv4 address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: dut sends arp request for route next hop ipv4 address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3  count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-ip4dhcpclient-func

DHCPv4 Client related test cases

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp sends a dhcp discover 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 dhcp_client_config sw_if_index 2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp sends a dhcpv4 discover with hostname 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 dhcp_client_config sw_if_index 2 hostname dhcp-client 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: vpp sends dhcpv4 request after offer 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 dhcp_client_config sw_if_index 2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: vpp doesn’t send dhcpv4 request after offer with wrong xid 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 dhcp_client_config sw_if_index 2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp honors dhcpv4 lease time 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 dhcp_client_config sw_if_index 2  
 ip_neighbor_add_del sw_if_index 2 dst 192.168.23.1 mac fa:16:3e:66:b2:60 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-ip4dhcpproxy-func

DHCPv4 proxy test cases

  • [Top] Network Topologies: TG = DUT with two links between the nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-UDP-BOOTP-DHCP
  • [Cfg] DUT configuration: DUT is configured with DHCPv4 proxy.
  • [Ver] TG verification: Test DHCPv4 packets are sent on TG on first link to DUT and received on TG on second link. On receive TG verifies if DHCPv4 packets are valid.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp proxies valid dhcpv4 request to dhcpv4 server 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 sw_interface_add_del_address sw_if_index 2 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.0.100 mac fa:16:3e:ba:ec:6f 
 dhcp_proxy_config svr 192.168.0.100 src 172.16.0.1 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp proxy ignores invalid dhcpv4 request 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 sw_interface_add_del_address sw_if_index 2 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.0.100 mac fa:16:3e:ba:ec:6f 
 dhcp_proxy_config svr 192.168.0.100 src 172.16.0.1 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-ip4ecmp-func

Ipv4 Multipath routing test cases

  • [Top] Network topologies: TG=DUT 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT configure interfaces IPv4 adresses, and multipath routing.
  • [Ver] TG verification: Test packets are sent from TG on the first link to DUT. Packet is received on TG on the second link from DUT1.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: ipv4 equal-cost multipath routing 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.2.10 mac 02:00:00:00:00:02 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.2.20 mac 02:00:00:00:00:03 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.10  sw_if_index 2  count 1  multipath   
 ip_add_del_route 32.0.0.1/24 via 192.168.2.20  sw_if_index 2  count 1  multipath   
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-ip4proxyarp-func

RFC1027 Proxy ARP test cases

  • [Top] Network topologies: TG-DUT1 2-node topology with single link between nodes.
  • [Cfg] DUT configuration: DUT1 is configured with Proxy ARP
  • [Ver] TG verification: Test ARP Request packet is sent from TG on link to DUT1; on receive TG verifies ARP reply packet for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC1027.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut sends arp reply on behalf of another machine from the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut sends arp reply on behalf of another machine from beginning of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut sends arp reply on behalf of another machine from end of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut does not send arp reply on behalf of another machine from below of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc05: dut does not send arp reply on behalf of another machine from above of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip4-ip4base-ipolicemarkbase-func

IPv4 policer test cases

  • [Top] Network topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT1 configure interfaces IPv4 adresses, and static ARP record on the second interface.
  • [Ver] TG verification: Test packet is sent from TG on the first link to DUT1. Packet is received on TG on the second link from DUT1.
  • [Ref] Applicable standard specifications: RFC2474, RFC2697, RFC2698.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp policer 2r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:ba:ec:6f 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp policer 2r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:ba:ec:6f 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: vpp policer 1r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:ba:ec:6f 
 policer_add_del name policer1  cir 1 eir 0 cb 2 eb 300 rate_type pps round_type closest type 1r3c conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: vpp policer 1r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:ba:ec:6f 
 policer_add_del name policer1  cir 100 eir 0 cb 200 eb 300 rate_type pps round_type closest type 1r3c conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-rpf-func

Source RPF check on IPv4 test cases

  • [Top] Network Topologies: TG - DUT1 - DUT2 - TG with one link between the nodes.
  • [Cfg] DUT configuration: DUT2 is configured with L2 Cross connect. DUT1 is configured with IP source check on link to TG,
  • [Ver] TG verification: Test ICMP Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets which source address is not in routes are dropped.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp source rpf check on ipv4 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:41:e1:ec 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3  count 1     
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ba:ec:6f 
 ip_add_del_route 16.0.0.1/24 via 192.168.1.2  sw_if_index 1  count 1     
 exec set interface ip source-check GigabitEthernet0/4/0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: vpp pass traffic on non-enabled rpf interface 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:41:e1:ec 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3  count 1     
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ba:ec:6f 
 ip_add_del_route 16.0.0.1/24 via 192.168.1.2  sw_if_index 1  count 1     
 exec set interface ip source-check GigabitEthernet0/4/0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4basevrf-func

Vpn routed forwarding - baseline IPv4

  • [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node topology with two links in between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4.
  • [Cfg] DUT configuration: Each DUT is configured with two VRF tables; Separation of traffic is tested by IP packets; Basic ARP and ROUTES are set on DUT nodes; IP addresses are set on DUT interfaces.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent by TG on link to DUT1, DUT2 or back to TG; On receipt TG verifies packets for correctness and their IPv4 src-addr, dst-addr, and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: tg packets routed to dut ingress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:66:b2:60 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:c3:e5:3a 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:b5:b7:b4 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:7c:8d:20 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:0d:f9:f5 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:41:ad:aa 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc02: tg packets routed to dut egress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:66:b2:60 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:c3:e5:3a 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:b5:b7:b4 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:7c:8d:20 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:0d:f9:f5 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:41:ad:aa 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc03: tg packets routed to dut2 ingress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:66:b2:60 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:c3:e5:3a 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:b5:b7:b4 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:7c:8d:20 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:0d:f9:f5 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:41:ad:aa 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc04: tg packets routed to dut2 egress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:66:b2:60 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:c3:e5:3a 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:b5:b7:b4 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:7c:8d:20 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:0d:f9:f5 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:41:ad:aa 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc05: tg packets routed to tg through dut1 and dut2, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:66:b2:60 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:c3:e5:3a 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:b5:b7:b4 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:7c:8d:20 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:0d:f9:f5 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:41:ad:aa 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace

ip4 tunnels

gre

eth2p-ethip4gre-ip4base-func

GREoIPv4 test cases

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes; TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-GRE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for routing over GRE tunnel; Eth-IPv4-ICMPv4 on TG_if1-DUT, Eth-IPv4-GRE-IPv4-ICMPv4 on TG_if2_DUT for GREoIPv4 encapsulation and decapsulation verification.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. GREoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; GREoIPv4 encapsulation and decapsulation are verified separately by TG; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC2784.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route over greoipv4 tunnel between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.0.1/24 
 gre_add_del_tunnel src 192.168.1.1 dst 192.168.1.2 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 5 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 192.168.1.2/24 
 sw_interface_add_del_address sw_if_index 1 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.2.100 mac fa:16:3e:41:e1:ec 
 gre_add_del_tunnel src 192.168.1.2 dst 192.168.1.1 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.2/24 
 exec show trace
tc02: dut encapsulates ipv4 into greoipv4 tunnel - gre header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ba:ec:6f 
 gre_add_del_tunnel src 192.168.1.1 dst 192.168.1.2 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 5 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: dut decapsulates ipv4 from greoipv4 tunnel - ipv4 header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.100 mac fa:16:3e:66:b2:60 
 gre_add_del_tunnel src 192.168.1.1 dst 192.168.1.2 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: dut encapsulates ipv4 into greoipv4 different tunnels - gre header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.0.1/32 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ba:ec:6f 
 ip_add_del_route 10.0.0.2/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.3/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.2 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.3 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_add_del_address sw_if_index 6 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 7 172.16.1.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 6 resolve-attempts 10 count 1     
 ip_add_del_route 192.168.3.0/24 via 172.16.1.2  sw_if_index 7 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: dut re-encapsulates ipv4 gre into other gre tunnel - gre header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.0.1/32 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ba:ec:6f 
 ip_add_del_route 10.0.0.2/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.3/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.2 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.3 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_add_del_address sw_if_index 6 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 7 172.16.1.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 6 resolve-attempts 10 count 1     
 ip_add_del_route 192.168.3.0/24 via 172.16.1.2  sw_if_index 7 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 exec show trace
tc06: dut do not process gre with wrong tunnel destination ip 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.0.1/32 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.100 mac fa:16:3e:66:b2:60 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:ba:ec:6f 
 ip_add_del_route 10.0.0.2/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.3/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.2 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.3 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_add_del_address sw_if_index 6 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 7 172.16.1.1/24 
 exec show trace  
  
 DUT2:  
 exec show trace

lisp

api-crud-lisp-func

API test cases

  • [Top] Network Topologies: DUT1 1-node topology.
  • [Enc] Packet Encapsulations: None.
  • [Cfg] DUT configuration: DUT1 gets configured with all LISP parameters.
  • [Ver] Verification: DUT1 operational data gets verified following configuration.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut can enable and disable lisp 
 DUT1:  
 lisp_enable_disable enable 
 lisp_enable_disable disable 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut can add and delete locator_set 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_locator_set_dump local 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_locator_set_dump  
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: dut can add, reset and delete locator_set 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_locator_set_dump local 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_locator_set_dump  
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: dut can add and delete eid address 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.0.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.1.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.2.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.3.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 10:1::/64 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 10:2::/64 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 10:3::/64 locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.0.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 192.168.1.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 192.168.2.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 192.168.3.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 10:1::/64 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 10:2::/64 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 10:3::/64 locator-set ls1 del 
 lisp_add_del_locator_set locator-set ls1 del 
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: dut can add and delete lisp map resolver address 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_map_resolver 192.169.0.1 
 lisp_add_del_map_resolver 192.169.1.1 
 lisp_add_del_map_resolver 192.169.2.1 
 lisp_add_del_map_resolver 12:1::1 
 lisp_add_del_map_resolver 12:2::1 
 lisp_add_del_map_resolver 192.169.0.1 del 
 lisp_add_del_map_resolver 192.169.1.1 del 
 lisp_add_del_map_resolver 192.169.2.1 del 
 lisp_add_del_map_resolver 12:1::1 del 
 lisp_add_del_map_resolver 12:2::1 del 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4lisp-ip4base-func

IP AFI independent functional tests.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 over lispoipv4 tunnel after disable-enable 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:ba:ec:6f 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 lisp_enable_disable disable 
 lisp_enable_disable enable 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:41:e1:ec 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec show trace

eth2p-ethip4lisp-l2bdbasemaclrn-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4-LISPGpe-IP4
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: route ipv4 packet through lisp with bridge domain setup. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 10.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 10.0.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.1.2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 10.0.3.2 mac fa:16:3e:b5:b7:b4 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:11 locator-set tst_locator 
 lisp_add_del_map_resolver 10.0.0.2 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:22 seid 08:22:22:22:22:11 rloc 10.0.3.2 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:22 leid 08:22:22:22:22:11 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 10.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 10.0.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.2.2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 10.0.3.1 mac fa:16:3e:41:ad:aa 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:22 locator-set tst_locator 
 lisp_add_del_map_resolver 10.0.0.1 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:11 seid 08:22:22:22:22:22 rloc 10.0.3.1 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:11 leid 08:22:22:22:22:22 
 exec show trace

eth2p-ethip4lispgpe-ip4base-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using physical interfaces 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:b5:b7:b4 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 0 reid 6.0.5.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:41:ad:aa 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip4basevrf-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:b5:b7:b4 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 1 reid 6.0.5.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:41:ad:aa 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 1 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip6base-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lispoipv4 tunnel 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6:0:1::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:1::2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.2 mac fa:16:3e:b5:b7:b4 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6:0:1::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 lisp_add_del_remote_mapping del vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency del vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.20 mac fa:16:3e:b5:b7:b4 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.20 
 lisp_add_del_adjacency add vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6:0:2::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:2::2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:41:ad:aa 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6:0:2::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:1::0/64 seid 6:0:2::0/64 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 0 reid 6:0:1::0/64 leid 6:0:2::0/64 
 sw_interface_add_del_address sw_if_index 3 del-all 
 sw_interface_add_del_address sw_if_index 3 6.0.3.20/24 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:41:ad:aa 
 exec show trace

eth2p-ethip4lispgpe-ip6basevrf-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:1::2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.2 mac fa:16:3e:b5:b7:b4 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6:0:1::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6:0:1::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 1 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 1 reid 6:0:2::0/64 leid 6:0:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:2::2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:41:ad:aa 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6:0:2::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6:0:2::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 1 eid 6:0:1::0/64 seid 6:0:2::0/64 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 1 reid 6:0:1::0/64 leid 6:0:2::0/64 
 exec show trace

vxlan

eth2p-dot1qip4vxlan-l2bdbasemaclrn-func

RFC7348 VXLAN: Bridge-domain with VXLAN over VLAN test cases

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-dot1q-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with static MACs, MAC learning enabled and Split Horizon Groups (SHG) depending on test case; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv4ovlan tunnels switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vlan_subif sw_if_index 3 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 ip_neighbor_add_del sw_if_index 5 dst 172.16.0.2 mac fa:16:3e:85:07:29 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=23,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=23) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=23) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vlan_subif sw_if_index 3 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 5 172.16.0.2/24 
 ip_neighbor_add_del sw_if_index 5 dst 172.16.0.1 mac fa:16:3e:6d:0f:8f 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=23,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=23) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=23) 
 exec show trace

eth2p-ethip4vxlan-l2bdbasemaclrn-func

Bridge-domain with VXLAN test cases - IPv4

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.2 mac fa:16:3e:85:07:29 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.1 mac fa:16:3e:6d:0f:8f 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace

eth2p-ethip4vxlan-l2xcbase-func

RFC7348 VXLAN: L2 cross-connect with VXLAN test cases

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching; VXLAN tunnels are configured between L2XCs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vxlanoipv4 tunnels switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.2 mac fa:16:3e:85:07:29 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 24 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.1 mac fa:16:3e:6d:0f:8f 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 24 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth4p-ethip4vxlan-l2bdbasemaclrn-l2shg-func

L2BD with SHG combined with VXLAN test cases - IPv4

  • [Top] Network topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG); VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels in shg switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=1,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels in different shgs switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=2,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace

ip6

eth2p-ethip6-ip6base-copblklistbase-func

COP Security IPv6 Blacklist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv6 routing and static routes. COP security black-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut drops ipv6 pkts with cop blacklist set with ipv6 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:62::2 mac fa:16:3e:2f:04:ca 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:36:1d:fc 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_table_add_del table 1 ipv6 
 cop_whitelist_enable_disable sw_if_index 1 ip6 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_add_del_address sw_if_index 3 3ffe:72::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:73::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-copwhlistbase-func

COP Security IPv6 Whitelist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv6 routing and static routes. COP security white-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut permits ipv6 pkts with cop whitelist set with ipv6 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:62::2 mac fa:16:3e:2f:04:ca 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:36:1d:fc 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_table_add_del table 1 ipv6 
 ip_add_del_route 3ffe:61::/64  vrf 1  resolve-attempts 10 count 1    local 
 cop_whitelist_enable_disable sw_if_index 1 ip6 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_add_del_address sw_if_index 3 3ffe:72::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:73::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-func

IPv6 routing test cases RFC2460 IPv6, RFC4443 ICMPv6, RFC4861 Neighbor Discovery. Encapsulations: Eth-IPv6-ICMPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2; Eth-IPv6-NS/NA on links TG-DUT. IPv6 routing tests use circular 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2 and received on TG links on the other side of circular topology. On receive TG verifies packets IPv6 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut replies to icmpv6 echo req to its ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc02: dut replies to icmpv6 echo req pkt with size 64b-to-1500b-incr-1b 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc04: dut routes to its egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc05: dut1 routes to dut2 ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc06: dut1 routes to dut2 egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc07: dut1 and dut2 route between tg interfaces 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc08: dut replies to ipv6 neighbor solicitation 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace

eth2p-ethip6-ip6base-iaclbase-func

IPv6 routing with ingress ACL test cases Encapsulations: Eth-IPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv6 ingress ACL (iACL) tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. DUT1 is configured with iACL on link to TG, iACL classification and permit/deny action are configured on a per test case basis. Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped, or if received verifies packet IPv6 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with iacl ipv6 src-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:36:1d:fc 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:61::1 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc02: dut with iacl ipv6 dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:36:1d:fc 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 3ffe:54::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 2 match l3 ip6 dst 3ffe:64::1 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc03: dut with iacl ipv6 src-addr and dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:36:1d:fc 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 3ffe:54::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:61::1 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 2 match_n 2 match l3 ip6 dst 3ffe:64::1 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 input_acl_set_interface sw_if_index 1 ip6-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc04: dut with iacl ipv6 protocol set to tcp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:36:1d:fc 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000006 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: dut with iacl ipv6 protocol set to udp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:36:1d:fc 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000011 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc06: dut with iacl ipv6 tcp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:36:1d:fc 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc07: dut with iacl ipv6 tcp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:36:1d:fc 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc08: dut with iacl ipv6 tcp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:36:1d:fc 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc09: dut with iacl ipv6 udp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:36:1d:fc 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc10: dut with iacl ipv6 udp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:36:1d:fc 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc11: dut with iacl ipv6 udp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:36:1d:fc 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc12: dut with iacl mac src-addr and iacl ipv6 udp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l2 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 src fa:16:3e:2f:04:ca 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 l2-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-ip6dhcpproxy-func

DHCPv6 proxy test cases

  • [Top] Network Topologies: TG = DUT with two links between the nodes.
  • [Cfg] DUT configuration: DUT is configured with DHCPv6 proxy.
  • [Ver] TG verification: Test DHCPv6 packets are sent on TG on first link to DUT and received on TG on second link. On receive TG verifies if DHCPv6 packets are valid
  • [Ref] Applicable standard specifications: RFC 3315
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp proxies valid dhcpv6 request to dhcpv6 server 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_add_del_route ff02::1:2/128   local  count 1     
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:63::2 mac fa:16:3e:2f:04:ca 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 dhcp_proxy_config svr 3ffe:63::2 src 3ffe:62::1 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-ip6ecmp-func

Ipv6 Multipath routing test cases

  • [Top] Network topologies: TG=DUT 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT configure interfaces IPv4 adresses, and multipath routing.
  • [Ver] TG verification: Test packets are sent from TG on the first link to DUT. Packet is received on TG on the second link from DUT1.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: ipv6 equal-cost multipath routing 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:61::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 2 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 ip_neighbor_add_del sw_if_index 2 dst 3ffe:62::2 mac 02:00:00:00:00:02 
 ip_neighbor_add_del sw_if_index 2 dst 3ffe:62::3 mac 02:00:00:00:00:03 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:71::1/64 via 3ffe:62::2  sw_if_index 2  count 1  multipath   
 ip_add_del_route 3ffe:71::1/64 via 3ffe:62::3  sw_if_index 2  count 1  multipath   
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-ip6ra-func

IPv6 Router Advertisement test cases RFC4861 Neighbor Discovery. Encapsulations: Eth-IPv6-RA on links TG-DUT1. IPv6 Router Advertisement tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. TG verifies received RA packets.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut transmits ra on ipv6 enabled interface 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 interval 2 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut retransmits ra on ipv6 enabled interface after a set interval 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 interval 2 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut responds to router solicitation request 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut responds to router solicitation request sent from link local address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip6-ip6base-ipolicemarkbase-func

IPv6 policer test cases

  • [Top] Network topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT1 configure interfaces IPv6 adresses, and static neighbor record on the second interface.
  • [Ver] TG verification: Test packet is sent from TG on the first link to DUT1. Packet is received on TG on the second link from DUT1.
  • [Ref] Applicable standard specifications: RFC2474, RFC2697, RFC2698.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp policer 2r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:2f:04:ca 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc02: vpp policer 2r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:2f:04:ca 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc03: vpp policer 1r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:2f:04:ca 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 1 eir 0 cb 2 eb 300 rate_type pps round_type closest type 1r3c conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc04: vpp policer 1r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:2f:04:ca 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 100 eir 0 cb 200 eb 0 rate_type pps round_type closest type 1r3c conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6basevrf-func

Vpn routed forwarding - baseline IPv6

  • [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node topology with two links in between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6
  • [Cfg] DUT configuration: Each DUT is configured with two VRF tables; Separation of traffic is tested by IP packets; Neighbors and Routes are set on DUT nodes; IP addresses are set on DUT interfaces.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent by TG on link to DUT1, DUT2 or back to TG; On receipt TG verifies packets for correctness and their IPv6 src-addr, dst-addr, and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: tg packets routed to dut ingress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:1f:3c:13 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:17:e1:12 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:2f:04:ca 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:55:c5:fd 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:da:e9:8f 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:6c:08:d4 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:36:1d:fc 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:a1:39:f1 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc02: tg packets routed to dut egress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:1f:3c:13 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:17:e1:12 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:2f:04:ca 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:55:c5:fd 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:da:e9:8f 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:6c:08:d4 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:36:1d:fc 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:a1:39:f1 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc03: tg packets routed to dut2 ingress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:1f:3c:13 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:17:e1:12 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:2f:04:ca 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:55:c5:fd 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:da:e9:8f 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:6c:08:d4 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:36:1d:fc 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:a1:39:f1 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc04: tg packets routed to dut2 egress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:1f:3c:13 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:17:e1:12 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:2f:04:ca 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:55:c5:fd 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:da:e9:8f 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:6c:08:d4 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:36:1d:fc 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:a1:39:f1 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: tg packets routed to tg through dut1 and dut2, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:1f:3c:13 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:17:e1:12 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:2f:04:ca 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:55:c5:fd 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:da:e9:8f 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:6c:08:d4 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:36:1d:fc 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:a1:39:f1 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

ip6 tunnels

lisp

eth2p-ethip6lisp-l2bdbasemaclrn-func

l2-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IP6-ICMPv6-LISPGpe-IP6
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge domains and neighbors. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: route ipv6 packet through lisp with bridge domain setup. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b5:b7:b4 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:11 locator-set tst_locator 
 lisp_add_del_map_resolver 2001:cdba:2::2 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:22 seid 08:22:22:22:22:11 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:22 leid 08:22:22:22:22:11 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:41:ad:aa 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:22 locator-set tst_locator 
 lisp_add_del_map_resolver 2001:cdba:1::2 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:11 seid 08:22:22:22:22:22 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:11 leid 08:22:22:22:22:22 
 exec show trace

eth2p-ethip6lispgpe-ip4base-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lispoipv6 tunnel 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6:0:3::1/64 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:ba:ec:6f 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6:0:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 lisp_add_del_remote_mapping del vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6:0:3::2 
 lisp_add_del_adjacency del vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 ip_neighbor_add_del sw_if_index 3 dst 6:0:3::20 mac fa:16:3e:b5:b7:b4 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6:0:3::20 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6:0:3::2/64 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:41:e1:ec 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 6:0:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 sw_interface_add_del_address sw_if_index 3 del-all 
 sw_interface_add_del_address sw_if_index 3 6:0:3::20/64 
 ip_neighbor_add_del sw_if_index 3 dst 6:0:3::1 mac fa:16:3e:41:ad:aa 
 exec show trace

eth2p-ethip6lispgpe-ip6base-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b5:b7:b4 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:41:ad:aa 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

eth2p-ethip6lispgpe-ip6basevrf-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b5:b7:b4 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:41:ad:aa 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

vxlan

eth2p-ethip6vxlan-l2bdbasemaclrn-func

Bridge-domain with VXLAN test cases - IPv6

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv6 tunnels switch icmpv6 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace

eth4p-ethip6vxlan-l2bdbasemaclrn-l2shg-func

L2BD with SHG combined with VXLAN test cases - IPv6

  • [Top] Network topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
  • [Enc] Packet encapsulations: th-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG); VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv6 tunnels in shg switch icmpv6 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=1,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace
tc02: dut1 and dut2 with l2bd and vxlanoipv6 tunnels in different shgs switch icmpv6 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=2,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace

l2bd

eth2p-dot1ad–dot1q-l2bdbasemaclrn-vlantrans21-func

L2BD with VLAN tag rewrite test cases - transalte-2-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-2-1 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-2-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc03: dut1 and dut2 with l2bd and vlan translate-2-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-dot1ad-l2bdbasemaclrn-vlantrans22-func

L2BD with VLAN tag rewrite test cases - translate-2-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-2-2 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-2-2 switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc05: dut1 and dut2 with l2bd and vlan translate-2-2 switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-dot1q–dot1ad-l2bdbasemaclrn-vlantrans12-func

L2BD with VLAN tag rewrite test cases - translate-1-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-1-2 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-1-2 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=210,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc05: dut1 and dut2 with l2bd and vlan translate-1-2 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-dot1q-l2bdbasemaclrn-vlantrans11-func

L2BD with VLAN tag rewrite test cases - translate-1-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-1-1 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-1-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc03: dut1 and dut2 with l2bd and vlan translate-1-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-eth-l2bdbasemaclrn-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes; TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports active interfaces 
 DUT1:  
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with l2bd (mac learning) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: dut1 and dut2 with l2bd (mac learning) switch between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace

eth2p-eth-l2bdbasemacstc-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with static MACs.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd (static macs) switch between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>/xca,sw_if_index=1,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>6xfc,sw_if_index=3,bvi_mac=0) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=2) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>/xca,sw_if_index=3,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>6xfc,sw_if_index=1,bvi_mac=0) 
 exec show trace

eth4p-eth-l2bdbasemaclrn-l2shg-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG).
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd (mac learn) and shg switch between four tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=3,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=3,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=4,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=4,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace

l2xc

eth2p-dot1ad–dot1q-l2xcbase-vlantrans21-func

L2XC with VLAN tag rewrite test cases - translate-2-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 or Eth-dot1aq-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-2-1 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-2-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc03: dut1 and dut2 with l2xc and vlan translate-2-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1ad-l2xcbase-func

L2 cross-connect with QinQ test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching with 802.1ad QinQ VLAN tag push and pop.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and two vlan push-pop switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 100 inner_vlan_id 200 two_tags 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 100 inner_vlan_id 200 two_tags 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1ad-l2xcbase-vlantrans22-func

L2XC with VLAN tag rewrite test cases - translate-2-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-2-2 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-2-2 switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc05: dut1 and dut2 with l2xc and vlan translate-2-2 switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1q–dot1ad-l2xcbase-vlantrans12-func

L2XC with VLAN tag rewrite test cases - translate-1-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-1-2 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-1-2 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=210,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc05: dut1 and dut2 with l2xc and vlan translate-1-2 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1q-l2xcbase-vlantrans11-func

L2XC with VLAN tag rewrite test cases - translate-1-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv4-ICMPv4 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-1-1 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-1-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc03: dut1 and dut2 with l2xc and vlan translate-1-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-eth-l2xcbase-func

L2 cross-connect test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_dump 
 exec show trace
tc02: dut1 and dut2 with l2xc switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_dump 
 exec show trace

eth2p-eth-l2xcbase-iaclbase-func

Ingress ACL test cases

  • [Top] Network Topologies: TG - DUT1 - DUT2 - TG with one link between the nodes.
  • [Cfg] DUT configuration: DUT2 is configured with L2 Cross connect. DUT1 is configured with iACL classification on link to TG,
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with iacl mac src-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask l2 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 src fa:16:3e:2f:04:ca 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: dut with iacl mac dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask l2 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 dst fa:16:3e:36:1d:fc 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc03: dut with iacl mac src-addr and dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask l2 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 src fa:16:3e:2f:04:ca 
 classify_add_del_table mask l2 dst 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 0 match_n 1 match l2 dst fa:16:3e:2f:04:ca 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 input_acl_set_interface sw_if_index 1 l2-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc04: dut with iacl ethertype drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask hex 000000000000000000000000ffff 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match hex 0000000000000000000000000800 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

telemetry

eth2p-ethip4-ip4base-ip4ipfixbase-func

IPFIX ipv4 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector. Test packets are sent from TG to DUT1. TG listens for flow report packets and verifies that they contains flow record of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut sends ipfix template and data packets 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:2f:04:ca 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.1.2 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow for traffic by source address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:2f:04:ca 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.1.2 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut reports packet flow for traffic with local destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:2f:04:ca 
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 dst 192.168.1.1 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut reports packet flow for traffic with remote destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:2f:04:ca 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.1 mac fa:16:3e:55:c5:fd 
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 dst 192.168.2.1 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc05: dut reports packet flow for traffic by source and destination port 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:2f:04:ca 
 classify_add_del_table mask l3 ip4 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 80 dst_port 80 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip4-ip4base-ip4ipfixscale-func

IPFIX ipv4 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector. Test packets are sent from TG to DUT1. TG listens for flow report packets and verifies that they contains flow record of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports packet flow with a large number of packets 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:2f:04:ca 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.1.2 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow when multiple sessions are configured 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:2f:04:ca 
 classify_add_del_table mask l3 ip4 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 0 dst_port 0 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 1 dst_port 1 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 2 dst_port 2 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 3 dst_port 3 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 4 dst_port 4 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 5 dst_port 5 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 6 dst_port 6 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 7 dst_port 7 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 8 dst_port 8 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 9 dst_port 9 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 10 dst_port 10 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 11 dst_port 11 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 12 dst_port 12 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 13 dst_port 13 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 14 dst_port 14 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 15 dst_port 15 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 16 dst_port 16 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 17 dst_port 17 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 18 dst_port 18 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 19 dst_port 19 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 20 dst_port 20 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 21 dst_port 21 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 22 dst_port 22 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 23 dst_port 23 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 24 dst_port 24 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 25 dst_port 25 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 26 dst_port 26 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 27 dst_port 27 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 28 dst_port 28 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 29 dst_port 29 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 30 dst_port 30 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 31 dst_port 31 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 32 dst_port 32 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 33 dst_port 33 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 34 dst_port 34 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 35 dst_port 35 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 36 dst_port 36 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 37 dst_port 37 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 38 dst_port 38 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 39 dst_port 39 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 40 dst_port 40 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 41 dst_port 41 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 42 dst_port 42 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 43 dst_port 43 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 44 dst_port 44 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 45 dst_port 45 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 46 dst_port 46 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 47 dst_port 47 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 48 dst_port 48 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 49 dst_port 49 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 50 dst_port 50 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 51 dst_port 51 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 52 dst_port 52 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 53 dst_port 53 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 54 dst_port 54 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 55 dst_port 55 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 56 dst_port 56 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 57 dst_port 57 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 58 dst_port 58 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 59 dst_port 59 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 60 dst_port 60 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 61 dst_port 61 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 62 dst_port 62 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 63 dst_port 63 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 64 dst_port 64 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 65 dst_port 65 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 66 dst_port 66 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 67 dst_port 67 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 68 dst_port 68 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 69 dst_port 69 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 70 dst_port 70 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 71 dst_port 71 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 72 dst_port 72 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 73 dst_port 73 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 74 dst_port 74 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 75 dst_port 75 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 76 dst_port 76 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 77 dst_port 77 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 78 dst_port 78 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 79 dst_port 79 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1  path_mtu 1450 template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip4-ip4base-spanrx-func

SPAN test suite

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: DUT1 is configured with SPAN mirroring from the first DUT1-TG interface to the second one.
  • [Ver] TG verification: Test ARP or ICMP packets are sent by TG on first link to DUT1; On receipt through second link TG verifies the copy of packet sent and the copy of DUT’s reply packet.
  • [Ref] Applicable standard specifications: None?
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut mirrors l2 packets from one interface to another 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.1.2/24 
 sw_interface_span_enable_disable src_sw_if_index 2 dst_sw_if_index 1 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut mirrors ipv4 packets from one interface to another 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.1.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.1.1 mac fa:16:3e:1f:3c:13 
 sw_interface_span_enable_disable src_sw_if_index 2 dst_sw_if_index 1 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip6-ip6base-ip6ipfixbase-func

IPFIX ipv6 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 and IPV6 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector.Test packets are sent from TG to or through DUT1. TG listens for flow report packets and verifies that they contains flow records of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports packet flow for traffic by source address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:2f:04:ca 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:2f:04:ca 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip6 src 12::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow for traffic with local destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:2f:04:ca 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:2f:04:ca 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 2 match_n 2 match l3 ip6 dst 10::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut reports packet flow for traffic with remote destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:2f:04:ca 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:2f:04:ca 
 ip_neighbor_add_del sw_if_index 3 dst 11::10 mac fa:16:3e:55:c5:fd 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 2 match_n 2 match l3 ip6 dst 11::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut reports packet flow for traffic by source and destination port 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:2f:04:ca 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:2f:04:ca 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 80 dst_port 80 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip6-ip6base-ip6ipfixscale-func

IPFIX ipv6 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 and IPV6 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector.Test packets are sent from TG to or through DUT1. TG listens for flow report packets and verifies that they contains flow records of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports packet flow with a large number of packets 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:2f:04:ca 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:2f:04:ca 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip6 src 12::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow when multiple sessions are configured 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:2f:04:ca 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:2f:04:ca 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 0 dst_port 0 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 1 dst_port 1 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 2 dst_port 2 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 3 dst_port 3 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 4 dst_port 4 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 5 dst_port 5 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 6 dst_port 6 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 7 dst_port 7 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 8 dst_port 8 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 9 dst_port 9 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 10 dst_port 10 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 11 dst_port 11 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 12 dst_port 12 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 13 dst_port 13 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 14 dst_port 14 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 15 dst_port 15 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 16 dst_port 16 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 17 dst_port 17 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 18 dst_port 18 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 19 dst_port 19 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 20 dst_port 20 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 21 dst_port 21 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 22 dst_port 22 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 23 dst_port 23 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 24 dst_port 24 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 25 dst_port 25 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 26 dst_port 26 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 27 dst_port 27 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 28 dst_port 28 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 29 dst_port 29 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 30 dst_port 30 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 31 dst_port 31 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 32 dst_port 32 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 33 dst_port 33 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 34 dst_port 34 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 35 dst_port 35 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 36 dst_port 36 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 37 dst_port 37 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 38 dst_port 38 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 39 dst_port 39 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 40 dst_port 40 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 41 dst_port 41 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 42 dst_port 42 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 43 dst_port 43 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 44 dst_port 44 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1  path_mtu 1450 template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip6-ip6base-spanrx-func

SPAN test suite

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: DUT1 is configured with SPAN mirroring from the first DUT1-TG interface to the second one.
  • [Ver] TG verification: Test ARP or ICMP packets are sent by TG on first link to DUT1; On receipt through second link TG verifies the copy of packet sent and the copy of DUT’s reply packet.
  • [Ref] Applicable standard specifications: None?
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut mirrors ipv6 packets from one interface to another 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_add_del_address sw_if_index 2 10::1/24 
 sw_interface_set_flags sw_if_index 2 admin-up 
 ip_neighbor_add_del sw_if_index 2 dst 11::1 mac fa:16:3e:1f:3c:13 
 ip_add_del_route 11::1/24 via 10::1  sw_if_index 2 resolve-attempts 10 count 1     
 sw_interface_span_enable_disable src_sw_if_index 2 dst_sw_if_index 1 
 exec show trace  
  
 DUT2:  
 exec show trace

vm vhost

ip4

eth2p-ethip4-ip4base-eth-2vhost-1vm

eth2p-ethip4-ip4base-eth-2vhost-1vm

IPv4 routing test cases with vhost user interface RFC791 IPv4, RFC826 ARP, RFC792 ICMPv4. Encapsulations: Eth-IPv4-ICMPv4 on links TG=DUT1. IPv4 routing tests use circular 2-node topology TG - DUT1 - TG with two link between the nodes. DUT is configured with IPv4 routing and static routes. Test sends packets by TG on links to DUT and received on TG link on the other side of circular topology. On receive TG verifies packets IPv4 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: ipv4 forward via vhost to another vrf 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 ip_table_add_del table 20  
 sw_interface_set_table sw_if_index 6 vrf 20  
 sw_interface_set_table sw_if_index 1 vrf 20  
 sw_interface_add_del_address sw_if_index 2 10.0.1.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.2.1/24 
 sw_interface_add_del_address sw_if_index 6 10.0.2.2/24 
 sw_interface_add_del_address sw_if_index 1 10.0.3.1/24 
 sw_interface_dump 
 ip_add_del_route 10.0.3.0/24 via 10.0.2.2  sw_if_index 5       
 ip_add_del_route 10.0.1.0/24 via 10.0.2.1 vrf 20 sw_if_index 6       
 ip_neighbor_add_del sw_if_index 5 dst 10.0.2.2 mac 02:fe:c5:02:3c:01 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.3.2 mac fa:16:3e:ba:ec:6f 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip4base-eth-2vhost-1vm-func

IPv4-ip4-ipsec-lispgpe-ip4 - main fib, vrf (gpe_vni-to-vrf)

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: ICMPv4-IPv4-IPSec-LISPGPE-IPv4-ICMPv4.
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b5:b7:b4 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 6.6.1.9/24 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 53347564386879626b69524261444a35 integ-alg sha1-96 integ-key 375a47484b725258726a51637354474178733152  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 53347564386879626b69524261444a35 integ-alg sha1-96 integ-key 375a47484b725258726a51637354474178733152  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:41:ad:aa 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 53347564386879626b69524261444a35 integ-alg sha1-96 integ-key 375a47484b725258726a51637354474178733152  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 53347564386879626b69524261444a35 integ-alg sha1-96 integ-key 375a47484b725258726a51637354474178733152  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b5:b7:b4 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 6.6.1.9/24 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e5238506463626d4d734c46366f5749 integ-alg sha1-96 integ-key 655a4154705752354445664a4d7146374b687570  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e5238506463626d4d734c46366f5749 integ-alg sha1-96 integ-key 655a4154705752354445664a4d7146374b687570  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 7 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:41:ad:aa 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e5238506463626d4d734c46366f5749 integ-alg sha1-96 integ-key 655a4154705752354445664a4d7146374b687570  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e5238506463626d4d734c46366f5749 integ-alg sha1-96 integ-key 655a4154705752354445664a4d7146374b687570  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip6base-eth-2vhost-1vm-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b5:b7:b4 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ba:ec:6f 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 2001:cdba:6::3/64 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 8 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 68627549726448636b4b4b595357736d integ-alg sha1-96 integ-key 626f584d4953775331614f4b666e31735a766d71  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 68627549726448636b4b4b595357736d integ-alg sha1-96 integ-key 626f584d4953775331614f4b666e31735a766d71  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:41:ad:aa 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 68627549726448636b4b4b595357736d integ-alg sha1-96 integ-key 626f584d4953775331614f4b666e31735a766d71  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 68627549726448636b4b4b595357736d integ-alg sha1-96 integ-key 626f584d4953775331614f4b666e31735a766d71  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:b5:b7:b4 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ba:ec:6f 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 2001:cdba:6::3/64 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 8 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6c79566a785032734249394334306162 integ-alg sha1-96 integ-key 6964364f5644626a376d32464548416465464864  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6c79566a785032734249394334306162 integ-alg sha1-96 integ-key 6964364f5644626a376d32464548416465464864  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:41:ad:aa 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6c79566a785032734249394334306162 integ-alg sha1-96 integ-key 6964364f5644626a376d32464548416465464864  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6c79566a785032734249394334306162 integ-alg sha1-96 integ-key 6964364f5644626a376d32464548416465464864  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace

eth2p-ethip4lispgpe-ip4base-eth-2vhost-1vm-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using vhost interfaces 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:b5:b7:b4 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 0 reid 6.0.5.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 8 vrf 0  
 sw_interface_add_del_address sw_if_index 8 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:41:ad:aa 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip4basevrf-eth-2vhost-1vm-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using vhost interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:b5:b7:b4 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 1 reid 6.0.5.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 9 vrf 1  
 sw_interface_add_del_address sw_if_index 9 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:41:ad:aa 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 1 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip6base-eth-2vhost-1vm-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6:0:1::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:1::2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.2 mac fa:16:3e:b5:b7:b4 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6:0:1::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 6:6:1::3/64 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6:0:2::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:2::2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:41:ad:aa 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6:0:2::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:1::0/64 seid 6:0:2::0/64 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 0 reid 6:0:1::0/64 leid 6:0:2::0/64 
 exec show trace

ip6

eth2p-ethip6ipsectptlispgpe-ip4base-eth-2vhost-1vm-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISPGPE-IPSec-IPv4-ICMP, Eth-IPv6-IPSec-LISPGPE-IPv4-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Test cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b5:b7:b4 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:ba:ec:6f 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 57335641773969314364744a73624c72 integ-alg sha1-96 integ-key 556b645a596d656a75447659774c5a7555324f47  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 57335641773969314364744a73624c72 integ-alg sha1-96 integ-key 556b645a596d656a75447659774c5a7555324f47  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:41:ad:aa 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 57335641773969314364744a73624c72 integ-alg sha1-96 integ-key 556b645a596d656a75447659774c5a7555324f47  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 57335641773969314364744a73624c72 integ-alg sha1-96 integ-key 556b645a596d656a75447659774c5a7555324f47  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b5:b7:b4 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:ba:ec:6f 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6d4d62495251386e6b66667732414c51 integ-alg sha1-96 integ-key 30314472376f37673365397a4e556d5669693842  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6d4d62495251386e6b66667732414c51 integ-alg sha1-96 integ-key 30314472376f37673365397a4e556d5669693842  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:41:ad:aa 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6d4d62495251386e6b66667732414c51 integ-alg sha1-96 integ-key 30314472376f37673365397a4e556d5669693842  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6d4d62495251386e6b66667732414c51 integ-alg sha1-96 integ-key 30314472376f37673365397a4e556d5669693842  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace

eth2p-ethip6ipsectptlispgpe-ip6base-eth-2vhost-1vm-func

IPv6 - ip6-ipsec-lispgpe-ip6 - main fib, vrf (gpe_vni-to-vrf), phy2lisp, virt2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6,
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b5:b7:b4 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 2001:cdba:1::9/64 
 sw_interface_set_flags sw_if_index 6 admin-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 55396f30386c417a7471766b6c726246 integ-alg sha1-96 integ-key 5542343446434847624f66306a6b633146374d57  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 55396f30386c417a7471766b6c726246 integ-alg sha1-96 integ-key 5542343446434847624f66306a6b633146374d57  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:41:ad:aa 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 55396f30386c417a7471766b6c726246 integ-alg sha1-96 integ-key 5542343446434847624f66306a6b633146374d57  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 55396f30386c417a7471766b6c726246 integ-alg sha1-96 integ-key 5542343446434847624f66306a6b633146374d57  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b5:b7:b4 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 2001:cdba:1::9/64 
 sw_interface_set_flags sw_if_index 6 admin-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5775546278626f693673653075474654 integ-alg sha1-96 integ-key 3870506d364b6132575275724c6b326638623473  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5775546278626f693673653075474654 integ-alg sha1-96 integ-key 3870506d364b6132575275724c6b326638623473  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 7 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:41:ad:aa 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5775546278626f693673653075474654 integ-alg sha1-96 integ-key 3870506d364b6132575275724c6b326638623473  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5775546278626f693673653075474654 integ-alg sha1-96 integ-key 3870506d364b6132575275724c6b326638623473  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace

eth2p-ethip6lispgpe-ip6base-eth-2vhost-1vm-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b5:b7:b4 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 0 ipv6 
 sw_interface_set_table sw_if_index 8 vrf 0 ipv6 
 sw_interface_add_del_address sw_if_index 8 2001:cdba:6::9/64 
 sw_interface_set_flags sw_if_index 8 admin-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:41:ad:aa 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

eth2p-ethip6lispgpe-ip6basevrf-eth-2vhost-1vm-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces and vrf is enabled 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:ba:ec:6f 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:b5:b7:b4 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 9 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 9 2001:cdba:6::9/64 
 sw_interface_set_flags sw_if_index 9 admin-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:41:e1:ec 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:41:ad:aa 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

l2bd

eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm-func

L2 bridge domain with VLAN tag over VM test cases

  • [Top] Network Topologies: TG=DUT 2-node circular topology with double links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG=DUT and on DUT=VM.
  • [Cfg] DUT configuration: DUT is configured with two bridge domains (L2BD) with MAC learning enabled; each one with added VLAN sub-interface towards TG and vhost-user interface to local VM. Configure linux bridge on VM to pass traffic between both vhost-user interfaces.
  • [Ver] TG verification: Make TG send ICMPv4/ICMPv6 Echo Req between two of its interfaces to be switched by DUT via VM; verify packets are switched between these TG interfaces; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr, MAC addresses and VLAN tag.
  • [Ref] Applicable standard specifications: IEEE 802.1q.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm - ipv4 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 create_vlan_subif sw_if_index 2 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc01: eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm - ipv6 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 create_vlan_subif sw_if_index 2 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-eth-l2bdbasemaclrn-eth-2vhost-1vm-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 is configured with two L2 bridge-domains (L2BD) switching combined with MAC learning enabled.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with two l2bds (mac learn) switches icmpv4 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with two l2bds (mac learn) switches icmpv6 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-eth-l2bdbasemacstc-eth-2vhost-1vm-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 is configured with two L2 bridge-domains (L2BD) switching combined with static MACs.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with two l2bds (static macs) switches icmpv4 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa><,sw_if_index=2,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>/xca,sw_if_index=5,bvi_mac=0) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>/xca,sw_if_index=1,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa><,sw_if_index=6,bvi_mac=0) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with two l2bds (static macs) switches icmpv6 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa><,sw_if_index=2,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>/xca,sw_if_index=5,bvi_mac=0) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>/xca,sw_if_index=1,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa><,sw_if_index=6,bvi_mac=0) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-l2bdbase-vhost-client-reconnect-2vm-func

Vhost-User Interface Traffic Tests

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-VXLAN-ETH-IP on TG-DUT link. ETH-IP on VirtualEthernet-VM interface.
  • [Cfg] DUT configuration: On DUT is running 2 VM with 2 vhost-user interface on each VM. DUT is configured with VXLAN and vhost-user interfaces in bridge-domain (L2BD).
  • [Cfg] VM configuration: VM has both vhost-user interfaces added into Linux Bridge.
  • [Ver] TG verification: VXLAN packet is send to DUT where is decapsulated and send bridged to vhost-user inteface. VM forwards frame to its second interface and VPP encapsulates it to another VXLAN tunnel. Packets are sent and received by TG on link to DUT.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: qemu reconnects to vpps vhost-user when qemu is killed and restarted 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.1 mac fa:16:3e:1f:3c:13 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 101 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 102 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 103 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 104 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock3 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock4 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 sw_interface_set_flags sw_if_index 10 admin-up link-up 
 sw_interface_set_flags sw_if_index 11 admin-up link-up 
 sw_interface_set_flags sw_if_index 12 admin-up link-up 
 bridge_domain_add_del(bd_id=101,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=101) 
 sw_interface_set_l2_bridge(rx_sw_if_index=9,enable=1,shg=0,port_type=0,bd_id=101) 
 bridge_domain_add_del(bd_id=102,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=102) 
 sw_interface_set_l2_bridge(rx_sw_if_index=10,enable=1,shg=0,port_type=0,bd_id=102) 
 bridge_domain_add_del(bd_id=103,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=103) 
 sw_interface_set_l2_bridge(rx_sw_if_index=11,enable=1,shg=0,port_type=0,bd_id=103) 
 bridge_domain_add_del(bd_id=104,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_l2_bridge(rx_sw_if_index=12,enable=1,shg=0,port_type=0,bd_id=104) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp reconnects to qemu vhost-user when restart vpp and reconfigured 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.1 mac fa:16:3e:1f:3c:13 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 101 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 102 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 103 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 104 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock3 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock4 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 sw_interface_set_flags sw_if_index 10 admin-up link-up 
 sw_interface_set_flags sw_if_index 11 admin-up link-up 
 sw_interface_set_flags sw_if_index 12 admin-up link-up 
 bridge_domain_add_del(bd_id=101,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=101) 
 sw_interface_set_l2_bridge(rx_sw_if_index=9,enable=1,shg=0,port_type=0,bd_id=101) 
 bridge_domain_add_del(bd_id=102,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=102) 
 sw_interface_set_l2_bridge(rx_sw_if_index=10,enable=1,shg=0,port_type=0,bd_id=102) 
 bridge_domain_add_del(bd_id=103,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=103) 
 sw_interface_set_l2_bridge(rx_sw_if_index=11,enable=1,shg=0,port_type=0,bd_id=103) 
 bridge_domain_add_del(bd_id=104,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_l2_bridge(rx_sw_if_index=12,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.1 mac fa:16:3e:1f:3c:13 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 101 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 102 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 103 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 104 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock3 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock4 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 sw_interface_set_flags sw_if_index 10 admin-up link-up 
 sw_interface_set_flags sw_if_index 11 admin-up link-up 
 sw_interface_set_flags sw_if_index 12 admin-up link-up 
 bridge_domain_add_del(bd_id=101,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=101) 
 sw_interface_set_l2_bridge(rx_sw_if_index=9,enable=1,shg=0,port_type=0,bd_id=101) 
 bridge_domain_add_del(bd_id=102,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=102) 
 sw_interface_set_l2_bridge(rx_sw_if_index=10,enable=1,shg=0,port_type=0,bd_id=102) 
 bridge_domain_add_del(bd_id=103,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=103) 
 sw_interface_set_l2_bridge(rx_sw_if_index=11,enable=1,shg=0,port_type=0,bd_id=103) 
 bridge_domain_add_del(bd_id=104,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_l2_bridge(rx_sw_if_index=12,enable=1,shg=0,port_type=0,bd_id=104) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4vxlan-l2bdbasemaclrn-eth-2vhost-1vm-func

L2BD with VM combined with VXLAN test cases - IPv4

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01:dut1 and dut2 with two l2bds and vxlanoipv4 tunnel switch icmpv4 between tg links and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace

eth2p-ethip6vxlan-l2bdbasemaclrn-eth-2vhost-1vm-func

L2BD with VM combined with VXLAN test cases - IPv6

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01:dut1 and dut2 with two l2bds and vxlanoipv6 tunnel switch icmpv6 between tg links and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace

l2xc

eth2p-eth-l2xcbase-eth-2vhost-1vm-func

L2 cross-connect test cases

  • [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with two l2xcs switches icmpv4 between tg and local vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=2,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=2) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=6) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=6,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with two l2xcs switches icmpv6 between tg and local vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=2,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=2) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=6) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=6,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 exec show trace