func

crypto

default

eth2p-ethip4ipsectnl-ip4base-func

IPv4 IPsec tunnel mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 7458575153615a6d4630704750517432 integ-alg sha1-96 integ-key 687a3457496d52355073786b5130505864467970 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 7458575153615a6d4630704750517432 integ-alg sha1-96 integ-key 687a3457496d52355073786b5130505864467970 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 37476d344a4956394a4a7876705863765469735a4a496432 integ-alg sha-256-128 integ-key 577a4e537139746f655a496b384e6d726b39635257524657766a6f4747797a38 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 37476d344a4956394a4a7876705863765469735a4a496432 integ-alg sha-256-128 integ-key 577a4e537139746f655a496b384e6d726b39635257524657766a6f4747797a38 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 7937734f724b5a76427067716178373573746533657a55654e574a7652485a71 integ-alg sha-384-192 integ-key 3249506b3450304d77636a4f544a644730673343456e7267313066346e6947617a7757364d7871765858654938396654 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 7937734f724b5a76427067716178373573746533657a55654e574a7652485a71 integ-alg sha-384-192 integ-key 3249506b3450304d77636a4f544a644730673343456e7267313066346e6947617a7757364d7871765858654938396654 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 676936656e496772415a6a435246586775725a645655583632576e506c627438 integ-alg sha-512-256 integ-key 736f50717231667a664c41374b5445596e44437a796b47384c4c63494a4f69615852426e58745a4a397955334f6f794259616e44663038556d7a376b68313757 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 676936656e496772415a6a435246586775725a645655583632576e506c627438 integ-alg sha-512-256 integ-key 736f50717231667a664c41374b5445596e44437a796b47384c4c63494a4f69615852426e58745a4a397955334f6f794259616e44663038556d7a376b68313757 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6374796861576444633169466970736d integ-alg sha1-96 integ-key 7a594d4a325653384b325245474d56436d445839 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6374796861576444633169466970736d integ-alg sha1-96 integ-key 7a594d4a325653384b325245474d56436d445839 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 335974766b62323966656f5751456a43 integ-alg sha1-96 integ-key 6437575058743562567048726e51576d49675366 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 335974766b62323966656f5751456a43 integ-alg sha1-96 integ-key 6437575058743562567048726e51576d49675366 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 786750576533585a3677626870587753 integ-alg sha1-96 integ-key 396965534f5251636a4a564e7a656c74487a694c tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 786750576533585a3677626870587753 integ-alg sha1-96 integ-key 396965534f5251636a4a564e7a656c74487a694c tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4f613956565250394148306534366f34 integ-alg sha1-96 integ-key 73535868683650723341637764704a3942563848 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4f613956565250394148306534366f34 integ-alg sha1-96 integ-key 73535868683650723341637764704a3942563848 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 656f4d485a467147684f544c5838727a integ-key 7a6f54386a51634d44316c5a34334c4837545676 
 exec set ipsec sa 20 crypto-key 656f4d485a467147684f544c5838727a integ-key 7a6f54386a51634d44316c5a34334c4837545676 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 44334456534f4a6372345449454c3152 integ-alg sha1-96 integ-key 7945475a6e66476c4a704f43475757614c776f70 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 44334456534f4a6372345449454c3152 integ-alg sha1-96 integ-key 7945475a6e66476c4a704f43475757614c776f70 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 313531796d7066374b3343434c58476f integ-key 754f6f4973624939517a7630665242324f666b6c 
 exec set ipsec sa 20 crypto-key 313531796d7066374b3343434c58476f integ-key 754f6f4973624939517a7630665242324f666b6c 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4772367a754c6e69456a6f724b315456 integ-alg sha1-96 integ-key 6f37483555715732316d7730447768787a714356 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4772367a754c6e69456a6f724b315456 integ-alg sha1-96 integ-key 6f37483555715732316d7730447768787a714356 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 5745454c376a5a4352367831674d786d integ-key 4136695366644459445879706349304359507230 
 exec set ipsec sa 20 crypto-key 5745454c376a5a4352367831674d786d integ-key 4136695366644459445879706349304359507230 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 50536f71445439734c6b65424e424848 integ-alg sha1-96 integ-key 316b42426f61707978776b69444e374b426a3666 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 50536f71445439734c6b65424e424848 integ-alg sha1-96 integ-key 316b42426f61707978776b69444e374b426a3666 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 445568566f7969326170493973614a70 integ-key 6f7a5879357552416139324c6d654c43626e4d77 
 exec set ipsec sa 20 crypto-key 445568566f7969326170493973614a70 integ-key 6f7a5879357552416139324c6d654c43626e4d77 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectpt-ip4base-func

IPv4 IPsec transport mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5370585a446437765148444844333675 integ-alg sha1-96 integ-key 3658414936624c504374484164307570744e4a4f  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5370585a446437765148444844333675 integ-alg sha1-96 integ-key 3658414936624c504374484164307570744e4a4f  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 63544d51766a7a545a337052554a34436930314a79315451 integ-alg sha-256-128 integ-key 58486c466648314d4b4b4365557954617449747a3765595266614a784d717432  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 63544d51766a7a545a337052554a34436930314a79315451 integ-alg sha-256-128 integ-key 58486c466648314d4b4b4365557954617449747a3765595266614a784d717432  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 6c4d6e454a6731776b724b365657416e58644e447446547767776a4572354e74 integ-alg sha-384-192 integ-key 6d626d7843573369374c3267686850784642796947725956486f5a427351337579445332316b6a6f574f70375a456556  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 6c4d6e454a6731776b724b365657416e58644e447446547767776a4572354e74 integ-alg sha-384-192 integ-key 6d626d7843573369374c3267686850784642796947725956486f5a427351337579445332316b6a6f574f70375a456556  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 475830656f6e68746662764d5445574c5030326459594f676b623549444a6366 integ-alg sha-512-256 integ-key 4c36354648594b4a726575726f5a534636694c735077363463464d3641594a3871535a523064473573474a696a6b67796d58517045583339537239517059526e  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 475830656f6e68746662764d5445574c5030326459594f676b623549444a6366 integ-alg sha-512-256 integ-key 4c36354648594b4a726575726f5a534636694c735077363463464d3641594a3871535a523064473573474a696a6b67796d58517045583339537239517059526e  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e6e4c4c6c6e627935446b5336624f77 integ-alg sha1-96 integ-key 583634723469536b52443661334b654178777a35  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e6e4c4c6c6e627935446b5336624f77 integ-alg sha1-96 integ-key 583634723469536b52443661334b654178777a35  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5a75317053635569436b374d65316373 integ-alg sha1-96 integ-key 6f77666b595778564a5a3232614d506350776467  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5a75317053635569436b374d65316373 integ-alg sha1-96 integ-key 6f77666b595778564a5a3232614d506350776467  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3066613933627630305362614932577a integ-alg sha1-96 integ-key 656559427436463370506c4b714361376b734a4e  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3066613933627630305362614932577a integ-alg sha1-96 integ-key 656559427436463370506c4b714361376b734a4e  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 74495447726e384c4844346e4d456f42 integ-alg sha1-96 integ-key 5968586132475871483977774739627a67635230  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 74495447726e384c4844346e4d456f42 integ-alg sha1-96 integ-key 5968586132475871483977774739627a67635230  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 5a7961565a62755468773243774f6965 integ-key 457857736f6672585472313455576c6241784833 
 exec set ipsec sa 20 crypto-key 5a7961565a62755468773243774f6965 integ-key 457857736f6672585472313455576c6241784833 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 53796d4c4c3843366479566a55583644 integ-alg sha1-96 integ-key 52545136743075466b6a63664c56365449565155  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 53796d4c4c3843366479566a55583644 integ-alg sha1-96 integ-key 52545136743075466b6a63664c56365449565155  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 6f6377513972636a437a514b3248416e integ-key 71594b78387a3371687635425a4766454e343335 
 exec set ipsec sa 20 crypto-key 6f6377513972636a437a514b3248416e integ-key 71594b78387a3371687635425a4766454e343335 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 767748787368784d6c38394e76385653 integ-alg sha1-96 integ-key 6a444632325a466333673264455a6b6244676572  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 767748787368784d6c38394e76385653 integ-alg sha1-96 integ-key 6a444632325a466333673264455a6b6244676572  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 6771517442356c783932304776387458 integ-key 496567423078414b5a5a585a6639484c66485047 
 exec set ipsec sa 20 crypto-key 6771517442356c783932304776387458 integ-key 496567423078414b5a5a585a6639484c66485047 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 304c4d377233614e6577713749567336 integ-alg sha1-96 integ-key 504e48616f4d7964736f55325667594e4a58624c  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 304c4d377233614e6577713749567336 integ-alg sha1-96 integ-key 504e48616f4d7964736f55325667594e4a58624c  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 6f45716c6776327870396e7748314e65 integ-key 6d33314176475265416377784246505274387a66 
 exec set ipsec sa 20 crypto-key 6f45716c6776327870396e7748314e65 integ-key 6d33314176475265416377784246505274387a66 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip4base-func

IPv4-ip4-ipsec-lispgpe-ip4 - main fib, vrf (gpe_vni-to-vrf)

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: ICMPv4-IPv4-IPSec-LISPGPE-IPv4-ICMPv4.
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:b5:74:c2 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:c4:57:52 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5a663946353771304536736d534c5666 integ-alg sha1-96 integ-key 454e36486359396a706f49334c466270374a4841  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5a663946353771304536736d534c5666 integ-alg sha1-96 integ-key 454e36486359396a706f49334c466270374a4841  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:5b:78:8f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:f4:4e:e5 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5a663946353771304536736d534c5666 integ-alg sha1-96 integ-key 454e36486359396a706f49334c466270374a4841  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5a663946353771304536736d534c5666 integ-alg sha1-96 integ-key 454e36486359396a706f49334c466270374a4841  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:b5:74:c2 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:c4:57:52 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 336c5046326f684c76656c6632775152 integ-alg sha1-96 integ-key 6d4839306f664856325a66616d5a52337057747a  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 336c5046326f684c76656c6632775152 integ-alg sha1-96 integ-key 6d4839306f664856325a66616d5a52337057747a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:5b:78:8f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:f4:4e:e5 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 336c5046326f684c76656c6632775152 integ-alg sha1-96 integ-key 6d4839306f664856325a66616d5a52337057747a  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 336c5046326f684c76656c6632775152 integ-alg sha1-96 integ-key 6d4839306f664856325a66616d5a52337057747a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec show trace
tc03: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int and vrf on eid is enabled. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:b5:74:c2 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:c4:57:52 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 1 reid 6.6.2.0/24 leid 6.6.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3535735643594e6368464d3655534b45 integ-alg sha1-96 integ-key 4c496333764c383344676234424c45334f777a51  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3535735643594e6368464d3655534b45 integ-alg sha1-96 integ-key 4c496333764c383344676234424c45334f777a51  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:5b:78:8f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:f4:4e:e5 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 1 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 3535735643594e6368464d3655534b45 integ-alg sha1-96 integ-key 4c496333764c383344676234424c45334f777a51  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 3535735643594e6368464d3655534b45 integ-alg sha1-96 integ-key 4c496333764c383344676234424c45334f777a51  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc04: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int and vrf is enabled. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:b5:74:c2 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:c4:57:52 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 1 reid 6.6.2.0/24 leid 6.6.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 41704d4f4f7472706e786a7567775352 integ-alg sha1-96 integ-key 7254334a6f735456563249735761666f79436e62  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 41704d4f4f7472706e786a7567775352 integ-alg sha1-96 integ-key 7254334a6f735456563249735761666f79436e62  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.1.2 - 6.6.1.2 remote-ip-range 6.6.2.2 - 6.6.2.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:5b:78:8f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:f4:4e:e5 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 1 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 41704d4f4f7472706e786a7567775352 integ-alg sha1-96 integ-key 7254334a6f735456563249735761666f79436e62  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 41704d4f4f7472706e786a7567775352 integ-alg sha1-96 integ-key 7254334a6f735456563249735761666f79436e62  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.2.2 - 6.6.2.2 remote-ip-range 6.6.1.2 - 6.6.1.2  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip6base-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:c4:57:52 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 385a6e7a444942473452703462696363 integ-alg sha1-96 integ-key 3270656e41786633307363325070776c79716859  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 385a6e7a444942473452703462696363 integ-alg sha1-96 integ-key 3270656e41786633307363325070776c79716859  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:5b:78:8f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:f4:4e:e5 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 385a6e7a444942473452703462696363 integ-alg sha1-96 integ-key 3270656e41786633307363325070776c79716859  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 385a6e7a444942473452703462696363 integ-alg sha1-96 integ-key 3270656e41786633307363325070776c79716859  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:c4:57:52 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 516f456b383135593541494345723046 integ-alg sha1-96 integ-key 755734385069386766466658306a6f43654d5252  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 516f456b383135593541494345723046 integ-alg sha1-96 integ-key 755734385069386766466658306a6f43654d5252  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:5b:78:8f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:f4:4e:e5 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 516f456b383135593541494345723046 integ-alg sha1-96 integ-key 755734385069386766466658306a6f43654d5252  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 516f456b383135593541494345723046 integ-alg sha1-96 integ-key 755734385069386766466658306a6f43654d5252  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip6basevrf-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6f6b47487369436d38746439476f745a integ-alg sha1-96 integ-key 317a616c4e624c6e4a4c61585464355951654c74  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6f6b47487369436d38746439476f745a integ-alg sha1-96 integ-key 317a616c4e624c6e4a4c61585464355951654c74  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:c4:57:52 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6f6b47487369436d38746439476f745a integ-alg sha1-96 integ-key 317a616c4e624c6e4a4c61585464355951654c74  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6f6b47487369436d38746439476f745a integ-alg sha1-96 integ-key 317a616c4e624c6e4a4c61585464355951654c74  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:5b:78:8f 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:f4:4e:e5 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

eth2p-ethip6ipsectnl-ip6base-func

IPv6 IPsec tunnel mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4543706142667a4973726b3849685331 integ-alg sha1-96 integ-key 74765065673366496232306c4955796d634e4859 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4543706142667a4973726b3849685331 integ-alg sha1-96 integ-key 74765065673366496232306c4955796d634e4859 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 41736a575768733546343237666247366378496853764767 integ-alg sha-256-128 integ-key 7748744c4c3948423661774d7a4b347676546a6f414735516f495352337a386a tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 41736a575768733546343237666247366378496853764767 integ-alg sha-256-128 integ-key 7748744c4c3948423661774d7a4b347676546a6f414735516f495352337a386a tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 7553553756557a523338574653444c3854564e784c65656554797236626a694c integ-alg sha-384-192 integ-key 637538633834356330703946316a565a4650704e46616f4952486a4d7578706a34556631514762614a486e3171767451 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 7553553756557a523338574653444c3854564e784c65656554797236626a694c integ-alg sha-384-192 integ-key 637538633834356330703946316a565a4650704e46616f4952486a4d7578706a34556631514762614a486e3171767451 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 6246573549334d4d306f4f5a374e6976536477574f696a44726b314c304f6154 integ-alg sha-512-256 integ-key 4341436755394348614561424e314a7a3855775539773431324a4d446e535437796f3350696d485451616e455766505a79746e536c6f31744241377230795972 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 6246573549334d4d306f4f5a374e6976536477574f696a44726b314c304f6154 integ-alg sha-512-256 integ-key 4341436755394348614561424e314a7a3855775539773431324a4d446e535437796f3350696d485451616e455766505a79746e536c6f31744241377230795972 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5334506230536d424468646d797a6350 integ-alg sha1-96 integ-key 5846346573666d43574a454a616b703359386359 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5334506230536d424468646d797a6350 integ-alg sha1-96 integ-key 5846346573666d43574a454a616b703359386359 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 71475748467852327475336755766c37 integ-alg sha1-96 integ-key 3372505a62434742726f6f3049647753597a6a31 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 71475748467852327475336755766c37 integ-alg sha1-96 integ-key 3372505a62434742726f6f3049647753597a6a31 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4a6e4d6d3865446b64625778466e6954 integ-alg sha1-96 integ-key 6d726d4e44634136564e67667750754f68527454 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4a6e4d6d3865446b64625778466e6954 integ-alg sha1-96 integ-key 6d726d4e44634136564e67667750754f68527454 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 463663526d434157796d444754725970 integ-alg sha1-96 integ-key 59575337733543497437424663555a5753656854 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 463663526d434157796d444754725970 integ-alg sha1-96 integ-key 59575337733543497437424663555a5753656854 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 414e72456879553654756d456b325a41 integ-key 3273516470774769366b4b48584136526c554873 
 exec set ipsec sa 20 crypto-key 414e72456879553654756d456b325a41 integ-key 3273516470774769366b4b48584136526c554873 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 37446448464b596b6631616375546656 integ-alg sha1-96 integ-key 6466654d73734e6e6e68484b386e50624e505672 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 37446448464b596b6631616375546656 integ-alg sha1-96 integ-key 6466654d73734e6e6e68484b386e50624e505672 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 385a7679425163633461355333366d64 integ-key 4b45346c3443556f6e614150454f7539506a7a4c 
 exec set ipsec sa 20 crypto-key 385a7679425163633461355333366d64 integ-key 4b45346c3443556f6e614150454f7539506a7a4c 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 566d434f5648724d6239427035687a44 integ-alg sha1-96 integ-key 366364716d723970444d336e47594e73456a3036 tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 566d434f5648724d6239427035687a44 integ-alg sha1-96 integ-key 366364716d723970444d336e47594e73456a3036 tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 35716b4d56766253734a7a7949784170 integ-key 546871735364556467623346314b48326e586149 
 exec set ipsec sa 20 crypto-key 35716b4d56766253734a7a7949784170 integ-key 546871735364556467623346314b48326e586149 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6c7249447047307a656431614d695247 integ-alg sha1-96 integ-key 3436543536634d4235713762536245686934534d tunnel-src 3ffe:5f::2 tunnel-dst 3ffe:5f::1 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6c7249447047307a656431614d695247 integ-alg sha1-96 integ-key 3436543536634d4235713762536245686934534d tunnel-src 3ffe:5f::1 tunnel-dst 3ffe:5f::2 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:60::4 - 3ffe:60::4 remote-ip-range 3ffe:60::3 - 3ffe:60::3  
 exec set ipsec sa 10 crypto-key 3769577a68634376686c464348745331 integ-key 6873656447794d474e644d343350385359707958 
 exec set ipsec sa 20 crypto-key 3769577a68634376686c464348745331 integ-key 6873656447794d474e644d343350385359707958 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6ipsectpt-ip6base-func

IPv6 IPsec transport mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 614d5949416c6b574246433855614278 integ-alg sha1-96 integ-key 4c43555a3370326748336b52387254704a463748  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 614d5949416c6b574246433855614278 integ-alg sha1-96 integ-key 4c43555a3370326748336b52387254704a463748  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 6659657a7077335145556776486a54346632554761474c77 integ-alg sha-256-128 integ-key 43487439494a61686d55657476344d516868576e41357352465149684d4f4644  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 6659657a7077335145556776486a54346632554761474c77 integ-alg sha-256-128 integ-key 43487439494a61686d55657476344d516868576e41357352465149684d4f4644  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 49685a50763834357a71447652435776416165674a6344643979395477705756 integ-alg sha-384-192 integ-key 4f44544d6733754d7556756664346c4a424a336e4b31557847316d76427173754e723562716c6373584b514235757071  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 49685a50763834357a71447652435776416165674a6344643979395477705756 integ-alg sha-384-192 integ-key 4f44544d6733754d7556756664346c4a424a336e4b31557847316d76427173754e723562716c6373584b514235757071  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 31476256437568303341326852745a3648784b7861454e50533647316e664f37 integ-alg sha-512-256 integ-key 563437524677467266417970763063306d36684a76537754326150654d326b4d4b75386142636f766b5853674c53584536546e395948755774547936755a666c  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 31476256437568303341326852745a3648784b7861454e50533647316e664f37 integ-alg sha-512-256 integ-key 563437524677467266417970763063306d36684a76537754326150654d326b4d4b75386142636f766b5853674c53584536546e395948755774547936755a666c  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 72324e4971664b486279614c45535176 integ-alg sha1-96 integ-key 61536d44633449525132636b353858356c464257  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 72324e4971664b486279614c45535176 integ-alg sha1-96 integ-key 61536d44633449525132636b353858356c464257  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 673735424d4e4c79484c617568516464 integ-alg sha1-96 integ-key 61667939725072586274474b4c48594c6c6d5165  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 673735424d4e4c79484c617568516464 integ-alg sha1-96 integ-key 61667939725072586274474b4c48594c6c6d5165  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5266343968526a636a5a70683963457a integ-alg sha1-96 integ-key 316f71616d36576a563433494346414949796574  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5266343968526a636a5a70683963457a integ-alg sha1-96 integ-key 316f71616d36576a563433494346414949796574  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5034764c71386370506d6173694a7353 integ-alg sha1-96 integ-key 4f7149466a437872657233674d31425a75384a53  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5034764c71386370506d6173694a7353 integ-alg sha1-96 integ-key 4f7149466a437872657233674d31425a75384a53  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 6534626573717752373458686a465a61 integ-key 476670366e44504a366f79555139726e4e4c4773 
 exec set ipsec sa 20 crypto-key 6534626573717752373458686a465a61 integ-key 476670366e44504a366f79555139726e4e4c4773 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4b7267597366327a6f377053495a5944 integ-alg sha1-96 integ-key 356f484d6c7143536c56574c6579704d734b695a  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4b7267597366327a6f377053495a5944 integ-alg sha1-96 integ-key 356f484d6c7143536c56574c6579704d734b695a  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 6732657138486c4277557a636a4c5864 integ-key 7a694f796c4a3432703735314773724554536c79 
 exec set ipsec sa 20 crypto-key 6732657138486c4277557a636a4c5864 integ-key 7a694f796c4a3432703735314773724554536c79 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6667565a70453244666f77657237666c integ-alg sha1-96 integ-key 465564486e795169784f4a5469374d6630514752  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6667565a70453244666f77657237666c integ-alg sha1-96 integ-key 465564486e795169784f4a5469374d6630514752  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 493273394637654d7539546259546f7a integ-key 4d76456761564c3934445443484a546c726c304c 
 exec set ipsec sa 20 crypto-key 493273394637654d7539546259546f7a integ-key 4d76456761564c3934445443484a546c726c304c 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:5f::2/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 5 3ffe:60::4/64 
 sw_interface_set_flags sw_if_index 5 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:5f::1 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:60::3/128 via 3ffe:5f::1  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 774362336378615151447676766e4f71 integ-alg sha1-96 integ-key 366f305856414f59724b6b6d75506c5673684470  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 774362336378615151447676766e4f71 integ-alg sha1-96 integ-key 366f305856414f59724b6b6d75506c5673684470  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass local-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff remote-ip-range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 3ffe:5f::2 - 3ffe:5f::2 remote-ip-range 3ffe:5f::1 - 3ffe:5f::1  
 exec set ipsec sa 10 crypto-key 5073576f437650545344547233356869 integ-key 6547435569316b307a4a72704838383865364b46 
 exec set ipsec sa 20 crypto-key 5073576f437650545344547233356869 integ-key 6547435569316b307a4a72704838383865364b46 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6ipsectptlispgpe-ip4base-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISPGPE-IPSec-IPv4-ICMP, Eth-IPv6-IPSec-LISPGPE-IPv4-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:c4:57:52 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 55494d4e356e724e6f62415276627538 integ-alg sha1-96 integ-key 615a6e3762785949743931507167756969775064  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 55494d4e356e724e6f62415276627538 integ-alg sha1-96 integ-key 615a6e3762785949743931507167756969775064  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:5b:78:8f 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:f4:4e:e5 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 55494d4e356e724e6f62415276627538 integ-alg sha1-96 integ-key 615a6e3762785949743931507167756969775064  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 55494d4e356e724e6f62415276627538 integ-alg sha1-96 integ-key 615a6e3762785949743931507167756969775064  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:c4:57:52 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:b5:74:c2 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 69737734546f67424762444b6b786662 integ-alg sha1-96 integ-key 4669397550525748496857396f78424672657448  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 69737734546f67424762444b6b786662 integ-alg sha1-96 integ-key 4669397550525748496857396f78424672657448  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:5b:78:8f 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:f4:4e:e5 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 69737734546f67424762444b6b786662 integ-alg sha1-96 integ-key 4669397550525748496857396f78424672657448  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 69737734546f67424762444b6b786662 integ-alg sha1-96 integ-key 4669397550525748496857396f78424672657448  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace

eth2p-ethip6ipsectptlispgpe-ip6base-func

IPv6 - ip6-ipsec-lispgpe-ip6 - main fib, vrf (gpe_vni-to-vrf), phy2lisp, virt2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6,
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:b5:74:c2 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:c4:57:52 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 484b4476336779583441496470747176 integ-alg sha1-96 integ-key 3148754e454c4b4b394878544d436a6c49563439  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 484b4476336779583441496470747176 integ-alg sha1-96 integ-key 3148754e454c4b4b394878544d436a6c49563439  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:5b:78:8f 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:f4:4e:e5 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 484b4476336779583441496470747176 integ-alg sha1-96 integ-key 3148754e454c4b4b394878544d436a6c49563439  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 484b4476336779583441496470747176 integ-alg sha1-96 integ-key 3148754e454c4b4b394878544d436a6c49563439  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using ipsec (transport) lisp_gpe0 int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:b5:74:c2 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:c4:57:52 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 586c736d314a34325477755370315a42 integ-alg sha1-96 integ-key 4a4b494a6b7a53704152504a314d754a48696436  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 586c736d314a34325477755370315a42 integ-alg sha1-96 integ-key 4a4b494a6b7a53704152504a314d754a48696436  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:1::2 - 2001:cdba:1::2 remote-ip-range 2001:cdba:2::2 - 2001:cdba:2::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:1::2 - 2001:cdba:1::2 remote-ip-range 2001:cdba:2::2 - 2001:cdba:2::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:5b:78:8f 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:f4:4e:e5 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 586c736d314a34325477755370315a42 integ-alg sha1-96 integ-key 4a4b494a6b7a53704152504a314d754a48696436  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 586c736d314a34325477755370315a42 integ-alg sha1-96 integ-key 4a4b494a6b7a53704152504a314d754a48696436  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:2::2 - 2001:cdba:2::2 remote-ip-range 2001:cdba:1::2 - 2001:cdba:1::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:2::2 - 2001:cdba:2::2 remote-ip-range 2001:cdba:1::2 - 2001:cdba:1::2  
 exec show trace

sw device

eth2p-ethip4ipsectnlsw-ip4base-func

IPv4 SW cryptodev IPsec tunnel mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: With enabled SW crytodev on DUT1 create loopback interface, configure loopback and physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4c5958706578746b4166413943544541 integ-alg sha1-96 integ-key 6f4d4b454136635641545367345068386f78615a tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4c5958706578746b4166413943544541 integ-alg sha1-96 integ-key 6f4d4b454136635641545367345068386f78615a tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in tunnel mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 3842656e30487a3569394e3534593949444b71527a386d4d integ-alg sha-256-128 integ-key 4878597172734e52726d4a775555735250674532426b4d5a72594f4535747430 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 3842656e30487a3569394e3534593949444b71527a386d4d integ-alg sha-256-128 integ-key 4878597172734e52726d4a775555735250674532426b4d5a72594f4535747430 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 6c4a754d6b536e396e687066716a594b5175326a38337055624639786d654438 integ-alg sha-384-192 integ-key 61624951384d75374c70474a35446b764c50386f6a6f6247704d67334c6c534d33676645673073463453355935683047 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 6c4a754d6b536e396e687066716a594b5175326a38337055624639786d654438 integ-alg sha-384-192 integ-key 61624951384d75374c70474a35446b764c50386f6a6f6247704d67334c6c534d33676645673073463453355935683047 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in tunnel mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 556657746446513444743053504e4d496e74524b725746614255306230424266 integ-alg sha-512-256 integ-key 4c53625a5545354767415550513042564f57786d37646f7a546455784a4933744b42624e474b336642444f6d6a31516b6177394c4c426943396a554246675563 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 556657746446513444743053504e4d496e74524b725746614255306230424266 integ-alg sha-512-256 integ-key 4c53625a5545354767415550513042564f57786d37646f7a546455784a4933744b42624e474b336642444f6d6a31516b6177394c4c426943396a554246675563 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4e37736d3851306e4972656b4272586d integ-alg sha1-96 integ-key 696767587434696c4d416c6530676a6f534e5a48 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4e37736d3851306e4972656b4272586d integ-alg sha1-96 integ-key 696767587434696c4d416c6530676a6f534e5a48 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 424b3235617954364a446f3556504d68 integ-alg sha1-96 integ-key 30524f77546247726e7a483566556a7741717961 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 424b3235617954364a446f3556504d68 integ-alg sha1-96 integ-key 30524f77546247726e7a483566556a7741717961 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6d48734a43596f4958764c6b6e584a4d integ-alg sha1-96 integ-key 61643555415744326c734555787447466f475569 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6d48734a43596f4958764c6b6e584a4d integ-alg sha1-96 integ-key 61643555415744326c734555787447466f475569 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4946446d554d74356e393555746d4a6f integ-alg sha1-96 integ-key 6c6e316c6753593863356f43665053667256304f tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4946446d554d74356e393555746d4a6f integ-alg sha1-96 integ-key 6c6e316c6753593863356f43665053667256304f tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 6b6a67365572476c6152776f3034396d integ-key 6f4c453372724c4d4c4e4668546a59695a4f584e 
 exec set ipsec sa 20 crypto-key 6b6a67365572476c6152776f3034396d integ-key 6f4c453372724c4d4c4e4668546a59695a4f584e 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6944534e4246467a63455071596e7272 integ-alg sha1-96 integ-key 4d385967666f41326d6143595463736759576c65 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6944534e4246467a63455071596e7272 integ-alg sha1-96 integ-key 4d385967666f41326d6143595463736759576c65 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 62586a69417477564f6633705452436f integ-key 49484363515764686d70504c414d776337694262 
 exec set ipsec sa 20 crypto-key 62586a69417477564f6633705452436f integ-key 49484363515764686d70504c414d776337694262 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 596843664c7a6138793045684b304c6b integ-alg sha1-96 integ-key 4c6d333565625645716371464b4944364c7a6d33 tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 596843664c7a6138793045684b304c6b integ-alg sha1-96 integ-key 4c6d333565625645716371464b4944364c7a6d33 tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 5336466a7478766b67334b764c636554 integ-key 496e3576746d3138576b62595579495254586a32 
 exec set ipsec sa 20 crypto-key 5336466a7478766b67334b764c636554 integ-key 496e3576746d3138576b62595579495254586a32 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in tunnel mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 4c7a5a79724f52464951354469616448 integ-alg sha1-96 integ-key 6a74416f484c524a30365a46797036486a537a6c tunnel-src 192.168.100.3 tunnel-dst 192.168.100.2 
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 4c7a5a79724f52464951354469616448 integ-alg sha1-96 integ-key 6a74416f484c524a30365a46797036486a537a6c tunnel-src 192.168.100.2 tunnel-dst 192.168.100.3 
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.4.4 - 192.168.4.4 remote-ip-range 192.168.3.3 - 192.168.3.3  
 exec set ipsec sa 10 crypto-key 4a704c687334735374534f48396a4c54 integ-key 3366455645514a59326367346b71397652764f6b 
 exec set ipsec sa 20 crypto-key 4a704c687334735374534f48396a4c54 integ-key 3366455645514a59326367346b71397652764f6b 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectptsw-ip4base-func

IPv4 IPsec transport mode test suite.

  • [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.
  • [Cfg] DUT configuration: With enabled SW crytodev on DUT1 create loopback interface, configure loopback and physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.
  • [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.
  • [Ref] Applicable standard specifications: RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 723952366273616753306e4f4c7a5377 integ-alg sha1-96 integ-key 4d6d664e65384c784c746d703662737661396956  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 723952366273616753306e4f4c7a5377 integ-alg sha1-96 integ-key 4d6d664e65384c784c746d703662737661396956  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp process esp packet in transport mode with aes-cbc-192 encryption and sha-256-128 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-192 crypto-key 674e4b53737145554d6e50474c45527575756e61426c5a6a integ-alg sha-256-128 integ-key 4978393353785a577562466234563468674f6c526a346255326d74325132446b  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-192 crypto-key 674e4b53737145554d6e50474c45527575756e61426c5a6a integ-alg sha-256-128 integ-key 4978393353785a577562466234563468674f6c526a346255326d74325132446b  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc09: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-384-192 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 32504d63353642673853666f644453797457646243334f3977485576424d7a41 integ-alg sha-384-192 integ-key 4e773357667735784d696e705675347538367234616b574259306f70324d394a6236536d594356457978527a5a33326e  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 32504d63353642673853666f644453797457646243334f3977485576424d7a41 integ-alg sha-384-192 integ-key 4e773357667735784d696e705675347538367234616b574259306f70324d394a6236536d594356457978527a5a33326e  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc12: vpp process esp packet in transport mode with aes-cbc-256 encryption and sha-512-256 integrity 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-256 crypto-key 4d6554363371565039304b5461783961486b507738706b576d5858387a584c64 integ-alg sha-512-256 integ-key 567447514b6d5344636d55686c6b4373753476496b6d4558514e7a6c4162634c48424534436c334f6470556b7846655a76414a47687563384c76306b78377835  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-256 crypto-key 4d6554363371565039304b5461783961486b507738706b576d5858387a584c64 integ-alg sha-512-256 integ-key 567447514b6d5344636d55686c6b4373753476496b6d4558514e7a6c4162634c48424534436c334f6470556b7846655a76414a47687563384c76306b78377835  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc13: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 68367865676139566c50473442693875 integ-alg sha1-96 integ-key 5876463059375446473249796a5861714e774943  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 68367865676139566c50473442693875 integ-alg sha1-96 integ-key 5876463059375446473249796a5861714e774943  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc14: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 50787a4d445465745449364f696e366a integ-alg sha1-96 integ-key 5051737152764a4e593130796d384d6f324a5645  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 50787a4d445465745449364f696e366a integ-alg sha1-96 integ-key 5051737152764a4e593130796d384d6f324a5645  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc15: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 344c5136504a394e5242396459673348 integ-alg sha1-96 integ-key 3137634f774c7239463968304d677a3134533161  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 344c5136504a394e5242396459673348 integ-alg sha1-96 integ-key 3137634f774c7239463968304d677a3134533161  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc16: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5231594f3950366d444149353431437a integ-alg sha1-96 integ-key 586848595544524e507563556a346c7471675357  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5231594f3950366d444149353431437a integ-alg sha1-96 integ-key 586848595544524e507563556a346c7471675357  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 4e574c375163386c5652623658325566 integ-key 38596f497647354a764a614c6173483472303133 
 exec set ipsec sa 20 crypto-key 4e574c375163386c5652623658325566 integ-key 38596f497647354a764a614c6173483472303133 
 exec show trace  
  
 DUT2:  
 exec show trace
tc17: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6c426155466873547648634c574b335a integ-alg sha1-96 integ-key 506668534c6f496c75346e567738545173576659  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6c426155466873547648634c574b335a integ-alg sha1-96 integ-key 506668534c6f496c75346e567738545173576659  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 63656f68736267574e35785a646e3777 integ-key 735268563655694f526875534263574e424a5268 
 exec set ipsec sa 20 crypto-key 63656f68736267574e35785a646e3777 integ-key 735268563655694f526875534263574e424a5268 
 exec show trace  
  
 DUT2:  
 exec show trace
tc18: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 48394265674a386c4c43385056726973 integ-alg sha1-96 integ-key 6830436931775049544549754e706d775132396d  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 48394265674a386c4c43385056726973 integ-alg sha1-96 integ-key 6830436931775049544549754e706d775132396d  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 49744d71574b4a69786c73367255655a integ-key 32344648586b554a41384e39556c4c646a305266 
 exec set ipsec sa 20 crypto-key 49744d71574b4a69786c73367255655a integ-key 32344648586b554a41384e39556c4c646a305266 
 exec show trace  
  
 DUT2:  
 exec show trace
tc19: vpp process esp packet in transport mode with aes-cbc-128 encryption and sha1-96 integrity with update sa keys - different encryption and integrity alogrithms used 
 DUT1:  
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.100.3/24 
 sw_interface_add_del_address sw_if_index 5 192.168.4.4/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.100.2 mac fa:16:3e:b5:74:c2 
 ip_add_del_route 192.168.3.3/24 via 192.168.100.2  sw_if_index 1 resolve-attempts 10 count 1     
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 415348507072516368396e7356613351 integ-alg sha1-96 integ-key 665a4e3878657670616b664b4e456b6456735835  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 415348507072516368396e7356613351 integ-alg sha1-96 integ-key 665a4e3878657670616b664b4e456b6456735835  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 1 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 192.168.100.3 - 192.168.100.3 remote-ip-range 192.168.100.2 - 192.168.100.2  
 exec set ipsec sa 10 crypto-key 6d717465544e78345357716c39597945 integ-key 6a4d4d4d425575774471495763475a7976435078 
 exec set ipsec sa 20 crypto-key 6d717465544e78345357716c39597945 integ-key 6a4d4d4d425575774471495763475a7976435078 
 exec show trace  
  
 DUT2:  
 exec show trace

ip4

eth2p-dot1q-ip4base-func

IPv4 with VLAN subinterfaces

  • [Top] Network Topologies: TG-DUT1-TG 2-node circular topology with double links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-ICMPv4 on TG-DUT1-IF1, Eth-dot1q-IPv4-ICMPv4 on TG-DUT1-IF2.
  • [Cfg] DUT configuration: DUT1 is configured with 2 Vlan subinterfaces on DUT1-IF2. The subinterfaces and DUT1-IF1 have IP addresses set and corresponding IP neighbor entries are configured.
  • [Ref] Applicable standard specifications: IEEE 802.1q.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: process untagged send tagged 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 5 vlan 20 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 192.168.100.1/24 
 sw_interface_add_del_address sw_if_index 6 192.168.200.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:d0:4e:2b 
 ip_neighbor_add_del sw_if_index 5 dst 192.168.100.2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 6 dst 192.168.200.2 mac fa:16:3e:92:d6:d8 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: process tagged send untagged 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 5 vlan 20 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 192.168.100.1/24 
 sw_interface_add_del_address sw_if_index 6 192.168.200.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:d0:4e:2b 
 ip_neighbor_add_del sw_if_index 5 dst 192.168.100.2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 6 dst 192.168.200.2 mac fa:16:3e:92:d6:d8 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: process tagged send tagged 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 5 vlan 20 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 192.168.100.1/24 
 sw_interface_add_del_address sw_if_index 6 192.168.200.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.2 mac fa:16:3e:d0:4e:2b 
 ip_neighbor_add_del sw_if_index 5 dst 192.168.100.2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 6 dst 192.168.200.2 mac fa:16:3e:92:d6:d8 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-copblklistbase-func

COP Security IPv4 Blacklist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv4 routing and static routes. COP security black-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut drops ipv4 pkts with cop blacklist set with ipv4 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:7b:b3:6c 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_table_add_del table 1  
 cop_whitelist_enable_disable sw_if_index 1 ip4 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-copwhlistbase-func

COP Security IPv4 Whitelist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv4 routing and static routes. COP security white-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut permits ipv4 pkts with cop whitelist set with ipv4 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:7b:b3:6c 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_table_add_del table 1  
 ip_add_del_route 16.0.0.0/24  vrf 1  resolve-attempts 10 count 1    local 
 cop_whitelist_enable_disable sw_if_index 1 ip4 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-func

IPv4 routing test cases RFC791 IPv4, RFC826 ARP, RFC792 ICMPv4. Encapsulations: Eth-IPv4-ICMPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv4 routing tests use circular 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2 and received on TG links on the other side of circular topology. On receive TG verifies packets IPv4 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut replies to icmpv4 echo req to its ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc02: dut routes ipv4 to its egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc03: dut1 routes ipv4 to dut2 ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc04: dut1 routes ipv4 to dut2 egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc05: dut1 and dut2 route ipv4 between tg interfaces 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc06: dut replies to icmpv4 echo reqs with size 64b-to-1500b-incr-1b 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc08: dut replies to arp request 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace

eth2p-ethip4-ip4base-iaclbase-func

IPv4 routing with ingress ACL test cases Encapsulations: Eth-IPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv4 ingress ACL (iACL) tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. DUT1 is configured with iACL on link to TG, iACL classification and permit/deny action are configured on a per test case basis. Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped, or if received verifies packet IPv4 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with iacl ipv4 src-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:7b:b3:6c 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match l3 ip4 src 16.0.0.1 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: dut with iacl ipv4 dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:7b:b3:6c 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 33.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 2 match l3 ip4 dst 32.0.0.1 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc03: dut with iacl ipv4 src-addr and dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:7b:b3:6c 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 33.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match l3 ip4 src 16.0.0.1 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 1 match_n 2 match l3 ip4 dst 32.0.0.1 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 input_acl_set_interface sw_if_index 1 ip4-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc04: dut with iacl ipv4 protocol set to tcp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:7b:b3:6c 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000000000006 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc05: dut with iacl ipv4 protocol set to udp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:7b:b3:6c 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000000000011 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc06: dut with iacl ipv4 tcp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:7b:b3:6c 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc07: dut with iacl ipv4 tcp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:7b:b3:6c 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc08: dut with iacl ipv4 tcp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:7b:b3:6c 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc09: dut with iacl ipv4 udp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:7b:b3:6c 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc10: dut with iacl ipv4 udp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:7b:b3:6c 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc11: dut with iacl ipv4 udp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:7b:b3:6c 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3 resolve-attempts 10 count 1     
 classify_add_del_table mask hex 00000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 1 match hex 0000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip4-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-ip4arp-func

IPv4 ARP test cases RFC826 ARP: Eth-IPv4 and Eth-ARP on links TG-DUT1, TG-DUT2, DUT1-DUT2: IPv4 ARP tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv4 routing and static routes. DUT ARP functionality is tested by making TG send ICMPv4 Echo Requests towards its other interface via DUT1 and DUT2.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut sends arp request for unresolved locally connected ipv4 address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: dut sends arp request for route next hop ipv4 address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3  count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4base-ip4dhcpclient-func

DHCPv4 Client related test cases

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp sends a dhcp discover 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 dhcp_client_config sw_if_index 2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp sends a dhcpv4 discover with hostname 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 dhcp_client_config sw_if_index 2 hostname dhcp-client 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: vpp sends dhcpv4 request after offer 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 dhcp_client_config sw_if_index 2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: vpp doesn’t send dhcpv4 request after offer with wrong xid 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 dhcp_client_config sw_if_index 2  
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: vpp honors dhcpv4 lease time 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 dhcp_client_config sw_if_index 2  
 ip_neighbor_add_del sw_if_index 2 dst 192.168.23.1 mac fa:16:3e:d0:4e:2b 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-ip4dhcpproxy-func

DHCPv4 proxy test cases

  • [Top] Network Topologies: TG = DUT with two links between the nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-UDP-BOOTP-DHCP
  • [Cfg] DUT configuration: DUT is configured with DHCPv4 proxy.
  • [Ver] TG verification: Test DHCPv4 packets are sent on TG on first link to DUT and received on TG on second link. On receive TG verifies if DHCPv4 packets are valid.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp proxies valid dhcpv4 request to dhcpv4 server 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 sw_interface_add_del_address sw_if_index 2 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.0.100 mac fa:16:3e:92:d6:d8 
 dhcp_proxy_config svr 192.168.0.100 src 172.16.0.1 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp proxy ignores invalid dhcpv4 request 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 ip_add_del_route 255.255.255.255/32   local  count 1     
 sw_interface_add_del_address sw_if_index 2 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.0.100 mac fa:16:3e:92:d6:d8 
 dhcp_proxy_config svr 192.168.0.100 src 172.16.0.1 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-ip4ecmp-func

Ipv4 Multipath routing test cases

  • [Top] Network topologies: TG=DUT 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT configure interfaces IPv4 adresses, and multipath routing.
  • [Ver] TG verification: Test packets are sent from TG on the first link to DUT. Packet is received on TG on the second link from DUT1.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: ipv4 equal-cost multipath routing 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.2.10 mac 02:00:00:00:00:02 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.2.20 mac 02:00:00:00:00:03 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.10  sw_if_index 2  count 1  multipath   
 ip_add_del_route 32.0.0.1/24 via 192.168.2.20  sw_if_index 2  count 1  multipath   
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-ip4proxyarp-func

RFC1027 Proxy ARP test cases

  • [Top] Network topologies: TG-DUT1 2-node topology with single link between nodes.
  • [Cfg] DUT configuration: DUT1 is configured with Proxy ARP
  • [Ver] TG verification: Test ARP Request packet is sent from TG on link to DUT1; on receive TG verifies ARP reply packet for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC1027.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut sends arp reply on behalf of another machine from the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut sends arp reply on behalf of another machine from beginning of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut sends arp reply on behalf of another machine from end of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut does not send arp reply on behalf of another machine from below of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc05: dut does not send arp reply on behalf of another machine from above of the ip range 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10.0.0.1/24 
 proxy_arp_add_del 192.168.1.2 - 192.168.1.10 
 sw_interface_dump 
 proxy_arp_intfc_enable_disable sw_if_index 1 enable 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip4-ip4base-ipolicemarkbase-func

IPv4 policer test cases

  • [Top] Network topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT1 configure interfaces IPv4 adresses, and static ARP record on the second interface.
  • [Ver] TG verification: Test packet is sent from TG on the first link to DUT1. Packet is received on TG on the second link from DUT1.
  • [Ref] Applicable standard specifications: RFC2474, RFC2697, RFC2698.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp policer 2r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:92:d6:d8 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp policer 2r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:92:d6:d8 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: vpp policer 1r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:92:d6:d8 
 policer_add_del name policer1  cir 1 eir 0 cb 2 eb 300 rate_type pps round_type closest type 1r3c conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: vpp policer 1r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.122.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.123.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.123.2 mac fa:16:3e:92:d6:d8 
 policer_add_del name policer1  cir 100 eir 0 cb 200 eb 300 rate_type pps round_type closest type 1r3c conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.122.2 
 policer_classify_set_interface sw_if_index 2 ip4-table 0 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-ip4base-rpf-func

Source RPF check on IPv4 test cases

  • [Top] Network Topologies: TG - DUT1 - DUT2 - TG with one link between the nodes.
  • [Cfg] DUT configuration: DUT2 is configured with L2 Cross connect. DUT1 is configured with IP source check on link to TG,
  • [Ver] TG verification: Test ICMP Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets which source address is not in routes are dropped.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp source rpf check on ipv4 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:7b:b3:6c 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3  count 1     
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:92:d6:d8 
 ip_add_del_route 16.0.0.1/24 via 192.168.1.2  sw_if_index 1  count 1     
 exec set interface ip source-check GigabitEthernet0/4/0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: vpp pass traffic on non-enabled rpf interface 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 3 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.2 mac fa:16:3e:7b:b3:6c 
 ip_add_del_route 32.0.0.1/24 via 192.168.2.2  sw_if_index 3  count 1     
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:92:d6:d8 
 ip_add_del_route 16.0.0.1/24 via 192.168.1.2  sw_if_index 1  count 1     
 exec set interface ip source-check GigabitEthernet0/4/0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

eth2p-ethip4-ip4basevrf-func

Vpn routed forwarding - baseline IPv4

  • [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node topology with two links in between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4.
  • [Cfg] DUT configuration: Each DUT is configured with two VRF tables; Separation of traffic is tested by IP packets; Basic ARP and ROUTES are set on DUT nodes; IP addresses are set on DUT interfaces.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent by TG on link to DUT1, DUT2 or back to TG; On receipt TG verifies packets for correctness and their IPv4 src-addr, dst-addr, and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: tg packets routed to dut ingress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:d0:4e:2b 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:5b:3c:e5 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:17:78:19 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:be:46:9c 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:57:95:d2 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:d5:af:da 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc02: tg packets routed to dut egress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:d0:4e:2b 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:5b:3c:e5 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:17:78:19 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:be:46:9c 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:57:95:d2 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:d5:af:da 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc03: tg packets routed to dut2 ingress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:d0:4e:2b 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:5b:3c:e5 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:17:78:19 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:be:46:9c 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:57:95:d2 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:d5:af:da 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc04: tg packets routed to dut2 egress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:d0:4e:2b 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:5b:3c:e5 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:17:78:19 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:be:46:9c 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:57:95:d2 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:d5:af:da 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace
tc05: tg packets routed to tg through dut1 and dut2, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 30.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 10.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 10.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.1/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 10.0.0.1 mac fa:16:3e:d0:4e:2b 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.3 mac fa:16:3e:5b:3c:e5 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.0.2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.4 mac fa:16:3e:17:78:19 
 ip_add_del_route 30.0.0.1/24 via 20.0.0.3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 30.0.0.2/24 via 20.0.0.4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9  
 ip_table_add_del table 99  
 ip_add_del_route 10.0.0.1/24 via 9  sw_if_index None resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 99  sw_if_index None resolve-attempts 10 count 1     
 sw_interface_set_table sw_if_index 4 vrf 9  
 sw_interface_set_table sw_if_index 3 vrf 99  
 sw_interface_set_table sw_if_index 2 vrf 9  
 sw_interface_set_table sw_if_index 1 vrf 99  
 sw_interface_add_del_address sw_if_index 2 30.0.0.3/24 
 sw_interface_add_del_address sw_if_index 1 30.0.0.4/24 
 sw_interface_add_del_address sw_if_index 4 20.0.0.3/24 
 sw_interface_add_del_address sw_if_index 3 20.0.0.4/24 
 ip_neighbor_add_del sw_if_index 2 dst 30.0.0.1 mac fa:16:3e:be:46:9c 
 ip_neighbor_add_del sw_if_index 4 dst 20.0.0.1 mac fa:16:3e:57:95:d2 
 ip_neighbor_add_del sw_if_index 1 dst 30.0.0.2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 20.0.0.2 mac fa:16:3e:d5:af:da 
 ip_add_del_route 10.0.0.1/24 via 20.0.0.1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.2/24 via 20.0.0.2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 exec show trace

ip4 tunnels

gre

eth2p-ethip4gre-ip4base-func

GREoIPv4 test cases

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes; TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-GRE-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for routing over GRE tunnel; Eth-IPv4-ICMPv4 on TG_if1-DUT, Eth-IPv4-GRE-IPv4-ICMPv4 on TG_if2_DUT for GREoIPv4 encapsulation and decapsulation verification.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. GREoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; GREoIPv4 encapsulation and decapsulation are verified separately by TG; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC2784.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route over greoipv4 tunnel between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 1 192.168.0.1/24 
 gre_add_del_tunnel src 192.168.1.1 dst 192.168.1.2 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 5 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 192.168.1.2/24 
 sw_interface_add_del_address sw_if_index 1 192.168.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.2.100 mac fa:16:3e:7b:b3:6c 
 gre_add_del_tunnel src 192.168.1.2 dst 192.168.1.1 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.2/24 
 exec show trace
tc02: dut encapsulates ipv4 into greoipv4 tunnel - gre header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:92:d6:d8 
 gre_add_del_tunnel src 192.168.1.1 dst 192.168.1.2 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 5 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: dut decapsulates ipv4 from greoipv4 tunnel - ipv4 header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.100 mac fa:16:3e:d0:4e:2b 
 gre_add_del_tunnel src 192.168.1.1 dst 192.168.1.2 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: dut encapsulates ipv4 into greoipv4 different tunnels - gre header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.0.1/32 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:92:d6:d8 
 ip_add_del_route 10.0.0.2/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.3/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.2 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.3 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_add_del_address sw_if_index 6 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 7 172.16.1.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 6 resolve-attempts 10 count 1     
 ip_add_del_route 192.168.3.0/24 via 172.16.1.2  sw_if_index 7 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: dut re-encapsulates ipv4 gre into other gre tunnel - gre header verification 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.0.1/32 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:92:d6:d8 
 ip_add_del_route 10.0.0.2/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.3/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.2 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.3 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_add_del_address sw_if_index 6 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 7 172.16.1.1/24 
 ip_add_del_route 192.168.2.0/24 via 172.16.0.2  sw_if_index 6 resolve-attempts 10 count 1     
 ip_add_del_route 192.168.3.0/24 via 172.16.1.2  sw_if_index 7 resolve-attempts 10 count 1     
 exec show trace  
  
 DUT2:  
 exec show trace
tc06: dut do not process gre with wrong tunnel destination ip 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_loopback 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 sw_interface_add_del_address sw_if_index 2 192.168.0.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.0.1/32 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.100 mac fa:16:3e:d0:4e:2b 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:92:d6:d8 
 ip_add_del_route 10.0.0.2/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 ip_add_del_route 10.0.0.3/32 via 192.168.1.2  sw_if_index 1 resolve-attempts 10 count 1     
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.2 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 gre_add_del_tunnel src 10.0.0.1 dst 10.0.0.3 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_add_del_address sw_if_index 6 172.16.0.1/24 
 sw_interface_add_del_address sw_if_index 7 172.16.1.1/24 
 exec show trace  
  
 DUT2:  
 exec show trace

lisp

api-crud-lisp-func

API test cases

  • [Top] Network Topologies: DUT1 1-node topology.
  • [Enc] Packet Encapsulations: None.
  • [Cfg] DUT configuration: DUT1 gets configured with all LISP parameters.
  • [Ver] Verification: DUT1 operational data gets verified following configuration.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut can enable and disable lisp 
 DUT1:  
 lisp_enable_disable enable 
 lisp_enable_disable disable 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut can add and delete locator_set 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_locator_set_dump local 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_locator_set_dump  
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: dut can add, reset and delete locator_set 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls0 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_add_del_locator_set locator-set ls2 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 
 lisp_locator_set_dump local 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 4 p 1 w 1 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 2 p 2 w 2 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 3 p 3 w 3 del 
 lisp_add_del_locator locator-set ls0 sw_if_index 1 p 4 w 4 del 
 lisp_add_del_locator_set locator-set ls0 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 4 p 5 w 5 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 2 p 6 w 6 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 7 w 7 del 
 lisp_add_del_locator locator-set ls1 sw_if_index 1 p 8 w 8 del 
 lisp_add_del_locator_set locator-set ls1 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 4 p 9 w 9 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 2 p 10 w 10 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 3 p 11 w 11 del 
 lisp_add_del_locator locator-set ls2 sw_if_index 1 p 12 w 12 del 
 lisp_add_del_locator_set locator-set ls2 del 
 lisp_locator_set_dump  
 exec show trace  
  
 DUT2:  
 exec show trace
tc04: dut can add and delete eid address 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.0.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.1.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.2.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.3.0/24 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 10:1::/64 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 10:2::/64 locator-set ls1 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 10:3::/64 locator-set ls1 
 lisp_add_del_local_eid vni 0 eid 192.168.0.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 192.168.1.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 192.168.2.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 192.168.3.0/24 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 10:1::/64 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 10:2::/64 locator-set ls1 del 
 lisp_add_del_local_eid vni 0 eid 10:3::/64 locator-set ls1 del 
 lisp_add_del_locator_set locator-set ls1 del 
 exec show trace  
  
 DUT2:  
 exec show trace
tc05: dut can add and delete lisp map resolver address 
 DUT1:  
 lisp_enable_disable enable 
 lisp_add_del_map_resolver 192.169.0.1 
 lisp_add_del_map_resolver 192.169.1.1 
 lisp_add_del_map_resolver 192.169.2.1 
 lisp_add_del_map_resolver 12:1::1 
 lisp_add_del_map_resolver 12:2::1 
 lisp_add_del_map_resolver 192.169.0.1 del 
 lisp_add_del_map_resolver 192.169.1.1 del 
 lisp_add_del_map_resolver 192.169.2.1 del 
 lisp_add_del_map_resolver 12:1::1 del 
 lisp_add_del_map_resolver 12:2::1 del 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4lisp-ip4base-func

IP AFI independent functional tests.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 over lispoipv4 tunnel after disable-enable 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:92:d6:d8 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 lisp_enable_disable disable 
 lisp_enable_disable enable 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:7b:b3:6c 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec show trace

eth2p-ethip4lisp-l2bdbasemaclrn-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4-LISPGpe-IP4
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: route ipv4 packet through lisp with bridge domain setup. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 10.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 10.0.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.1.2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 10.0.3.2 mac fa:16:3e:17:78:19 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:11 locator-set tst_locator 
 lisp_add_del_map_resolver 10.0.0.2 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:22 seid 08:22:22:22:22:11 rloc 10.0.3.2 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:22 leid 08:22:22:22:22:11 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 10.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 10.0.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.2.2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 10.0.3.1 mac fa:16:3e:d5:af:da 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:22 locator-set tst_locator 
 lisp_add_del_map_resolver 10.0.0.1 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:11 seid 08:22:22:22:22:22 rloc 10.0.3.1 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:11 leid 08:22:22:22:22:22 
 exec show trace

eth2p-ethip4lispgpe-ip4base-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using physical interfaces 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:17:78:19 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 0 reid 6.0.5.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:d5:af:da 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip4basevrf-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:17:78:19 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 1 reid 6.0.5.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:d5:af:da 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 1 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip6base-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lispoipv4 tunnel 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6:0:1::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:1::2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.2 mac fa:16:3e:17:78:19 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6:0:1::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 lisp_add_del_remote_mapping del vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency del vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.20 mac fa:16:3e:17:78:19 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.20 
 lisp_add_del_adjacency add vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6:0:2::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:2::2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:d5:af:da 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6:0:2::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:1::0/64 seid 6:0:2::0/64 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 0 reid 6:0:1::0/64 leid 6:0:2::0/64 
 sw_interface_add_del_address sw_if_index 3 del-all 
 sw_interface_add_del_address sw_if_index 3 6.0.3.20/24 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:d5:af:da 
 exec show trace

eth2p-ethip4lispgpe-ip6basevrf-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:1::2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.2 mac fa:16:3e:17:78:19 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6:0:1::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6:0:1::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 1 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 1 reid 6:0:2::0/64 leid 6:0:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:2::2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:d5:af:da 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6:0:2::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6:0:2::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 1 eid 6:0:1::0/64 seid 6:0:2::0/64 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 1 reid 6:0:1::0/64 leid 6:0:2::0/64 
 exec show trace

vxlan

eth2p-dot1qip4vxlan-l2bdbasemaclrn-func

RFC7348 VXLAN: Bridge-domain with VXLAN over VLAN test cases

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-dot1q-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with static MACs, MAC learning enabled and Split Horizon Groups (SHG) depending on test case; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv4ovlan tunnels switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vlan_subif sw_if_index 3 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 5 172.16.0.1/24 
 ip_neighbor_add_del sw_if_index 5 dst 172.16.0.2 mac fa:16:3e:c4:57:52 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=23,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=23) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=23) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vlan_subif sw_if_index 3 vlan 10 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 5 172.16.0.2/24 
 ip_neighbor_add_del sw_if_index 5 dst 172.16.0.1 mac fa:16:3e:f4:4e:e5 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=23,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=23) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=23) 
 exec show trace

eth2p-ethip4vxlan-l2bdbasemaclrn-func

Bridge-domain with VXLAN test cases - IPv4

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.2 mac fa:16:3e:c4:57:52 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.1 mac fa:16:3e:f4:4e:e5 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace

eth2p-ethip4vxlan-l2xcbase-func

RFC7348 VXLAN: L2 cross-connect with VXLAN test cases

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching; VXLAN tunnels are configured between L2XCs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vxlanoipv4 tunnels switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.2 mac fa:16:3e:c4:57:52 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 24 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 ip_neighbor_add_del sw_if_index 3 dst 172.16.0.1 mac fa:16:3e:f4:4e:e5 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 24 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth4p-ethip4vxlan-l2bdbasemaclrn-l2shg-func

L2BD with SHG combined with VXLAN test cases - IPv4

  • [Top] Network topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG); VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels in shg switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=1,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace
tc01: dut1 and dut2 with l2bd and vxlanoipv4 tunnels in different shgs switch icmpv4 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=2,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace

ip6

eth2p-ethip6-ip6base-copblklistbase-func

COP Security IPv6 Blacklist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv6 routing and static routes. COP security black-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut drops ipv6 pkts with cop blacklist set with ipv6 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:62::2 mac fa:16:3e:df:98:23 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:0c:c2:d0 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_table_add_del table 1 ipv6 
 cop_whitelist_enable_disable sw_if_index 1 ip6 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_add_del_address sw_if_index 3 3ffe:72::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:73::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-copwhlistbase-func

COP Security IPv6 Whitelist Tests

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6 on all links.
  • [Cfg] DUT configuration: DUT1 is configured with IPv6 routing and static routes. COP security white-lists are applied on DUT1 ingress interface from TG. DUT2 is configured with L2XC.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut permits ipv6 pkts with cop whitelist set with ipv6 src-addr 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:62::2 mac fa:16:3e:df:98:23 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:0c:c2:d0 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_table_add_del table 1 ipv6 
 ip_add_del_route 3ffe:61::/64  vrf 1  resolve-attempts 10 count 1    local 
 cop_whitelist_enable_disable sw_if_index 1 ip6 fib-id 1 
 cop_interface_enable_disable sw_if_index 1  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_add_del_address sw_if_index 3 3ffe:72::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:73::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-func

IPv6 routing test cases RFC2460 IPv6, RFC4443 ICMPv6, RFC4861 Neighbor Discovery. Encapsulations: Eth-IPv6-ICMPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2; Eth-IPv6-NS/NA on links TG-DUT. IPv6 routing tests use circular 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2 and received on TG links on the other side of circular topology. On receive TG verifies packets IPv6 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut replies to icmpv6 echo req to its ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc02: dut replies to icmpv6 echo req pkt with size 64b-to-1500b-incr-1b 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc04: dut routes to its egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc05: dut1 routes to dut2 ingress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc06: dut1 routes to dut2 egress interface 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc07: dut1 and dut2 route between tg interfaces 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace
tc08: dut replies to ipv6 neighbor solicitation 
 DUT1:  
 cli_inband(cmd=clear interfaces) 
 exec show trace  
  
 DUT2:  
 cli_inband(cmd=clear interfaces) 
 exec show trace

eth2p-ethip6-ip6base-iaclbase-func

IPv6 routing with ingress ACL test cases Encapsulations: Eth-IPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2. IPv6 ingress ACL (iACL) tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. DUT1 is configured with iACL on link to TG, iACL classification and permit/deny action are configured on a per test case basis. Test ICMPv6 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped, or if received verifies packet IPv6 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with iacl ipv6 src-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:0c:c2:d0 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:61::1 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc02: dut with iacl ipv6 dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:0c:c2:d0 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 3ffe:54::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 2 match_n 2 match l3 ip6 dst 3ffe:64::1 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc03: dut with iacl ipv6 src-addr and dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:0c:c2:d0 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 ip_add_del_route 3ffe:54::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:61::1 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 2 match_n 2 match l3 ip6 dst 3ffe:64::1 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 input_acl_set_interface sw_if_index 1 ip6-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc04: dut with iacl ipv6 protocol set to tcp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:0c:c2:d0 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000006 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: dut with iacl ipv6 protocol set to udp drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:0c:c2:d0 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000FF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 1 match_n 1 match hex 000000000000000000000000000000000000000011 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc06: dut with iacl ipv6 tcp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:0c:c2:d0 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc07: dut with iacl ipv6 tcp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:0c:c2:d0 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc08: dut with iacl ipv6 tcp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:0c:c2:d0 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc09: dut with iacl ipv6 udp src-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:0c:c2:d0 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF0000 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc10: dut with iacl ipv6 udp dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:0c:c2:d0 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc11: dut with iacl ipv6 udp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 3ffe:63::2 mac fa:16:3e:0c:c2:d0 
 ip_add_del_route 3ffe:64::1/64 via 3ffe:63::2  sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc12: dut with iacl mac src-addr and iacl ipv6 udp src-ports and dst-ports drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l2 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 src fa:16:3e:df:98:23 
 classify_add_del_table mask hex 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 3 match_n 1 match hex 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500014 
 input_acl_set_interface sw_if_index 1 l2-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-ip6dhcpproxy-func

DHCPv6 proxy test cases

  • [Top] Network Topologies: TG = DUT with two links between the nodes.
  • [Cfg] DUT configuration: DUT is configured with DHCPv6 proxy.
  • [Ver] TG verification: Test DHCPv6 packets are sent on TG on first link to DUT and received on TG on second link. On receive TG verifies if DHCPv6 packets are valid
  • [Ref] Applicable standard specifications: RFC 3315
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp proxies valid dhcpv6 request to dhcpv6 server 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:63::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_add_del_route ff02::1:2/128   local  count 1     
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:63::2 mac fa:16:3e:df:98:23 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 dhcp_proxy_config svr 3ffe:63::2 src 3ffe:62::1 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-ip6ecmp-func

Ipv6 Multipath routing test cases

  • [Top] Network topologies: TG=DUT 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT configure interfaces IPv4 adresses, and multipath routing.
  • [Ver] TG verification: Test packets are sent from TG on the first link to DUT. Packet is received on TG on the second link from DUT1.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: ipv6 equal-cost multipath routing 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:61::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_add_del_address sw_if_index 2 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 ip_neighbor_add_del sw_if_index 2 dst 3ffe:62::2 mac 02:00:00:00:00:02 
 ip_neighbor_add_del sw_if_index 2 dst 3ffe:62::3 mac 02:00:00:00:00:03 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 ip_add_del_route 3ffe:71::1/64 via 3ffe:62::2  sw_if_index 2  count 1  multipath   
 ip_add_del_route 3ffe:71::1/64 via 3ffe:62::3  sw_if_index 2  count 1  multipath   
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6base-ip6ra-func

IPv6 Router Advertisement test cases RFC4861 Neighbor Discovery. Encapsulations: Eth-IPv6-RA on links TG-DUT1. IPv6 Router Advertisement tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 and DUT2 are configured with IPv6 routing and static routes. TG verifies received RA packets.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut transmits ra on ipv6 enabled interface 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 interval 2 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut retransmits ra on ipv6 enabled interface after a set interval 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 interval 2 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut responds to router solicitation request 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut responds to router solicitation request sent from link local address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 3ffe:62::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip6-ip6base-ipolicemarkbase-func

IPv6 policer test cases

  • [Top] Network topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: On DUT1 configure interfaces IPv6 adresses, and static neighbor record on the second interface.
  • [Ver] TG verification: Test packet is sent from TG on the first link to DUT1. Packet is received on TG on the second link from DUT1.
  • [Ref] Applicable standard specifications: RFC2474, RFC2697, RFC2698.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: vpp policer 2r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:df:98:23 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc02: vpp policer 2r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:df:98:23 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 100 eir 150 cb 200 eb 300 rate_type pps round_type closest type 2r3c-2698 conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc03: vpp policer 1r3c color-aware marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:df:98:23 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 1 eir 0 cb 2 eb 300 rate_type pps round_type closest type 1r3c conform_action transmit exceed_action mark-and-transmit AF22 violate_action drop color-aware 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 exceed-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc04: vpp policer 1r3c color-blind marks packet 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 3ffe:5f::1/64 
 sw_interface_set_flags sw_if_index 2 admin-up 
 sw_interface_add_del_address sw_if_index 1 3ffe:60::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 3ffe:60::2 mac fa:16:3e:df:98:23 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 policer_add_del name policer1  cir 100 eir 0 cb 200 eb 0 rate_type pps round_type closest type 1r3c conform_action mark-and-transmit AF22 exceed_action transmit violate_action drop  
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session policer-hit-next 0 conform-color table-index 0 skip_n 1 match_n 2 match l3 ip6 src 3ffe:5f::2 
 policer_classify_set_interface sw_if_index 2 ip6-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

eth2p-ethip6-ip6basevrf-func

Vpn routed forwarding - baseline IPv6

  • [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node topology with two links in between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-ICMPv6
  • [Cfg] DUT configuration: Each DUT is configured with two VRF tables; Separation of traffic is tested by IP packets; Neighbors and Routes are set on DUT nodes; IP addresses are set on DUT interfaces.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent by TG on link to DUT1, DUT2 or back to TG; On receipt TG verifies packets for correctness and their IPv6 src-addr, dst-addr, and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: tg packets routed to dut ingress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:32:f5:89 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:7f:4b:44 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:df:98:23 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:c3:a6:ca 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:9f:68:60 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:fc:a4:d2 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:0c:c2:d0 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:3c:63:8f 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc02: tg packets routed to dut egress interface, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:32:f5:89 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:7f:4b:44 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:df:98:23 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:c3:a6:ca 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:9f:68:60 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:fc:a4:d2 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:0c:c2:d0 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:3c:63:8f 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc03: tg packets routed to dut2 ingress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:32:f5:89 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:7f:4b:44 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:df:98:23 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:c3:a6:ca 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:9f:68:60 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:fc:a4:d2 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:0c:c2:d0 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:3c:63:8f 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc04: tg packets routed to dut2 egress interface through dut1, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:32:f5:89 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:7f:4b:44 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:df:98:23 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:c3:a6:ca 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:9f:68:60 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:fc:a4:d2 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:0c:c2:d0 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:3c:63:8f 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace
tc05: tg packets routed to tg through dut1 and dut2, vpp configured with two vrfs 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2001:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2001:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::1/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::2/64 
 ip_neighbor_add_del sw_if_index 2 dst 2001:62::1 mac fa:16:3e:32:f5:89 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::3 mac fa:16:3e:7f:4b:44 
 ip_neighbor_add_del sw_if_index 1 dst 2001:62::2 mac fa:16:3e:df:98:23 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::4 mac fa:16:3e:c3:a6:ca 
 ip_add_del_route 2003:62::1/64 via 2002:62::3 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2003:62::2/64 via 2002:62::4 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 4 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 9 ipv6 
 ip_table_add_del table 99 ipv6 
 sw_interface_set_table sw_if_index 4 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 3 vrf 99 ipv6 
 sw_interface_set_table sw_if_index 2 vrf 9 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 99 ipv6 
 sw_interface_add_del_address sw_if_index 2 2003:62::3/64 
 sw_interface_add_del_address sw_if_index 1 2003:62::4/64 
 sw_interface_add_del_address sw_if_index 4 2002:62::3/64 
 sw_interface_add_del_address sw_if_index 3 2002:62::4/64 
 ip_neighbor_add_del sw_if_index 2 dst 2003:62::1 mac fa:16:3e:9f:68:60 
 ip_neighbor_add_del sw_if_index 4 dst 2002:62::1 mac fa:16:3e:fc:a4:d2 
 ip_neighbor_add_del sw_if_index 1 dst 2003:62::2 mac fa:16:3e:0c:c2:d0 
 ip_neighbor_add_del sw_if_index 3 dst 2002:62::2 mac fa:16:3e:3c:63:8f 
 ip_add_del_route 2001:62::1/64 via 2002:62::1 vrf 9 sw_if_index 4 resolve-attempts 10 count 1     
 ip_add_del_route 2001:62::2/64 via 2002:62::2 vrf 99 sw_if_index 3 resolve-attempts 10 count 1     
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 exec show trace

ip6 tunnels

lisp

eth2p-ethip6lisp-l2bdbasemaclrn-func

l2-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IP6-ICMPv6-LISPGpe-IP6
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge domains and neighbors. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: route ipv6 packet through lisp with bridge domain setup. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:17:78:19 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:11 locator-set tst_locator 
 lisp_add_del_map_resolver 2001:cdba:2::2 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:22 seid 08:22:22:22:22:11 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:22 leid 08:22:22:22:22:11 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:d5:af:da 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 5 bd_index 10 
 lisp_add_del_local_eid vni 5 eid 08:22:22:22:22:22 locator-set tst_locator 
 lisp_add_del_map_resolver 2001:cdba:1::2 
 lisp_add_del_remote_mapping add vni 5 eid 08:22:22:22:22:11 seid 08:22:22:22:22:22 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 5 reid 08:22:22:22:22:11 leid 08:22:22:22:22:22 
 exec show trace

eth2p-ethip6lispgpe-ip4base-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lispoipv6 tunnel 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6:0:3::1/64 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:92:d6:d8 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6:0:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 lisp_add_del_remote_mapping del vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6:0:3::2 
 lisp_add_del_adjacency del vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 ip_neighbor_add_del sw_if_index 3 dst 6:0:3::20 mac fa:16:3e:17:78:19 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 6:0:3::20 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6:0:3::2/64 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:7b:b3:6c 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 6:0:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 sw_interface_add_del_address sw_if_index 3 del-all 
 sw_interface_add_del_address sw_if_index 3 6:0:3::20/64 
 ip_neighbor_add_del sw_if_index 3 dst 6:0:3::1 mac fa:16:3e:d5:af:da 
 exec show trace

eth2p-ethip6lispgpe-ip6base-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:17:78:19 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:d5:af:da 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

eth2p-ethip6lispgpe-ip6basevrf-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using physical interfaces and vrf is enabled 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:17:78:19 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:d5:af:da 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

vxlan

eth2p-ethip6vxlan-l2bdbasemaclrn-func

Bridge-domain with VXLAN test cases - IPv6

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv6 tunnels switch icmpv6 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 exec show trace

eth4p-ethip6vxlan-l2bdbasemaclrn-l2shg-func

L2BD with SHG combined with VXLAN test cases - IPv6

  • [Top] Network topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
  • [Enc] Packet encapsulations: th-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG); VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vxlanoipv6 tunnels in shg switch icmpv6 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=1,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace
tc02: dut1 and dut2 with l2bd and vxlanoipv6 tunnels in different shgs switch icmpv6 between tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=1,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=2,port_type=0,bd_id=10) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 35 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=20) 
 bridge_domain_add_del(bd_id=30,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=30) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=30) 
 exec show trace

l2bd

eth2p-dot1ad–dot1q-l2bdbasemaclrn-vlantrans21-func

L2BD with VLAN tag rewrite test cases - transalte-2-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-2-1 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-2-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc03: dut1 and dut2 with l2bd and vlan translate-2-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-dot1ad-l2bdbasemaclrn-vlantrans22-func

L2BD with VLAN tag rewrite test cases - translate-2-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-2-2 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-2-2 switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc05: dut1 and dut2 with l2bd and vlan translate-2-2 switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-dot1q–dot1ad-l2bdbasemaclrn-vlantrans12-func

L2BD with VLAN tag rewrite test cases - translate-1-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-1-2 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-1-2 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=210,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc05: dut1 and dut2 with l2bd and vlan translate-1-2 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-dot1q-l2bdbasemaclrn-vlantrans11-func

L2BD with VLAN tag rewrite test cases - translate-1-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with bridge domain (L2BD) switching combined with MAC learning enabled and added VLAN sub-interface with VLAN tag rewrite translate-1-1 method of interface towards TG and interface towards DUT2. DUT2 is configured with L2 bridge domain (L2BD) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd and vlan translate-1-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace
tc03: dut1 and dut2 with l2bd and vlan translate-1-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace

eth2p-eth-l2bdbasemaclrn-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes; TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports active interfaces 
 DUT1:  
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with l2bd (mac learning) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc03: dut1 and dut2 with l2bd (mac learning) switch between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace

eth2p-eth-l2bdbasemacstc-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with static MACs.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd (static macs) switch between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>xdfx98#,sw_if_index=1,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>xc2xd0,sw_if_index=3,bvi_mac=0) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=2) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>xdfx98#,sw_if_index=3,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>xc2xd0,sw_if_index=1,bvi_mac=0) 
 exec show trace

eth4p-eth-l2bdbasemaclrn-l2shg-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT1=DUT2=TG 3-node circular topology with double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled and Split Horizon Groups (SHG).
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2bd (mac learn) and shg switch between four tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=3,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=3,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=4,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=4,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=3,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace

l2xc

eth2p-dot1ad–dot1q-l2xcbase-vlantrans21-func

L2XC with VLAN tag rewrite test cases - translate-2-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1, Eth-dot1q-IPv4-ICMPv4 or Eth-dot1aq-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-2-1 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-2-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc03: dut1 and dut2 with l2xc and vlan translate-2-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=7,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1ad-l2xcbase-func

L2 cross-connect with QinQ test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching with 802.1ad QinQ VLAN tag push and pop.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and two vlan push-pop switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 100 inner_vlan_id 200 two_tags 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 100 inner_vlan_id 200 two_tags 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1ad-l2xcbase-vlantrans22-func

L2XC with VLAN tag rewrite test cases - translate-2-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-2-2 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-2-2 switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc05: dut1 and dut2 with l2xc and vlan translate-2-2 switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_subif sw_if_index 1 sub_id 10 outer_vlan_id 110 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=8,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1q–dot1ad-l2xcbase-vlantrans12-func

L2XC with VLAN tag rewrite test cases - translate-1-2

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1, Eth-dot1ad-IPv4-ICMPv4 or Eth-dot1ad-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv6-ICMPv6 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-1-2 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-2 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-1-2 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=210,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 210 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc05: dut1 and dut2 with l2xc and vlan translate-1-2 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=6,tag2=220,push_dot1q=0,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_subif sw_if_index 3 sub_id 10 outer_vlan_id 120 inner_vlan_id 220 two_tags dot1ad 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 l2_interface_vlan_tag_rewrite(vtr_op=4,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-dot1q-l2xcbase-vlantrans11-func

L2XC with VLAN tag rewrite test cases - translate-1-1

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG-DUT1 and DUT1-DUT2, Eth-IPv4-ICMPv4 or Eth-IPv4-ICMPv4 on TG-DUT2 for L2 switching of IPv4/IPv6.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite translate-1-1 method of interface towards TG and interface towards DUT2. DUT2 is configured configured with L2 cross-connect (L2XC) switching between VLAN sub-interface with VLAN tag rewrite pop-1 method of interface towards DUT1 and interface towards TG.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent from TG on link to DUT1 and received in TG on link form DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: IEEE 802.1q, IEEE 802.1ad.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc and vlan translate-1-1 (dut1) switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace
tc03: dut1 and dut2 with l2xc and vlan translate-1-1 (dut1) switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=5,tag2=0,push_dot1q=1,tag1=120,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=3) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 create_vlan_subif sw_if_index 3 vlan 120 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 l2_interface_vlan_tag_rewrite(vtr_op=3,tag2=0,push_dot1q=1,tag1=0,sw_if_index=5) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=1) 
 exec show trace

eth2p-eth-l2xcbase-func

L2 cross-connect test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 cross-connect (L2XC) switching.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 with l2xc switch icmpv4 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_dump 
 exec show trace
tc02: dut1 and dut2 with l2xc switch icmpv6 between two tg links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 sw_interface_dump 
 exec show trace

eth2p-eth-l2xcbase-iaclbase-func

Ingress ACL test cases

  • [Top] Network Topologies: TG - DUT1 - DUT2 - TG with one link between the nodes.
  • [Cfg] DUT configuration: DUT2 is configured with L2 Cross connect. DUT1 is configured with iACL classification on link to TG,
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in one direction by TG on link to DUT1 and received on TG link to DUT2. On receive TG verifies if packets are dropped.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with iacl mac src-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask l2 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 src fa:16:3e:df:98:23 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc02: dut with iacl mac dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask l2 dst 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 dst fa:16:3e:0c:c2:d0 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc03: dut with iacl mac src-addr and dst-addr drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask l2 src 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match l2 src fa:16:3e:df:98:23 
 classify_add_del_table mask l2 dst 
 classify_add_del_session acl-hit-next deny table-index 1 skip_n 0 match_n 1 match l2 dst fa:16:3e:df:98:23 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 input_acl_set_interface sw_if_index 1 l2-table 1 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace
tc04: dut with iacl ethertype drops matching pkts 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 classify_add_del_table mask hex 000000000000000000000000ffff 
 classify_add_del_session acl-hit-next deny table-index 0 skip_n 0 match_n 1 match hex 0000000000000000000000000800 
 input_acl_set_interface sw_if_index 1 l2-table 0 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=3,enable=1,tx_sw_if_index=1) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=3) 
 exec show trace

telemetry

eth2p-ethip4-ip4base-ip4ipfixbase-func

IPFIX ipv4 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector. Test packets are sent from TG to DUT1. TG listens for flow report packets and verifies that they contains flow record of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut sends ipfix template and data packets 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:df:98:23 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.1.2 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow for traffic by source address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:df:98:23 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.1.2 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut reports packet flow for traffic with local destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:df:98:23 
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 dst 192.168.1.1 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut reports packet flow for traffic with remote destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:df:98:23 
 ip_neighbor_add_del sw_if_index 3 dst 192.168.2.1 mac fa:16:3e:c3:a6:ca 
 classify_add_del_table mask l3 ip4 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 dst 192.168.2.1 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc05: dut reports packet flow for traffic by source and destination port 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:df:98:23 
 classify_add_del_table mask l3 ip4 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 80 dst_port 80 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip4-ip4base-ip4ipfixscale-func

IPFIX ipv4 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector. Test packets are sent from TG to DUT1. TG listens for flow report packets and verifies that they contains flow record of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports packet flow with a large number of packets 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:df:98:23 
 classify_add_del_table mask l3 ip4 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 1 match l3 ip4 src 192.168.1.2 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow when multiple sessions are configured 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:df:98:23 
 classify_add_del_table mask l3 ip4 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 0 dst_port 0 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 1 dst_port 1 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 2 dst_port 2 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 3 dst_port 3 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 4 dst_port 4 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 5 dst_port 5 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 6 dst_port 6 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 7 dst_port 7 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 8 dst_port 8 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 9 dst_port 9 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 10 dst_port 10 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 11 dst_port 11 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 12 dst_port 12 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 13 dst_port 13 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 14 dst_port 14 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 15 dst_port 15 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 16 dst_port 16 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 17 dst_port 17 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 18 dst_port 18 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 19 dst_port 19 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 20 dst_port 20 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 21 dst_port 21 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 22 dst_port 22 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 23 dst_port 23 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 24 dst_port 24 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 25 dst_port 25 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 26 dst_port 26 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 27 dst_port 27 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 28 dst_port 28 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 29 dst_port 29 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 30 dst_port 30 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 31 dst_port 31 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 32 dst_port 32 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 33 dst_port 33 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 34 dst_port 34 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 35 dst_port 35 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 36 dst_port 36 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 37 dst_port 37 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 38 dst_port 38 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 39 dst_port 39 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 40 dst_port 40 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 41 dst_port 41 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 42 dst_port 42 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 43 dst_port 43 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 44 dst_port 44 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 45 dst_port 45 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 46 dst_port 46 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 47 dst_port 47 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 48 dst_port 48 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 49 dst_port 49 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 50 dst_port 50 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 51 dst_port 51 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 52 dst_port 52 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 53 dst_port 53 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 54 dst_port 54 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 55 dst_port 55 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 56 dst_port 56 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 57 dst_port 57 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 58 dst_port 58 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 59 dst_port 59 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 60 dst_port 60 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 61 dst_port 61 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 62 dst_port 62 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 63 dst_port 63 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 64 dst_port 64 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 65 dst_port 65 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 66 dst_port 66 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 67 dst_port 67 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 68 dst_port 68 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 69 dst_port 69 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 70 dst_port 70 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 71 dst_port 71 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 72 dst_port 72 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 73 dst_port 73 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 74 dst_port 74 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 75 dst_port 75 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 76 dst_port 76 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 77 dst_port 77 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 78 dst_port 78 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip4 src 192.168.1.2 proto 6 l4 src_port 79 dst_port 79 
 flow_classify_set_interface sw_if_index 1 ip4-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1  path_mtu 1450 template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip4 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip4-ip4base-spanrx-func

SPAN test suite

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: DUT1 is configured with SPAN mirroring from the first DUT1-TG interface to the second one.
  • [Ver] TG verification: Test ARP or ICMP packets are sent by TG on first link to DUT1; On receipt through second link TG verifies the copy of packet sent and the copy of DUT’s reply packet.
  • [Ref] Applicable standard specifications: None?
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut mirrors l2 packets from one interface to another 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.1.2/24 
 sw_interface_span_enable_disable src_sw_if_index 2 dst_sw_if_index 1 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut mirrors ipv4 packets from one interface to another 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.1.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.1.1 mac fa:16:3e:32:f5:89 
 sw_interface_span_enable_disable src_sw_if_index 2 dst_sw_if_index 1 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip6-ip6base-ip6ipfixbase-func

IPFIX ipv6 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 and IPV6 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector.Test packets are sent from TG to or through DUT1. TG listens for flow report packets and verifies that they contains flow records of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports packet flow for traffic by source address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:df:98:23 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:df:98:23 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip6 src 12::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow for traffic with local destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:df:98:23 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:df:98:23 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 2 match_n 2 match l3 ip6 dst 10::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc03: dut reports packet flow for traffic with remote destination address 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:df:98:23 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:df:98:23 
 ip_neighbor_add_del sw_if_index 3 dst 11::10 mac fa:16:3e:c3:a6:ca 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 dst 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 2 match_n 2 match l3 ip6 dst 11::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc04: dut reports packet flow for traffic by source and destination port 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:df:98:23 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:df:98:23 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 80 dst_port 80 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip6-ip6base-ip6ipfixscale-func

IPFIX ipv6 test cases IPFIX tests use 3-node topology TG - DUT1 - DUT2 - TG with one link between the nodes. DUT1 is configured with IPv4 and IPV6 routing and static routes. IPFIX is configured on DUT1 with DUT1->TG interface as collector.Test packets are sent from TG to or through DUT1. TG listens for flow report packets and verifies that they contains flow records of test packets sent.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut reports packet flow with a large number of packets 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:df:98:23 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:df:98:23 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 2 match l3 ip6 src 12::10 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1   template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace
tc02: dut reports packet flow when multiple sessions are configured 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 1 10::10/64 
 sw_interface_add_del_address sw_if_index 1 192.168.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 192.168.1.2 mac fa:16:3e:df:98:23 
 ip_neighbor_add_del sw_if_index 1 dst 12::10 mac fa:16:3e:df:98:23 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 classify_add_del_table mask l3 ip6 src proto l4 src_port dst_port 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 0 dst_port 0 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 1 dst_port 1 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 2 dst_port 2 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 3 dst_port 3 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 4 dst_port 4 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 5 dst_port 5 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 6 dst_port 6 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 7 dst_port 7 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 8 dst_port 8 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 9 dst_port 9 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 10 dst_port 10 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 11 dst_port 11 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 12 dst_port 12 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 13 dst_port 13 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 14 dst_port 14 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 15 dst_port 15 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 16 dst_port 16 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 17 dst_port 17 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 18 dst_port 18 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 19 dst_port 19 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 20 dst_port 20 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 21 dst_port 21 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 22 dst_port 22 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 23 dst_port 23 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 24 dst_port 24 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 25 dst_port 25 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 26 dst_port 26 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 27 dst_port 27 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 28 dst_port 28 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 29 dst_port 29 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 30 dst_port 30 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 31 dst_port 31 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 32 dst_port 32 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 33 dst_port 33 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 34 dst_port 34 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 35 dst_port 35 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 36 dst_port 36 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 37 dst_port 37 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 38 dst_port 38 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 39 dst_port 39 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 40 dst_port 40 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 41 dst_port 41 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 42 dst_port 42 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 43 dst_port 43 
 classify_add_del_session acl-hit-next permit table-index 0 skip_n 1 match_n 3 match l3 ip6 src 12::10 proto 6 l4 src_port 44 dst_port 44 
 flow_classify_set_interface sw_if_index 1 ip6-table 0  
 set_ipfix_exporter collector_address 192.168.1.2 src_address 192.168.1.1  path_mtu 1450 template_interval 5 
 set_ipfix_classify_stream domain 1  
 ipfix_classify_table_add_del table 0 ip6 add 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 exec show trace

eth2p-ethip6-ip6base-spanrx-func

SPAN test suite

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Cfg] DUT configuration: DUT1 is configured with SPAN mirroring from the first DUT1-TG interface to the second one.
  • [Ver] TG verification: Test ARP or ICMP packets are sent by TG on first link to DUT1; On receipt through second link TG verifies the copy of packet sent and the copy of DUT’s reply packet.
  • [Ref] Applicable standard specifications: None?
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut mirrors ipv6 packets from one interface to another 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_add_del_address sw_if_index 2 10::1/24 
 sw_interface_set_flags sw_if_index 2 admin-up 
 ip_neighbor_add_del sw_if_index 2 dst 11::1 mac fa:16:3e:32:f5:89 
 ip_add_del_route 11::1/24 via 10::1  sw_if_index 2 resolve-attempts 10 count 1     
 sw_interface_span_enable_disable src_sw_if_index 2 dst_sw_if_index 1 
 exec show trace  
  
 DUT2:  
 exec show trace

vm vhost

ip4

eth2p-ethip4-ip4base-eth-2vhost-1vm

eth2p-ethip4-ip4base-eth-2vhost-1vm

IPv4 routing test cases with vhost user interface RFC791 IPv4, RFC826 ARP, RFC792 ICMPv4. Encapsulations: Eth-IPv4-ICMPv4 on links TG=DUT1. IPv4 routing tests use circular 2-node topology TG - DUT1 - TG with two link between the nodes. DUT is configured with IPv4 routing and static routes. Test sends packets by TG on links to DUT and received on TG link on the other side of circular topology. On receive TG verifies packets IPv4 src-addr, dst-addr and MAC addresses.

Name VPP API Test Commands History - Commands Used Per Test Case
tc01: ipv4 forward via vhost to another vrf 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 ip_table_add_del table 20  
 sw_interface_set_table sw_if_index 6 vrf 20  
 sw_interface_set_table sw_if_index 1 vrf 20  
 sw_interface_add_del_address sw_if_index 2 10.0.1.1/24 
 sw_interface_add_del_address sw_if_index 5 10.0.2.1/24 
 sw_interface_add_del_address sw_if_index 6 10.0.2.2/24 
 sw_interface_add_del_address sw_if_index 1 10.0.3.1/24 
 sw_interface_dump 
 ip_add_del_route 10.0.3.0/24 via 10.0.2.2  sw_if_index 5       
 ip_add_del_route 10.0.1.0/24 via 10.0.2.1 vrf 20 sw_if_index 6       
 ip_neighbor_add_del sw_if_index 5 dst 10.0.2.2 mac 02:fe:45:88:d6:af 
 ip_neighbor_add_del sw_if_index 1 dst 10.0.3.2 mac fa:16:3e:92:d6:d8 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip4base-eth-2vhost-1vm-func

IPv4-ip4-ipsec-lispgpe-ip4 - main fib, vrf (gpe_vni-to-vrf)

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: ICMPv4-IPv4-IPSec-LISPGPE-IPv4-ICMPv4.
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:17:78:19 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 6.6.1.9/24 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5243674942397865544a335138323759 integ-alg sha1-96 integ-key 6d7656335a634a6d333946325748336672584b61  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5243674942397865544a335138323759 integ-alg sha1-96 integ-key 6d7656335a634a6d333946325748336672584b61  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:d5:af:da 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 5243674942397865544a335138323759 integ-alg sha1-96 integ-key 6d7656335a634a6d333946325748336672584b61  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 5243674942397865544a335138323759 integ-alg sha1-96 integ-key 6d7656335a634a6d333946325748336672584b61  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6.6.1.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.1.2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:17:78:19 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 6.6.1.9/24 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.2.0/24 seid 6.6.1.0/24 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 6.6.2.0/24 leid 6.6.1.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 44474a59677a787671356d6675464f79 integ-alg sha1-96 integ-key 776c4b4c5548596977536271666d72554a626834  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 44474a59677a787671356d6675464f79 integ-alg sha1-96 integ-key 776c4b4c5548596977536271666d72554a626834  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 7 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 1 vrf 0  
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6.6.2.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.6.2.2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:d5:af:da 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.6.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.6.1.0/24 seid 6.6.2.0/24 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 6.6.1.0/24 leid 6.6.2.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 44474a59677a787671356d6675464f79 integ-alg sha1-96 integ-key 776c4b4c5548596977536271666d72554a626834  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 44474a59677a787671356d6675464f79 integ-alg sha1-96 integ-key 776c4b4c5548596977536271666d72554a626834  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace

eth2p-ethip4ipsectptlispgpe-ip6base-eth-2vhost-1vm-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, vrf, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISPGPE-IPSec-IPv6-ICMP, Eth-IPv4-IPSec-LISPGPE-IPv6-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:17:78:19 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:92:d6:d8 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 2001:cdba:6::3/64 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 8 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 71384774325463484341433158754377 integ-alg sha1-96 integ-key 4f446a4c5370673172543562444d7a4237417478  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 71384774325463484341433158754377 integ-alg sha1-96 integ-key 4f446a4c5370673172543562444d7a4237417478  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:d5:af:da 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 71384774325463484341433158754377 integ-alg sha1-96 integ-key 4f446a4c5370673172543562444d7a4237417478  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 71384774325463484341433158754377 integ-alg sha1-96 integ-key 4f446a4c5370673172543562444d7a4237417478  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace
tc02: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.1/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.2 mac fa:16:3e:17:78:19 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:92:d6:d8 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 6.6.3.2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 2001:cdba:6::3/64 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 8 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 414b53523977653557546a4d654f6e52 integ-alg sha1-96 integ-key 53615747394d6a51363575413432707038614179  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 414b53523977653557546a4d654f6e52 integ-alg sha1-96 integ-key 53615747394d6a51363575413432707038614179  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.1 - 6.6.3.1 remote-ip-range 6.6.3.2 - 6.6.3.2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.6.3.2/24 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 6.6.3.1 mac fa:16:3e:d5:af:da 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 6.6.3.1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 414b53523977653557546a4d654f6e52 integ-alg sha1-96 integ-key 53615747394d6a51363575413432707038614179  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 414b53523977653557546a4d654f6e52 integ-alg sha1-96 integ-key 53615747394d6a51363575413432707038614179  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 6.6.3.2 - 6.6.3.2 remote-ip-range 6.6.3.1 - 6.6.3.1  
 exec show trace

eth2p-ethip4lispgpe-ip4base-eth-2vhost-1vm-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using vhost interfaces 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:17:78:19 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 0 reid 6.0.5.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 0  
 sw_interface_set_table sw_if_index 8 vrf 0  
 sw_interface_add_del_address sw_if_index 8 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:d5:af:da 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip4basevrf-eth-2vhost-1vm-func

ip4-lispgpe-ip4 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for IPv4 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 bidirectionally over lisp gpe tunnel using vhost interfaces and vrf is enabled 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.1 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.2 mac fa:16:3e:17:78:19 
 sw_interface_add_del_address sw_if_index 3 6.0.4.1/24 
 sw_interface_add_del_address sw_if_index 1 6.0.1.2/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.5.0/24 seid 6.0.1.0/24 rloc 6.0.4.2 
 lisp_add_del_adjacency add vni 1 reid 6.0.5.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 9 vrf 1  
 sw_interface_add_del_address sw_if_index 9 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1  
 sw_interface_set_table sw_if_index 1 vrf 1  
 ip_neighbor_add_del sw_if_index 1 dst 6.0.5.2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.4.1 mac fa:16:3e:d5:af:da 
 sw_interface_add_del_address sw_if_index 3 6.0.4.2/24 
 sw_interface_add_del_address sw_if_index 1 6.0.5.1/24 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 6.0.5.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 6.0.1.0/24 seid 6.0.5.0/24 rloc 6.0.4.1 
 lisp_add_del_adjacency add vni 1 reid 6.0.1.0/24 leid 6.0.5.0/24 
 exec show trace

eth2p-ethip4lispgpe-ip6base-eth-2vhost-1vm-func

LISP static adjacency test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv4 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv4 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.1/24 
 sw_interface_add_del_address sw_if_index 1 6:0:1::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:1::2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.2 mac fa:16:3e:17:78:19 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6:0:1::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:2::0/64 seid 6:0:1::0/64 rloc 6.0.3.2 
 lisp_add_del_adjacency add vni 0 reid 6:0:2::0/64 leid 6:0:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 6:6:1::3/64 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 6.0.3.2/24 
 sw_interface_add_del_address sw_if_index 1 6:0:2::1/64 
 ip_neighbor_add_del sw_if_index 1 dst 6:0:2::2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 6.0.3.1 mac fa:16:3e:d5:af:da 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set ls1 
 lisp_add_del_locator locator-set ls1 sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6:0:2::0/64 locator-set ls1 
 lisp_add_del_remote_mapping add vni 0 eid 6:0:1::0/64 seid 6:0:2::0/64 rloc 6.0.3.1 
 lisp_add_del_adjacency add vni 0 reid 6:0:1::0/64 leid 6:0:2::0/64 
 exec show trace

ip6

eth2p-ethip6ipsectptlispgpe-ip4base-eth-2vhost-1vm-func

IPv6 - ip4-ipsec-lispgpe-ip6 - main fib, virt2lisp, phy2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISPGPE-IPSec-IPv4-ICMP, Eth-IPv6-IPSec-LISPGPE-IPv4-ICMP
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Test cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:17:78:19 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:92:d6:d8 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6e55655045766754784f63467a426459 integ-alg sha1-96 integ-key 73734c57496f72336d70515a41354c5a7843354b  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6e55655045766754784f63467a426459 integ-alg sha1-96 integ-key 73734c57496f72336d70515a41354c5a7843354b  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:d5:af:da 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6e55655045766754784f63467a426459 integ-alg sha1-96 integ-key 73734c57496f72336d70515a41354c5a7843354b  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6e55655045766754784f63467a426459 integ-alg sha1-96 integ-key 73734c57496f72336d70515a41354c5a7843354b  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv4 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.1.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:17:78:19 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.1.2 mac fa:16:3e:92:d6:d8 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.1.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.2.0/24 seid 6.0.1.0/24 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 6.0.2.0/24 leid 6.0.1.0/24 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 8 6.6.1.3/24 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6f6d6a54527274486c764b616543316e integ-alg sha1-96 integ-key 385a517a6b7231434f774d59784e656d73514e36  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6f6d6a54527274486c764b616543316e integ-alg sha1-96 integ-key 385a517a6b7231434f774d59784e656d73514e36  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 6.0.2.1/24 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 6.0.2.2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:d5:af:da 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 6.0.2.0/24 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 6.0.1.0/24 seid 6.0.2.0/24 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 6.0.1.0/24 leid 6.0.2.0/24 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6f6d6a54527274486c764b616543316e integ-alg sha1-96 integ-key 385a517a6b7231434f774d59784e656d73514e36  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6f6d6a54527274486c764b616543316e integ-alg sha1-96 integ-key 385a517a6b7231434f774d59784e656d73514e36  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace

eth2p-ethip6ipsectptlispgpe-ip6base-eth-2vhost-1vm-func

IPv6 - ip6-ipsec-lispgpe-ip6 - main fib, vrf (gpe_vni-to-vrf), phy2lisp, virt2lisp

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-IPSec-LISPGPE-IPv6-ICMPv6,
  • [Cfg] DUT configuration: Each DUT is configured with LISP and IPsec. IPsec is in transport mode. Tests cases are for IPsec configured both on RLOC interface or lisp_gpe0 interface.
  • [Ver] TG verification: Packet is send from TG(if1) across the DUT1 via VM to DUT2 where it is forwarded to TG(if2).
  • [Ref] Applicable standard specifications: RFC6830, RFC4303.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on rloc int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:17:78:19 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 2001:cdba:1::9/64 
 sw_interface_set_flags sw_if_index 6 admin-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 774b343657325876394b4c5645756a43 integ-alg sha1-96 integ-key 5a756f54655a34594876457978496e6970597378  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 774b343657325876394b4c5645756a43 integ-alg sha1-96 integ-key 5a756f54655a34594876457978496e6970597378  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:d5:af:da 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 774b343657325876394b4c5645756a43 integ-alg sha1-96 integ-key 5a756f54655a34594876457978496e6970597378  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 774b343657325876394b4c5645756a43 integ-alg sha1-96 integ-key 5a756f54655a34594876457978496e6970597378  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 3 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace
tc02: dut1 and dut2 route ipv6 over vhost to lisp gpe tunnel using ipsec (transport) on lisp_gpe0 int. 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:17:78:19 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 6 2001:cdba:1::9/64 
 sw_interface_set_flags sw_if_index 6 admin-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6b774666726c64373950766f31756159 integ-alg sha1-96 integ-key 34566c79785055445657724a494761695366746e  
 exec ipsec sa add 20 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6b774666726c64373950766f31756159 integ-alg sha1-96 integ-key 34566c79785055445657724a494761695366746e  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 7 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::1 - 2001:cdba:3::1 remote-ip-range 2001:cdba:3::2 - 2001:cdba:3::2  
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:d5:af:da 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 sw_interface_dump 
 exec ipsec sa add 10 esp spi 1000 crypto-alg aes-cbc-128 crypto-key 6b774666726c64373950766f31756159 integ-alg sha1-96 integ-key 34566c79785055445657724a494761695366746e  
 exec ipsec sa add 20 esp spi 1001 crypto-alg aes-cbc-128 crypto-key 6b774666726c64373950766f31756159 integ-alg sha1-96 integ-key 34566c79785055445657724a494761695366746e  
 ipsec_spd_add_del spd_id 1 
 ipsec_interface_add_del_spd sw_if_index 5 spd_id 1 
 exec ipsec policy add spd 1 priority 100 inbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 100 outbound action bypass protocol 50  
 exec ipsec policy add spd 1 priority 10 inbound action protect sa 20 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec ipsec policy add spd 1 priority 10 outbound action protect sa 10 local-ip-range 2001:cdba:3::2 - 2001:cdba:3::2 remote-ip-range 2001:cdba:3::1 - 2001:cdba:3::1  
 exec show trace

eth2p-ethip6lispgpe-ip6base-eth-2vhost-1vm-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:17:78:19 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 0 ipv6 
 sw_interface_set_table sw_if_index 8 vrf 0 ipv6 
 sw_interface_add_del_address sw_if_index 8 2001:cdba:6::9/64 
 sw_interface_set_flags sw_if_index 8 admin-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:d5:af:da 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 0 vrf 0 
 lisp_add_del_local_eid vni 0 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 0 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 0 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

eth2p-ethip6lispgpe-ip6basevrf-eth-2vhost-1vm-func

ip6-lispgpe-ip6 encapsulation test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv6-LISP-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for IPv6 routing over LISPoIPv6 tunnel.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv6 routing and static routes. LISPoIPv6 tunnel is configured between DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC6830.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut1 and dut2 route ipv6 bidirectionally over lisp gpe tunnel using vhost interfaces and vrf is enabled 
 DUT1:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::1/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:1::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:1::2 mac fa:16:3e:92:d6:d8 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::2 mac fa:16:3e:17:78:19 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:1::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:2::0/64 seid 2001:cdba:1::0/64 rloc 2001:cdba:3::2 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:2::0/64 leid 2001:cdba:1::0/64 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 9 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 9 2001:cdba:6::9/64 
 sw_interface_set_flags sw_if_index 9 admin-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_dump 
 exec show trace  
  
 DUT2:  
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 ip_table_add_del table 1 ipv6 
 sw_interface_set_table sw_if_index 1 vrf 1 ipv6 
 sw_interface_add_del_address sw_if_index 3 2001:cdba:3::2/64 
 sw_interface_set_flags sw_if_index 3 admin-up 
 sw_interface_add_del_address sw_if_index 1 2001:cdba:2::1/64 
 sw_interface_set_flags sw_if_index 1 admin-up 
 ip_neighbor_add_del sw_if_index 1 dst 2001:cdba:2::2 mac fa:16:3e:7b:b3:6c 
 ip_neighbor_add_del sw_if_index 3 dst 2001:cdba:3::1 mac fa:16:3e:d5:af:da 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 lisp_enable_disable enable 
 lisp_gpe_enable_disable enable 
 lisp_add_del_locator_set locator-set tst_locator 
 lisp_add_del_locator locator-set tst_locator sw_if_index 3 p 1 w 1 
 lisp_eid_table_add_del_map vni 1 vrf 1 
 lisp_add_del_local_eid vni 1 eid 2001:cdba:2::0/64 locator-set tst_locator 
 lisp_add_del_remote_mapping add vni 1 eid 2001:cdba:1::0/64 seid 2001:cdba:2::0/64 rloc 2001:cdba:3::1 
 lisp_add_del_adjacency add vni 1 reid 2001:cdba:1::0/64 leid 2001:cdba:2::0/64 
 exec show trace

l2bd

eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm-func

L2 bridge domain with VLAN tag over VM test cases

  • [Top] Network Topologies: TG=DUT 2-node circular topology with double links between nodes.
  • [Enc] Packet encapsulations: Eth-dot1q-IPv4-ICMPv4 or Eth-dot1q-IPv6-ICMPv6 on TG=DUT and on DUT=VM.
  • [Cfg] DUT configuration: DUT is configured with two bridge domains (L2BD) with MAC learning enabled; each one with added VLAN sub-interface towards TG and vhost-user interface to local VM. Configure linux bridge on VM to pass traffic between both vhost-user interfaces.
  • [Ver] TG verification: Make TG send ICMPv4/ICMPv6 Echo Req between two of its interfaces to be switched by DUT via VM; verify packets are switched between these TG interfaces; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr, MAC addresses and VLAN tag.
  • [Ref] Applicable standard specifications: IEEE 802.1q.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm - ipv4 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 create_vlan_subif sw_if_index 2 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc01: eth2p-dot1q-l2bdbasemaclrn-eth-2vhost-1vm - ipv6 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 create_vlan_subif sw_if_index 2 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 create_vlan_subif sw_if_index 1 vlan 110 
 sw_interface_dump 
 sw_interface_dump 
 exec show interfaces 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-eth-l2bdbasemaclrn-eth-2vhost-1vm-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 is configured with two L2 bridge-domains (L2BD) switching combined with MAC learning enabled.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with two l2bds (mac learn) switches icmpv4 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with two l2bds (mac learn) switches icmpv6 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-eth-l2bdbasemacstc-eth-2vhost-1vm-func

L2 bridge-domain test cases

  • [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 is configured with two L2 bridge-domains (L2BD) switching combined with static MACs.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with two l2bds (static macs) switches icmpv4 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>2xf5x89,sw_if_index=2,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>xdfx98#,sw_if_index=5,bvi_mac=0) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>xdfx98#,sw_if_index=1,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>2xf5x89,sw_if_index=6,bvi_mac=0) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with two l2bds (static macs) switches icmpv6 between tg and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 bridge_domain_add_del(bd_id=1,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=2,enable=1,shg=0,port_type=0,bd_id=1) 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=1) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>2xf5x89,sw_if_index=2,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=1,is_add=1,mac=xfa>xdfx98#,sw_if_index=5,bvi_mac=0) 
 bridge_domain_add_del(bd_id=2,is_add=1,arp_term=0,flood=1,learn=0,forward=1,uu_flood=1) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=2) 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=2) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>xdfx98#,sw_if_index=1,bvi_mac=0) 
 l2fib_add_del(static_mac=1,filter_mac=0,bd_id=2,is_add=1,mac=xfa>2xf5x89,sw_if_index=6,bvi_mac=0) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4-l2bdbase-vhost-client-reconnect-2vm-func

Vhost-User Interface Traffic Tests

  • [Top] Network Topologies: TG=DUT1 2-node topology with two links between nodes.
  • [Enc] Packet Encapsulations: Eth-IPv4-VXLAN-ETH-IP on TG-DUT link. ETH-IP on VirtualEthernet-VM interface.
  • [Cfg] DUT configuration: On DUT is running 2 VM with 2 vhost-user interface on each VM. DUT is configured with VXLAN and vhost-user interfaces in bridge-domain (L2BD).
  • [Cfg] VM configuration: VM has both vhost-user interfaces added into Linux Bridge.
  • [Ver] TG verification: VXLAN packet is send to DUT where is decapsulated and send bridged to vhost-user inteface. VM forwards frame to its second interface and VPP encapsulates it to another VXLAN tunnel. Packets are sent and received by TG on link to DUT.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: qemu reconnects to vpps vhost-user when qemu is killed and restarted 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.1 mac fa:16:3e:32:f5:89 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 101 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 102 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 103 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 104 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock3 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock4 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 sw_interface_set_flags sw_if_index 10 admin-up link-up 
 sw_interface_set_flags sw_if_index 11 admin-up link-up 
 sw_interface_set_flags sw_if_index 12 admin-up link-up 
 bridge_domain_add_del(bd_id=101,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=101) 
 sw_interface_set_l2_bridge(rx_sw_if_index=9,enable=1,shg=0,port_type=0,bd_id=101) 
 bridge_domain_add_del(bd_id=102,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=102) 
 sw_interface_set_l2_bridge(rx_sw_if_index=10,enable=1,shg=0,port_type=0,bd_id=102) 
 bridge_domain_add_del(bd_id=103,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=103) 
 sw_interface_set_l2_bridge(rx_sw_if_index=11,enable=1,shg=0,port_type=0,bd_id=103) 
 bridge_domain_add_del(bd_id=104,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_l2_bridge(rx_sw_if_index=12,enable=1,shg=0,port_type=0,bd_id=104) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: vpp reconnects to qemu vhost-user when restart vpp and reconfigured 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.1 mac fa:16:3e:32:f5:89 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 101 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 102 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 103 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 104 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock3 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock4 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 sw_interface_set_flags sw_if_index 10 admin-up link-up 
 sw_interface_set_flags sw_if_index 11 admin-up link-up 
 sw_interface_set_flags sw_if_index 12 admin-up link-up 
 bridge_domain_add_del(bd_id=101,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=101) 
 sw_interface_set_l2_bridge(rx_sw_if_index=9,enable=1,shg=0,port_type=0,bd_id=101) 
 bridge_domain_add_del(bd_id=102,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=102) 
 sw_interface_set_l2_bridge(rx_sw_if_index=10,enable=1,shg=0,port_type=0,bd_id=102) 
 bridge_domain_add_del(bd_id=103,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=103) 
 sw_interface_set_l2_bridge(rx_sw_if_index=11,enable=1,shg=0,port_type=0,bd_id=103) 
 bridge_domain_add_del(bd_id=104,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_l2_bridge(rx_sw_if_index=12,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 sw_interface_add_del_address sw_if_index 2 192.168.0.2/24 
 ip_neighbor_add_del sw_if_index 2 dst 192.168.0.1 mac fa:16:3e:32:f5:89 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 101 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 102 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 103 
 sw_interface_dump 
 vxlan_add_del_tunnel src 192.168.0.2 dst 192.168.0.1 vni 104 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 7 admin-up link-up 
 sw_interface_set_flags sw_if_index 8 admin-up link-up 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock3 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock4 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 9 admin-up link-up 
 sw_interface_set_flags sw_if_index 10 admin-up link-up 
 sw_interface_set_flags sw_if_index 11 admin-up link-up 
 sw_interface_set_flags sw_if_index 12 admin-up link-up 
 bridge_domain_add_del(bd_id=101,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=101) 
 sw_interface_set_l2_bridge(rx_sw_if_index=9,enable=1,shg=0,port_type=0,bd_id=101) 
 bridge_domain_add_del(bd_id=102,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=102) 
 sw_interface_set_l2_bridge(rx_sw_if_index=10,enable=1,shg=0,port_type=0,bd_id=102) 
 bridge_domain_add_del(bd_id=103,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=103) 
 sw_interface_set_l2_bridge(rx_sw_if_index=11,enable=1,shg=0,port_type=0,bd_id=103) 
 bridge_domain_add_del(bd_id=104,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=8,enable=1,shg=0,port_type=0,bd_id=104) 
 sw_interface_set_l2_bridge(rx_sw_if_index=12,enable=1,shg=0,port_type=0,bd_id=104) 
 exec show trace  
  
 DUT2:  
 exec show trace

eth2p-ethip4vxlan-l2bdbasemaclrn-eth-2vhost-1vm-func

L2BD with VM combined with VXLAN test cases - IPv4

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv4-VXLAN-Eth-IPv4-ICMPv4 on DUT1-DUT2, Eth-IPv4-ICMPv4 on TG-DUTn for L2 switching of IPv4.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv4 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv4 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01:dut1 and dut2 with two l2bds and vxlanoipv4 tunnel switch icmpv4 between tg links and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 172.16.0.1/24 
 vxlan_add_del_tunnel src 172.16.0.1 dst 172.16.0.2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 172.16.0.2/24 
 vxlan_add_del_tunnel src 172.16.0.2 dst 172.16.0.1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace

eth2p-ethip6vxlan-l2bdbasemaclrn-eth-2vhost-1vm-func

L2BD with VM combined with VXLAN test cases - IPv6

  • [Top] Network topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
  • [Enc] Packet encapsulations: Eth-IPv6-VXLAN-Eth-IPv6-ICMPv6 on DUT1-DUT2, Eth-IPv6-ICMPv6 on TG-DUTn for L2 switching of IPv6.
  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with L2 bridge-domain (L2BD) switching combined with MAC learning enabled; VXLAN tunnels are configured between L2BDs on DUT1 and DUT2.
  • [Ver] TG verification: Test ICMPv6 Echo Request packets are sent in both directions by TG on links to DUT1 and DUT2; on receive TG verifies packets for correctness and their IPv6 src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications: RFC7348.
Name VPP API Test Commands History - Commands Used Per Test Case
tc01:dut1 and dut2 with two l2bds and vxlanoipv6 tunnel switch icmpv6 between tg links and vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::1/64 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 vxlan_add_del_tunnel src 3ffe:64::1 dst 3ffe:64::2 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace  
  
 DUT2:  
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 3 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_add_del_address sw_if_index 3 3ffe:64::2/64 
 sw_interface_ip6nd_ra_config sw_if_index 6 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 5 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 4 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 2 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 3 surpress 
 sw_interface_ip6nd_ra_config sw_if_index 1 surpress 
 vxlan_add_del_tunnel src 3ffe:64::2 dst 3ffe:64::1 vni 23 
 sw_interface_dump 
 bridge_domain_add_del(bd_id=10,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=1,enable=1,shg=0,port_type=0,bd_id=10) 
 sw_interface_set_l2_bridge(rx_sw_if_index=5,enable=1,shg=0,port_type=0,bd_id=10) 
 bridge_domain_add_del(bd_id=20,is_add=1,arp_term=0,flood=1,learn=1,forward=1,uu_flood=1) 
 sw_interface_set_l2_bridge(rx_sw_if_index=7,enable=1,shg=0,port_type=0,bd_id=20) 
 sw_interface_set_l2_bridge(rx_sw_if_index=6,enable=1,shg=0,port_type=0,bd_id=20) 
 exec show trace

l2xc

eth2p-eth-l2xcbase-eth-2vhost-1vm-func

L2 cross-connect test cases

  • [Top] Network Topologies: TG=DUT=VM 3-node topology with VM and double parallel links.
  • [Enc] Packet Encapsulations: Eth-IPv4-ICMPv4 for L2 switching of IPv4; Eth-IPv6-ICMPv6 for L2 switching of IPv6 use. Both apply to all links.
  • [Cfg] DUT configuration: DUT1 is configured with L2 cross-connect (L2XC) switching.
  • [Ver] TG verification: Test ICMPv4 (or ICMPv6) Echo Request packets are sent in both directions by TG on links to DUT1 via VM; on receive TG verifies packets for correctness and their IPv4 (IPv6) src-addr, dst-addr and MAC addresses.
  • [Ref] Applicable standard specifications:
Name VPP API Test Commands History - Commands Used Per Test Case
tc01: dut with two l2xcs switches icmpv4 between tg and local vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=2,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=2) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=6) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=6,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 exec show trace
tc02: dut with two l2xcs switches icmpv6 between tg and local vm links 
 DUT1:  
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock1 
 sw_interface_dump 
 sw_interface_dump 
 create_vhost_user_if socket /tmp/sock2 
 sw_interface_dump 
 sw_interface_dump 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_flags sw_if_index 2 admin-up link-up 
 sw_interface_set_flags sw_if_index 5 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=2,enable=1,tx_sw_if_index=5) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=5,enable=1,tx_sw_if_index=2) 
 sw_interface_set_flags sw_if_index 1 admin-up link-up 
 sw_interface_set_flags sw_if_index 6 admin-up link-up 
 sw_interface_set_l2_xconnect(rx_sw_if_index=1,enable=1,tx_sw_if_index=6) 
 sw_interface_set_l2_xconnect(rx_sw_if_index=6,enable=1,tx_sw_if_index=1) 
 exec show trace  
  
 DUT2:  
 exec show trace