crypto

eth2p-ethip4ipsec1tnlsw-ip4base-policy-aes-128-cbc-sha-512-256-dev

IPv4 IPsec tunnel mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.

• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

110b-ethip4ipsec1tnlsw-ip4base-policy-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show log’) show_version() sw_interface_dump(name_filter=’’,name_filter_valid=0) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) create_loopback(mac_address=0) sw_interface_dump(name_filter=’’,name_filter_valid=0) sw_interface_set_flags(sw_if_index=1,admin_up_down=1) sw_interface_set_flags(sw_if_index=3,admin_up_down=1) sw_interface_dump(name_filter=’’,name_filter_valid=0) sw_interface_add_del_address(address_length=24,del_all=0,is_add=1,sw_if_index=1,address=’xc0xa8dx03’,is_ipv6=0) sw_interface_add_del_address(address_length=24,del_all=0,is_add=1,sw_if_index=3,address=’xc0xa8x04x04’,is_ipv6=0) ip_neighbor_add_del(is_add=1,neighbor={‘ip_address’: ‘192.168.100.2’, ‘flags’: 0, ‘sw_if_index’: 1, ‘mac_address’: ‘fa:ce:00:00:02:00’}) ip_route_add_del(route={‘paths’: [{‘nh’: {‘obj_id’: 4294967295, ‘via_label’: 1048576, ‘address’: {‘ip4’: ‘xc0xa8dx02’}}, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘proto’: 0, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], ‘sw_if_index’: 1, ‘flags’: 0, ‘preference’: 1, ‘table_id’: 0, ‘type’: 0}], ‘prefix’: {‘len’: 24, ‘address’: {‘un’: {‘ip4’: ‘xc0xa8x03x03’}, ‘af’: 0}}, ‘n_paths’: 1, ‘table_id’: 0},is_add=1,is_multipath=0) ipsec_sad_entry_add_del(entry={‘protocol’: 1, ‘spi’: 1001, ‘tunnel_dst’: ‘192.168.100.2’, ‘sad_id’: 10, ‘tunnel_src’: ‘192.168.100.3’, ‘crypto_key’: {‘length’: 16, ‘data’: ‘D9LYzC6MtlrN5Y41’}, ‘flags’: 4, ‘integrity_key’: {‘length’: 64, ‘data’: ‘glbYwQ0WWa7ftZkAq8XwPSyBqz0BvMFHEvNd8sabTZQ8SW7PAgLKt9JTNlWKlz60’}, ‘integrity_algorithm’: 6, ‘crypto_algorithm’: 1},is_add=1) ipsec_sad_entry_add_del(entry={‘protocol’: 1, ‘spi’: 1000, ‘tunnel_dst’: ‘192.168.100.3’, ‘sad_id’: 20, ‘tunnel_src’: ‘192.168.100.2’, ‘crypto_key’: {‘length’: 16, ‘data’: ‘D9LYzC6MtlrN5Y41’}, ‘flags’: 4, ‘integrity_key’: {‘length’: 64, ‘data’: ‘glbYwQ0WWa7ftZkAq8XwPSyBqz0BvMFHEvNd8sabTZQ8SW7PAgLKt9JTNlWKlz60’}, ‘integrity_algorithm’: 6, ‘crypto_algorithm’: 1},is_add=1) ipsec_spd_add_del(is_add=1,spd_id=1) ipsec_interface_add_del_spd(is_add=1,sw_if_index=1,spd_id=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8dx02’}, ‘af’: 0}, ‘protocol’: 50, ‘sa_id’: 0, ‘remote_address_start’: {‘un’: {‘ip4’: ‘xc0xa8dx03’}, ‘af’: 0}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8dx03’}, ‘af’: 0}, ‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: 0, ‘policy’: 0, ‘local_address_start’: {‘un’: {‘ip4’: ‘xc0xa8dx02’}, ‘af’: 0}, ‘local_port_stop’: 65535},is_add=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8dx03’}, ‘af’: 0}, ‘protocol’: 50, ‘sa_id’: 0, ‘remote_address_start’: {‘un’: {‘ip4’: ‘xc0xa8dx02’}, ‘af’: 0}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8dx02’}, ‘af’: 0}, ‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: 1, ‘policy’: 0, ‘local_address_start’: {‘un’: {‘ip4’: ‘xc0xa8dx03’}, ‘af’: 0}, ‘local_port_stop’: 65535},is_add=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8x04x04’}, ‘af’: 0}, ‘protocol’: 0, ‘sa_id’: 20, ‘remote_address_start’: {‘un’: {‘ip4’: ‘xc0xa8x03x03’}, ‘af’: 0}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8x03x03’}, ‘af’: 0}, ‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: 0, ‘policy’: 3, ‘local_address_start’: {‘un’: {‘ip4’: ‘xc0xa8x04x04’}, ‘af’: 0}, ‘local_port_stop’: 65535},is_add=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8x04x04’}, ‘af’: 0}, ‘protocol’: 0, ‘sa_id’: 10, ‘remote_address_start’: {‘un’: {‘ip4’: ‘xc0xa8x03x03’}, ‘af’: 0}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8x03x03’}, ‘af’: 0}, ‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: 1, ‘policy’: 3, ‘local_address_start’: {‘un’: {‘ip4’: ‘xc0xa8x04x04’}, ‘af’: 0}, ‘local_port_stop’: 65535},is_add=1)

eth2p-ethip4ipsec1tptsw-ip4base-policy-aes-128-cbc-sha-512-256-dev

IPv4 IPsec transport mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.

• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

110b-ethip4ipsec1tptsw-ip4base-policy-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show log’) show_version() sw_interface_dump(name_filter=’’,name_filter_valid=0) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) create_loopback(mac_address=0) sw_interface_dump(name_filter=’’,name_filter_valid=0) sw_interface_set_flags(sw_if_index=1,admin_up_down=1) sw_interface_set_flags(sw_if_index=3,admin_up_down=1) sw_interface_dump(name_filter=’’,name_filter_valid=0) sw_interface_add_del_address(address_length=24,del_all=0,is_add=1,sw_if_index=1,address=’xc0xa8dx03’,is_ipv6=0) sw_interface_add_del_address(address_length=24,del_all=0,is_add=1,sw_if_index=3,address=’xc0xa8x04x04’,is_ipv6=0) ip_neighbor_add_del(is_add=1,neighbor={‘ip_address’: ‘192.168.100.2’, ‘flags’: 0, ‘sw_if_index’: 1, ‘mac_address’: ‘fa:ce:00:00:02:00’}) ip_route_add_del(route={‘paths’: [{‘nh’: {‘obj_id’: 4294967295, ‘via_label’: 1048576, ‘address’: {‘ip4’: ‘xc0xa8dx02’}}, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘proto’: 0, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], ‘sw_if_index’: 1, ‘flags’: 0, ‘preference’: 1, ‘table_id’: 0, ‘type’: 0}], ‘prefix’: {‘len’: 24, ‘address’: {‘un’: {‘ip4’: ‘xc0xa8x03x03’}, ‘af’: 0}}, ‘n_paths’: 1, ‘table_id’: 0},is_add=1,is_multipath=0) ipsec_sad_entry_add_del(entry={‘protocol’: 1, ‘spi’: 1001, ‘tunnel_dst’: ‘’, ‘sad_id’: 10, ‘tunnel_src’: ‘’, ‘crypto_key’: {‘length’: 16, ‘data’: ‘Jtm6HiyDUnFzRYhA’}, ‘flags’: 0, ‘integrity_key’: {‘length’: 64, ‘data’: ‘Gu0PngH2Ts8EGMo8axuXLEbYvUdcNI3GCNxcsgNcrXtFrF6mm4IhRXV7xP3RHiIk’}, ‘integrity_algorithm’: 6, ‘crypto_algorithm’: 1},is_add=1) ipsec_sad_entry_add_del(entry={‘protocol’: 1, ‘spi’: 1000, ‘tunnel_dst’: ‘’, ‘sad_id’: 20, ‘tunnel_src’: ‘’, ‘crypto_key’: {‘length’: 16, ‘data’: ‘Jtm6HiyDUnFzRYhA’}, ‘flags’: 0, ‘integrity_key’: {‘length’: 64, ‘data’: ‘Gu0PngH2Ts8EGMo8axuXLEbYvUdcNI3GCNxcsgNcrXtFrF6mm4IhRXV7xP3RHiIk’}, ‘integrity_algorithm’: 6, ‘crypto_algorithm’: 1},is_add=1) ipsec_spd_add_del(is_add=1,spd_id=1) ipsec_interface_add_del_spd(is_add=1,sw_if_index=1,spd_id=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8dx02’}, ‘af’: 0}, ‘protocol’: 50, ‘sa_id’: 0, ‘remote_address_start’: {‘un’: {‘ip4’: ‘xc0xa8dx03’}, ‘af’: 0}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8dx03’}, ‘af’: 0}, ‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: 0, ‘policy’: 0, ‘local_address_start’: {‘un’: {‘ip4’: ‘xc0xa8dx02’}, ‘af’: 0}, ‘local_port_stop’: 65535},is_add=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8dx03’}, ‘af’: 0}, ‘protocol’: 50, ‘sa_id’: 0, ‘remote_address_start’: {‘un’: {‘ip4’: ‘xc0xa8dx02’}, ‘af’: 0}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8dx02’}, ‘af’: 0}, ‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: 1, ‘policy’: 0, ‘local_address_start’: {‘un’: {‘ip4’: ‘xc0xa8dx03’}, ‘af’: 0}, ‘local_port_stop’: 65535},is_add=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8dx03’}, ‘af’: 0}, ‘protocol’: 0, ‘sa_id’: 20, ‘remote_address_start’: {‘un’: {‘ip4’: ‘xc0xa8dx02’}, ‘af’: 0}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8dx02’}, ‘af’: 0}, ‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: 0, ‘policy’: 3, ‘local_address_start’: {‘un’: {‘ip4’: ‘xc0xa8dx03’}, ‘af’: 0}, ‘local_port_stop’: 65535},is_add=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8dx03’}, ‘af’: 0}, ‘protocol’: 0, ‘sa_id’: 10, ‘remote_address_start’: {‘un’: {‘ip4’: ‘xc0xa8dx02’}, ‘af’: 0}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip4’: ‘xc0xa8dx02’}, ‘af’: 0}, ‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: 1, ‘policy’: 3, ‘local_address_start’: {‘un’: {‘ip4’: ‘xc0xa8dx03’}, ‘af’: 0}, ‘local_port_stop’: 65535},is_add=1)

eth2p-ethip6ipsec1tnlsw-ip6base-policy-aes-128-cbc-sha-512-256-dev

IPv6 IPsec tunnel mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.

• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

124b-ethip6ipsec1tnlsw-ip6base-policy-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show log’) show_version() sw_interface_dump(name_filter=’’,name_filter_valid=0) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) create_loopback(mac_address=0) sw_interface_dump(name_filter=’’,name_filter_valid=0) sw_interface_set_flags(sw_if_index=1,admin_up_down=1) sw_interface_set_flags(sw_if_index=3,admin_up_down=1) sw_interface_dump(name_filter=’’,name_filter_valid=0) sw_interface_add_del_address(address_length=64,del_all=0,is_add=1,sw_if_index=1,address=’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’,is_ipv6=1) sw_interface_add_del_address(address_length=64,del_all=0,is_add=1,sw_if_index=3,address=’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’,is_ipv6=1) ip_neighbor_add_del(is_add=1,neighbor={‘ip_address’: ‘3ffe:5f::1’, ‘flags’: 0, ‘sw_if_index’: 1, ‘mac_address’: ‘fa:ce:00:00:02:00’}) ip_address_dump(sw_if_index=2,is_ipv6=1) ip_address_dump(sw_if_index=3,is_ipv6=1) sw_interface_ip6nd_ra_config(suppress=1,sw_if_index=3) ip_address_dump(sw_if_index=1,is_ipv6=1) sw_interface_ip6nd_ra_config(suppress=1,sw_if_index=1) ip_route_add_del(route={‘paths’: [{‘nh’: {‘obj_id’: 4294967295, ‘via_label’: 1048576, ‘address’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘proto’: 1, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], ‘sw_if_index’: 1, ‘flags’: 0, ‘preference’: 1, ‘table_id’: 0, ‘type’: 0}], ‘prefix’: {‘len’: 128, ‘address’: {‘un’: {‘ip6’: ‘?xfex00`x00x00x00x00x00x00x00x00x00x00x00x03’}, ‘af’: 1}}, ‘n_paths’: 1, ‘table_id’: 0},is_add=1,is_multipath=0) ipsec_sad_entry_add_del(entry={‘protocol’: 1, ‘spi’: 1001, ‘tunnel_dst’: ‘3ffe:5f::1’, ‘sad_id’: 10, ‘tunnel_src’: ‘3ffe:5f::2’, ‘crypto_key’: {‘length’: 16, ‘data’: ‘fOoYwVVi4k742csU’}, ‘flags’: 12, ‘integrity_key’: {‘length’: 64, ‘data’: ‘nkdpKKvBneRAVKRIwkPHxb3qmZPeEaMfAvLl1UwuT0EjEzZGuAvNSftidX8oMVOe’}, ‘integrity_algorithm’: 6, ‘crypto_algorithm’: 1},is_add=1) ipsec_sad_entry_add_del(entry={‘protocol’: 1, ‘spi’: 1000, ‘tunnel_dst’: ‘3ffe:5f::2’, ‘sad_id’: 20, ‘tunnel_src’: ‘3ffe:5f::1’, ‘crypto_key’: {‘length’: 16, ‘data’: ‘fOoYwVVi4k742csU’}, ‘flags’: 12, ‘integrity_key’: {‘length’: 64, ‘data’: ‘nkdpKKvBneRAVKRIwkPHxb3qmZPeEaMfAvLl1UwuT0EjEzZGuAvNSftidX8oMVOe’}, ‘integrity_algorithm’: 6, ‘crypto_algorithm’: 1},is_add=1) ipsec_spd_add_del(is_add=1,spd_id=1) ipsec_interface_add_del_spd(is_add=1,sw_if_index=1,spd_id=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘af’: 1}, ‘protocol’: 50, ‘sa_id’: 0, ‘remote_address_start’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}, ‘af’: 1}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}, ‘af’: 1}, ‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: 0, ‘policy’: 0, ‘local_address_start’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘af’: 1}, ‘local_port_stop’: 65535},is_add=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}, ‘af’: 1}, ‘protocol’: 50, ‘sa_id’: 0, ‘remote_address_start’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘af’: 1}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘af’: 1}, ‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: 1, ‘policy’: 0, ‘local_address_start’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}, ‘af’: 1}, ‘local_port_stop’: 65535},is_add=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip6’: ‘?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}, ‘af’: 1}, ‘protocol’: 0, ‘sa_id’: 20, ‘remote_address_start’: {‘un’: {‘ip6’: ‘?xfex00`x00x00x00x00x00x00x00x00x00x00x00x03’}, ‘af’: 1}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip6’: ‘?xfex00`x00x00x00x00x00x00x00x00x00x00x00x03’}, ‘af’: 1}, ‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: 0, ‘policy’: 3, ‘local_address_start’: {‘un’: {‘ip6’: ‘?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}, ‘af’: 1}, ‘local_port_stop’: 65535},is_add=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip6’: ‘?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}, ‘af’: 1}, ‘protocol’: 0, ‘sa_id’: 10, ‘remote_address_start’: {‘un’: {‘ip6’: ‘?xfex00`x00x00x00x00x00x00x00x00x00x00x00x03’}, ‘af’: 1}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip6’: ‘?xfex00`x00x00x00x00x00x00x00x00x00x00x00x03’}, ‘af’: 1}, ‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: 1, ‘policy’: 3, ‘local_address_start’: {‘un’: {‘ip6’: ‘?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}, ‘af’: 1}, ‘local_port_stop’: 65535},is_add=1)

eth2p-ethip6ipsec1tptsw-ip6base-policy-aes-128-cbc-sha-512-256-dev

IPv6 IPsec transport mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.

• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

124b-ethip6ipsec1tptsw-ip6base-policy-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show log’) show_version() sw_interface_dump(name_filter=’’,name_filter_valid=0) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) create_loopback(mac_address=0) sw_interface_dump(name_filter=’’,name_filter_valid=0) sw_interface_set_flags(sw_if_index=1,admin_up_down=1) sw_interface_set_flags(sw_if_index=3,admin_up_down=1) sw_interface_dump(name_filter=’’,name_filter_valid=0) sw_interface_add_del_address(address_length=64,del_all=0,is_add=1,sw_if_index=1,address=’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’,is_ipv6=1) sw_interface_add_del_address(address_length=64,del_all=0,is_add=1,sw_if_index=3,address=’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’,is_ipv6=1) ip_neighbor_add_del(is_add=1,neighbor={‘ip_address’: ‘3ffe:5f::1’, ‘flags’: 0, ‘sw_if_index’: 1, ‘mac_address’: ‘fa:ce:00:00:02:00’}) ip_address_dump(sw_if_index=2,is_ipv6=1) ip_address_dump(sw_if_index=3,is_ipv6=1) sw_interface_ip6nd_ra_config(suppress=1,sw_if_index=3) ip_address_dump(sw_if_index=1,is_ipv6=1) sw_interface_ip6nd_ra_config(suppress=1,sw_if_index=1) ip_route_add_del(route={‘paths’: [{‘nh’: {‘obj_id’: 4294967295, ‘via_label’: 1048576, ‘address’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘proto’: 1, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], ‘sw_if_index’: 1, ‘flags’: 0, ‘preference’: 1, ‘table_id’: 0, ‘type’: 0}], ‘prefix’: {‘len’: 128, ‘address’: {‘un’: {‘ip6’: ‘?xfex00`x00x00x00x00x00x00x00x00x00x00x00x03’}, ‘af’: 1}}, ‘n_paths’: 1, ‘table_id’: 0},is_add=1,is_multipath=0) ipsec_sad_entry_add_del(entry={‘protocol’: 1, ‘spi’: 1001, ‘tunnel_dst’: ‘’, ‘sad_id’: 10, ‘tunnel_src’: ‘’, ‘crypto_key’: {‘length’: 16, ‘data’: ‘wemSVBpWLVcoiECd’}, ‘flags’: 0, ‘integrity_key’: {‘length’: 64, ‘data’: ‘TRCHHtSJ91q2OezTMu8vnxSNf9zvTCaRmsNP1fZwduhXuLeXhYrxI0KwFabzBSqR’}, ‘integrity_algorithm’: 6, ‘crypto_algorithm’: 1},is_add=1) ipsec_sad_entry_add_del(entry={‘protocol’: 1, ‘spi’: 1000, ‘tunnel_dst’: ‘’, ‘sad_id’: 20, ‘tunnel_src’: ‘’, ‘crypto_key’: {‘length’: 16, ‘data’: ‘wemSVBpWLVcoiECd’}, ‘flags’: 0, ‘integrity_key’: {‘length’: 64, ‘data’: ‘TRCHHtSJ91q2OezTMu8vnxSNf9zvTCaRmsNP1fZwduhXuLeXhYrxI0KwFabzBSqR’}, ‘integrity_algorithm’: 6, ‘crypto_algorithm’: 1},is_add=1) ipsec_spd_add_del(is_add=1,spd_id=1) ipsec_interface_add_del_spd(is_add=1,sw_if_index=1,spd_id=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘af’: 1}, ‘protocol’: 50, ‘sa_id’: 0, ‘remote_address_start’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}, ‘af’: 1}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}, ‘af’: 1}, ‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: 0, ‘policy’: 0, ‘local_address_start’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘af’: 1}, ‘local_port_stop’: 65535},is_add=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}, ‘af’: 1}, ‘protocol’: 50, ‘sa_id’: 0, ‘remote_address_start’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘af’: 1}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘af’: 1}, ‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: 1, ‘policy’: 0, ‘local_address_start’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}, ‘af’: 1}, ‘local_port_stop’: 65535},is_add=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}, ‘af’: 1}, ‘protocol’: 0, ‘sa_id’: 20, ‘remote_address_start’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘af’: 1}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘af’: 1}, ‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: 0, ‘policy’: 3, ‘local_address_start’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}, ‘af’: 1}, ‘local_port_stop’: 65535},is_add=1) ipsec_spd_entry_add_del(entry={‘remote_port_start’: 0, ‘local_address_stop’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}, ‘af’: 1}, ‘protocol’: 0, ‘sa_id’: 10, ‘remote_address_start’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘af’: 1}, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘remote_address_stop’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘af’: 1}, ‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: 1, ‘policy’: 3, ‘local_address_start’: {‘un’: {‘ip6’: ‘?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}, ‘af’: 1}, ‘local_port_stop’: 65535},is_add=1)