crypto

eth2p-ethip4ipsec11tnlsw-ip4base-int-aes128cbc-hmac512sha-dev

IPv4 IPsec tunnel mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.

• [Ver] TG verification: ETH-IP4 packet is sent from TG to DUT1. Packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

154b-ethip4ipsec11tnlsw-ip4base-int-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show logging’) show_version() sw_interface_dump(name_filter_valid=False,name_filter=’’) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8nx01’}}}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:0a’, ‘ip_address’: ‘192.168.10.2’}) ip_route_add_del(is_add=True,is_multipath=False,route={‘table_id’: 0, ‘prefix’: {‘len’: 8, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’nx00x00x00’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 0, ‘nh’: {‘address’: {‘ip4’: b’xc0xa8nx02’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) exec create loopback interface exec set interface state loop0 up exec set interface ip address VirtualFunctionEthernet3b/b/3 200.0.0.1/24 exec set ip neighbor VirtualFunctionEthernet3b/b/3 200.0.0.2 fa:ce:00:00:02:0b static exec set interface ip address loop0 100.0.0.1/32 ipsec_tunnel_if_add_del local_spi 100000 remote_spi 200000 crypto_alg aes-cbc-128 local_crypto_key 6949626247634858634c564c44416a59 remote_crypto_key 6949626247634858634c564c44416a59 integ_alg sha-512-256 local_integ_key 6d4f4853684c6c7a4e52787163706c6c527053666a4a524f47665965536d584253696b4f6c484c58795455506c71664e585950424f697a7566764342436e4c51 remote_integ_key 6d4f4853684c6c7a4e52787163706c6c527053666a4a524f47665965536d584253696b4f6c484c58795455506c71664e585950424f697a7566764342436e4c51 local_ip 100.0.0.1 remote_ip 200.0.0.2 instance 0 exec set interface ip address loop0 100.0.1.1/32 ipsec_tunnel_if_add_del local_spi 100001 remote_spi 200001 crypto_alg aes-cbc-128 local_crypto_key 736a55525442746e6959695a4f4b476e remote_crypto_key 736a55525442746e6959695a4f4b476e integ_alg sha-512-256 local_integ_key 46424773425262734f6574646677484a4f5658737650526d724d467274686e4c704543504d516852497a507a62734e46687858776876535063707971764a6772 remote_integ_key 46424773425262734f6574646677484a4f5658737650526d724d467274686e4c704543504d516852497a507a62734e46687858776876535063707971764a6772 local_ip 100.0.1.1 remote_ip 200.0.0.2 instance 1 exec set interface ip address loop0 100.0.2.1/32 ipsec_tunnel_if_add_del local_spi 100002 remote_spi 200002 crypto_alg aes-cbc-128 local_crypto_key 4e6c454769464a75754d6745445a7353 remote_crypto_key 4e6c454769464a75754d6745445a7353 integ_alg sha-512-256 local_integ_key 67706d527a6b666b467653537175676d4a566c66504e567168796b66456972594c6c4b5056684754556d6b725a714865526d444e7a50784562675a706f4e6878 remote_integ_key 67706d527a6b666b467653537175676d4a566c66504e567168796b66456972594c6c4b5056684754556d6b725a714865526d444e7a50784562675a706f4e6878 local_ip 100.0.2.1 remote_ip 200.0.0.2 instance 2 exec set interface ip address loop0 100.0.3.1/32 ipsec_tunnel_if_add_del local_spi 100003 remote_spi 200003 crypto_alg aes-cbc-128 local_crypto_key 4e77636d7a6c556346674c426f4e4471 remote_crypto_key 4e77636d7a6c556346674c426f4e4471 integ_alg sha-512-256 local_integ_key 4b514361566f4d776570554172727344466a42715a54526456584364564e6e42447765696f57477478695a48416a6255436655416d755a5652445a646277685a remote_integ_key 4b514361566f4d776570554172727344466a42715a54526456584364564e6e42447765696f57477478695a48416a6255436655416d755a5652445a646277685a local_ip 100.0.3.1 remote_ip 200.0.0.2 instance 3 exec set interface ip address loop0 100.0.4.1/32 ipsec_tunnel_if_add_del local_spi 100004 remote_spi 200004 crypto_alg aes-cbc-128 local_crypto_key 524d5a504a7253644666455a745a6c53 remote_crypto_key 524d5a504a7253644666455a745a6c53 integ_alg sha-512-256 local_integ_key 74747770524f5943497278594963456a724677414659494f584d4a4e716e41436d71424354594d4a5a495069586d5345456f4a464f494d4364494d687750456d remote_integ_key 74747770524f5943497278594963456a724677414659494f584d4a4e716e41436d71424354594d4a5a495069586d5345456f4a464f494d4364494d687750456d local_ip 100.0.4.1 remote_ip 200.0.0.2 instance 4 exec set interface ip address loop0 100.0.5.1/32 ipsec_tunnel_if_add_del local_spi 100005 remote_spi 200005 crypto_alg aes-cbc-128 local_crypto_key 665774756e5a444270544e7654584262 remote_crypto_key 665774756e5a444270544e7654584262 integ_alg sha-512-256 local_integ_key 6579514256717a52715657434948496f614270544775697a464269664e6e4a7754585a4d4d786e5845476368544b67575a736f7877474a434a616d7764546651 remote_integ_key 6579514256717a52715657434948496f614270544775697a464269664e6e4a7754585a4d4d786e5845476368544b67575a736f7877474a434a616d7764546651 local_ip 100.0.5.1 remote_ip 200.0.0.2 instance 5 exec set interface ip address loop0 100.0.6.1/32 ipsec_tunnel_if_add_del local_spi 100006 remote_spi 200006 crypto_alg aes-cbc-128 local_crypto_key 4b446a564b6a585650796647435a6f78 remote_crypto_key 4b446a564b6a585650796647435a6f78 integ_alg sha-512-256 local_integ_key 694362755144796e586b63764d617a6b66535746547a71494542644f6667726d565a6f4d4d6d6c78776b6e45566647454e6d4a5675707a4f466e474464656e61 remote_integ_key 694362755144796e586b63764d617a6b66535746547a71494542644f6667726d565a6f4d4d6d6c78776b6e45566647454e6d4a5675707a4f466e474464656e61 local_ip 100.0.6.1 remote_ip 200.0.0.2 instance 6 exec set interface ip address loop0 100.0.7.1/32 ipsec_tunnel_if_add_del local_spi 100007 remote_spi 200007 crypto_alg aes-cbc-128 local_crypto_key 674a727146526a4c784775704a785363 remote_crypto_key 674a727146526a4c784775704a785363 integ_alg sha-512-256 local_integ_key 495276704a504279795075576d7471437578467266534c767957446e57486359476a4f57424e515154634d58484e6f594b4c6a694c4677727667476c5a614759 remote_integ_key 495276704a504279795075576d7471437578467266534c767957446e57486359476a4f57424e515154634d58484e6f594b4c6a694c4677727667476c5a614759 local_ip 100.0.7.1 remote_ip 200.0.0.2 instance 7 exec set interface ip address loop0 100.0.8.1/32 ipsec_tunnel_if_add_del local_spi 100008 remote_spi 200008 crypto_alg aes-cbc-128 local_crypto_key 414572664c796e4241776c514c514273 remote_crypto_key 414572664c796e4241776c514c514273 integ_alg sha-512-256 local_integ_key 7847774b6771714e4e565575474667616457545869635851616f5372426574544144784d6f52636f67774761537743614a7a687252544d776345575949535877 remote_integ_key 7847774b6771714e4e565575474667616457545869635851616f5372426574544144784d6f52636f67774761537743614a7a687252544d776345575949535877 local_ip 100.0.8.1 remote_ip 200.0.0.2 instance 8 exec set interface ip address loop0 100.0.9.1/32 ipsec_tunnel_if_add_del local_spi 100009 remote_spi 200009 crypto_alg aes-cbc-128 local_crypto_key 4459467a4f4b554e716f477041597259 remote_crypto_key 4459467a4f4b554e716f477041597259 integ_alg sha-512-256 local_integ_key 6d7a716277564642527a456758474b546a506d63766769626f414658454a4e62705079586b7666766f4956564543796572785056637751436a516e6c414e4849 remote_integ_key 6d7a716277564642527a456758474b546a506d63766769626f414658454a4e62705079586b7666766f4956564543796572785056637751436a516e6c414e4849 local_ip 100.0.9.1 remote_ip 200.0.0.2 instance 9 exec set interface ip address loop0 100.0.10.1/32 ipsec_tunnel_if_add_del local_spi 100010 remote_spi 200010 crypto_alg aes-cbc-128 local_crypto_key 6572435a564e4c6d4d697074716c6b58 remote_crypto_key 6572435a564e4c6d4d697074716c6b58 integ_alg sha-512-256 local_integ_key 434a59554270484c4470614c7953635a64784c4e64665373756e76557a716954476f44536b595161766e416671597359445a514446505a616672415a6e434b5a remote_integ_key 434a59554270484c4470614c7953635a64784c4e64665373756e76557a716954476f44536b595161766e416671597359445a514446505a616672415a6e434b5a local_ip 100.0.10.1 remote_ip 200.0.0.2 instance 10 exec set interface unnumbered ipip0 use VirtualFunctionEthernet3b/b/3 exec set interface state ipip0 up exec ip route add 20.0.0.0/32 via ipip0 exec set interface unnumbered ipip1 use VirtualFunctionEthernet3b/b/3 exec set interface state ipip1 up exec ip route add 20.0.0.1/32 via ipip1 exec set interface unnumbered ipip2 use VirtualFunctionEthernet3b/b/3 exec set interface state ipip2 up exec ip route add 20.0.0.2/32 via ipip2 exec set interface unnumbered ipip3 use VirtualFunctionEthernet3b/b/3 exec set interface state ipip3 up exec ip route add 20.0.0.3/32 via ipip3 exec set interface unnumbered ipip4 use VirtualFunctionEthernet3b/b/3 exec set interface state ipip4 up exec ip route add 20.0.0.4/32 via ipip4 exec set interface unnumbered ipip5 use VirtualFunctionEthernet3b/b/3 exec set interface state ipip5 up exec ip route add 20.0.0.5/32 via ipip5 exec set interface unnumbered ipip6 use VirtualFunctionEthernet3b/b/3 exec set interface state ipip6 up exec ip route add 20.0.0.6/32 via ipip6 exec set interface unnumbered ipip7 use VirtualFunctionEthernet3b/b/3 exec set interface state ipip7 up exec ip route add 20.0.0.7/32 via ipip7 exec set interface unnumbered ipip8 use VirtualFunctionEthernet3b/b/3 exec set interface state ipip8 up exec ip route add 20.0.0.8/32 via ipip8 exec set interface unnumbered ipip9 use VirtualFunctionEthernet3b/b/3 exec set interface state ipip9 up exec ip route add 20.0.0.9/32 via ipip9 exec set interface unnumbered ipip10 use VirtualFunctionEthernet3b/b/3 exec set interface state ipip10 up exec ip route add 20.0.0.10/32 via ipip10

eth2p-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-dev

IPv4 IPsec tunnel mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.

• [Ver] TG verification: ETH-IP4 packet is sent from TG to DUT1. Packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

154b-ethip4ipsec1tnlsw-ip4base-int-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show logging’) show_version() sw_interface_dump(name_filter_valid=False,name_filter=’’) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8nx01’}}}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:0a’, ‘ip_address’: ‘192.168.10.2’}) ip_route_add_del(is_add=True,is_multipath=False,route={‘table_id’: 0, ‘prefix’: {‘len’: 8, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’nx00x00x00’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 0, ‘nh’: {‘address’: {‘ip4’: b’xc0xa8nx02’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) create_loopback(mac_address=0) sw_interface_set_flags(sw_if_index=3,flags=1) sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc8x00x00x01’}}}) ip_neighbor_add_del(is_add=1,neighbor={‘sw_if_index’: 2, ‘flags’: 1, ‘mac_address’: ‘fa:ce:00:00:02:0b’, ‘ip_address’: ‘200.0.0.2’}) sw_interface_add_del_address(sw_if_index=3,is_add=True,del_all=False,prefix={‘len’: 32, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’dx00x00x01’}}}) ipsec_tunnel_if_add_del(is_add=True,local_ip={‘af’: 0, ‘un’: {‘ip4’: b’dx00x00x01’}},remote_ip={‘af’: 0, ‘un’: {‘ip4’: b’xc8x00x00x02’}},local_spi=100000,remote_spi=200000,crypto_alg=1,local_crypto_key_len=16,local_crypto_key=b’hBcgysRFcPbrCvjL’,remote_crypto_key_len=16,remote_crypto_key=b’hBcgysRFcPbrCvjL’,integ_alg=6,local_integ_key_len=64,local_integ_key=b’pgmyLMSbDrQvNytVzjOZLxtUJehChoVBSseMDRjweXMpSMMuvbmKNZzpfroDfcSM’,remote_integ_key_len=64,remote_integ_key=b’pgmyLMSbDrQvNytVzjOZLxtUJehChoVBSseMDRjweXMpSMMuvbmKNZzpfroDfcSM’,tx_table_id=0) sw_interface_set_unnumbered(is_add=True,sw_if_index=2,unnumbered_sw_if_index=4) sw_interface_set_flags(sw_if_index=4,flags=1) ip_route_add_del(is_add=1,is_multipath=0,route={‘table_id’: 0, ‘prefix’: {‘len’: 32, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’x14x00x00x00’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 4, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 0, ‘nh’: {‘address’: 0, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]})

eth2p-ethip4ipsec1tnlsw-ip4base-policy-aes-128-cbc-sha-512-256-dev

IPv4 IPsec tunnel mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.

• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

110b-ethip4ipsec1tnlsw-ip4base-policy-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show logging’) show_version() sw_interface_dump(name_filter_valid=False,name_filter=’’) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}}) sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x03’}}}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:0a’, ‘ip_address’: ‘192.168.100.2’}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:0b’, ‘ip_address’: ‘192.168.4.4’}) ip_route_add_del(is_add=True,is_multipath=False,route={‘table_id’: 0, ‘prefix’: {‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 0, ‘nh’: {‘address’: {‘ip4’: b’xc0xa8dx02’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 10, ‘spi’: 1001, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’JuvcJ7mmbsa06iLq’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’iP9o52bopq6PjdPpeIRQTq67DsWh6vGzlb6wkG3Xqg9HWZzGb9NbqsBNPcooZxzO’}, ‘flags’: 4, ‘tunnel_src’: ‘192.168.100.3’, ‘tunnel_dst’: ‘192.168.100.2’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 20, ‘spi’: 1000, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’JuvcJ7mmbsa06iLq’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’iP9o52bopq6PjdPpeIRQTq67DsWh6vGzlb6wkG3Xqg9HWZzGb9NbqsBNPcooZxzO’}, ‘flags’: 4, ‘tunnel_src’: ‘192.168.100.2’, ‘tunnel_dst’: ‘192.168.100.3’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_spd_add_del(is_add=True,spd_id=1) ipsec_interface_add_del_spd(is_add=True,sw_if_index=1,spd_id=1) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: False, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: True, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: False, ‘sa_id’: 20, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: True, ‘sa_id’: 10, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535})

eth2p-ethip4ipsec1tptsw-ip4base-policy-aes-128-cbc-sha-512-256-dev

IPv4 IPsec transport mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.

• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

110b-ethip4ipsec1tptsw-ip4base-policy-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show logging’) show_version() sw_interface_dump(name_filter_valid=False,name_filter=’’) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}}) sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x03’}}}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:0a’, ‘ip_address’: ‘192.168.100.2’}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:0b’, ‘ip_address’: ‘192.168.4.4’}) ip_route_add_del(is_add=True,is_multipath=False,route={‘table_id’: 0, ‘prefix’: {‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 0, ‘nh’: {‘address’: {‘ip4’: b’xc0xa8dx02’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 10, ‘spi’: 1001, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’Psr5RKkmiP4rQDQB’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’Fy7elfsTGfSVA0I1wl27AwC0GT6n9ZJeVAQNngZG59yb0fDCOHQhjV09YHcXJgKH’}, ‘flags’: 0, ‘tunnel_src’: ‘’, ‘tunnel_dst’: ‘’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 20, ‘spi’: 1000, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’Psr5RKkmiP4rQDQB’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’Fy7elfsTGfSVA0I1wl27AwC0GT6n9ZJeVAQNngZG59yb0fDCOHQhjV09YHcXJgKH’}, ‘flags’: 0, ‘tunnel_src’: ‘’, ‘tunnel_dst’: ‘’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_spd_add_del(is_add=True,spd_id=1) ipsec_interface_add_del_spd(is_add=True,sw_if_index=1,spd_id=1) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: False, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: True, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: False, ‘sa_id’: 20, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: True, ‘sa_id’: 10, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535})

eth2p-ethip6ipsec1tnlsw-ip6base-policy-aes-128-cbc-sha-512-256-dev

IPv6 IPsec tunnel mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.

• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

124b-ethip6ipsec1tnlsw-ip6base-policy-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show logging’) show_version() sw_interface_dump(name_filter_valid=False,name_filter=’’) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}}) sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x03’}}}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:0a’, ‘ip_address’: ‘3ffe:5f::1’}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:0b’, ‘ip_address’: ‘3ffe:60::4’}) ip_address_dump(sw_if_index=1,is_ipv6=True) sw_interface_ip6nd_ra_config(sw_if_index=1,suppress=1) ip_address_dump(sw_if_index=2,is_ipv6=True) sw_interface_ip6nd_ra_config(sw_if_index=2,suppress=1) ip_route_add_del(is_add=True,is_multipath=False,route={‘table_id’: 0, ‘prefix’: {‘len’: 128, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 1, ‘nh’: {‘address’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 10, ‘spi’: 1001, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’5nz4nZ4kZUtPr61V’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’tOXZAO4sdmuols7Zj55DkSJccV93EYIDyUVI4Hemtjx7CQThQ8MCCaIHmSBI92YI’}, ‘flags’: 12, ‘tunnel_src’: ‘3ffe:5f::2’, ‘tunnel_dst’: ‘3ffe:5f::1’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 20, ‘spi’: 1000, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’5nz4nZ4kZUtPr61V’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’tOXZAO4sdmuols7Zj55DkSJccV93EYIDyUVI4Hemtjx7CQThQ8MCCaIHmSBI92YI’}, ‘flags’: 12, ‘tunnel_src’: ‘3ffe:5f::1’, ‘tunnel_dst’: ‘3ffe:5f::2’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_spd_add_del(is_add=True,spd_id=1) ipsec_interface_add_del_spd(is_add=True,sw_if_index=1,spd_id=1) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: False, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: True, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: False, ‘sa_id’: 20, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: True, ‘sa_id’: 10, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535})

eth2p-ethip6ipsec1tptsw-ip6base-policy-aes-128-cbc-sha-512-256-dev

IPv6 IPsec transport mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.

• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

124b-ethip6ipsec1tptsw-ip6base-policy-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show logging’) show_version() sw_interface_dump(name_filter_valid=False,name_filter=’’) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}}) sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x03’}}}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:0a’, ‘ip_address’: ‘3ffe:5f::1’}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:0b’, ‘ip_address’: ‘3ffe:60::4’}) ip_address_dump(sw_if_index=1,is_ipv6=True) sw_interface_ip6nd_ra_config(sw_if_index=1,suppress=1) ip_address_dump(sw_if_index=2,is_ipv6=True) sw_interface_ip6nd_ra_config(sw_if_index=2,suppress=1) ip_route_add_del(is_add=True,is_multipath=False,route={‘table_id’: 0, ‘prefix’: {‘len’: 128, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 1, ‘nh’: {‘address’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 10, ‘spi’: 1001, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’SkPTxIe7S8w10R8T’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’OiEC2AvieQZiZydiTbjKSyZh22tfe1XDxp3UbnCg4kPGPUZD85Yvs0qjH6sbq8O3’}, ‘flags’: 0, ‘tunnel_src’: ‘’, ‘tunnel_dst’: ‘’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 20, ‘spi’: 1000, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’SkPTxIe7S8w10R8T’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’OiEC2AvieQZiZydiTbjKSyZh22tfe1XDxp3UbnCg4kPGPUZD85Yvs0qjH6sbq8O3’}, ‘flags’: 0, ‘tunnel_src’: ‘’, ‘tunnel_dst’: ‘’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_spd_add_del(is_add=True,spd_id=1) ipsec_interface_add_del_spd(is_add=True,sw_if_index=1,spd_id=1) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: False, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: True, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: False, ‘sa_id’: 20, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: True, ‘sa_id’: 10, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535})