crypto

eth2p-ethip4ipsec11tnlsw-ip4base-int-aes128cbc-hmac512sha-dev

IPv4 IPsec tunnel mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.

• [Ver] TG verification: ETH-IP4 packet is sent from TG to DUT1. Packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

154b-ethip4ipsec11tnlsw-ip4base-int-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show logging’) show_version() sw_interface_dump(name_filter_valid=False,name_filter=’’) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8nx01’}}}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:1a’, ‘ip_address’: ‘192.168.10.2’}) ip_route_add_del(is_add=True,is_multipath=False,route={‘table_id’: 0, ‘prefix’: {‘len’: 8, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’nx00x00x00’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 0, ‘nh’: {‘address’: {‘ip4’: b’xc0xa8nx02’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) exec create loopback interface exec set interface state loop0 up exec set interface ip address VirtualFunctionEthernet3b/d/3 200.0.0.1/24 exec set ip neighbor VirtualFunctionEthernet3b/d/3 200.0.0.2 fa:ce:00:00:02:1b static exec set interface ip address loop0 100.0.0.1/32 ipsec_tunnel_if_add_del local_spi 100000 remote_spi 200000 crypto_alg aes-cbc-128 local_crypto_key 4566654a4372574a436c6559726b4545 remote_crypto_key 4566654a4372574a436c6559726b4545 integ_alg sha-512-256 local_integ_key 79574e4144414a6c5562737a567169675772666c414d6e507477766e7462516670646a66787445476c455664447853786269764d7a7570616149577153526b72 remote_integ_key 79574e4144414a6c5562737a567169675772666c414d6e507477766e7462516670646a66787445476c455664447853786269764d7a7570616149577153526b72 local_ip 100.0.0.1 remote_ip 200.0.0.2 instance 0 exec set interface ip address loop0 100.0.1.1/32 ipsec_tunnel_if_add_del local_spi 100001 remote_spi 200001 crypto_alg aes-cbc-128 local_crypto_key 77646271426b576652576b736f546146 remote_crypto_key 77646271426b576652576b736f546146 integ_alg sha-512-256 local_integ_key 514b4476694b4d50515872734e4b5775546d555745527075656a4e744e43484f4e56597a716f4d447674584b7341757558435673444161667273514c55415673 remote_integ_key 514b4476694b4d50515872734e4b5775546d555745527075656a4e744e43484f4e56597a716f4d447674584b7341757558435673444161667273514c55415673 local_ip 100.0.1.1 remote_ip 200.0.0.2 instance 1 exec set interface ip address loop0 100.0.2.1/32 ipsec_tunnel_if_add_del local_spi 100002 remote_spi 200002 crypto_alg aes-cbc-128 local_crypto_key 657455476e727078534e514777557775 remote_crypto_key 657455476e727078534e514777557775 integ_alg sha-512-256 local_integ_key 4a616e634c77795468767378736e706a6b5443654846544f666e6b576b78734c68506e7a6152734c626f41556543755943626554655551714458635954414a7a remote_integ_key 4a616e634c77795468767378736e706a6b5443654846544f666e6b576b78734c68506e7a6152734c626f41556543755943626554655551714458635954414a7a local_ip 100.0.2.1 remote_ip 200.0.0.2 instance 2 exec set interface ip address loop0 100.0.3.1/32 ipsec_tunnel_if_add_del local_spi 100003 remote_spi 200003 crypto_alg aes-cbc-128 local_crypto_key 4d596c48477a66527745447655756359 remote_crypto_key 4d596c48477a66527745447655756359 integ_alg sha-512-256 local_integ_key 457143754c50726b464378534c5972496c51486b5373496d434d754a74454c755a58705644497542544c6d7a6b594d5953586371796656625171446b76537a6f remote_integ_key 457143754c50726b464378534c5972496c51486b5373496d434d754a74454c755a58705644497542544c6d7a6b594d5953586371796656625171446b76537a6f local_ip 100.0.3.1 remote_ip 200.0.0.2 instance 3 exec set interface ip address loop0 100.0.4.1/32 ipsec_tunnel_if_add_del local_spi 100004 remote_spi 200004 crypto_alg aes-cbc-128 local_crypto_key 516e4b794d58625170756f7872616f70 remote_crypto_key 516e4b794d58625170756f7872616f70 integ_alg sha-512-256 local_integ_key 6d63705270754d73704456426f4e456962724e49506b4b6455704c486a4a546451474b5a4d676874626f4c536e55644b564646475a4d4144634b755655436178 remote_integ_key 6d63705270754d73704456426f4e456962724e49506b4b6455704c486a4a546451474b5a4d676874626f4c536e55644b564646475a4d4144634b755655436178 local_ip 100.0.4.1 remote_ip 200.0.0.2 instance 4 exec set interface ip address loop0 100.0.5.1/32 ipsec_tunnel_if_add_del local_spi 100005 remote_spi 200005 crypto_alg aes-cbc-128 local_crypto_key 72796670425a6d707850707163417076 remote_crypto_key 72796670425a6d707850707163417076 integ_alg sha-512-256 local_integ_key 5957564e74555a416a5966536f65646c544f48716e724b52754f634561504c724675644c557470674a4d784252534f6d74597050636c437365585a654168776e remote_integ_key 5957564e74555a416a5966536f65646c544f48716e724b52754f634561504c724675644c557470674a4d784252534f6d74597050636c437365585a654168776e local_ip 100.0.5.1 remote_ip 200.0.0.2 instance 5 exec set interface ip address loop0 100.0.6.1/32 ipsec_tunnel_if_add_del local_spi 100006 remote_spi 200006 crypto_alg aes-cbc-128 local_crypto_key 4f554546624e64424f457274676b5063 remote_crypto_key 4f554546624e64424f457274676b5063 integ_alg sha-512-256 local_integ_key 7848474b416b7a784f697a64695a4c566a6c7a4578615a565a427145426954586741694569646e455842776b4c4c526f727a784c47494e454146496b5a736350 remote_integ_key 7848474b416b7a784f697a64695a4c566a6c7a4578615a565a427145426954586741694569646e455842776b4c4c526f727a784c47494e454146496b5a736350 local_ip 100.0.6.1 remote_ip 200.0.0.2 instance 6 exec set interface ip address loop0 100.0.7.1/32 ipsec_tunnel_if_add_del local_spi 100007 remote_spi 200007 crypto_alg aes-cbc-128 local_crypto_key 55594565777a565057556a6a6e69614e remote_crypto_key 55594565777a565057556a6a6e69614e integ_alg sha-512-256 local_integ_key 56725368795a777264705859664551514c5559414b6d594a49534a6b64674441796b7657787247547749506e6c417a666e647362556d6e6c696e51624154624b remote_integ_key 56725368795a777264705859664551514c5559414b6d594a49534a6b64674441796b7657787247547749506e6c417a666e647362556d6e6c696e51624154624b local_ip 100.0.7.1 remote_ip 200.0.0.2 instance 7 exec set interface ip address loop0 100.0.8.1/32 ipsec_tunnel_if_add_del local_spi 100008 remote_spi 200008 crypto_alg aes-cbc-128 local_crypto_key 54707a665a747a6366785474634c7569 remote_crypto_key 54707a665a747a6366785474634c7569 integ_alg sha-512-256 local_integ_key 4b6977754b6146654159714c72705677436d6d726b4f45516672456648647156526d6c6c69485a636c434573466b4e46444653725643496e4f4746764c457865 remote_integ_key 4b6977754b6146654159714c72705677436d6d726b4f45516672456648647156526d6c6c69485a636c434573466b4e46444653725643496e4f4746764c457865 local_ip 100.0.8.1 remote_ip 200.0.0.2 instance 8 exec set interface ip address loop0 100.0.9.1/32 ipsec_tunnel_if_add_del local_spi 100009 remote_spi 200009 crypto_alg aes-cbc-128 local_crypto_key 74456665496c576754664d6652464a69 remote_crypto_key 74456665496c576754664d6652464a69 integ_alg sha-512-256 local_integ_key 75426544517348666c61536f61596a577a6658675a5247534f49765461704555514e71734148725a4267797873726b53554356646e72584653446b724e6c6345 remote_integ_key 75426544517348666c61536f61596a577a6658675a5247534f49765461704555514e71734148725a4267797873726b53554356646e72584653446b724e6c6345 local_ip 100.0.9.1 remote_ip 200.0.0.2 instance 9 exec set interface ip address loop0 100.0.10.1/32 ipsec_tunnel_if_add_del local_spi 100010 remote_spi 200010 crypto_alg aes-cbc-128 local_crypto_key 656e6241764d6453684b43796e76766b remote_crypto_key 656e6241764d6453684b43796e76766b integ_alg sha-512-256 local_integ_key 486f657943557957786f6765576e45715558556e7969434e4744794b757a6352585a68647858526e74624155704d4e4369746555486768536c59524979484a53 remote_integ_key 486f657943557957786f6765576e45715558556e7969434e4744794b757a6352585a68647858526e74624155704d4e4369746555486768536c59524979484a53 local_ip 100.0.10.1 remote_ip 200.0.0.2 instance 10 exec set interface unnumbered ipip0 use VirtualFunctionEthernet3b/d/3 exec set interface state ipip0 up exec ip route add 20.0.0.0/32 via ipip0 exec set interface unnumbered ipip1 use VirtualFunctionEthernet3b/d/3 exec set interface state ipip1 up exec ip route add 20.0.0.1/32 via ipip1 exec set interface unnumbered ipip2 use VirtualFunctionEthernet3b/d/3 exec set interface state ipip2 up exec ip route add 20.0.0.2/32 via ipip2 exec set interface unnumbered ipip3 use VirtualFunctionEthernet3b/d/3 exec set interface state ipip3 up exec ip route add 20.0.0.3/32 via ipip3 exec set interface unnumbered ipip4 use VirtualFunctionEthernet3b/d/3 exec set interface state ipip4 up exec ip route add 20.0.0.4/32 via ipip4 exec set interface unnumbered ipip5 use VirtualFunctionEthernet3b/d/3 exec set interface state ipip5 up exec ip route add 20.0.0.5/32 via ipip5 exec set interface unnumbered ipip6 use VirtualFunctionEthernet3b/d/3 exec set interface state ipip6 up exec ip route add 20.0.0.6/32 via ipip6 exec set interface unnumbered ipip7 use VirtualFunctionEthernet3b/d/3 exec set interface state ipip7 up exec ip route add 20.0.0.7/32 via ipip7 exec set interface unnumbered ipip8 use VirtualFunctionEthernet3b/d/3 exec set interface state ipip8 up exec ip route add 20.0.0.8/32 via ipip8 exec set interface unnumbered ipip9 use VirtualFunctionEthernet3b/d/3 exec set interface state ipip9 up exec ip route add 20.0.0.9/32 via ipip9 exec set interface unnumbered ipip10 use VirtualFunctionEthernet3b/d/3 exec set interface state ipip10 up exec ip route add 20.0.0.10/32 via ipip10

eth2p-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-dev

IPv4 IPsec tunnel mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.

• [Ver] TG verification: ETH-IP4 packet is sent from TG to DUT1. Packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

154b-ethip4ipsec1tnlsw-ip4base-int-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show logging’) show_version() sw_interface_dump(name_filter_valid=False,name_filter=’’) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8nx01’}}}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:1a’, ‘ip_address’: ‘192.168.10.2’}) ip_route_add_del(is_add=True,is_multipath=False,route={‘table_id’: 0, ‘prefix’: {‘len’: 8, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’nx00x00x00’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 0, ‘nh’: {‘address’: {‘ip4’: b’xc0xa8nx02’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) create_loopback(mac_address=0) sw_interface_set_flags(sw_if_index=3,flags=1) sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc8x00x00x01’}}}) ip_neighbor_add_del(is_add=1,neighbor={‘sw_if_index’: 2, ‘flags’: 1, ‘mac_address’: ‘fa:ce:00:00:02:1b’, ‘ip_address’: ‘200.0.0.2’}) sw_interface_add_del_address(sw_if_index=3,is_add=True,del_all=False,prefix={‘len’: 32, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’dx00x00x01’}}}) ipsec_tunnel_if_add_del(is_add=True,local_ip={‘af’: 0, ‘un’: {‘ip4’: b’dx00x00x01’}},remote_ip={‘af’: 0, ‘un’: {‘ip4’: b’xc8x00x00x02’}},local_spi=100000,remote_spi=200000,crypto_alg=1,local_crypto_key_len=16,local_crypto_key=b’BdttfhuIMTdiSpjk’,remote_crypto_key_len=16,remote_crypto_key=b’BdttfhuIMTdiSpjk’,integ_alg=6,local_integ_key_len=64,local_integ_key=b’ZzdRahGFtpYbVaEcVugVAuFkuqeTYdYuCCeSReknEOppcHdeshSnsRJDlcdWQmQd’,remote_integ_key_len=64,remote_integ_key=b’ZzdRahGFtpYbVaEcVugVAuFkuqeTYdYuCCeSReknEOppcHdeshSnsRJDlcdWQmQd’,tx_table_id=0) sw_interface_set_unnumbered(is_add=True,sw_if_index=2,unnumbered_sw_if_index=4) sw_interface_set_flags(sw_if_index=4,flags=1) ip_route_add_del(is_add=1,is_multipath=0,route={‘table_id’: 0, ‘prefix’: {‘len’: 32, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’x14x00x00x00’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 4, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 0, ‘nh’: {‘address’: 0, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]})

eth2p-ethip4ipsec1tnlsw-ip4base-policy-aes-128-cbc-sha-512-256-dev

IPv4 IPsec tunnel mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.

• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

110b-ethip4ipsec1tnlsw-ip4base-policy-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show logging’) show_version() sw_interface_dump(name_filter_valid=False,name_filter=’’) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}}) sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x03’}}}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:1a’, ‘ip_address’: ‘192.168.100.2’}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:1b’, ‘ip_address’: ‘192.168.4.4’}) ip_route_add_del(is_add=True,is_multipath=False,route={‘table_id’: 0, ‘prefix’: {‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 0, ‘nh’: {‘address’: {‘ip4’: b’xc0xa8dx02’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 10, ‘spi’: 1001, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’gYg1gtdM0oSJEzWs’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’3DBoyUlCBKrOLvIIUp2I7ekZoEvw5bRwxbYpfUbnUvCRy5oi67f9h6xnLIXyzQwB’}, ‘flags’: 4, ‘tunnel_src’: ‘192.168.100.3’, ‘tunnel_dst’: ‘192.168.100.2’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 20, ‘spi’: 1000, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’gYg1gtdM0oSJEzWs’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’3DBoyUlCBKrOLvIIUp2I7ekZoEvw5bRwxbYpfUbnUvCRy5oi67f9h6xnLIXyzQwB’}, ‘flags’: 4, ‘tunnel_src’: ‘192.168.100.2’, ‘tunnel_dst’: ‘192.168.100.3’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_spd_add_del(is_add=True,spd_id=1) ipsec_interface_add_del_spd(is_add=True,sw_if_index=1,spd_id=1) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: False, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: True, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: False, ‘sa_id’: 20, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: True, ‘sa_id’: 10, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535})

eth2p-ethip4ipsec1tptsw-ip4base-policy-aes-128-cbc-sha-512-256-dev

IPv4 IPsec transport mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv4 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.

• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

110b-ethip4ipsec1tptsw-ip4base-policy-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show logging’) show_version() sw_interface_dump(name_filter_valid=False,name_filter=’’) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}}) sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x03’}}}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:1a’, ‘ip_address’: ‘192.168.100.2’}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:1b’, ‘ip_address’: ‘192.168.4.4’}) ip_route_add_del(is_add=True,is_multipath=False,route={‘table_id’: 0, ‘prefix’: {‘len’: 24, ‘address’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 0, ‘nh’: {‘address’: {‘ip4’: b’xc0xa8dx02’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 10, ‘spi’: 1001, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’aEe2fgz9Aksul1gL’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’Yv7YhPAyIRfdBhLuiTX3VJwVsFOn03C9tYt3gSjWVfVCbHDTan0pf9K1wA4ol0T5’}, ‘flags’: 0, ‘tunnel_src’: ‘’, ‘tunnel_dst’: ‘’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 20, ‘spi’: 1000, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’aEe2fgz9Aksul1gL’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’Yv7YhPAyIRfdBhLuiTX3VJwVsFOn03C9tYt3gSjWVfVCbHDTan0pf9K1wA4ol0T5’}, ‘flags’: 0, ‘tunnel_src’: ‘’, ‘tunnel_dst’: ‘’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_spd_add_del(is_add=True,spd_id=1) ipsec_interface_add_del_spd(is_add=True,sw_if_index=1,spd_id=1) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: False, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: True, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx02’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8dx03’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: False, ‘sa_id’: 20, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: True, ‘sa_id’: 10, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘remote_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x03x03’}}, ‘local_address_start’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘local_address_stop’: {‘af’: 0, ‘un’: {‘ip4’: b’xc0xa8x04x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535})

eth2p-ethip6ipsec1tnlsw-ip6base-policy-aes-128-cbc-sha-512-256-dev

IPv6 IPsec tunnel mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in tunnel mode.

• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

124b-ethip6ipsec1tnlsw-ip6base-policy-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show logging’) show_version() sw_interface_dump(name_filter_valid=False,name_filter=’’) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}}) sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x03’}}}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:1a’, ‘ip_address’: ‘3ffe:5f::1’}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:1b’, ‘ip_address’: ‘3ffe:60::4’}) ip_address_dump(sw_if_index=1,is_ipv6=True) sw_interface_ip6nd_ra_config(sw_if_index=1,suppress=1) ip_address_dump(sw_if_index=2,is_ipv6=True) sw_interface_ip6nd_ra_config(sw_if_index=2,suppress=1) ip_route_add_del(is_add=True,is_multipath=False,route={‘table_id’: 0, ‘prefix’: {‘len’: 128, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 1, ‘nh’: {‘address’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 10, ‘spi’: 1001, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’QmynMUGnKHxO10eM’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’yGQU0W6zGVBgRlSIN8waPaXEmeM1pR1VkUjwsUlV7aJA3LmdhhLQhY3NKxl15RLL’}, ‘flags’: 12, ‘tunnel_src’: ‘3ffe:5f::2’, ‘tunnel_dst’: ‘3ffe:5f::1’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 20, ‘spi’: 1000, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’QmynMUGnKHxO10eM’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’yGQU0W6zGVBgRlSIN8waPaXEmeM1pR1VkUjwsUlV7aJA3LmdhhLQhY3NKxl15RLL’}, ‘flags’: 12, ‘tunnel_src’: ‘3ffe:5f::1’, ‘tunnel_dst’: ‘3ffe:5f::2’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_spd_add_del(is_add=True,spd_id=1) ipsec_interface_add_del_spd(is_add=True,sw_if_index=1,spd_id=1) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: False, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: True, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: False, ‘sa_id’: 20, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: True, ‘sa_id’: 10, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535})

eth2p-ethip6ipsec1tptsw-ip6base-policy-aes-128-cbc-sha-512-256-dev

IPv6 IPsec transport mode test suite.

• [Top] Network topologies: TG-DUT1 2-node topology with one link between nodes.

• [Cfg] DUT configuration: On DUT1 create loopback interface, configure loopback an physical interface IPv6 addresses, static ARP record, route and IPsec manual keyed connection in transport mode.

• [Ver] TG verification: ESP packet is sent from TG to DUT1. ESP packet is received on TG from DUT1.

• [Ref] Applicable standard specifications: RFC4303.

Test Name

VPP API Test Commands History - Commands Used Per Test Case

124b-ethip6ipsec1tptsw-ip6base-policy-aes- 128-cbc-sha-512-256-dev

DUT1: cli_inband(cmd=’show logging’) show_version() sw_interface_dump(name_filter_valid=False,name_filter=’’) cli_inband(cmd=’trace add dpdk-input 50’) cli_inband(cmd=’trace add vhost-user-input 50’) cli_inband(cmd=’trace add memif-input 50’) cli_inband(cmd=’trace add avf-input 50’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_set_flags(sw_if_index=1,flags=1) hw_interface_set_mtu(sw_if_index=1,mtu=9200) sw_interface_set_flags(sw_if_index=2,flags=1) hw_interface_set_mtu(sw_if_index=2,mtu=9200) sw_interface_dump(name_filter_valid=False,name_filter=’’) sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}}) sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x03’}}}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:1a’, ‘ip_address’: ‘3ffe:5f::1’}) ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘fa:ce:00:00:02:1b’, ‘ip_address’: ‘3ffe:60::4’}) ip_address_dump(sw_if_index=1,is_ipv6=True) sw_interface_ip6nd_ra_config(sw_if_index=1,suppress=1) ip_address_dump(sw_if_index=2,is_ipv6=True) sw_interface_ip6nd_ra_config(sw_if_index=2,suppress=1) ip_route_add_del(is_add=True,is_multipath=False,route={‘table_id’: 0, ‘prefix’: {‘len’: 128, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 1, ‘nh’: {‘address’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 10, ‘spi’: 1001, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’sQ1J9OqggF3FMvwO’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’9auJhLPYtZTBsXxBwzq71V58kb0I6hGVVxuxuuMzFaSamyZbibzHgyKJzetJbHeR’}, ‘flags’: 0, ‘tunnel_src’: ‘’, ‘tunnel_dst’: ‘’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_sad_entry_add_del(is_add=True,entry={‘sad_id’: 20, ‘spi’: 1000, ‘crypto_algorithm’: 1, ‘crypto_key’: {‘length’: 16, ‘data’: b’sQ1J9OqggF3FMvwO’}, ‘integrity_algorithm’: 6, ‘integrity_key’: {‘length’: 64, ‘data’: b’9auJhLPYtZTBsXxBwzq71V58kb0I6hGVVxuxuuMzFaSamyZbibzHgyKJzetJbHeR’}, ‘flags’: 0, ‘tunnel_src’: ‘’, ‘tunnel_dst’: ‘’, ‘protocol’: 50, ‘udp_src_port’: 4500, ‘udp_dst_port’: 4500}) ipsec_spd_add_del(is_add=True,spd_id=1) ipsec_interface_add_del_spd(is_add=True,sw_if_index=1,spd_id=1) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: False, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 100, ‘is_outbound’: True, ‘sa_id’: 0, ‘policy’: 0, ‘protocol’: 50, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: False, ‘sa_id’: 20, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535}) ipsec_spd_entry_add_del(is_add=True,entry={‘spd_id’: 1, ‘priority’: 10, ‘is_outbound’: True, ‘sa_id’: 10, ‘policy’: 3, ‘protocol’: 0, ‘remote_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘remote_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00ax00x00x00x00x00x00x00x00x00x00x00x03’}}, ‘local_address_start’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘local_address_stop’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00`x00x00x00x00x00x00x00x00x00x00x00x04’}}, ‘remote_port_start’: 0, ‘remote_port_stop’: 65535, ‘local_port_start’: 0, ‘local_port_stop’: 65535})