ip6

2n1l-10ge2p1x710-ethip6-ip6base-adlalwlistbase-scapy

2n1l-10ge2p1x710-ethip6-ip6base-adlalwlistbase-scapy

ADL Security IPv6 allowlist test cases

  • [Top] Network Topologies: TG-DUT1-TG 2-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv6 on all links.

  • [Cfg] DUT configuration: DUT1 is configured with IPv6 routing and static routes. ADL security allowlists are applied on DUT1 ingress interface from TG.

  • [Ver] TG verification: Test IPv6 packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.

  • [Ref] Applicable standard specifications:

 Test Name 

 VPP API Test Commands History - Commands Used Per Test Case 

 78b-0c-ethip6- 
 ip6base-adlalwlistbase-scapy 

 DUT1:  
 cli_inband(cmd=’show logging’) 
 show_version() 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 cli_inband(cmd=’trace add dpdk-input 50’) 
 cli_inband(cmd=’trace add vhost-user-input 50’) 
 cli_inband(cmd=’trace add memif-input 50’) 
 cli_inband(cmd=’trace add avf-input 50’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘36:db:5f:be:d6:d7’, ‘ip_address’: ‘2001:1::2’}) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘3a:24:55:60:63:6d’, ‘ip_address’: ‘2001:2::2’}) 
 sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’ x01x00x01x00x00x00x00x00x00x00x00x00x00x00x01’}}}) 
 sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’ x01x00x02x00x00x00x00x00x00x00x00x00x00x00x01’}}}) 
 ip_address_dump(sw_if_index=1,is_ipv6=True) 
 sw_interface_ip6nd_ra_config(sw_if_index=1,suppress=1) 
 ip_address_dump(sw_if_index=2,is_ipv6=True) 
 sw_interface_ip6nd_ra_config(sw_if_index=2,suppress=1) 
 ip_table_add_del(table={‘table_id’: 1, ‘is_ip6’: True},is_add=True) 
 ip_route_add_del(is_add=True,is_multipath=True,route={‘table_id’: 1, ‘prefix’: {‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’ x01x00x01x00x00x00x00x00x00x00x00x00x00x00x00’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 4294967295, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 1, ‘flags’: 0, ‘proto’: 1, ‘nh’: {‘address’: 0, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) 
 adl_allowlist_enable_disable(sw_if_index=1,fib_id=1,ip4=False,ip6=True,default_adl=0) 
 adl_interface_enable_disable(sw_if_index=1,enable_disable=True)

2n1l-10ge2p1x710-ethip6-ip6base-adlblklistbase-scapy

2n1l-10ge2p1x710-ethip6-ip6base-adlblklistbase-scapy

ADL Security IPv6 allowlist test cases

  • [Top] Network Topologies: TG-DUT1-TG 2-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv6 on all links.

  • [Cfg] DUT configuration: DUT1 is configured with IPv6 routing and static routes. ADL security allowlists are applied on DUT1 ingress interface from TG.

  • [Ver] TG verification: Test IPv6 packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.

  • [Ref] Applicable standard specifications:

 Test Name 

 VPP API Test Commands History - Commands Used Per Test Case 

 78b-0c-ethip6- 
 ip6base-adlblklistbase-scapy 

 DUT1:  
 cli_inband(cmd=’show logging’) 
 show_version() 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 cli_inband(cmd=’trace add dpdk-input 50’) 
 cli_inband(cmd=’trace add vhost-user-input 50’) 
 cli_inband(cmd=’trace add memif-input 50’) 
 cli_inband(cmd=’trace add avf-input 50’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘36:db:5f:be:d6:d7’, ‘ip_address’: ‘2001:1::2’}) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘3a:24:55:60:63:6d’, ‘ip_address’: ‘2001:2::2’}) 
 sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’ x01x00x01x00x00x00x00x00x00x00x00x00x00x00x01’}}}) 
 sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’ x01x00x02x00x00x00x00x00x00x00x00x00x00x00x01’}}}) 
 ip_address_dump(sw_if_index=1,is_ipv6=True) 
 sw_interface_ip6nd_ra_config(sw_if_index=1,suppress=1) 
 ip_address_dump(sw_if_index=2,is_ipv6=True) 
 sw_interface_ip6nd_ra_config(sw_if_index=2,suppress=1) 
 ip_table_add_del(table={‘table_id’: 1, ‘is_ip6’: True},is_add=True) 
 ip_route_add_del(is_add=True,is_multipath=True,route={‘table_id’: 1, ‘prefix’: {‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’ x02x00x01x00x00x00x00x00x00x00x00x00x00x00x00’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 4294967295, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 1, ‘flags’: 0, ‘proto’: 1, ‘nh’: {‘address’: 0, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) 
 adl_allowlist_enable_disable(sw_if_index=1,fib_id=1,ip4=False,ip6=True,default_adl=0) 
 adl_interface_enable_disable(sw_if_index=1,enable_disable=True)

2n1l-10ge2p1x710-ethip6-ip6base-iacldstbase-scapy

2n1l-10ge2p1x710-ethip6-ip6base-iacldstbase-scapy

IPv6 iAcl whitelist test cases

  • [Top] Network Topologies: TG-DUT1-TG 2-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv6 on all links.

  • [Cfg] DUT configuration: DUT1 is configured with IPv6 routing static routes. IPv6 iAcl security whitelist is applied on DUT1 ingress interface from TG.

  • [Ver] TG verification: Test IPv6 packets are sent in one direction by TG on link to DUT1; on receive TG verifies packets for correctness and drops as applicable.

  • [Ref] Applicable standard specifications:

 Test Name 

 VPP API Test Commands History - Commands Used Per Test Case 

 78b-0c-ethip6- 
 ip6base-iacldstbase-scapy 

 DUT1:  
 cli_inband(cmd=’show logging’) 
 show_version() 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 cli_inband(cmd=’trace add dpdk-input 50’) 
 cli_inband(cmd=’trace add vhost-user-input 50’) 
 cli_inband(cmd=’trace add memif-input 50’) 
 cli_inband(cmd=’trace add avf-input 50’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘36:db:5f:be:d6:d7’, ‘ip_address’: ‘2001:1::2’}) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘3a:24:55:60:63:6d’, ‘ip_address’: ‘2001:2::2’}) 
 sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’ x01x00x01x00x00x00x00x00x00x00x00x00x00x00x01’}}}) 
 sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’ x01x00x02x00x00x00x00x00x00x00x00x00x00x00x01’}}}) 
 ip_address_dump(sw_if_index=1,is_ipv6=True) 
 sw_interface_ip6nd_ra_config(sw_if_index=1,suppress=1) 
 ip_address_dump(sw_if_index=2,is_ipv6=True) 
 sw_interface_ip6nd_ra_config(sw_if_index=2,suppress=1) 
 classify_add_del_table(is_add=True,del_chain=False,table_index=4294967295,nbuckets=2,memory_size=2097152,skip_n_vectors=2,match_n_vectors=2,next_table_index=4294967295,miss_next_index=4294967295,current_data_flag=0,current_data_offset=0,mask_len=32,mask=b’x00x00x00x00x00x00xffxffxffxffxffxffxffxffxffxffxffxffxffxffxffxffx00x00x00x00x00x00x00x00x00x00’) 
 classify_add_del_session(is_add=True,table_index=0,hit_next_index=4294967295,opaque_index=4294967295,advance=0,action=0,metadata=0,match_len=64,match=b’x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00 x01x00x02x00x00x00x00x00x00x00x00x00x00x00x02x00x00x00x00x00x00x00x00x00x00’) 
 input_acl_set_interface(sw_if_index=1,ip4_table_index=4294967295,ip6_table_index=0,l2_table_index=4294967295,is_add=1)

2n1l-10ge2p1x710-ethip6-ip6base-ipolicemarkbase-scapy

2n1l-10ge2p1x710-ethip6-ip6base-ipolicemarkbase-scapy

IPv4 policer test cases

  • [Top] Network Topologies: TG-DUT1-TG 2-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv6 on all links.

  • [Cfg] DUT configuration: On DUT1 configure interfaces IPv6 addresses and static ARP record on the second interface. On DUT1 configure 2R3C color-aware policer on the first interface.

  • [Ver] TG verification: Test packet is sent from TG on the first link to DUT1. Packet is received on TG on the second link from DUT1.

  • [Ref] Applicable standard specifications: RFC2474, RFC2697, RFC2698.

 Test Name 

 VPP API Test Commands History - Commands Used Per Test Case 

 78b-0c-ethip6- 
 ip6base-ipolicemarkbase-scapy 

 DUT1:  
 cli_inband(cmd=’show logging’) 
 show_version() 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 cli_inband(cmd=’trace add dpdk-input 50’) 
 cli_inband(cmd=’trace add vhost-user-input 50’) 
 cli_inband(cmd=’trace add memif-input 50’) 
 cli_inband(cmd=’trace add avf-input 50’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘36:db:5f:be:d6:d7’, ‘ip_address’: ‘2001:1::2’}) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘3a:24:55:60:63:6d’, ‘ip_address’: ‘2001:2::2’}) 
 sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’ x01x00x01x00x00x00x00x00x00x00x00x00x00x00x01’}}}) 
 sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’ x01x00x02x00x00x00x00x00x00x00x00x00x00x00x01’}}}) 
 ip_address_dump(sw_if_index=1,is_ipv6=True) 
 sw_interface_ip6nd_ra_config(sw_if_index=1,suppress=1) 
 ip_address_dump(sw_if_index=2,is_ipv6=True) 
 sw_interface_ip6nd_ra_config(sw_if_index=2,suppress=1) 
 policer_add_del(is_add=True,name=’policer1’,cir=100,eir=150,cb=78,eb=78,rate_type=1,round_type=0,type=2,conform_action={‘type’: 1, ‘dscp’: 0},exceed_action={‘type’: 2, ‘dscp’: 20},violate_action={‘type’: 1, ‘dscp’: 0},color_aware=True) 
 classify_add_del_table(is_add=True,del_chain=False,table_index=4294967295,nbuckets=2,memory_size=2097152,skip_n_vectors=2,match_n_vectors=2,next_table_index=4294967295,miss_next_index=4294967295,current_data_flag=0,current_data_offset=0,mask_len=32,mask=b’x00x00x00x00x00x00xffxffxffxffxffxffxffxffxffxffxffxffxffxffxffxffx00x00x00x00x00x00x00x00x00x00’) 
 classify_add_del_session(is_add=True,table_index=0,hit_next_index=0,opaque_index=1,advance=0,action=0,metadata=0,match_len=64,match=b’x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00 x01x00x02x00x00x00x00x00x00x00x00x00x00x00x02x00x00x00x00x00x00x00x00x00x00’) 
 policer_classify_set_interface(is_add=True,sw_if_index=1,ip4_table_index=4294967295,ip6_table_index=0,l2_table_index=4294967295) 
 classify_add_del_session(is_add=True,table_index=0,hit_next_index=0,opaque_index=1,advance=0,action=0,metadata=0,match_len=64,match=b’x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00 x01x00x01x00x00x00x00x00x00x00x00x00x00x00x02x00x00x00x00x00x00x00x00x00x00’) 
 policer_classify_set_interface(is_add=True,sw_if_index=2,ip4_table_index=4294967295,ip6_table_index=0,l2_table_index=4294967295)

2n1l-10ge2p1x710-ethip6-ip6base-scapy

2n1l-10ge2p1x710-ethip6-ip6base-scapy

IPv6 routing test cases

  • [Top] Network Topologies: TG-DUT1-TG 2-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv6 for IPv6 routing on both links.

  • [Cfg] DUT configuration: DUT1 is configured with IPv6 routing wo static IPv6 /64 route entries.

  • [Ver] TG verification: Test IPv6 packet is sent in one direction by TG on links to DUT1; on receive TG verifies packet for correctness and their IPv6 src-addr, dst-addr and MAC addresses.

  • [Ref] Applicable standard specifications: RFC2460, RFC4443, RFC4861.

 Test Name 

 VPP API Test Commands History - Commands Used Per Test Case 

 78b-0c-ethip6-ip6base-scapy 

 DUT1:  
 cli_inband(cmd=’show logging’) 
 show_version() 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 cli_inband(cmd=’trace add dpdk-input 50’) 
 cli_inband(cmd=’trace add vhost-user-input 50’) 
 cli_inband(cmd=’trace add memif-input 50’) 
 cli_inband(cmd=’trace add avf-input 50’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 sw_interface_set_flags(sw_if_index=1,flags=1) 
 hw_interface_set_mtu(sw_if_index=1,mtu=9200) 
 sw_interface_set_flags(sw_if_index=2,flags=1) 
 hw_interface_set_mtu(sw_if_index=2,mtu=9200) 
 sw_interface_dump(name_filter_valid=False,name_filter=’’) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 1, ‘flags’: 0, ‘mac_address’: ‘36:db:5f:be:d6:d7’, ‘ip_address’: ‘2001:1::2’}) 
 ip_neighbor_add_del(is_add=True,neighbor={‘sw_if_index’: 2, ‘flags’: 0, ‘mac_address’: ‘3a:24:55:60:63:6d’, ‘ip_address’: ‘2001:2::2’}) 
 sw_interface_add_del_address(sw_if_index=1,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’ x01x00x01x00x00x00x00x00x00x00x00x00x00x00x01’}}}) 
 sw_interface_add_del_address(sw_if_index=2,is_add=True,del_all=False,prefix={‘len’: 64, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’ x01x00x02x00x00x00x00x00x00x00x00x00x00x00x01’}}}) 
 ip_address_dump(sw_if_index=1,is_ipv6=True) 
 sw_interface_ip6nd_ra_config(sw_if_index=1,suppress=1) 
 ip_address_dump(sw_if_index=2,is_ipv6=True) 
 sw_interface_ip6nd_ra_config(sw_if_index=2,suppress=1) 
 ip_route_add_del(is_add=True,is_multipath=True,route={‘table_id’: 0, ‘prefix’: {‘len’: 128, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x01’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 1, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 1, ‘nh’: {‘address’: {‘ip6’: b’ x01x00x01x00x00x00x00x00x00x00x00x00x00x00x02’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]}) 
 ip_route_add_del(is_add=True,is_multipath=True,route={‘table_id’: 0, ‘prefix’: {‘len’: 128, ‘address’: {‘af’: 1, ‘un’: {‘ip6’: b’?xfex00_x00x00x00x00x00x00x00x00x00x00x00x02’}}}, ‘n_paths’: 1, ‘paths’: [{‘sw_if_index’: 2, ‘table_id’: 0, ‘rpf_id’: 4294967295, ‘weight’: 1, ‘preference’: 1, ‘type’: 0, ‘flags’: 0, ‘proto’: 1, ‘nh’: {‘address’: {‘ip6’: b’ x01x00x02x00x00x00x00x00x00x00x00x00x00x00x02’}, ‘via_label’: 1048576, ‘obj_id’: 4294967295}, ‘n_labels’: 0, ‘label_stack’: [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}]})