2.48. test_ipsec_nat module

class test_ipsec_nat.IPSecNATTestCase(methodName='runTest')

Bases: template_ipsec.TemplateIpsec

IPSec/NAT TUNNEL MODE:

public network | private network — encrypt — plain —
|pg0| <——- |VPP| <—— |pg1|

— — —

— decrypt — plain —

|pg0| ——-> |VPP| ——> |pg1|
— — —
classmethod config_esp_tun()
create_stream_encrypted(src_mac, dst_mac, src_ip, dst_ip, sa)
create_stream_plain(src_mac, dst_mac, src_ip, dst_ip)
icmp_id_in = 6305
icmp_id_out = 6305
classmethod setUpClass()

Perform class setup before running the testcase Remove shared memory files, start vpp and connect the vpp-api

tcp_port_in = 6303
tcp_port_out = 6303
test_ipsec_nat_tun()

IPSec/NAT tunnel test case

udp_port_in = 6304
udp_port_out = 6304
verify_capture_encrypted(capture, sa)
verify_capture_plain(capture)