2.46. test_ipsec_esp module

class test_ipsec_esp.ConfigIpsecESP(methodName='runTest')

Bases: template_ipsec.TemplateIpsec

config_esp_tra(params)
config_esp_tun(params)
config_network(params)
encryption_type
setUp()

Clear trace before running each test

classmethod setUpClass()

Perform class setup before running the testcase Remove shared memory files, start vpp and connect the vpp-api

tearDown()

Show various debug prints after each test

classmethod tearDownClass()

Perform final cleanup after running all tests in this test-case

tra4_decrypt_node_name = 'esp4-decrypt'
tra4_encrypt_node_name = 'esp4-encrypt'
tra6_decrypt_node_name = 'esp6-decrypt'
tra6_encrypt_node_name = 'esp6-encrypt'
tun4_decrypt_node_name = 'esp4-decrypt'
tun4_encrypt_node_name = 'esp4-encrypt'
tun6_decrypt_node_name = 'esp6-decrypt'
tun6_encrypt_node_name = 'esp6-encrypt'
unconfig_network()
class test_ipsec_esp.TemplateIpsecEsp(methodName='runTest')

Bases: test_ipsec_esp.ConfigIpsecESP

Basic test for ipsec esp sanity - tunnel and transport modes.

Below 4 cases are covered as part of this test 1) ipsec esp v4 transport basic test - IPv4 Transport mode

scenario using HMAC-SHA1-96 integrity algo

  1. ipsec esp v4 transport burst test

    Above test for 257 pkts

  2. ipsec esp 4o4 tunnel basic test - IPv4 Tunnel mode

    scenario using HMAC-SHA1-96 integrity algo

  3. ipsec esp 4o4 tunnel burst test

    Above test for 257 pkts

TRANSPORT MODE:

— encrypt —

|pg2| <——-> |VPP|

— decrypt —

TUNNEL MODE:

— encrypt — plain —

|pg0| <——- |VPP| <—— |pg1|

— — —

— decrypt — plain —

|pg0| ——-> |VPP| ——> |pg1|

— — —

setUp()

Clear trace before running each test

classmethod setUpClass()

Perform class setup before running the testcase Remove shared memory files, start vpp and connect the vpp-api

tearDown()

Show various debug prints after each test

classmethod tearDownClass()

Perform final cleanup after running all tests in this test-case

class test_ipsec_esp.TemplateIpsecEspUdp(methodName='runTest')

Bases: test_ipsec_esp.ConfigIpsecESP

UDP encapped ESP

setUp()

Clear trace before running each test

classmethod setUpClass()

Perform class setup before running the testcase Remove shared memory files, start vpp and connect the vpp-api

show_commands_at_teardown()

Allow subclass specific teardown logging additions.

tearDown()

Show various debug prints after each test

classmethod tearDownClass()

Perform final cleanup after running all tests in this test-case

class test_ipsec_esp.TestIpsecEsp1(methodName='runTest')

Bases: test_ipsec_esp.TemplateIpsecEsp, template_ipsec.IpsecTra46Tests, template_ipsec.IpsecTun46Tests

Ipsec ESP - TUN & TRA tests

class test_ipsec_esp.TestIpsecEsp2(methodName='runTest')

Bases: test_ipsec_esp.TemplateIpsecEsp, template_ipsec.IpsecTcpTests

Ipsec ESP - TCP tests

class test_ipsec_esp.TestIpsecEspAll(methodName='runTest')

Bases: test_ipsec_esp.ConfigIpsecESP, template_ipsec.IpsecTra4, template_ipsec.IpsecTra6, template_ipsec.IpsecTun4, template_ipsec.IpsecTun6

Ipsec ESP all Algos

setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

test_crypto_algs(engine)

AES-[CBC, GCM]-[128, 192, 256] 3DES-CBC w/ & w/o ESN

class test_ipsec_esp.TestIpsecEspUdp(methodName='runTest')

Bases: test_ipsec_esp.TemplateIpsecEspUdp, template_ipsec.IpsecTra4Tests

Ipsec NAT-T ESP UDP tests