9dbc4e21e7
As more test cases are defined for execution, test scripts structure needs to be reorganized, so fewer files are needed to describe the test. To achieve that, new environment variables are incorporated into the scripts. Additionally, tests for mixed tunnel protocols are added. Signed-off-by: Mariusz Drost <mariuszx.drost@intel.com> Tested-by: Konstantin Ananyev <konstantin.ananyev@intel.com> Acked-by: Konstantin Ananyev <konstantin.ananyev@intel.com>
62 lines
1.7 KiB
Bash
62 lines
1.7 KiB
Bash
#! /bin/bash
|
|
# SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
CRYPTO_DEV=${CRYPTO_DEV:-'--vdev="crypto_aesni_gcm0"'}
|
|
|
|
#generate cfg file for ipsec-secgw
|
|
config_secgw()
|
|
{
|
|
cat <<EOF > ${SGW_CFG_FILE}
|
|
#SP in IPv4 rules
|
|
sp ipv4 in esp protect 7 pri 2 src ${REMOTE_IPV4}/32 dst ${LOCAL_IPV4}/32 \
|
|
sport 0:65535 dport 0:65535
|
|
sp ipv4 in esp bypass pri 1 sport 0:65535 dport 0:65535
|
|
|
|
#SP out IPv4 rules
|
|
sp ipv4 out esp protect 7 pri 2 src ${LOCAL_IPV4}/32 dst ${REMOTE_IPV4}/32 \
|
|
sport 0:65535 dport 0:65535
|
|
sp ipv4 out esp bypass pri 1 sport 0:65535 dport 0:65535
|
|
|
|
#SP in IPv6 rules
|
|
sp ipv6 in esp protect 9 pri 2 src ${REMOTE_IPV6}/128 dst ${LOCAL_IPV6}/128 \
|
|
sport 0:65535 dport 0:65535
|
|
sp ipv6 in esp bypass pri 1 sport 0:65535 dport 0:65535
|
|
|
|
#SP out IPv6 rules
|
|
sp ipv6 out esp protect 9 pri 2 src ${LOCAL_IPV6}/128 dst ${REMOTE_IPV6}/128 \
|
|
sport 0:65535 dport 0:65535
|
|
sp ipv6 out esp bypass pri 1 sport 0:65535 dport 0:65535
|
|
|
|
#SA in rules
|
|
sa in 7 aead_algo aes-128-gcm \
|
|
aead_key de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
|
|
mode transport ${SGW_CFG_XPRM_IN}
|
|
|
|
sa in 9 aead_algo aes-128-gcm \
|
|
aead_key de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
|
|
mode transport ${SGW_CFG_XPRM_IN}
|
|
|
|
#SA out rules
|
|
sa out 7 aead_algo aes-128-gcm \
|
|
aead_key de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
|
|
mode transport ${SGW_CFG_XPRM_OUT}
|
|
|
|
sa out 9 aead_algo aes-128-gcm \
|
|
aead_key de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
|
|
mode transport ${SGW_CFG_XPRM_OUT}
|
|
|
|
#Routing rules
|
|
rt ipv4 dst ${REMOTE_IPV4}/32 port 0
|
|
rt ipv4 dst ${LOCAL_IPV4}/32 port 1
|
|
|
|
rt ipv6 dst ${REMOTE_IPV6}/128 port 0
|
|
rt ipv6 dst ${LOCAL_IPV6}/128 port 1
|
|
|
|
#neighbours
|
|
neigh port 0 ${REMOTE_MAC}
|
|
neigh port 1 ${LOCAL_MAC}
|
|
EOF
|
|
|
|
cat ${SGW_CFG_FILE}
|
|
}
|