2 # 6RD RFC5969 functional tests
6 from scapy.layers.inet import IP, UDP, ICMP
7 from scapy.layers.inet6 import IPv6
8 from scapy.layers.l2 import Ether, GRE
9 from scapy.packet import Raw
11 from framework import VppTestCase
12 from vpp_ip_route import VppIpRoute, VppRoutePath, DpoProto
14 from ipaddress import *
16 """ Test6rd is a subclass of VPPTestCase classes.
23 class Test6RD(VppTestCase):
28 super(Test6RD, cls).setUpClass()
30 cls.create_pg_interfaces(range(2))
31 cls.interfaces = list(cls.pg_interfaces)
33 super(Test6RD, cls).tearDownClass()
37 super(Test6RD, cls).setUp()
39 for i in cls.interfaces:
47 super(Test6RD, cls).tearDown()
51 super(Test6RD, self).tearDown()
53 self.vapi.cli("show hardware")
54 for i in self.pg_interfaces:
58 if type(self.tunnel_index) is list:
59 for sw_if_index in self.tunnel_index:
60 self.vapi.sixrd_del_tunnel(sw_if_index)
62 self.vapi.sixrd_del_tunnel(self.tunnel_index)
63 self.vapi.cli("show error")
65 def validate_6in4(self, rx, expected):
71 self.assertEqual(rx[IP].src, expected[IP].src)
72 self.assertEqual(rx[IP].dst, expected[IP].dst)
73 self.assertEqual(rx[IP].proto, expected[IP].proto)
74 self.assertEqual(rx[IPv6].src, expected[IPv6].src)
75 self.assertEqual(rx[IPv6].dst, expected[IPv6].dst)
77 def validate_4in6(self, rx, expected):
83 self.assertTrue(rx[IPv6].src == expected[IPv6].src)
84 self.assertTrue(rx[IPv6].dst == expected[IPv6].dst)
85 self.assertTrue(rx[IPv6].nh == expected[IPv6].nh)
87 def payload(self, len):
90 def test_6rd_ip6_to_ip4(self):
91 """ ip6 -> ip4 (encap) 6rd test """
92 p_ether = Ether(src=self.pg0.remote_mac, dst=self.pg0.local_mac)
93 p_ip6 = IPv6(src="1::1", dst="2002:AC10:0202::1", nh='UDP')
95 rv = self.vapi.sixrd_add_tunnel(
96 0, str(ip_address('2002::').packed), 16,
97 str(ip_address('0.0.0.0').packed), 0,
98 str(ip_address(self.pg0.local_ip4).packed), 0, True)
100 self.assertEqual(rv.retval, 0)
101 self.tunnel_index = rv.sw_if_index
102 self.vapi.cli("show ip6 fib")
103 p_payload = UDP(sport=1234, dport=1234)
104 p = (p_ether / p_ip6 / p_payload)
106 p_reply = (IP(src=self.pg0.local_ip4, dst=self.pg1.remote_ip4,
107 proto='ipv6') / p_ip6)
109 rx = self.send_and_expect(self.pg0, p*10, self.pg1)
111 self.validate_6in4(p, p_reply)
113 # MTU tests (default is 1480)
115 p_ip6 = IPv6(src="1::1", dst="2002:AC10:0202::1")
116 p_payload = UDP(sport=1234, dport=1234) / Raw(self.payload(plen))
117 p = (p_ether / p_ip6 / p_payload)
119 p_reply = (IP(src=self.pg0.local_ip4, dst=self.pg1.remote_ip4,
120 proto='ipv6') / p_ip6)
122 rx = self.send_and_assert_no_replies(self.pg0, p*10)
124 def test_6rd_ip4_to_ip6(self):
125 """ ip4 -> ip6 (decap) 6rd test """
127 rv = self.vapi.sixrd_add_tunnel(
128 0, str(ip_address('2002::').packed),
129 16, str(ip_address('0.0.0.0').packed),
130 0, str(ip_address(self.pg0.local_ip4).packed), 0, True)
131 self.assertEqual(rv.retval, 0)
132 self.tunnel_index = rv.sw_if_index
133 self.vapi.cli("show ip6 fib")
134 p_ip6 = (IPv6(src="2002:AC10:0202::1", dst=self.pg1.remote_ip6) /
135 UDP(sport=1234, dport=1234))
137 p = (Ether(src=self.pg0.remote_mac,
138 dst=self.pg0.local_mac) /
139 IP(src=self.pg1.remote_ip4, dst=self.pg0.local_ip4) /
144 rx = self.send_and_expect(self.pg0, p*10, self.pg1)
146 self.validate_4in6(p, p_reply)
148 def test_6rd_ip4_to_ip6_multiple(self):
149 """ ip4 -> ip6 (decap) 6rd test """
151 self.tunnel_index = []
152 rv = self.vapi.sixrd_add_tunnel(
153 0, str(ip_address('2002::').packed),
154 16, str(ip_address('0.0.0.0').packed),
155 0, str(ip_address(self.pg0.local_ip4).packed), 0, True)
156 self.assertEqual(rv.retval, 0)
157 self.tunnel_index.append(rv.sw_if_index)
158 rv = self.vapi.sixrd_add_tunnel(
159 0, str(ip_address('2003::').packed),
160 16, str(ip_address('0.0.0.0').packed),
161 0, str(ip_address(self.pg1.local_ip4).packed), 0, True)
162 self.assertEqual(rv.retval, 0)
164 self.tunnel_index.append(rv.sw_if_index)
166 self.vapi.cli("show ip6 fib")
167 p_ether = Ether(src=self.pg0.remote_mac, dst=self.pg0.local_mac)
168 p_ip4 = IP(src=self.pg1.remote_ip4, dst=self.pg0.local_ip4)
169 p_ip6_1 = (IPv6(src="2002:AC10:0202::1", dst=self.pg1.remote_ip6) /
170 UDP(sport=1234, dport=1234))
171 p_ip6_2 = (IPv6(src="2003:AC10:0202::1", dst=self.pg1.remote_ip6) /
172 UDP(sport=1234, dport=1234))
174 p = (p_ether / p_ip4 / p_ip6_1)
175 rx = self.send_and_expect(self.pg0, p*10, self.pg1)
177 self.validate_4in6(p, p_ip6_1)
179 p = (p_ether / p_ip4 / p_ip6_2)
180 rx = self.send_and_expect(self.pg0, p*10, self.pg1)
182 self.validate_4in6(p, p_ip6_2)
184 def test_6rd_ip4_to_ip6_suffix(self):
185 """ ip4 -> ip6 (decap) 6rd test """
187 rv = self.vapi.sixrd_add_tunnel(
188 0, str(ip_address('2002::').packed), 16,
189 str(ip_address('172.0.0.0').packed), 8,
190 str(ip_address(self.pg0.local_ip4).packed), 0, True)
191 self.assertEqual(rv.retval, 0)
193 self.tunnel_index = rv.sw_if_index
195 self.vapi.cli("show ip6 fib")
196 p_ether = Ether(src=self.pg0.remote_mac, dst=self.pg0.local_mac)
197 p_ip4 = IP(src=self.pg1.remote_ip4, dst=self.pg0.local_ip4)
198 p_ip6 = (IPv6(src="2002:1002:0200::1", dst=self.pg1.remote_ip6) /
199 UDP(sport=1234, dport=1234))
201 p = (p_ether / p_ip4 / p_ip6)
202 rx = self.send_and_expect(self.pg0, p*10, self.pg1)
204 self.validate_4in6(p, p_ip6)
206 def test_6rd_ip4_to_ip6_sec_check(self):
207 """ ip4 -> ip6 (decap) security check 6rd test """
209 rv = self.vapi.sixrd_add_tunnel(
210 0, str(ip_address('2002::').packed),
211 16, str(ip_address('0.0.0.0').packed),
212 0, str(ip_address(self.pg0.local_ip4).packed), 0, True)
213 self.assertEqual(rv.retval, 0)
214 self.tunnel_index = rv.sw_if_index
215 self.vapi.cli("show ip6 fib")
216 p_ip6 = (IPv6(src="2002:AC10:0202::1", dst=self.pg1.remote_ip6) /
217 UDP(sport=1234, dport=1234))
218 p_ip6_fail = (IPv6(src="2002:DEAD:0202::1", dst=self.pg1.remote_ip6) /
219 UDP(sport=1234, dport=1234))
221 p = (Ether(src=self.pg0.remote_mac,
222 dst=self.pg0.local_mac) /
223 IP(src=self.pg1.remote_ip4, dst=self.pg0.local_ip4) /
228 rx = self.send_and_expect(self.pg0, p*10, self.pg1)
230 self.validate_4in6(p, p_reply)
232 p = (Ether(src=self.pg0.remote_mac,
233 dst=self.pg0.local_mac) /
234 IP(src=self.pg1.remote_ip4, dst=self.pg0.local_ip4) /
236 rx = self.send_and_assert_no_replies(self.pg0, p*10)
238 def test_6rd_bgp_tunnel(self):
239 """ 6rd BGP tunnel """
241 rv = self.vapi.sixrd_add_tunnel(
242 0, str(ip_address('2002::').packed),
243 16, str(ip_address('0.0.0.0').packed),
244 0, str(ip_address(self.pg0.local_ip4).packed), 0, False)
245 self.assertEqual(rv.retval, 0)
246 self.tunnel_index = rv.sw_if_index
248 default_route = VppIpRoute(
249 self, "DEAD::", 16, [VppRoutePath("2002:0808:0808::",
251 proto=DpoProto.DPO_PROTO_IP6)],
253 default_route.add_vpp_config()
255 ip4_route = VppIpRoute(self, "8.0.0.0", 8,
256 [VppRoutePath(self.pg1.remote_ip4, 0xFFFFFFFF)])
257 ip4_route.add_vpp_config()
259 # Via recursive route 6 -> 4
260 p = (Ether(src=self.pg0.remote_mac,
261 dst=self.pg0.local_mac) /
262 IPv6(src="1::1", dst="DEAD:BEEF::1") /
263 UDP(sport=1234, dport=1234))
265 p_reply = (IP(src=self.pg0.local_ip4, dst="8.8.8.8",
267 IPv6(src='1::1', dst='DEAD:BEEF::1', nh='UDP'))
269 rx = self.send_and_expect(self.pg0, p*10, self.pg1)
271 self.validate_6in4(p, p_reply)
273 # Via recursive route 4 -> 6 (Security check must be disabled)
274 p_ip6 = (IPv6(src="DEAD:BEEF::1", dst=self.pg1.remote_ip6) /
275 UDP(sport=1234, dport=1234))
276 p = (Ether(src=self.pg0.remote_mac,
277 dst=self.pg0.local_mac) /
278 IP(src="8.8.8.8", dst=self.pg0.local_ip4) /
283 rx = self.send_and_expect(self.pg0, p*10, self.pg1)
285 self.validate_4in6(p, p_reply)
288 if __name__ == '__main__':
289 unittest.main(testRunner=VppTestRunner)