X-Git-Url: https://gerrit.fd.io/r/gitweb?a=blobdiff_plain;f=test%2Ftest_ipsec_ah.py;h=928cd53c1f10fcd014868837f77137afa8a5546e;hb=6fbef2322870bbe1768537caecc3ca06bfd70dd7;hp=59f6864821fffe2397812fc667b53c70d5f222eb;hpb=611864f4bddf787aff3323f162da589b1b26529c;p=vpp.git diff --git a/test/test_ipsec_ah.py b/test/test_ipsec_ah.py index 59f6864821f..928cd53c1f1 100644 --- a/test/test_ipsec_ah.py +++ b/test/test_ipsec_ah.py @@ -12,16 +12,6 @@ class TemplateIpsecAh(TemplateIpsec): """ Basic test for IPSEC using AH transport and Tunnel mode - Below 4 cases are covered as part of this test - 1) ipsec ah v4 transport basic test - IPv4 Transport mode - scenario using HMAC-SHA1-96 intergrity algo - 2) ipsec ah v4 transport burst test - Above test for 257 pkts - 3) ipsec ah 4o4 tunnel basic test - IPv4 Tunnel mode - scenario using HMAC-SHA1-96 intergrity algo - 4) ipsec ah 4o4 tunnel burst test - Above test for 257 pkts - TRANSPORT MODE: --- encrypt --- @@ -55,6 +45,7 @@ class TemplateIpsecAh(TemplateIpsec): cls.tra_if.sw_if_index) for _, p in cls.params.items(): cls.config_ah_tra(p) + cls.configure_sa_tra(p) cls.logger.info(cls.vapi.ppcli("show ipsec")) for _, p in cls.params.items(): cls.config_ah_tun(p) @@ -144,12 +135,14 @@ class TemplateIpsecAh(TemplateIpsec): auth_algo_vpp_id, auth_key, crypt_algo_vpp_id, crypt_key, cls.vpp_ah_protocol, is_tunnel=0, - is_tunnel_ipv6=0) + is_tunnel_ipv6=0, + use_anti_replay=1) cls.vapi.ipsec_sad_add_del_entry(vpp_tra_sa_id, vpp_tra_spi, auth_algo_vpp_id, auth_key, crypt_algo_vpp_id, crypt_key, cls.vpp_ah_protocol, is_tunnel=0, - is_tunnel_ipv6=0) + is_tunnel_ipv6=0, + use_anti_replay=1) l_startaddr = r_startaddr = socket.inet_pton(addr_type, addr_any) l_stopaddr = r_stopaddr = socket.inet_pton(addr_type, addr_bcast) cls.vapi.ipsec_spd_add_del_entry(cls.tra_spd_id, vpp_tra_sa_id, @@ -180,7 +173,14 @@ class TemplateIpsecAh(TemplateIpsec): class TestIpsecAh1(TemplateIpsecAh, IpsecTraTests, IpsecTunTests): """ Ipsec AH - TUN & TRA tests """ - pass + tra4_encrypt_node_name = "ah4-encrypt" + tra4_decrypt_node_name = "ah4-decrypt" + tra6_encrypt_node_name = "ah6-encrypt" + tra6_decrypt_node_name = "ah6-decrypt" + tun4_encrypt_node_name = "ah4-encrypt" + tun4_decrypt_node_name = "ah4-decrypt" + tun6_encrypt_node_name = "ah6-encrypt" + tun6_decrypt_node_name = "ah6-decrypt" class TestIpsecAh2(TemplateIpsecAh, IpsecTcpTests):