diff options
| author |   Neale Ranns <nranns@cisco.com> | 2018-11-28 01:38:34 -0800 |
|---|---|---|
| committer |   Florin Coras <florin.coras@gmail.com> | 2018-12-02 20:43:32 +0000 |
| commit | de847277c9879c014fb4557e884360a4e6492783 (patch) | |
| tree | 1a6d5680bf1a0ef6b0ae65e87a2887f0d774f0cc /test/test_ipsec_esp.py | |
| parent | b0598497afde60146fe8480331c9f96e7a79475a (diff) | |
IPSEC-AH: anti-replay testing
Change-Id: Ia5d45db73e4bdb32214ed4f365d5eec8e28115f3
Signed-off-by: Neale Ranns <nranns@cisco.com>
Diffstat (limited to 'test/test_ipsec_esp.py')
| -rw-r--r-- | test/test_ipsec_esp.py | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/test/test_ipsec_esp.py b/test/test_ipsec_esp.py index ed9d0d9d4ce..d22f965a31b 100644 --- a/test/test_ipsec_esp.py +++ b/test/test_ipsec_esp.py @@ -51,6 +51,7 @@ class TemplateIpsecEsp(TemplateIpsec): cls.tra_if.sw_if_index) for _, p in cls.params.items(): cls.config_esp_tra(p) + cls.configure_sa_tra(p) cls.logger.info(cls.vapi.ppcli("show ipsec")) cls.vapi.ipsec_spd_add_del(cls.tun_spd_id) cls.vapi.ipsec_interface_add_del_spd(cls.tun_spd_id, @@ -144,11 +145,13 @@ class TemplateIpsecEsp(TemplateIpsec): cls.vapi.ipsec_sad_add_del_entry(scapy_tra_sa_id, scapy_tra_spi, auth_algo_vpp_id, auth_key, crypt_algo_vpp_id, crypt_key, - cls.vpp_esp_protocol, is_tunnel=0) + cls.vpp_esp_protocol, is_tunnel=0, + use_anti_replay=1) cls.vapi.ipsec_sad_add_del_entry(vpp_tra_sa_id, vpp_tra_spi, auth_algo_vpp_id, auth_key, crypt_algo_vpp_id, crypt_key, - cls.vpp_esp_protocol, is_tunnel=0) + cls.vpp_esp_protocol, is_tunnel=0, + use_anti_replay=1) l_startaddr = r_startaddr = socket.inet_pton(addr_type, addr_any) l_stopaddr = r_stopaddr = socket.inet_pton(addr_type, addr_bcast) cls.vapi.ipsec_spd_add_del_entry(cls.tra_spd_id, vpp_tra_sa_id, |