1 #!/bin/bash 1 #!/bin/bash
2 # SPDX-License-Identifier: GPL-2.0 2 # SPDX-License-Identifier: GPL-2.0
3 # 3 #
4 # L2TPv3 tunnel between 2 hosts 4 # L2TPv3 tunnel between 2 hosts
5 # 5 #
6 # host-1 | router | 6 # host-1 | router | host-2
7 # | | 7 # | |
8 # lo l2tp | | 8 # lo l2tp | | l2tp lo
9 # 172.16.101.1 172.16.1.1 | | 17 9 # 172.16.101.1 172.16.1.1 | | 172.16.1.2 172.16.101.2
10 # fc00:101::1 fc00:1::1 | | 10 # fc00:101::1 fc00:1::1 | | fc00:1::2 fc00:101::2
11 # | | 11 # | |
12 # eth0 | | 12 # eth0 | | eth0
13 # 10.1.1.1 | | 13 # 10.1.1.1 | | 10.1.2.1
14 # 2001:db8:1::1 | | 20 14 # 2001:db8:1::1 | | 2001:db8:2::1
15 15
16 source lib.sh 16 source lib.sh
17 VERBOSE=0 17 VERBOSE=0
18 PAUSE_ON_FAIL=no 18 PAUSE_ON_FAIL=no
19 19
20 which ping6 > /dev/null 2>&1 && ping6=$(which 20 which ping6 > /dev/null 2>&1 && ping6=$(which ping6) || ping6=$(which ping)
21 21
22 ############################################## 22 ################################################################################
23 # 23 #
24 log_test() 24 log_test()
25 { 25 {
26 local rc=$1 26 local rc=$1
27 local expected=$2 27 local expected=$2
28 local msg="$3" 28 local msg="$3"
29 29
30 if [ ${rc} -eq ${expected} ]; then 30 if [ ${rc} -eq ${expected} ]; then
31 printf "TEST: %-60s [ OK ]\n" 31 printf "TEST: %-60s [ OK ]\n" "${msg}"
32 nsuccess=$((nsuccess+1)) 32 nsuccess=$((nsuccess+1))
33 else 33 else
34 ret=1 34 ret=1
35 nfail=$((nfail+1)) 35 nfail=$((nfail+1))
36 printf "TEST: %-60s [FAIL]\n" 36 printf "TEST: %-60s [FAIL]\n" "${msg}"
37 if [ "${PAUSE_ON_FAIL}" = "yes 37 if [ "${PAUSE_ON_FAIL}" = "yes" ]; then
38 echo 38 echo
39 echo "hit enter to con 39 echo "hit enter to continue, 'q' to quit"
40 read a 40 read a
41 [ "$a" = "q" ] && exit 41 [ "$a" = "q" ] && exit 1
42 fi 42 fi
43 fi 43 fi
44 } 44 }
45 45
46 run_cmd() 46 run_cmd()
47 { 47 {
48 local ns 48 local ns
49 local cmd 49 local cmd
50 local out 50 local out
51 local rc 51 local rc
52 52
53 ns="$1" 53 ns="$1"
54 shift 54 shift
55 cmd="$*" 55 cmd="$*"
56 56
57 if [ "$VERBOSE" = "1" ]; then 57 if [ "$VERBOSE" = "1" ]; then
58 printf " COMMAND: $cmd\n" 58 printf " COMMAND: $cmd\n"
59 fi 59 fi
60 60
61 out=$(eval ip netns exec ${ns} ${cmd} 61 out=$(eval ip netns exec ${ns} ${cmd} 2>&1)
62 rc=$? 62 rc=$?
63 if [ "$VERBOSE" = "1" -a -n "$out" ]; 63 if [ "$VERBOSE" = "1" -a -n "$out" ]; then
64 echo " $out" 64 echo " $out"
65 fi 65 fi
66 66
67 [ "$VERBOSE" = "1" ] && echo 67 [ "$VERBOSE" = "1" ] && echo
68 68
69 return $rc 69 return $rc
70 } 70 }
71 71
72 ############################################## 72 ################################################################################
73 # create namespaces and interconnects 73 # create namespaces and interconnects
74 74
75 create_ns() 75 create_ns()
76 { 76 {
77 local ns=$1 77 local ns=$1
78 local addr=$2 78 local addr=$2
79 local addr6=$3 79 local addr6=$3
80 80
81 [ -z "${addr}" ] && addr="-" 81 [ -z "${addr}" ] && addr="-"
82 [ -z "${addr6}" ] && addr6="-" 82 [ -z "${addr6}" ] && addr6="-"
83 83
84 if [ "${addr}" != "-" ]; then 84 if [ "${addr}" != "-" ]; then
85 ip -netns ${ns} addr add dev l 85 ip -netns ${ns} addr add dev lo ${addr}
86 fi 86 fi
87 if [ "${addr6}" != "-" ]; then 87 if [ "${addr6}" != "-" ]; then
88 ip -netns ${ns} -6 addr add de 88 ip -netns ${ns} -6 addr add dev lo ${addr6}
89 fi 89 fi
90 90
91 ip -netns ${ns} ro add unreachable def 91 ip -netns ${ns} ro add unreachable default metric 8192
92 ip -netns ${ns} -6 ro add unreachable 92 ip -netns ${ns} -6 ro add unreachable default metric 8192
93 93
94 ip netns exec ${ns} sysctl -qw net.ipv 94 ip netns exec ${ns} sysctl -qw net.ipv4.ip_forward=1
95 ip netns exec ${ns} sysctl -qw net.ipv 95 ip netns exec ${ns} sysctl -qw net.ipv6.conf.all.keep_addr_on_down=1
96 ip netns exec ${ns} sysctl -qw net.ipv 96 ip netns exec ${ns} sysctl -qw net.ipv6.conf.all.forwarding=1
97 ip netns exec ${ns} sysctl -qw net.ipv 97 ip netns exec ${ns} sysctl -qw net.ipv6.conf.default.forwarding=1
98 ip netns exec ${ns} sysctl -qw net.ipv 98 ip netns exec ${ns} sysctl -qw net.ipv6.conf.default.accept_dad=0
99 } 99 }
100 100
101 # create veth pair to connect namespaces and a 101 # create veth pair to connect namespaces and apply addresses.
102 connect_ns() 102 connect_ns()
103 { 103 {
104 local ns1=$1 104 local ns1=$1
105 local ns1_dev=$2 105 local ns1_dev=$2
106 local ns1_addr=$3 106 local ns1_addr=$3
107 local ns1_addr6=$4 107 local ns1_addr6=$4
108 local ns2=$5 108 local ns2=$5
109 local ns2_dev=$6 109 local ns2_dev=$6
110 local ns2_addr=$7 110 local ns2_addr=$7
111 local ns2_addr6=$8 111 local ns2_addr6=$8
112 112
113 ip -netns ${ns1} li add ${ns1_dev} typ 113 ip -netns ${ns1} li add ${ns1_dev} type veth peer name tmp
114 ip -netns ${ns1} li set ${ns1_dev} up 114 ip -netns ${ns1} li set ${ns1_dev} up
115 ip -netns ${ns1} li set tmp netns ${ns 115 ip -netns ${ns1} li set tmp netns ${ns2} name ${ns2_dev}
116 ip -netns ${ns2} li set ${ns2_dev} up 116 ip -netns ${ns2} li set ${ns2_dev} up
117 117
118 if [ "${ns1_addr}" != "-" ]; then 118 if [ "${ns1_addr}" != "-" ]; then
119 ip -netns ${ns1} addr add dev 119 ip -netns ${ns1} addr add dev ${ns1_dev} ${ns1_addr}
120 ip -netns ${ns2} addr add dev 120 ip -netns ${ns2} addr add dev ${ns2_dev} ${ns2_addr}
121 fi 121 fi
122 122
123 if [ "${ns1_addr6}" != "-" ]; then 123 if [ "${ns1_addr6}" != "-" ]; then
124 ip -netns ${ns1} addr add dev 124 ip -netns ${ns1} addr add dev ${ns1_dev} ${ns1_addr6}
125 ip -netns ${ns2} addr add dev 125 ip -netns ${ns2} addr add dev ${ns2_dev} ${ns2_addr6}
126 fi 126 fi
127 } 127 }
128 128
129 ############################################## 129 ################################################################################
130 # test setup 130 # test setup
131 131
132 cleanup() 132 cleanup()
133 { 133 {
134 cleanup_ns $host_1 $host_2 $router 134 cleanup_ns $host_1 $host_2 $router
135 } 135 }
136 136
137 setup_l2tp_ipv4() 137 setup_l2tp_ipv4()
138 { 138 {
139 # 139 #
140 # configure l2tpv3 tunnel on host-1 140 # configure l2tpv3 tunnel on host-1
141 # 141 #
142 ip -netns $host_1 l2tp add tunnel tunn 142 ip -netns $host_1 l2tp add tunnel tunnel_id 1041 peer_tunnel_id 1042 \
143 encap ip local 10.1.1 143 encap ip local 10.1.1.1 remote 10.1.2.1
144 ip -netns $host_1 l2tp add session nam 144 ip -netns $host_1 l2tp add session name l2tp4 tunnel_id 1041 \
145 session_id 1041 peer_ 145 session_id 1041 peer_session_id 1042
146 ip -netns $host_1 link set dev l2tp4 u 146 ip -netns $host_1 link set dev l2tp4 up
147 ip -netns $host_1 addr add dev l2tp4 1 147 ip -netns $host_1 addr add dev l2tp4 172.16.1.1 peer 172.16.1.2
148 148
149 # 149 #
150 # configure l2tpv3 tunnel on host-2 150 # configure l2tpv3 tunnel on host-2
151 # 151 #
152 ip -netns $host_2 l2tp add tunnel tunn 152 ip -netns $host_2 l2tp add tunnel tunnel_id 1042 peer_tunnel_id 1041 \
153 encap ip local 10.1.2 153 encap ip local 10.1.2.1 remote 10.1.1.1
154 ip -netns $host_2 l2tp add session nam 154 ip -netns $host_2 l2tp add session name l2tp4 tunnel_id 1042 \
155 session_id 1042 peer_ 155 session_id 1042 peer_session_id 1041
156 ip -netns $host_2 link set dev l2tp4 u 156 ip -netns $host_2 link set dev l2tp4 up
157 ip -netns $host_2 addr add dev l2tp4 1 157 ip -netns $host_2 addr add dev l2tp4 172.16.1.2 peer 172.16.1.1
158 158
159 # 159 #
160 # add routes to loopback addresses 160 # add routes to loopback addresses
161 # 161 #
162 ip -netns $host_1 ro add 172.16.101.2/ 162 ip -netns $host_1 ro add 172.16.101.2/32 via 172.16.1.2
163 ip -netns $host_2 ro add 172.16.101.1/ 163 ip -netns $host_2 ro add 172.16.101.1/32 via 172.16.1.1
164 } 164 }
165 165
166 setup_l2tp_ipv6() 166 setup_l2tp_ipv6()
167 { 167 {
168 # 168 #
169 # configure l2tpv3 tunnel on host-1 169 # configure l2tpv3 tunnel on host-1
170 # 170 #
171 ip -netns $host_1 l2tp add tunnel tunn 171 ip -netns $host_1 l2tp add tunnel tunnel_id 1061 peer_tunnel_id 1062 \
172 encap ip local 2001:d 172 encap ip local 2001:db8:1::1 remote 2001:db8:2::1
173 ip -netns $host_1 l2tp add session nam 173 ip -netns $host_1 l2tp add session name l2tp6 tunnel_id 1061 \
174 session_id 1061 peer_ 174 session_id 1061 peer_session_id 1062
175 ip -netns $host_1 link set dev l2tp6 u 175 ip -netns $host_1 link set dev l2tp6 up
176 ip -netns $host_1 addr add dev l2tp6 f 176 ip -netns $host_1 addr add dev l2tp6 fc00:1::1 peer fc00:1::2
177 177
178 # 178 #
179 # configure l2tpv3 tunnel on host-2 179 # configure l2tpv3 tunnel on host-2
180 # 180 #
181 ip -netns $host_2 l2tp add tunnel tunn 181 ip -netns $host_2 l2tp add tunnel tunnel_id 1062 peer_tunnel_id 1061 \
182 encap ip local 2001:d 182 encap ip local 2001:db8:2::1 remote 2001:db8:1::1
183 ip -netns $host_2 l2tp add session nam 183 ip -netns $host_2 l2tp add session name l2tp6 tunnel_id 1062 \
184 session_id 1062 peer_ 184 session_id 1062 peer_session_id 1061
185 ip -netns $host_2 link set dev l2tp6 u 185 ip -netns $host_2 link set dev l2tp6 up
186 ip -netns $host_2 addr add dev l2tp6 f 186 ip -netns $host_2 addr add dev l2tp6 fc00:1::2 peer fc00:1::1
187 187
188 # 188 #
189 # add routes to loopback addresses 189 # add routes to loopback addresses
190 # 190 #
191 ip -netns $host_1 -6 ro add fc00:101:: 191 ip -netns $host_1 -6 ro add fc00:101::2/128 via fc00:1::2
192 ip -netns $host_2 -6 ro add fc00:101:: 192 ip -netns $host_2 -6 ro add fc00:101::1/128 via fc00:1::1
193 } 193 }
194 194
195 setup() 195 setup()
196 { 196 {
197 # start clean 197 # start clean
198 cleanup 198 cleanup
199 199
200 set -e 200 set -e
201 setup_ns host_1 host_2 router 201 setup_ns host_1 host_2 router
202 create_ns $host_1 172.16.101.1/32 fc00 202 create_ns $host_1 172.16.101.1/32 fc00:101::1/128
203 create_ns $host_2 172.16.101.2/32 fc00 203 create_ns $host_2 172.16.101.2/32 fc00:101::2/128
204 create_ns $router 204 create_ns $router
205 205
206 connect_ns $host_1 eth0 10.1.1.1/24 20 206 connect_ns $host_1 eth0 10.1.1.1/24 2001:db8:1::1/64 \
207 $router eth1 10.1.1.2/24 20 207 $router eth1 10.1.1.2/24 2001:db8:1::2/64
208 208
209 connect_ns $host_2 eth0 10.1.2.1/24 20 209 connect_ns $host_2 eth0 10.1.2.1/24 2001:db8:2::1/64 \
210 $router eth2 10.1.2.2/24 20 210 $router eth2 10.1.2.2/24 2001:db8:2::2/64
211 211
212 ip -netns $host_1 ro add 10.1.2.0/24 v 212 ip -netns $host_1 ro add 10.1.2.0/24 via 10.1.1.2
213 ip -netns $host_1 -6 ro add 2001:db8:2 213 ip -netns $host_1 -6 ro add 2001:db8:2::/64 via 2001:db8:1::2
214 214
215 ip -netns $host_2 ro add 10.1.1.0/24 v 215 ip -netns $host_2 ro add 10.1.1.0/24 via 10.1.2.2
216 ip -netns $host_2 -6 ro add 2001:db8:1 216 ip -netns $host_2 -6 ro add 2001:db8:1::/64 via 2001:db8:2::2
217 217
218 setup_l2tp_ipv4 218 setup_l2tp_ipv4
219 setup_l2tp_ipv6 219 setup_l2tp_ipv6
220 set +e 220 set +e
221 } 221 }
222 222
223 setup_ipsec() 223 setup_ipsec()
224 { 224 {
225 # 225 #
226 # IPv4 226 # IPv4
227 # 227 #
228 run_cmd $host_1 ip xfrm policy add \ 228 run_cmd $host_1 ip xfrm policy add \
229 src 10.1.1.1 dst 10.1.2.1 dir 229 src 10.1.1.1 dst 10.1.2.1 dir out \
230 tmpl proto esp mode transport 230 tmpl proto esp mode transport
231 231
232 run_cmd $host_1 ip xfrm policy add \ 232 run_cmd $host_1 ip xfrm policy add \
233 src 10.1.2.1 dst 10.1.1.1 dir 233 src 10.1.2.1 dst 10.1.1.1 dir in \
234 tmpl proto esp mode transport 234 tmpl proto esp mode transport
235 235
236 run_cmd $host_2 ip xfrm policy add \ 236 run_cmd $host_2 ip xfrm policy add \
237 src 10.1.1.1 dst 10.1.2.1 dir 237 src 10.1.1.1 dst 10.1.2.1 dir in \
238 tmpl proto esp mode transport 238 tmpl proto esp mode transport
239 239
240 run_cmd $host_2 ip xfrm policy add \ 240 run_cmd $host_2 ip xfrm policy add \
241 src 10.1.2.1 dst 10.1.1.1 dir 241 src 10.1.2.1 dst 10.1.1.1 dir out \
242 tmpl proto esp mode transport 242 tmpl proto esp mode transport
243 243
244 ip -netns $host_1 xfrm state add \ 244 ip -netns $host_1 xfrm state add \
245 src 10.1.1.1 dst 10.1.2.1 \ 245 src 10.1.1.1 dst 10.1.2.1 \
246 spi 0x1000 proto esp aead 'rfc 246 spi 0x1000 proto esp aead 'rfc4106(gcm(aes))' \
247 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f 247 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
248 248
249 ip -netns $host_1 xfrm state add \ 249 ip -netns $host_1 xfrm state add \
250 src 10.1.2.1 dst 10.1.1.1 \ 250 src 10.1.2.1 dst 10.1.1.1 \
251 spi 0x1001 proto esp aead 'rfc 251 spi 0x1001 proto esp aead 'rfc4106(gcm(aes))' \
252 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f 252 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
253 253
254 ip -netns $host_2 xfrm state add \ 254 ip -netns $host_2 xfrm state add \
255 src 10.1.1.1 dst 10.1.2.1 \ 255 src 10.1.1.1 dst 10.1.2.1 \
256 spi 0x1000 proto esp aead 'rfc 256 spi 0x1000 proto esp aead 'rfc4106(gcm(aes))' \
257 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f 257 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
258 258
259 ip -netns $host_2 xfrm state add \ 259 ip -netns $host_2 xfrm state add \
260 src 10.1.2.1 dst 10.1.1.1 \ 260 src 10.1.2.1 dst 10.1.1.1 \
261 spi 0x1001 proto esp aead 'rfc 261 spi 0x1001 proto esp aead 'rfc4106(gcm(aes))' \
262 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f 262 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
263 263
264 # 264 #
265 # IPV6 265 # IPV6
266 # 266 #
267 run_cmd $host_1 ip -6 xfrm policy add 267 run_cmd $host_1 ip -6 xfrm policy add \
268 src 2001:db8:1::1 dst 2001:db8 268 src 2001:db8:1::1 dst 2001:db8:2::1 dir out \
269 tmpl proto esp mode transport 269 tmpl proto esp mode transport
270 270
271 run_cmd $host_1 ip -6 xfrm policy add 271 run_cmd $host_1 ip -6 xfrm policy add \
272 src 2001:db8:2::1 dst 2001:db8 272 src 2001:db8:2::1 dst 2001:db8:1::1 dir in \
273 tmpl proto esp mode transport 273 tmpl proto esp mode transport
274 274
275 run_cmd $host_2 ip -6 xfrm policy add 275 run_cmd $host_2 ip -6 xfrm policy add \
276 src 2001:db8:1::1 dst 2001:db8 276 src 2001:db8:1::1 dst 2001:db8:2::1 dir in \
277 tmpl proto esp mode transport 277 tmpl proto esp mode transport
278 278
279 run_cmd $host_2 ip -6 xfrm policy add 279 run_cmd $host_2 ip -6 xfrm policy add \
280 src 2001:db8:2::1 dst 2001:db8 280 src 2001:db8:2::1 dst 2001:db8:1::1 dir out \
281 tmpl proto esp mode transport 281 tmpl proto esp mode transport
282 282
283 ip -netns $host_1 -6 xfrm state add \ 283 ip -netns $host_1 -6 xfrm state add \
284 src 2001:db8:1::1 dst 2001:db8 284 src 2001:db8:1::1 dst 2001:db8:2::1 \
285 spi 0x1000 proto esp aead 'rfc 285 spi 0x1000 proto esp aead 'rfc4106(gcm(aes))' \
286 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f 286 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
287 287
288 ip -netns $host_1 -6 xfrm state add \ 288 ip -netns $host_1 -6 xfrm state add \
289 src 2001:db8:2::1 dst 2001:db8 289 src 2001:db8:2::1 dst 2001:db8:1::1 \
290 spi 0x1001 proto esp aead 'rfc 290 spi 0x1001 proto esp aead 'rfc4106(gcm(aes))' \
291 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f 291 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
292 292
293 ip -netns $host_2 -6 xfrm state add \ 293 ip -netns $host_2 -6 xfrm state add \
294 src 2001:db8:1::1 dst 2001:db8 294 src 2001:db8:1::1 dst 2001:db8:2::1 \
295 spi 0x1000 proto esp aead 'rfc 295 spi 0x1000 proto esp aead 'rfc4106(gcm(aes))' \
296 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f 296 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
297 297
298 ip -netns $host_2 -6 xfrm state add \ 298 ip -netns $host_2 -6 xfrm state add \
299 src 2001:db8:2::1 dst 2001:db8 299 src 2001:db8:2::1 dst 2001:db8:1::1 \
300 spi 0x1001 proto esp aead 'rfc 300 spi 0x1001 proto esp aead 'rfc4106(gcm(aes))' \
301 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f 301 0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
302 } 302 }
303 303
304 teardown_ipsec() 304 teardown_ipsec()
305 { 305 {
306 run_cmd $host_1 ip xfrm state flush 306 run_cmd $host_1 ip xfrm state flush
307 run_cmd $host_1 ip xfrm policy flush 307 run_cmd $host_1 ip xfrm policy flush
308 run_cmd $host_2 ip xfrm state flush 308 run_cmd $host_2 ip xfrm state flush
309 run_cmd $host_2 ip xfrm policy flush 309 run_cmd $host_2 ip xfrm policy flush
310 } 310 }
311 311
312 ############################################## 312 ################################################################################
313 # generate traffic through tunnel for various 313 # generate traffic through tunnel for various cases
314 314
315 run_ping() 315 run_ping()
316 { 316 {
317 local desc="$1" 317 local desc="$1"
318 318
319 run_cmd $host_1 ping -c1 -w1 172.16.1. 319 run_cmd $host_1 ping -c1 -w1 172.16.1.2
320 log_test $? 0 "IPv4 basic L2TP tunnel 320 log_test $? 0 "IPv4 basic L2TP tunnel ${desc}"
321 321
322 run_cmd $host_1 ping -c1 -w1 -I 172.16 322 run_cmd $host_1 ping -c1 -w1 -I 172.16.101.1 172.16.101.2
323 log_test $? 0 "IPv4 route through L2TP 323 log_test $? 0 "IPv4 route through L2TP tunnel ${desc}"
324 324
325 run_cmd $host_1 ${ping6} -c1 -w1 fc00: 325 run_cmd $host_1 ${ping6} -c1 -w1 fc00:1::2
326 log_test $? 0 "IPv6 basic L2TP tunnel 326 log_test $? 0 "IPv6 basic L2TP tunnel ${desc}"
327 327
328 run_cmd $host_1 ${ping6} -c1 -w1 -I fc 328 run_cmd $host_1 ${ping6} -c1 -w1 -I fc00:101::1 fc00:101::2
329 log_test $? 0 "IPv6 route through L2TP 329 log_test $? 0 "IPv6 route through L2TP tunnel ${desc}"
330 } 330 }
331 331
332 run_tests() 332 run_tests()
333 { 333 {
334 local desc 334 local desc
335 335
336 setup 336 setup
337 run_ping 337 run_ping
338 338
339 setup_ipsec 339 setup_ipsec
340 run_ping "- with IPsec" 340 run_ping "- with IPsec"
341 run_cmd $host_1 ping -c1 -w1 172.16.1. 341 run_cmd $host_1 ping -c1 -w1 172.16.1.2
342 log_test $? 0 "IPv4 basic L2TP tunnel 342 log_test $? 0 "IPv4 basic L2TP tunnel ${desc}"
343 343
344 run_cmd $host_1 ping -c1 -w1 -I 172.16 344 run_cmd $host_1 ping -c1 -w1 -I 172.16.101.1 172.16.101.2
345 log_test $? 0 "IPv4 route through L2TP 345 log_test $? 0 "IPv4 route through L2TP tunnel ${desc}"
346 346
347 run_cmd $host_1 ${ping6} -c1 -w1 fc00: 347 run_cmd $host_1 ${ping6} -c1 -w1 fc00:1::2
348 log_test $? 0 "IPv6 basic L2TP tunnel 348 log_test $? 0 "IPv6 basic L2TP tunnel - with IPsec"
349 349
350 run_cmd $host_1 ${ping6} -c1 -w1 -I fc 350 run_cmd $host_1 ${ping6} -c1 -w1 -I fc00:101::1 fc00:101::2
351 log_test $? 0 "IPv6 route through L2TP 351 log_test $? 0 "IPv6 route through L2TP tunnel - with IPsec"
352 352
353 teardown_ipsec 353 teardown_ipsec
354 run_ping "- after IPsec teardown" 354 run_ping "- after IPsec teardown"
355 } 355 }
356 356
357 ############################################## 357 ################################################################################
358 # main 358 # main
359 359
360 declare -i nfail=0 360 declare -i nfail=0
361 declare -i nsuccess=0 361 declare -i nsuccess=0
362 362
363 while getopts :pv o 363 while getopts :pv o
364 do 364 do
365 case $o in 365 case $o in
366 p) PAUSE_ON_FAIL=yes;; 366 p) PAUSE_ON_FAIL=yes;;
367 v) VERBOSE=$(($VERBOSE + 1));; 367 v) VERBOSE=$(($VERBOSE + 1));;
368 *) exit 1;; 368 *) exit 1;;
369 esac 369 esac
370 done 370 done
371 371
372 run_tests 372 run_tests
373 cleanup 373 cleanup
374 374
375 printf "\nTests passed: %3d\n" ${nsuccess} 375 printf "\nTests passed: %3d\n" ${nsuccess}
376 printf "Tests failed: %3d\n" ${nfail} 376 printf "Tests failed: %3d\n" ${nfail}
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.