encap_decap_gre - openconfig/featureprofiles GitHub Wiki
This test verifies "EthoCWoMPLSoGRE" forwarding of IP traffic using policy-forwarding configuration.
"EthoCWoMPLSoGRE" describes the encapsulation for IPv4/IPv6 packets, including the Ethernet header, all contained within GRE and MPLS headers. In addition 4-byte zero control word (CW) is inserted between the MPLS header and the inner Ethernet header.
+------------------------------------+
| Outer IP Header |
+------------------------------------+
| GRE Header |
+------------------------------------+
| MPLS Label Stack |
+------------------------------------+
| Control Word (CW) |
| (4 bytes - all '0') |
+------------------------------------+
| Inner Ethernet Header |
+------------------------------------+
| Inner IP Header |
+------------------------------------+
| Layer-4 Header |
+------------------------------------+
| Payload |
+------------------------------------+
DUT has an ingress and 2 egress aggregate interfaces.
| | --eBGP-- | ATE Ports 2,3 |
[ ATE Ports 1 ]---- | DUT | | |
| | --eBGP-- | ATE Port 4,5 |
Test uses aggregate 802.3ad bundled interfaces (Aggregate Interfaces).
-
Ingress Port: Traffic is generated from Aggregate1 (ATE Ports 1).
-
Egress Ports: Aggregate2 (ATE Ports 2,3) and Aggregate3 (ATE Ports 4,5) are used as the destination ports for encapsulated traffic.
Aggregate 1 "customer interface" is the ingress port that could either have port mode configuration or attachment mode configuration as described below.
EACH test should be run twice - once with port mode configuration and once with attachment mode configuration.
- Configure DUT port 1 to be a member of aggregate interface named "customer interface"
- "customer interface" is a static Layer 2 bundled interface part of pseudowire that accepts packets from all VLANs.
- MTU default 9216
- Configure DUT port 1 to be a member of aggregate interface named "customer interface"
- Create a sub interface of the aggregated interface and assign a VLAN ID to it.
- This sub interface will be a static Layer 2 bundled interface part of pseudowire that accepts packets from vlan ID associated with it.
- MTU default 9216
-
Policy-forwarding enabling EthoMPLSoGRE encapsulation of all incoming traffic:
-
The forwarding policy must allow forwarding of incoming traffic across 16 tunnels. 16 Tunnels has 16 source address and a single tunnel destination.
-
Source address must be configurable as:
- Loopback address OR
- 16 source addresses corresponding to a single tunnel destinations to achieve maximum entropy.
-
DSCP of the innermost IP packet header must be preserved during encapsulation
-
DSCP of the GRE/outermost IP header must be configurable (Default TOS 96) during encapsulation
-
TTL of the outer GRE must be configurable (Default TTL 64)
-
QoS Hardware queues for all traffic must be configurable (default QoS hardaware class selected is 3)
-
- "Customer interface" is endpoint 1 and endpoint 2 is an IP address pointing towards Aggregate2, Aggregare3
- Two unique static MPLS label for local label and remote label.
- Enable control word
-
IPV4 and IPV6 addresses
-
MTU (default 9216)
-
LACP Member link configuration
-
Lag id
-
LACP (default: period short)
-
Carrier-delay (default up:3000 down:150)
-
Statistics load interval (default:30 seconds)
- Create static route for tunnel destination pointing towards Aggregate 2.
- Static mapping of MPLS label for encapsulation must be configurable
- Entire Label block must be reallocated for static MPLS
- Labels from start/end/mid ranges must be usable and configured corresponding to EthoMPLSoGRE encapsulation
PF-1.23.2: Verify PF EthoMPLSoGRE encapsulate action for unencrytped IPv4, IPv6 traffic with entropy on ethernet headers
- Generate 1000 different traffic flows on ATE Port 1 at line rate with a mix of both IPV4 and IPv6 traffic. Use 64, 128, 256, 512, 1024 MTU bytes frame size.
- Flows should have entropy on Source MAC address, Destination MAC address. Other headers are fixed.
Verify:
- All traffic received on Aggregate2, Aggregate3 are EthoCWoMPLSoGRE-encapsulated.
- No packet loss when forwarding.
- Traffic equally load-balanced across 16 GRE destinations and distributed equally across 2 egress ports.
Run the test separately for both port mode and attachment mode "customer interface" configuration.
PF-1.23.3: Verify no hashing of EthoCWoMPLSoGRE encapsulation for unencrytped IPv4 traffic without entropy
- Generate single traffic flow on ATE Port 1 at line rate with IPV4 traffic. Use 64, 128, 256, 512, 1024 MTU bytes frame size.
- Flows should have NOT have entropy on any headers.
Verify:
- All traffic received on either Aggregate2 only or Aggregate3 and is EthoCWoMPLSoGRE-encapsulated.
- No hashing of traffic between Aggregate2 and Aggregate3.
- No packet loss when forwarding.
- Traffic only takes one of the 16 GRE destinations.
Run the test separately for both port mode and attachment mode "customer interface" configuration.
- Generate 1000 different traffic flows on ATE Port 1 at line rate with a mix of both IPV4 and IPv6 traffic. Use 64, 128, 256, 512, 1024 MTU bytes frame size.
- Flows are MACSec encrypted when sent from ATE Port 1.
- MACSec should encrypt all headers and paylaod of traffic flow, including source mac, destination mac and VLAN tag.
- Flows should have entropy on Source MAC address, Destination MAC address. Other headers are fixed.
Verify:
- All traffic received on either Aggregate2 only or Aggregate3 only and is EthoCWoMPLSoGRE-encapsulated.
- No hashing of traffic between Aggregate2 and Aggregate3
- No packet loss when forwarding.
- Traffic only takes one of the 16 GRE destinations.
Run the test separately for both port mode and attachment mode "customer interface" configuration.
- Use the same traffic profile as PF-1.23.2. However, set the packet size to 9000 bytes
Verify:
- All traffic received on Aggregate2, Aggregate3 are EthoCWoMPLSoGRE-encapsulated.
- No packet loss when forwarding.
- Traffic equally load-balanced across 16 GRE destinations and distributed equally across 2 egress ports.
Run the test separately for both port mode and attachment mode "customer interface" configuration.
- Use the same traffic profile as PF-1.23.2.
Verify:
- Verify a “0” (32-bit field ) control word is inserted between the MPLS label stack and the Layer 2 payload (the Ethernet frame).
- All traffic received on Aggregate2, Aggregate3 are EthoCWoMPLSoGRE-encapsulated.
- No packet loss when forwarding.
- Traffic equally load-balanced across 16 GRE destinations and distributed equally across 2 egress ports.
Run the test separately for both port mode and attachment mode "customer interface" configuration.
- Use the same traffic profile as PF-1.23.4
Verify:
- Verify a “0” (32-bit field ) control word is inserted between the MPLS label stack and the Layer 2 payload (the Ethernet frame).
- All traffic received on either Aggregate2 only or Aggregate3 only and is EthoCWoMPLSoGRE-encapsulated.
- No hashing of traffic between Aggregate2 and Aggregate3
- No packet loss when forwarding.
- Traffic only takes one of the 16 GRE destinations.
Run the test separately for both port mode and attachment mode "customer interface" configuration.
- Use the same traffic profile as PF-1.23.2.
Verify:
- TOS of encapsulated packets is set to 96.
- All traffic received on Aggregate2, Aggregate3 are EthoCWoMPLSoGRE-encapsulated.
- No packet loss when forwarding.
- Traffic equally load-balanced across 16 GRE destinations and distributed equally across 2 egress ports.
Run the test separately for both port mode and attachment mode "customer interface" configuration.
- Use the same traffic profile as PF-1.23.2.
- Start the traffic profile on ATE.
- Shutdown or remove a single GRE tunnel destination on the DUT.
Verify:
- All traffic received on Aggregate2, Aggregate3 are EthoCWoMPLSoGRE-encapsulated.
- No packet loss when forwarding.
- Traffic load-balanced across remaining 15 GRE destinations and distributed equally across 2 egress ports.
Generate traffic on ATE Aggregate2 and Aggregate3 having:
-
Outer source address: random combination of 1000+ IPV4 source addresses from 100.64.0.0/22
-
Outer destination address: Traffic must fall within the configured GRE tunnel sources in PF-1.23.1 so it cuold be decapsulated.
-
MPLS Label: Should be same as the local label configured in PF-1.23.1 Inner payload:
-
Both IPV4 and IPV6 unicast payloads, with random source address, destination address, TCP/UDP source port and destination ports
-
Use 64, 128, 256, 512, 1024.. MTU bytes frame size
-
Verify:
-
All traffic received on Aggregate2 and Aggregate3 gets decapsulated and forwarded as IPV4/IPV6 unicast on the respective egress interfaces under Aggregate1
-
No packet loss when forwarding with counters incrementing corresponding to traffic
Run the test separately for both port mode and attachment mode "customer interface" configuration.
-
Use the same traffic profile as PF-1.23.12.
-
Ensure inner payload Ethernet header has a VLAN tag attached to it.
-
Verify:
-
In port mode configuration: Traffic flow is decapsulated and mapped to the resperctive pseudowire and egress interface based on the MPLS label. Inner payload VLAN tag is retained after decapsulation.
-
In attachment mode configuration: Traffic flow is decapsulated and mapped to the resperctive pseudowire and egress interface based on the MPLS label. VLAN tag of decapsulated packet is same as the VLAN-ID associated with the egress sub-interface.
-
No packet loss when forwarding with counters incrementing corresponding to traffic
Run the test separately for both port mode and attachment mode "customer interface" configuration.
Port mode Interface configs
{
"interfaces": {
"interface": [
{
"config": {
"description": "CLOUD-CSI",
"enabled": true,
"mtu": 9080,
"name": "Bundle-Ether8",
"type": "ieee8023adLag"
},
"name": "Bundle-Ether8",
"rates": {
"config": {
"load-interval": 30
}
},
"subinterfaces": {
"subinterface": [
{
"config": {
"description": "CLOUD-CSI",
"enabled": true,
"index": 0
},
"index": 0,
"ipv4": {
"config": {
"mtu": 9066
}
},
"ipv6": {
"config": {
"mtu": 9066
}
}
}
]
},
"aggregation": {
"config": {
"lag-type": "STATIC"
}
}
}
]
}
}VLAN mode Interface configs
{
"interfaces": {
"interface": [
{
"config": {
"description": "CLOUD-CSI",
"enabled": true,
"mtu": 9080,
"name": "Bundle-Ether9",
"type": "ieee8023adLag"
},
"name": "Bundle-Ether9",
"rates": {
"config": {
"load-interval": 30
}
},
"subinterfaces": {
"subinterface": [
{
"config": {
"description": "CLOUD-GEO-PRIVATE [T=qp1309122726287]",
"enabled": true,
"index": 1709
},
"index": 1709,
"vlan": {
"match": {
"single-tagged": {
"config": {
"vlan-id": 1709
}
}
}
}
}
]
}
}
]
}
}Pseudowire configs Port mode
{
"network-instances": {
"network-instance": [
{
"name": "GEO_4",
"config": {
"name": "GEO_4",
"type": "L2P2P"
},
"connection-points": {
"connection-point": [
{
"connection-point-id": "GEO_4",
"config": {
"connection-point-id": "GEO_4"
},
"endpoints": {
"endpoint": [
{
"endpoint-id": "LOCAL",
"config": {
"endpoint-id": "LOCAL",
"type": "LOCAL"
},
"local": {
"config": {
"interface": "Bundle-Ether9",
"subinterface": 0
}
}
},
{
"endpoint-id": "REMOTE",
"config": {
"endpoint-id": "REMOTE",
"type": "REMOTE"
},
"remote": {
"config": {
"virtual-circuit-identifier": 4
}
}
}
]
}
}
]
}
}
]
},
"interfaces": {
"interface": [
{
"name": "Bundle-Ether9",
"config": {
"name": "Bundle-Ether9",
"type": "IANA_INTERFACE_TYPE:ieee8023adLag",
"enabled": true
},
"ethernet": {
"config": {
"aggregate-id": "Bundle-Ether9"
}
},
"subinterfaces": {
"subinterface": [
{
"index": 0,
"config": {
"index": 0,
"description": "L2P2P Service GEO_4 - Local Endpoint"
}
}
]
}
}
]
}
}Pseudowire configs VLAN mode
{
"network-instances": {
"network-instance": [
{
"name": "GEO_4",
"config": {
"name": "GEO_4",
"type": "L2P2P"
},
"connection-points": {
"connection-point": [
{
"connection-point-id": "GEO_4",
"config": {
"connection-point-id": "GEO_4"
},
"endpoints": {
"endpoint": [
{
"endpoint-id": "LOCAL",
"config": {
"endpoint-id": "LOCAL",
"type": "LOCAL"
},
"local": {
"config": {
"interface": "Bundle-Ether9",
"subinterface": 1709
}
}
},
{
"endpoint-id": "REMOTE",
"config": {
"endpoint-id": "REMOTE",
"type": "REMOTE"
},
"remote": {
"config": {
"virtual-circuit-identifier": 4
}
}
}
]
}
}
]
}
}
]
},
"interfaces": {
"interface": [
{
"name": "Bundle-Ether9",
"config": {
"name": "Bundle-Ether9",
"type": "IANA_INTERFACE_TYPE:ieee8023adLag",
"enabled": true
},
"ethernet": {
"config": {
"aggregate-id": "Bundle-Ether9"
}
},
"subinterfaces": {
"subinterface": [
{
"index": 1709,
"config": {
"index": 1709,
"description": "L2P2P Service GEO_4 - Local Endpoint (VLAN implied by index)"
}
}
]
}
}
]
}
}Tunnels/Next-hop group configs
{
"network-instances": {
"network-instance": [
{
"name": "DEFAULT",
"config": {
"name": "DEFAULT"
},
"static": {
"next-hop-groups": {
"next-hop-group": [
{
"config": {
"name": "MPLS_in_GRE_Encap"
},
"name": "MPLS_in_GRE_Encap",
"next-hops": {
"next-hop": [
{
"index": "1",
"config": {
"index": "1"
}
},
{
"index": "2",
"config": {
"index": "2"
}
}
]
}
}
]
},
"next-hops": {
"next-hop": [
{
"index": "1",
"config": {
"index": "1",
"next-hop": "nh_ip_addr_1",
"encap-headers": {
"encap-header": [
{
"index": "1",
"type": "GRE",
"config": {
"dst-ip": "outer_ipv4_dst_def",
"src-ip": "outer_ipv4_src1",
"dscp": "outer_dscp",
"ip-ttl": "outer_ip-ttl"
}
}
]
}
}
},
{
"index": "2",
"config": {
"index": "2",
"next-hop": "nh_ip_addr_2",
"encap-headers": {
"encap-header": [
{
"index": "2",
"type": "GRE",
"config": {
"dst-ip": "outer_ipv4_dst_def",
"src-ip": "outer_ipv4_src2",
"dscp": "outer_dscp",
"ip-ttl": "outer_ip-ttl"
}
}
]
}
}
}
]
}
}
}
]
}
}paths:
# interface configs
/interfaces/interface/config/description:
/interfaces/interface/config/enabled:
/interfaces/interface/config/mtu:
/interfaces/interface/config/name:
/interfaces/interface/config/type:
/interfaces/interface/rates/config/load-interval:
/interfaces/interface/subinterfaces/subinterface/config/description:
/interfaces/interface/subinterfaces/subinterface/config/enabled:
/interfaces/interface/subinterfaces/subinterface/config/index:
/interfaces/interface/subinterfaces/subinterface/ipv4/config/mtu:
/interfaces/interface/subinterfaces/subinterface/ipv6/config/mtu:
/interfaces/interface/aggregation/config/lag-type:
# psuedowire configs
/network-instances/network-instance/config/name:
/network-instances/network-instance/config/type:
/network-instances/network-instance/connection-points/connection-point/config/connection-point-id:
/network-instances/network-instance/connection-points/connection-point/endpoints/endpoint/config/endpoint-id:
/network-instances/network-instance/connection-points/connection-point/endpoints/endpoint/local/config/interface:
/network-instances/network-instance/connection-points/connection-point/endpoints/endpoint/local/config/subinterface:
/network-instances/network-instance/connection-points/connection-point/endpoints/endpoint/remote/config/virtual-circuit-identifier:
#TODO: Add new OCs for labels and next-hop-group under connection-point
#/network-instances/network-instance/connection-points/connection-point/endpoints/endpoint/local/config/local-label
#/network-instances/network-instance/connection-points/connection-point/endpoints/endpoint/remote/config/remote-label
#/network-instances/network-instance/connection-points/connection-point/endpoints/endpoint/remote/config/next-hop-group
#Tunnels/Next-hop group configs
#TODO: Add new OC for GRE encap headers
#/network-instances/network-instance/static/next-hop-groups/next-hop-group/nexthops/nexthop/config/index:
#/network-instances/network-instance/static/next-hop-groups/next-hop-group/nexthops/nexthop/config/next-hop:
#/network-instances/network-instance/static/next-hop-groups/next-hop-group/nexthops/nexthop/encap-headers/encap-header/config/index:
#/network-instances/network-instance/static/next-hop-groups/next-hop-group/nexthops/nexthop/encap-headers/encap-header/gre/config/type:
#/network-instances/network-instance/static/next-hop-groups/next-hop-group/nexthops/nexthop/encap-headers/encap-header/gre/config/dst-ip:
#/network-instances/network-instance/static/next-hop-groups/next-hop-group/nexthops/nexthop/encap-headers/encap-header/gre/config/src-ip:
#/network-instances/network-instance/static/next-hop-groups/next-hop-group/nexthops/nexthop/encap-headers/encap-header/gre/config/dscp:
#/network-instances/network-instance/static/next-hop-groups/next-hop-group/nexthops/nexthop/encap-headers/encap-header/gre/config/ip-ttl:
#/network-instances/network-instance/static/next-hop-groups/next-hop-group/nexthops/nexthop/encap-headers/encap-header/gre/config/index:
# Telemetry paths
/interfaces/interface/state/counters/in-discards:
/interfaces/interface/state/counters/in-errors:
/interfaces/interface/state/counters/in-multicast-pkts:
/interfaces/interface/state/counters/in-pkts:
/interfaces/interface/state/counters/in-unicast-pkts:
/interfaces/interface/state/counters/out-discards:
/interfaces/interface/state/counters/out-errors:
/interfaces/interface/state/counters/out-multicast-pkts:
/interfaces/interface/state/counters/out-pkts:
/interfaces/interface/state/counters/out-unicast-pkts:
/interfaces/interface/subinterfaces/subinterface/state/counters/in-discards:
/interfaces/interface/subinterfaces/subinterface/state/counters/in-errors:
/interfaces/interface/subinterfaces/subinterface/state/counters/in-multicast-pkts:
/interfaces/interface/subinterfaces/subinterface/state/counters/in-pkts:
/interfaces/interface/subinterfaces/subinterface/state/counters/in-unicast-pkts:
/interfaces/interface/subinterfaces/subinterface/state/counters/out-discards:
/interfaces/interface/subinterfaces/subinterface/state/counters/out-errors:
/interfaces/interface/subinterfaces/subinterface/state/counters/out-multicast-pkts:
/interfaces/interface/subinterfaces/subinterface/state/counters/out-pkts:
/interfaces/interface/subinterfaces/subinterface/state/counters/out-unicast-pkts:
# Config paths for GRE decap
/network-instances/network-instance/policy-forwarding/policies/policy/rules/rule/action/config/decapsulate-gre:
rpcs:
gnmi:
gNMI.Set:
union_replace: true
replace: true
gNMI.Subscribe:
on_change: true- MFF
- FFF