1#! /bin/bash 2# SPDX-License-Identifier: BSD-3-Clause 3 4. ${DIR}/trs_aesctr_sha1_common_defs.sh 5 6SGW_CMD_XPRM="${DPDK_VARS} ${DPDK_MODE} ${SGW_CMD_XPRM}" 7 8config_remote_xfrm_44() 9{ 10 ssh ${REMOTE_HOST} ip xfrm policy flush 11 ssh ${REMOTE_HOST} ip xfrm state flush 12 13 ssh ${REMOTE_HOST} ip xfrm policy add \ 14src ${REMOTE_IPV4} dst ${LOCAL_IPV4} \ 15dir out ptype main action allow \ 16tmpl proto esp mode transport reqid 1 17 18 ssh ${REMOTE_HOST} ip xfrm policy add \ 19src ${LOCAL_IPV4} dst ${REMOTE_IPV4} \ 20dir in ptype main action allow \ 21tmpl proto esp mode transport reqid 2 22 23 ssh ${REMOTE_HOST} ip xfrm state add \ 24src ${REMOTE_IPV4} dst ${LOCAL_IPV4} \ 25proto esp spi 7 reqid 1 mode transport replay-window 64 ${XFRM_ESN} \ 26auth sha1 0xdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef \ 27enc "rfc3686\(ctr\(aes\)\)" 0xdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef 28 29 ssh ${REMOTE_HOST} ip xfrm state add \ 30src ${LOCAL_IPV4} dst ${REMOTE_IPV4} \ 31proto esp spi 7 reqid 2 mode transport replay-window 64 ${XFRM_ESN} \ 32auth sha1 0xdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef \ 33enc "rfc3686\(ctr\(aes\)\)" 0xdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef 34 35 ssh ${REMOTE_HOST} ip xfrm policy list 36 ssh ${REMOTE_HOST} ip xfrm state list 37} 38 39config_remote_xfrm_66() 40{ 41 ssh ${REMOTE_HOST} ip xfrm policy flush 42 ssh ${REMOTE_HOST} ip xfrm state flush 43 44 ssh ${REMOTE_HOST} ip xfrm policy add \ 45src ${REMOTE_IPV6} dst ${LOCAL_IPV6} \ 46dir out ptype main action allow \ 47tmpl proto esp mode transport reqid 3 48 49 ssh ${REMOTE_HOST} ip xfrm policy add \ 50src ${LOCAL_IPV6} dst ${REMOTE_IPV6} \ 51dir in ptype main action allow \ 52tmpl proto esp mode transport reqid 4 53 54 55 ssh ${REMOTE_HOST} ip xfrm state add \ 56src ${REMOTE_IPV6} dst ${LOCAL_IPV6} \ 57proto esp spi 9 reqid 3 mode transport replay-window 64 ${XFRM_ESN} \ 58auth sha1 0xdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef \ 59enc "rfc3686\(ctr\(aes\)\)" 0xdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef 60 61 ssh ${REMOTE_HOST} ip xfrm state add \ 62src ${LOCAL_IPV6} dst ${REMOTE_IPV6} \ 63proto esp spi 9 reqid 4 mode transport replay-window 64 ${XFRM_ESN} \ 64auth sha1 0xdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef \ 65enc "rfc3686\(ctr\(aes\)\)" 0xdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef 66 67 ssh ${REMOTE_HOST} ip xfrm policy list 68 ssh ${REMOTE_HOST} ip xfrm state list 69} 70