xref: /linux/tools/testing/selftests/net/l2tp.sh (revision 17271848c9a79cdbee49537cb9a73e7de0906962) 
1#!/bin/bash
2# SPDX-License-Identifier: GPL-2.0
3#
4# L2TPv3 tunnel between 2 hosts
5#
6#            host-1          |   router   |     host-2
7#                            |            |
8#      lo          l2tp      |            |      l2tp           lo
9# 172.16.101.1  172.16.1.1   |            | 172.16.1.2    172.16.101.2
10#  fc00:101::1   fc00:1::1   |            |   fc00:1::2    fc00:101::2
11#                            |            |
12#                  eth0      |            |     eth0
13#                10.1.1.1    |            |   10.1.2.1
14#              2001:db8:1::1 |            | 2001:db8:2::1
15
16source lib.sh
17VERBOSE=0
18PAUSE_ON_FAIL=no
19ret=0
20
21which ping6 > /dev/null 2>&1 && ping6=$(which ping6) || ping6=$(which ping)
22
23################################################################################
24#
25log_test()
26{
27	log_test_expected "$1" "$2" "$3"
28}
29
30run_cmd()
31{
32	local ns
33	local cmd
34	local out
35	local rc
36
37	ns="$1"
38	shift
39	cmd="$*"
40
41	if [ "$VERBOSE" = "1" ]; then
42		printf "    COMMAND: $cmd\n"
43	fi
44
45	out=$(eval ip netns exec ${ns} ${cmd} 2>&1)
46	rc=$?
47	if [ "$VERBOSE" = "1" -a -n "$out" ]; then
48		echo "    $out"
49	fi
50
51	[ "$VERBOSE" = "1" ] && echo
52
53	return $rc
54}
55
56################################################################################
57# create namespaces and interconnects
58
59create_ns()
60{
61	local ns=$1
62	local addr=$2
63	local addr6=$3
64
65	[ -z "${addr}" ] && addr="-"
66	[ -z "${addr6}" ] && addr6="-"
67
68	if [ "${addr}" != "-" ]; then
69		ip -netns ${ns} addr add dev lo ${addr}
70	fi
71	if [ "${addr6}" != "-" ]; then
72		ip -netns ${ns} -6 addr add dev lo ${addr6}
73	fi
74
75	ip -netns ${ns} ro add unreachable default metric 8192
76	ip -netns ${ns} -6 ro add unreachable default metric 8192
77
78	ip netns exec ${ns} sysctl -qw net.ipv4.ip_forward=1
79	ip netns exec ${ns} sysctl -qw net.ipv6.conf.all.keep_addr_on_down=1
80	ip netns exec ${ns} sysctl -qw net.ipv6.conf.all.forwarding=1
81	ip netns exec ${ns} sysctl -qw net.ipv6.conf.default.forwarding=1
82	ip netns exec ${ns} sysctl -qw net.ipv6.conf.default.accept_dad=0
83}
84
85# create veth pair to connect namespaces and apply addresses.
86connect_ns()
87{
88	local ns1=$1
89	local ns1_dev=$2
90	local ns1_addr=$3
91	local ns1_addr6=$4
92	local ns2=$5
93	local ns2_dev=$6
94	local ns2_addr=$7
95	local ns2_addr6=$8
96
97	ip -netns ${ns1} li add ${ns1_dev} type veth peer name tmp
98	ip -netns ${ns1} li set ${ns1_dev} up
99	ip -netns ${ns1} li set tmp netns ${ns2} name ${ns2_dev}
100	ip -netns ${ns2} li set ${ns2_dev} up
101
102	if [ "${ns1_addr}" != "-" ]; then
103		ip -netns ${ns1} addr add dev ${ns1_dev} ${ns1_addr}
104		ip -netns ${ns2} addr add dev ${ns2_dev} ${ns2_addr}
105	fi
106
107	if [ "${ns1_addr6}" != "-" ]; then
108		ip -netns ${ns1} addr add dev ${ns1_dev} ${ns1_addr6}
109		ip -netns ${ns2} addr add dev ${ns2_dev} ${ns2_addr6}
110	fi
111}
112
113################################################################################
114# test setup
115
116cleanup()
117{
118	cleanup_ns $host_1 $host_2 $router
119}
120
121setup_l2tp_ipv4()
122{
123	#
124	# configure l2tpv3 tunnel on host-1
125	#
126	ip -netns $host_1 l2tp add tunnel tunnel_id 1041 peer_tunnel_id 1042 \
127			 encap ip local 10.1.1.1 remote 10.1.2.1
128	ip -netns $host_1 l2tp add session name l2tp4 tunnel_id 1041 \
129			 session_id 1041 peer_session_id 1042
130	ip -netns $host_1 link set dev l2tp4 up
131	ip -netns $host_1 addr add dev l2tp4 172.16.1.1 peer 172.16.1.2
132
133	#
134	# configure l2tpv3 tunnel on host-2
135	#
136	ip -netns $host_2 l2tp add tunnel tunnel_id 1042 peer_tunnel_id 1041 \
137			 encap ip local 10.1.2.1 remote 10.1.1.1
138	ip -netns $host_2 l2tp add session name l2tp4 tunnel_id 1042 \
139			 session_id 1042 peer_session_id 1041
140	ip -netns $host_2 link set dev l2tp4 up
141	ip -netns $host_2 addr add dev l2tp4 172.16.1.2 peer 172.16.1.1
142
143	#
144	# add routes to loopback addresses
145	#
146	ip -netns $host_1 ro add 172.16.101.2/32 via 172.16.1.2
147	ip -netns $host_2 ro add 172.16.101.1/32 via 172.16.1.1
148}
149
150setup_l2tp_ipv6()
151{
152	#
153	# configure l2tpv3 tunnel on host-1
154	#
155	ip -netns $host_1 l2tp add tunnel tunnel_id 1061 peer_tunnel_id 1062 \
156			 encap ip local 2001:db8:1::1 remote 2001:db8:2::1
157	ip -netns $host_1 l2tp add session name l2tp6 tunnel_id 1061 \
158			 session_id 1061 peer_session_id 1062
159	ip -netns $host_1 link set dev l2tp6 up
160	ip -netns $host_1 addr add dev l2tp6 fc00:1::1 peer fc00:1::2
161
162	#
163	# configure l2tpv3 tunnel on host-2
164	#
165	ip -netns $host_2 l2tp add tunnel tunnel_id 1062 peer_tunnel_id 1061 \
166			 encap ip local 2001:db8:2::1 remote 2001:db8:1::1
167	ip -netns $host_2 l2tp add session name l2tp6 tunnel_id 1062 \
168			 session_id 1062 peer_session_id 1061
169	ip -netns $host_2 link set dev l2tp6 up
170	ip -netns $host_2 addr add dev l2tp6 fc00:1::2 peer fc00:1::1
171
172	#
173	# add routes to loopback addresses
174	#
175	ip -netns $host_1 -6 ro add fc00:101::2/128 via fc00:1::2
176	ip -netns $host_2 -6 ro add fc00:101::1/128 via fc00:1::1
177}
178
179setup()
180{
181	# start clean
182	cleanup
183
184	set -e
185	setup_ns host_1 host_2 router
186	create_ns $host_1 172.16.101.1/32 fc00:101::1/128
187	create_ns $host_2 172.16.101.2/32 fc00:101::2/128
188	create_ns $router
189
190	connect_ns $host_1 eth0 10.1.1.1/24 2001:db8:1::1/64 \
191	           $router eth1 10.1.1.2/24 2001:db8:1::2/64
192
193	connect_ns $host_2 eth0 10.1.2.1/24 2001:db8:2::1/64 \
194	           $router eth2 10.1.2.2/24 2001:db8:2::2/64
195
196	ip -netns $host_1 ro add 10.1.2.0/24 via 10.1.1.2
197	ip -netns $host_1 -6 ro add 2001:db8:2::/64 via 2001:db8:1::2
198
199	ip -netns $host_2 ro add 10.1.1.0/24 via 10.1.2.2
200	ip -netns $host_2 -6 ro add 2001:db8:1::/64 via 2001:db8:2::2
201
202	setup_l2tp_ipv4
203	setup_l2tp_ipv6
204	set +e
205}
206
207setup_ipsec()
208{
209	#
210	# IPv4
211	#
212	run_cmd $host_1 ip xfrm policy add \
213		src 10.1.1.1 dst 10.1.2.1 dir out \
214		tmpl proto esp mode transport
215
216	run_cmd $host_1 ip xfrm policy add \
217		src 10.1.2.1 dst 10.1.1.1 dir in \
218		tmpl proto esp mode transport
219
220	run_cmd $host_2 ip xfrm policy add \
221		src 10.1.1.1 dst 10.1.2.1 dir in \
222		tmpl proto esp mode transport
223
224	run_cmd $host_2 ip xfrm policy add \
225		src 10.1.2.1 dst 10.1.1.1 dir out \
226		tmpl proto esp mode transport
227
228	ip -netns $host_1 xfrm state add \
229		src 10.1.1.1 dst 10.1.2.1 \
230		spi 0x1000 proto esp aead 'rfc4106(gcm(aes))' \
231		0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
232
233	ip -netns $host_1 xfrm state add \
234		src 10.1.2.1 dst 10.1.1.1 \
235		spi 0x1001 proto esp aead 'rfc4106(gcm(aes))' \
236		0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
237
238	ip -netns $host_2 xfrm state add \
239		src 10.1.1.1 dst 10.1.2.1 \
240		spi 0x1000 proto esp aead 'rfc4106(gcm(aes))' \
241		0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
242
243	ip -netns $host_2 xfrm state add \
244		src 10.1.2.1 dst 10.1.1.1 \
245		spi 0x1001 proto esp aead 'rfc4106(gcm(aes))' \
246		0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
247
248	#
249	# IPV6
250	#
251	run_cmd $host_1 ip -6 xfrm policy add \
252		src 2001:db8:1::1 dst 2001:db8:2::1 dir out \
253		tmpl proto esp mode transport
254
255	run_cmd $host_1 ip -6 xfrm policy add \
256		src 2001:db8:2::1 dst 2001:db8:1::1 dir in \
257		tmpl proto esp mode transport
258
259	run_cmd $host_2 ip -6 xfrm policy add \
260		src 2001:db8:1::1 dst 2001:db8:2::1 dir in \
261		tmpl proto esp mode transport
262
263	run_cmd $host_2 ip -6 xfrm policy add \
264		src 2001:db8:2::1 dst 2001:db8:1::1 dir out \
265		tmpl proto esp mode transport
266
267	ip -netns $host_1 -6 xfrm state add \
268		src 2001:db8:1::1 dst 2001:db8:2::1 \
269		spi 0x1000 proto esp aead 'rfc4106(gcm(aes))' \
270		0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
271
272	ip -netns $host_1 -6 xfrm state add \
273		src 2001:db8:2::1 dst 2001:db8:1::1 \
274		spi 0x1001 proto esp aead 'rfc4106(gcm(aes))' \
275		0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
276
277	ip -netns $host_2 -6 xfrm state add \
278		src 2001:db8:1::1 dst 2001:db8:2::1 \
279		spi 0x1000 proto esp aead 'rfc4106(gcm(aes))' \
280		0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
281
282	ip -netns $host_2 -6 xfrm state add \
283		src 2001:db8:2::1 dst 2001:db8:1::1 \
284		spi 0x1001 proto esp aead 'rfc4106(gcm(aes))' \
285		0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
286}
287
288teardown_ipsec()
289{
290	run_cmd $host_1 ip xfrm state flush
291	run_cmd $host_1 ip xfrm policy flush
292	run_cmd $host_2 ip xfrm state flush
293	run_cmd $host_2 ip xfrm policy flush
294}
295
296################################################################################
297# generate traffic through tunnel for various cases
298
299run_ping()
300{
301	local desc="$1"
302
303	run_cmd $host_1 ping -c1 -w1 172.16.1.2
304	log_test $? 0 "IPv4 basic L2TP tunnel ${desc}"
305
306	run_cmd $host_1 ping -c1 -w1 -I 172.16.101.1 172.16.101.2
307	log_test $? 0 "IPv4 route through L2TP tunnel ${desc}"
308
309	run_cmd $host_1 ${ping6} -c1 -w1 fc00:1::2
310	log_test $? 0 "IPv6 basic L2TP tunnel ${desc}"
311
312	run_cmd $host_1 ${ping6} -c1 -w1 -I fc00:101::1 fc00:101::2
313	log_test $? 0 "IPv6 route through L2TP tunnel ${desc}"
314}
315
316run_tests()
317{
318	local desc
319
320	setup
321	run_ping
322
323	setup_ipsec
324	run_ping "- with IPsec"
325	run_cmd $host_1 ping -c1 -w1 172.16.1.2
326	log_test $? 0 "IPv4 basic L2TP tunnel ${desc}"
327
328	run_cmd $host_1 ping -c1 -w1 -I 172.16.101.1 172.16.101.2
329	log_test $? 0 "IPv4 route through L2TP tunnel ${desc}"
330
331	run_cmd $host_1 ${ping6} -c1 -w1 fc00:1::2
332	log_test $? 0 "IPv6 basic L2TP tunnel - with IPsec"
333
334	run_cmd $host_1 ${ping6} -c1 -w1 -I fc00:101::1 fc00:101::2
335	log_test $? 0 "IPv6 route through L2TP tunnel - with IPsec"
336
337	teardown_ipsec
338	run_ping "- after IPsec teardown"
339}
340
341################################################################################
342# main
343
344declare -i nfail=0
345declare -i nsuccess=0
346
347while getopts :pv o
348do
349	case $o in
350		p) PAUSE_ON_FAIL=yes;;
351		v) VERBOSE=$(($VERBOSE + 1));;
352		*) exit 1;;
353	esac
354done
355
356run_tests
357cleanup
358
359printf "\nTests passed: %3d\n" ${nsuccess}
360printf "Tests failed: %3d\n"   ${nfail}
361
362exit $ret
363