__ __ __ __ _____ _ _ _____ _ _ _ | \/ | \ \ / / | __ \ (_) | | / ____| | | | | | \ / |_ __\ V / | |__) | __ ___ ____ _| |_ ___ | (___ | |__ ___| | | | |\/| | '__|> < | ___/ '__| \ \ / / _` | __/ _ \ \___ \| '_ \ / _ \ | | | | | | |_ / . \ | | | | | |\ V / (_| | || __/ ____) | | | | __/ | | |_| |_|_(_)_/ \_\ |_| |_| |_| \_/ \__,_|\__\___| |_____/|_| |_|\___V 2.1 if you need WebShell for Seo everyday contact me on Telegram Telegram Address : @jackleetFor_More_Tools:
#!/bin/bash
# SPDX-License-Identifier: GPL-2.0
#
# L2TPv3 tunnel between 2 hosts
#
# host-1 | router | host-2
# | |
# lo l2tp | | l2tp lo
# 172.16.101.1 172.16.1.1 | | 172.16.1.2 172.16.101.2
# fc00:101::1 fc00:1::1 | | fc00:1::2 fc00:101::2
# | |
# eth0 | | eth0
# 10.1.1.1 | | 10.1.2.1
# 2001:db8:1::1 | | 2001:db8:2::1
source lib.sh
VERBOSE=0
PAUSE_ON_FAIL=no
which ping6 > /dev/null 2>&1 && ping6=$(which ping6) || ping6=$(which ping)
################################################################################
#
log_test()
{
local rc=$1
local expected=$2
local msg="$3"
if [ ${rc} -eq ${expected} ]; then
printf "TEST: %-60s [ OK ]\n" "${msg}"
nsuccess=$((nsuccess+1))
else
ret=1
nfail=$((nfail+1))
printf "TEST: %-60s [FAIL]\n" "${msg}"
if [ "${PAUSE_ON_FAIL}" = "yes" ]; then
echo
echo "hit enter to continue, 'q' to quit"
read a
[ "$a" = "q" ] && exit 1
fi
fi
}
run_cmd()
{
local ns
local cmd
local out
local rc
ns="$1"
shift
cmd="$*"
if [ "$VERBOSE" = "1" ]; then
printf " COMMAND: $cmd\n"
fi
out=$(eval ip netns exec ${ns} ${cmd} 2>&1)
rc=$?
if [ "$VERBOSE" = "1" -a -n "$out" ]; then
echo " $out"
fi
[ "$VERBOSE" = "1" ] && echo
return $rc
}
################################################################################
# create namespaces and interconnects
create_ns()
{
local ns=$1
local addr=$2
local addr6=$3
[ -z "${addr}" ] && addr="-"
[ -z "${addr6}" ] && addr6="-"
if [ "${addr}" != "-" ]; then
ip -netns ${ns} addr add dev lo ${addr}
fi
if [ "${addr6}" != "-" ]; then
ip -netns ${ns} -6 addr add dev lo ${addr6}
fi
ip -netns ${ns} ro add unreachable default metric 8192
ip -netns ${ns} -6 ro add unreachable default metric 8192
ip netns exec ${ns} sysctl -qw net.ipv4.ip_forward=1
ip netns exec ${ns} sysctl -qw net.ipv6.conf.all.keep_addr_on_down=1
ip netns exec ${ns} sysctl -qw net.ipv6.conf.all.forwarding=1
ip netns exec ${ns} sysctl -qw net.ipv6.conf.default.forwarding=1
ip netns exec ${ns} sysctl -qw net.ipv6.conf.default.accept_dad=0
}
# create veth pair to connect namespaces and apply addresses.
connect_ns()
{
local ns1=$1
local ns1_dev=$2
local ns1_addr=$3
local ns1_addr6=$4
local ns2=$5
local ns2_dev=$6
local ns2_addr=$7
local ns2_addr6=$8
ip -netns ${ns1} li add ${ns1_dev} type veth peer name tmp
ip -netns ${ns1} li set ${ns1_dev} up
ip -netns ${ns1} li set tmp netns ${ns2} name ${ns2_dev}
ip -netns ${ns2} li set ${ns2_dev} up
if [ "${ns1_addr}" != "-" ]; then
ip -netns ${ns1} addr add dev ${ns1_dev} ${ns1_addr}
ip -netns ${ns2} addr add dev ${ns2_dev} ${ns2_addr}
fi
if [ "${ns1_addr6}" != "-" ]; then
ip -netns ${ns1} addr add dev ${ns1_dev} ${ns1_addr6}
ip -netns ${ns2} addr add dev ${ns2_dev} ${ns2_addr6}
fi
}
################################################################################
# test setup
cleanup()
{
cleanup_ns $host_1 $host_2 $router
}
setup_l2tp_ipv4()
{
#
# configure l2tpv3 tunnel on host-1
#
ip -netns $host_1 l2tp add tunnel tunnel_id 1041 peer_tunnel_id 1042 \
encap ip local 10.1.1.1 remote 10.1.2.1
ip -netns $host_1 l2tp add session name l2tp4 tunnel_id 1041 \
session_id 1041 peer_session_id 1042
ip -netns $host_1 link set dev l2tp4 up
ip -netns $host_1 addr add dev l2tp4 172.16.1.1 peer 172.16.1.2
#
# configure l2tpv3 tunnel on host-2
#
ip -netns $host_2 l2tp add tunnel tunnel_id 1042 peer_tunnel_id 1041 \
encap ip local 10.1.2.1 remote 10.1.1.1
ip -netns $host_2 l2tp add session name l2tp4 tunnel_id 1042 \
session_id 1042 peer_session_id 1041
ip -netns $host_2 link set dev l2tp4 up
ip -netns $host_2 addr add dev l2tp4 172.16.1.2 peer 172.16.1.1
#
# add routes to loopback addresses
#
ip -netns $host_1 ro add 172.16.101.2/32 via 172.16.1.2
ip -netns $host_2 ro add 172.16.101.1/32 via 172.16.1.1
}
setup_l2tp_ipv6()
{
#
# configure l2tpv3 tunnel on host-1
#
ip -netns $host_1 l2tp add tunnel tunnel_id 1061 peer_tunnel_id 1062 \
encap ip local 2001:db8:1::1 remote 2001:db8:2::1
ip -netns $host_1 l2tp add session name l2tp6 tunnel_id 1061 \
session_id 1061 peer_session_id 1062
ip -netns $host_1 link set dev l2tp6 up
ip -netns $host_1 addr add dev l2tp6 fc00:1::1 peer fc00:1::2
#
# configure l2tpv3 tunnel on host-2
#
ip -netns $host_2 l2tp add tunnel tunnel_id 1062 peer_tunnel_id 1061 \
encap ip local 2001:db8:2::1 remote 2001:db8:1::1
ip -netns $host_2 l2tp add session name l2tp6 tunnel_id 1062 \
session_id 1062 peer_session_id 1061
ip -netns $host_2 link set dev l2tp6 up
ip -netns $host_2 addr add dev l2tp6 fc00:1::2 peer fc00:1::1
#
# add routes to loopback addresses
#
ip -netns $host_1 -6 ro add fc00:101::2/128 via fc00:1::2
ip -netns $host_2 -6 ro add fc00:101::1/128 via fc00:1::1
}
setup()
{
# start clean
cleanup
set -e
setup_ns host_1 host_2 router
create_ns $host_1 172.16.101.1/32 fc00:101::1/128
create_ns $host_2 172.16.101.2/32 fc00:101::2/128
create_ns $router
connect_ns $host_1 eth0 10.1.1.1/24 2001:db8:1::1/64 \
$router eth1 10.1.1.2/24 2001:db8:1::2/64
connect_ns $host_2 eth0 10.1.2.1/24 2001:db8:2::1/64 \
$router eth2 10.1.2.2/24 2001:db8:2::2/64
ip -netns $host_1 ro add 10.1.2.0/24 via 10.1.1.2
ip -netns $host_1 -6 ro add 2001:db8:2::/64 via 2001:db8:1::2
ip -netns $host_2 ro add 10.1.1.0/24 via 10.1.2.2
ip -netns $host_2 -6 ro add 2001:db8:1::/64 via 2001:db8:2::2
setup_l2tp_ipv4
setup_l2tp_ipv6
set +e
}
setup_ipsec()
{
#
# IPv4
#
run_cmd $host_1 ip xfrm policy add \
src 10.1.1.1 dst 10.1.2.1 dir out \
tmpl proto esp mode transport
run_cmd $host_1 ip xfrm policy add \
src 10.1.2.1 dst 10.1.1.1 dir in \
tmpl proto esp mode transport
run_cmd $host_2 ip xfrm policy add \
src 10.1.1.1 dst 10.1.2.1 dir in \
tmpl proto esp mode transport
run_cmd $host_2 ip xfrm policy add \
src 10.1.2.1 dst 10.1.1.1 dir out \
tmpl proto esp mode transport
ip -netns $host_1 xfrm state add \
src 10.1.1.1 dst 10.1.2.1 \
spi 0x1000 proto esp aead 'rfc4106(gcm(aes))' \
0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
ip -netns $host_1 xfrm state add \
src 10.1.2.1 dst 10.1.1.1 \
spi 0x1001 proto esp aead 'rfc4106(gcm(aes))' \
0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
ip -netns $host_2 xfrm state add \
src 10.1.1.1 dst 10.1.2.1 \
spi 0x1000 proto esp aead 'rfc4106(gcm(aes))' \
0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
ip -netns $host_2 xfrm state add \
src 10.1.2.1 dst 10.1.1.1 \
spi 0x1001 proto esp aead 'rfc4106(gcm(aes))' \
0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
#
# IPV6
#
run_cmd $host_1 ip -6 xfrm policy add \
src 2001:db8:1::1 dst 2001:db8:2::1 dir out \
tmpl proto esp mode transport
run_cmd $host_1 ip -6 xfrm policy add \
src 2001:db8:2::1 dst 2001:db8:1::1 dir in \
tmpl proto esp mode transport
run_cmd $host_2 ip -6 xfrm policy add \
src 2001:db8:1::1 dst 2001:db8:2::1 dir in \
tmpl proto esp mode transport
run_cmd $host_2 ip -6 xfrm policy add \
src 2001:db8:2::1 dst 2001:db8:1::1 dir out \
tmpl proto esp mode transport
ip -netns $host_1 -6 xfrm state add \
src 2001:db8:1::1 dst 2001:db8:2::1 \
spi 0x1000 proto esp aead 'rfc4106(gcm(aes))' \
0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
ip -netns $host_1 -6 xfrm state add \
src 2001:db8:2::1 dst 2001:db8:1::1 \
spi 0x1001 proto esp aead 'rfc4106(gcm(aes))' \
0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
ip -netns $host_2 -6 xfrm state add \
src 2001:db8:1::1 dst 2001:db8:2::1 \
spi 0x1000 proto esp aead 'rfc4106(gcm(aes))' \
0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
ip -netns $host_2 -6 xfrm state add \
src 2001:db8:2::1 dst 2001:db8:1::1 \
spi 0x1001 proto esp aead 'rfc4106(gcm(aes))' \
0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f 128 mode transport
}
teardown_ipsec()
{
run_cmd $host_1 ip xfrm state flush
run_cmd $host_1 ip xfrm policy flush
run_cmd $host_2 ip xfrm state flush
run_cmd $host_2 ip xfrm policy flush
}
################################################################################
# generate traffic through tunnel for various cases
run_ping()
{
local desc="$1"
run_cmd $host_1 ping -c1 -w1 172.16.1.2
log_test $? 0 "IPv4 basic L2TP tunnel ${desc}"
run_cmd $host_1 ping -c1 -w1 -I 172.16.101.1 172.16.101.2
log_test $? 0 "IPv4 route through L2TP tunnel ${desc}"
run_cmd $host_1 ${ping6} -c1 -w1 fc00:1::2
log_test $? 0 "IPv6 basic L2TP tunnel ${desc}"
run_cmd $host_1 ${ping6} -c1 -w1 -I fc00:101::1 fc00:101::2
log_test $? 0 "IPv6 route through L2TP tunnel ${desc}"
}
run_tests()
{
local desc
setup
run_ping
setup_ipsec
run_ping "- with IPsec"
run_cmd $host_1 ping -c1 -w1 172.16.1.2
log_test $? 0 "IPv4 basic L2TP tunnel ${desc}"
run_cmd $host_1 ping -c1 -w1 -I 172.16.101.1 172.16.101.2
log_test $? 0 "IPv4 route through L2TP tunnel ${desc}"
run_cmd $host_1 ${ping6} -c1 -w1 fc00:1::2
log_test $? 0 "IPv6 basic L2TP tunnel - with IPsec"
run_cmd $host_1 ${ping6} -c1 -w1 -I fc00:101::1 fc00:101::2
log_test $? 0 "IPv6 route through L2TP tunnel - with IPsec"
teardown_ipsec
run_ping "- after IPsec teardown"
}
################################################################################
# main
declare -i nfail=0
declare -i nsuccess=0
while getopts :pv o
do
case $o in
p) PAUSE_ON_FAIL=yes;;
v) VERBOSE=$(($VERBOSE + 1));;
*) exit 1;;
esac
done
run_tests
cleanup
printf "\nTests passed: %3d\n" ${nsuccess}
printf "Tests failed: %3d\n" ${nfail}
| Name | Type | Size | Permission | Actions |
|---|---|---|---|---|
| af_unix | Folder | 0755 |
|
|
| forwarding | Folder | 0755 |
|
|
| hsr | Folder | 0755 |
|
|
| lib | Folder | 0755 |
|
|
| mptcp | Folder | 0755 |
|
|
| netfilter | Folder | 0755 |
|
|
| openvswitch | Folder | 0755 |
|
|
| packetdrill | Folder | 0755 |
|
|
| rds | Folder | 0755 |
|
|
| tcp_ao | Folder | 0755 |
|
|
| Makefile | File | 4.82 KB | 0644 |
|
| altnames.sh | File | 1.77 KB | 0755 |
|
| amt.sh | File | 9.2 KB | 0755 |
|
| arp_ndisc_evict_nocarrier.sh | File | 5.15 KB | 0755 |
|
| arp_ndisc_untracked_subnets.sh | File | 7.04 KB | 0755 |
|
| bareudp.sh | File | 20.79 KB | 0755 |
|
| big_tcp.sh | File | 5.49 KB | 0755 |
|
| bind_bhash.sh | File | 1.34 KB | 0755 |
|
| busy_poll_test.sh | File | 3.47 KB | 0755 |
|
| cmsg_ipv6.sh | File | 3.34 KB | 0755 |
|
| cmsg_so_mark.sh | File | 1.54 KB | 0755 |
|
| cmsg_so_priority.sh | File | 3.93 KB | 0755 |
|
| cmsg_time.sh | File | 2.22 KB | 0755 |
|
| drop_monitor_tests.sh | File | 4.34 KB | 0755 |
|
| fcnal-test.sh | File | 106.62 KB | 0755 |
|
| fdb_flush.sh | File | 21.04 KB | 0755 |
|
| fdb_notify.sh | File | 1.81 KB | 0755 |
|
| fib-onlink-tests.sh | File | 12.04 KB | 0755 |
|
| fib_nexthop_multiprefix.sh | File | 5.81 KB | 0755 |
|
| fib_nexthop_nongw.sh | File | 2.19 KB | 0755 |
|
| fib_nexthops.sh | File | 73.9 KB | 0755 |
|
| fib_rule_tests.sh | File | 17.66 KB | 0755 |
|
| fib_tests.sh | File | 77.47 KB | 0755 |
|
| fin_ack_lat.sh | File | 507 B | 0755 |
|
| fq_band_pktlimit.sh | File | 1.81 KB | 0755 |
|
| gre_gso.sh | File | 4.04 KB | 0755 |
|
| gro.sh | File | 2.27 KB | 0755 |
|
| icmp.sh | File | 2.52 KB | 0755 |
|
| icmp_redirect.sh | File | 12.49 KB | 0755 |
|
| in_netns.sh | File | 323 B | 0755 |
|
| io_uring_zerocopy_tx.sh | File | 3 KB | 0755 |
|
| ioam6.sh | File | 50.49 KB | 0755 |
|
| ip6_gre_headroom.sh | File | 1.37 KB | 0755 |
|
| ip_defrag.sh | File | 2.04 KB | 0755 |
|
| ip_local_port_range.sh | File | 153 B | 0755 |
|
| ipv6_flowlabel.sh | File | 1 KB | 0755 |
|
| ipv6_route_update_soft_lockup.sh | File | 10.8 KB | 0755 |
|
| l2_tos_ttl_inherit.sh | File | 13.95 KB | 0755 |
|
| l2tp.sh | File | 9.68 KB | 0755 |
|
| lib.sh | File | 8.65 KB | 0644 |
|
| lwt_dst_cache_ref_loop.sh | File | 5.94 KB | 0755 |
|
| msg_zerocopy.sh | File | 2.93 KB | 0755 |
|
| ndisc_unsolicited_na_test.sh | File | 5.85 KB | 0755 |
|
| net_helper.sh | File | 514 B | 0644 |
|
| netdevice.sh | File | 5.69 KB | 0755 |
|
| netns-name.sh | File | 2.4 KB | 0755 |
|
| netns-sysctl.sh | File | 910 B | 0755 |
|
| pmtu.sh | File | 78.42 KB | 0755 |
|
| psock_snd.sh | File | 2.2 KB | 0755 |
|
| reuseaddr_ports_exhausted.sh | File | 635 B | 0755 |
|
| reuseport_addr_any.sh | File | 81 B | 0755 |
|
| route_localnet.sh | File | 1.92 KB | 0755 |
|
| rps_default_mask.sh | File | 2.19 KB | 0755 |
|
| rtnetlink.sh | File | 35.16 KB | 0755 |
|
| rxtimestamp.sh | File | 79 B | 0755 |
|
| sctp_vrf.sh | File | 5.81 KB | 0755 |
|
| setup_loopback.sh | File | 2.7 KB | 0644 |
|
| setup_veth.sh | File | 1.01 KB | 0644 |
|
| so_txtime.sh | File | 2.71 KB | 0755 |
|
| srv6_end_dt46_l3vpn_test.sh | File | 20.57 KB | 0755 |
|
| srv6_end_dt4_l3vpn_test.sh | File | 16.92 KB | 0755 |
|
| srv6_end_dt6_l3vpn_test.sh | File | 17.11 KB | 0755 |
|
| srv6_end_dx4_netfilter_test.sh | File | 10.92 KB | 0755 |
|
| srv6_end_dx6_netfilter_test.sh | File | 11.13 KB | 0755 |
|
| srv6_end_flavors_test.sh | File | 23.56 KB | 0755 |
|
| srv6_end_next_csid_l3vpn_test.sh | File | 32.53 KB | 0755 |
|
| srv6_end_x_next_csid_l3vpn_test.sh | File | 35.46 KB | 0755 |
|
| srv6_hencap_red_l3vpn_test.sh | File | 23.15 KB | 0755 |
|
| srv6_hl2encap_red_l2vpn_test.sh | File | 20.51 KB | 0755 |
|
| stress_reuseport_listen.sh | File | 539 B | 0755 |
|
| tcp_fastopen_backup_key.sh | File | 1.06 KB | 0755 |
|
| test_blackhole_dev.sh | File | 280 B | 0755 |
|
| test_bpf.sh | File | 225 B | 0755 |
|
| test_bridge_backup_port.sh | File | 27.35 KB | 0755 |
|
| test_bridge_neigh_suppress.sh | File | 28.4 KB | 0755 |
|
| test_ingress_egress_chaining.sh | File | 2.14 KB | 0644 |
|
| test_vxlan_fdb_changelink.sh | File | 678 B | 0755 |
|
| test_vxlan_mdb.sh | File | 92.63 KB | 0755 |
|
| test_vxlan_nolocalbypass.sh | File | 5.57 KB | 0755 |
|
| test_vxlan_under_vrf.sh | File | 5.54 KB | 0755 |
|
| test_vxlan_vnifiltering.sh | File | 20.91 KB | 0755 |
|
| toeplitz.sh | File | 4.87 KB | 0755 |
|
| toeplitz_client.sh | File | 667 B | 0755 |
|
| traceroute.sh | File | 6.91 KB | 0755 |
|
| txtimestamp.sh | File | 1.84 KB | 0755 |
|
| udpgro.sh | File | 5.72 KB | 0755 |
|
| udpgro_bench.sh | File | 2.08 KB | 0755 |
|
| udpgro_frglist.sh | File | 2.43 KB | 0755 |
|
| udpgro_fwd.sh | File | 7.08 KB | 0755 |
|
| udpgso.sh | File | 2.42 KB | 0755 |
|
| udpgso_bench.sh | File | 2.83 KB | 0755 |
|
| unicast_extensions.sh | File | 7.77 KB | 0755 |
|
| veth.sh | File | 10.75 KB | 0755 |
|
| vlan_bridge_binding.sh | File | 4.49 KB | 0755 |
|
| vlan_hw_filter.sh | File | 819 B | 0755 |
|
| vrf-xfrm-tests.sh | File | 10.65 KB | 0755 |
|
| vrf_route_leaking.sh | File | 16.48 KB | 0755 |
|
| vrf_strict_mode_test.sh | File | 8 KB | 0755 |
|
| xfrm_policy.sh | File | 14.65 KB | 0755 |
|
| xfrm_policy_add_speed.sh | File | 1.51 KB | 0755 |
|