inner_ttl_ipv4

PF-1.11: Rewrite the ingress innner packet TTL

Create a policy-forwarding configuration using gNMI with action ip-ttl.

Summary

This test verifies using forwarding policy to match on IPv4 and IPv6 traffic with a particular TTL (hop-limit) value, then encapsulate the matched traffic with MPLSoGRE IPv4 while setting the inner TTL (hop-limit) to a specified value.

Topology

• featureprofiles/topologies/atedut_4.testbed

Test setup

Test environment setup

                                             -------
                                            |       |
    [ ATE:Port1, ATE:Port2 ] ==== LAG1 ==== |  DUT  | ==== LAG2 ==== [ ATE:Port3, ATE:Port4 ]
                                            |       |
                                             -------

• Traffic is generated from ATE:LAG1 [ATE:Port1 and ATE:Port2]
• Traffic is encapsulated with MPLSoGRE IPv4 and forwarded using ATE:LAG2 [ATE:Port3 and ATE:Port4]
• Constants:
  • vrf_name = "test_vrf"
  • matched_ipv4_src_net = "10.10.50.0/24"
  • unmatched_ipv4_src_net = "10.10.51.0/24"
  • ipv4_dst_net = "10.10.52.0/24"
  • matched_ipv6_src_net = "2001:f:a::0/120"
  • unmatched_ipv6_src_net = "2001:f:b::0/120"
  • ipv6_dst_net = "2001:f:c::0/120"
  • ipv4_tunnel_src = "10.100.100.1"
  • ipv4_tunnel_dst_a = "10.100.101.1"
  • ipv4_tunnel_dst_b = "10.100.102.1"
  • tunnel_ip_ttl = "64"
  • matched_ip_ttl = "1"
  • unmatched_ip_ttl = "32"
  • rewritten_ip_ttl = "1"
  • mpls_label = "100"
  • nexthop_group = "NHG-1"

Configuration

1. DUT:Port1 and DUT:Port2 are configured as LAG1 towards ATE:Port1 and ATE:Port2 respectively.

2. DUT:LAG1 and ATE:LAG1 are configured with subinterfaces DUT:LAG1.10 and ATE:LAG1.10 respectively.

   • Both are configured with VLAN 10.
   • DUT:LAG1.10 is configured with VRF vrf_name.
   • DUT:LAG1.10:IPv4 is 192.168.0.1/30.
   • ATE:LAG1.10:IPv4 is 192.168.0.2/30.

3. DUT:Port3 and DUT:Port4 are configured as LAG2 towards ATE:Port3 and ATE:Port4 respectively.

   • DUT:LAG2:IPv4 is 192.168.1.1/30.
   • ATE:LAG2:IPv4 is 192.168.1.2/30.

4. DUT is configured with default route with nexthop as ATE:LAG2:IPv4. This is to ensure the tunnel destination of the MPLSoGRE tunnel is resolvable.

5. DUT is configured with nexthop-group named nexthop_group. The nexthops of this nexthop-group are configured as MPLSoGRE IPv4 tunnels:

   • Outer TTL value: tunnel_ip_ttl
   • Tunnel source: ipv4_tunnel_src
   • Tunnel destination: ipv4_tunnel_dst_a or ipv4_tunnel_dst_b
   • MPLS label: mpls_label

6. DUT is configured with a policy-forwarding in vrf_name with this rule:

   • Match condition:
     • Matching on IPv4 traffic with TTL "matching_ip_ttl"
   • Actions:
     • Forward to nexthop-group nexthop_group
     • Inner TTL rewritten as rewritten_ip_ttl

7. Repeat step 6 but for IPv6 traffic.

8. DUT is configured with default routes (one for IPv4 and one for IPv6) in vrf_name with nexthop as nexthop-group nexthop_group.

Procedure

[TODO] Implement test code.

TE-1.11.1 Rewrite the ingress innner packet TTL = 1, if the incoming TTL = 1

for IPv4 traffic.

ATE action:

• Generate total 1000 IPv4 packets from ATE:Port1 and ATE:Port2 with:

  • Source IP from random addresses in matched_ipv4_src_net to destination IP addresses in ipv4_dst_net addresses.
  • Use 512 bytes frame size.
  • Set TTL of all packets to matched_ip_ttl.

• Generate total 1000 IPv4 packets from ATE:Port1 and ATE:Port2 with:

  • Source IP from random addresses in unmatched_ipv4_src_net to destination IP addresses in ipv4_dst_net addresses.
  • Use 512 bytes frame size.
  • Set TTL of all packets to unmatched_ip_ttl.

Verify:

• The total packet count of traffic sent from ATE:Port1 and ATE:Port2 should be equal to the sum of all packets received on ATE:Port3 and ATE:Port4.
• All packets received on ATE:Port3 and ATE:Port4 are encapsulated with MPLSoGRE IPv4 with:
  • MPLS label: mpls_label
  • Source IPv4 address: ipv4_tunnel_src
  • Destination IPv4 address: ipv4_tunnel_dst_a or ipv4_tunnel_dst_b
  • Tunnel IP TTL: tunnel_ip_ttl
• Packets with source IPv4 addresses from subnet matched_ipv4_src_net has inner IP TTL set to rewritten_ip_ttl.
• Packets with source IPv4 addresses from subnet unmatched_ipv4_src_net has inner IP TTL set to unmatched_ip_ttl - 1.

TE-1.11.2 Rewrite the ingress innner packet TTL = 1, if the incoming TTL = 1

for IPv6 traffic.

ATE action:

• Generate total 1000 IPv6 packets from ATE:Port1 and ATE:Port2 with:

  • Source IP from random addresses in matched_ipv6_src_net to destination IP addresses in ipv6_dst_net addresses.
  • Use 512 bytes frame size.
  • Set TTL of all packets to matched_ip_ttl.

• Generate total 1000 IPv6 packets from ATE:Port1 and ATE:Port2 with:

  • Source IP from random addresses in unmatched_ipv6_src_net to destination IP addresses in ipv6_dst_net addresses.
  • Use 512 bytes frame size.
  • Set TTL of all packets to unmatched_ip_ttl.

Verify:

• The total packet count of traffic sent from ATE:Port1 and ATE:Port2 should be equal to the sum of all packets received on ATE:Port3 and ATE:Port4.
• All packets received on ATE:Port3 and ATE:Port4 are encapsulated with MPLSoGRE IPv4 with:
  • MPLS label: mpls_label
  • Source IPv4 address: ipv4_tunnel_src
  • Destination IPv4 address: ipv4_tunnel_dst_a or ipv4_tunnel_dst_b
  • Tunnel IP TTL: tunnel_ip_ttl
• Packets with source IPv6 addresses from subnet matched_ipv6_src_net has inner IP TTL set to rewritten_ip_ttl.
• Packets with source IPv6 addresses from subnet unmatched_ipv6_src_net has inner IP TTL set to unmatched_ip_ttl - 1.

Canonical OC

[TODO]: Replace "type": "PBR_POLICY" with MATCH_ACTION after https://github.com/openconfig/public/pull/1417 is merged.

{
  "network-instances": {
    "network-instance": [
      {
        "config": {
          "name": "DEFAULT"
        },
        "name": "DEFAULT"
      },
      {
        "config": {
          "name": "test_vrf"
        },
        "name": "test_vrf",
        "policy-forwarding": {
          "policies": {
            "policy": [
              {
                "config": {
                  "policy-id": "set-ip-ttl-policy",
                  "type": "PBR_POLICY"
                },
                "policy-id": "set-ip-ttl-policy",
                "rules": {
                  "rule": [
                    {
                      "action": {
                        "config": {
                          "next-hop-group": "NHGroup1"
                        }
                      },
                      "config": {
                        "sequence-id": 10
                      },
                      "ipv4": {
                        "config": {
                          "hop-limit": 1
                        }
                      },
                      "sequence-id": 10
                    },
                    {
                      "action": {
                        "config": {
                          "next-hop-group": "NHGroup1"
                        }
                      },
                      "config": {
                        "sequence-id": 20
                      },
                      "ipv6": {
                        "config": {
                          "hop-limit": 1
                        }
                      },
                      "sequence-id": 20
                    }
                  ]
                }
              }
            ]
          }
        },
        "protocols": {
          "protocol": [
            {
              "config": {
                "identifier": "STATIC",
                "name": "DEFAULT"
              },
              "identifier": "STATIC",
              "name": "DEFAULT",
              "static-routes": {
                "static": [
                  {
                    "config": {
                      "prefix": "0.0.0.0/0"
                    },
                    "next-hop-group": {
                      "config": {
                        "name": "NHGroup1"
                      }
                    },
                    "prefix": "0.0.0.0/0"
                  },
                  {
                    "config": {
                      "prefix": "::/0"
                    },
                    "next-hop-group": {
                      "config": {
                        "name": "NHGroup1"
                      }
                    },
                    "prefix": "::/0"
                  }
                ]
              }
            }
          ]
        },
        "static": {
          "next-hop-groups": {
            "next-hop-group": [
              {
                "config": {
                  "name": "NHGroup1"
                },
                "name": "NHGroup1",
                "next-hops": {
                  "next-hop": [
                    {
                      "config": {
                        "index": "1"
                      },
                      "index": "1"
                    },
                    {
                      "config": {
                        "index": "2"
                      },
                      "index": "2"
                    }
                  ]
                }
              }
            ]
          },
          "next-hops": {
            "next-hop": [
              {
                "config": {
                  "index": "1",
                  "metric": 10,
                  "next-hop": "198.51.100.1",
                  "nh-network-instance": "DEFAULT",
                  "recurse": true
                },
                "encap-headers": {
                  "encap-header": [
                    {
                      "config": {
                        "index": 1,
                        "type": "MPLS"
                      },
                      "index": 1,
                      "mpls": {
                        "config": {
                          "label": 100
                        }
                      }
                    },
                    {
                      "config": {
                        "index": 2,
                        "type": "GRE"
                      },
                      "gre": {
                        "config": {
                          "dst-ip": "10.100.101.1",
                          "src-ip": "10.100.100.1",
                          "ttl": 64
                        }
                      },
                      "index": 2
                    }
                  ]
                },
                "index": "1"
              },
              {
                "config": {
                  "index": "2",
                  "metric": 10,
                  "next-hop": "198.51.100.5",
                  "nh-network-instance": "DEFAULT",
                  "recurse": true
                },
                "encap-headers": {
                  "encap-header": [
                    {
                      "config": {
                        "index": 1,
                        "type": "MPLS"
                      },
                      "index": 1,
                      "mpls": {
                        "config": {
                          "label": 100
                        }
                      }
                    },
                    {
                      "config": {
                        "index": 2,
                        "type": "GRE"
                      },
                      "gre": {
                        "config": {
                          "dst-ip": "10.100.102.1",
                          "src-ip": "10.100.100.1",
                          "ttl": 64
                        }
                      },
                      "index": 2
                    }
                  ]
                },
                "index": "2"
              }
            ]
          }
        }
      }
    ]
  }
}

OpenConfig Path and RPC Coverage

paths:

  /network-instances/network-instance/policy-forwarding/policies/policy/rules/rule/ipv4/config/hop-limit:
  /network-instances/network-instance/policy-forwarding/policies/policy/rules/rule/ipv6/config/hop-limit:
  /network-instances/network-instance/policy-forwarding/policies/policy/rules/rule/action/config/next-hop-group:
  /network-instances/network-instance/policy-forwarding/policies/policy/rules/rule/action/config/ip-ttl:

  /network-instances/network-instance/static/next-hop-groups/next-hop-group/config/name:
  /network-instances/network-instance/static/next-hop-groups/next-hop-group/next-hops/next-hop/config/index:
  /network-instances/network-instance/static/next-hops/next-hop/config/index:
  /network-instances/network-instance/static/next-hops/next-hop/encap-headers/encap-header/config/index:
  /network-instances/network-instance/static/next-hops/next-hop/encap-headers/encap-header/config/type:
  /network-instances/network-instance/static/next-hops/next-hop/encap-headers/encap-header/mpls/config/label:
  /network-instances/network-instance/static/next-hops/next-hop/encap-headers/encap-header/gre/config/dst-ip:
  /network-instances/network-instance/static/next-hops/next-hop/encap-headers/encap-header/gre/config/src-ip:
  /network-instances/network-instance/static/next-hops/next-hop/encap-headers/encap-header/gre/config/ttl:

  /network-instances/network-instance/protocols/protocol/config/identifier:
  /network-instances/network-instance/protocols/protocol/static-routes/static/config/prefix:
  /network-instances/network-instance/protocols/protocol/static-routes/static/next-hop-group/config/name:


rpcs:
  gnmi:
    gNMI.Set:
      union_replace: true
      replace: true
    gNMI.Subscribe:
      on_change: true

Required DUT platform

• FFF