2 # SPDX-License-Identifier: BSD-3-Clause
4 CRYPTO_DEV=${CRYPTO_DEV:-'--vdev="crypto_aesni_mb0"'}
6 #generate cfg file for ipsec-secgw
9 cat <<EOF > ${SGW_CFG_FILE}
11 sp ipv4 in esp protect 7 pri 2 src ${REMOTE_IPV4}/32 dst ${LOCAL_IPV4}/32 \
12 sport 0:65535 dport 0:65535
13 sp ipv4 in esp bypass pri 1 sport 0:65535 dport 0:65535
16 sp ipv4 out esp protect 7 pri 2 src ${LOCAL_IPV4}/32 dst ${REMOTE_IPV4}/32 \
17 sport 0:65535 dport 0:65535
18 sp ipv4 out esp bypass pri 1 sport 0:65535 dport 0:65535
21 sp ipv6 in esp protect 9 pri 2 src ${REMOTE_IPV6}/128 dst ${LOCAL_IPV6}/128 \
22 sport 0:65535 dport 0:65535
23 sp ipv6 in esp bypass pri 1 sport 0:65535 dport 0:65535
26 sp ipv6 out esp protect 9 pri 2 src ${LOCAL_IPV6}/128 dst ${REMOTE_IPV6}/128 \
27 sport 0:65535 dport 0:65535
28 sp ipv6 out esp bypass pri 1 sport 0:65535 dport 0:65535
31 sa in 7 cipher_algo 3des-cbc \
33 de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
35 auth_key de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
36 mode ipv4-tunnel src ${REMOTE_IPV4} dst ${LOCAL_IPV4} ${SGW_CFG_XPRM_IN}
38 sa in 9 cipher_algo 3des-cbc \
40 de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
42 auth_key de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
43 mode ipv6-tunnel src ${REMOTE_IPV6} dst ${LOCAL_IPV6} ${SGW_CFG_XPRM_IN}
46 sa out 7 cipher_algo 3des-cbc \
48 de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
50 auth_key de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
51 mode ipv4-tunnel src ${LOCAL_IPV4} dst ${REMOTE_IPV4} ${SGW_CFG_XPRM_OUT}
53 sa out 9 cipher_algo 3des-cbc \
55 de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
57 auth_key de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
58 mode ipv6-tunnel src ${LOCAL_IPV6} dst ${REMOTE_IPV6} ${SGW_CFG_XPRM_OUT}
61 rt ipv4 dst ${REMOTE_IPV4}/32 port 0
62 rt ipv4 dst ${LOCAL_IPV4}/32 port 1
64 rt ipv6 dst ${REMOTE_IPV6}/128 port 0
65 rt ipv6 dst ${LOCAL_IPV6}/128 port 1
68 neigh port 0 ${REMOTE_MAC}
69 neigh port 1 ${LOCAL_MAC}
77 cat <<EOF > ${SGW_CFG_FILE}
79 sp ipv4 in esp protect 6 pri 2 src ${REMOTE_IPV4}/32 dst ${LOCAL_IPV4}/32 \
80 sport 0:65535 dport 0:65535
81 sp ipv4 in esp bypass pri 1 sport 0:65535 dport 0:65535
84 sp ipv4 out esp protect 6 pri 2 src ${LOCAL_IPV4}/32 dst ${REMOTE_IPV4}/32 \
85 sport 0:65535 dport 0:65535
86 sp ipv4 out esp bypass pri 1 sport 0:65535 dport 0:65535
89 sp ipv6 in esp protect 8 pri 2 src ${REMOTE_IPV6}/128 dst ${LOCAL_IPV6}/128 \
90 sport 0:65535 dport 0:65535
91 sp ipv6 in esp bypass pri 1 sport 0:65535 dport 0:65535
94 sp ipv6 out esp protect 8 pri 2 src ${LOCAL_IPV6}/128 dst ${REMOTE_IPV6}/128 \
95 sport 0:65535 dport 0:65535
96 sp ipv6 out esp bypass pri 1 sport 0:65535 dport 0:65535
99 sa in 8 cipher_algo 3des-cbc \
101 de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
102 auth_algo sha1-hmac \
103 auth_key de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
104 mode ipv4-tunnel src ${REMOTE_IPV4} dst ${LOCAL_IPV4}
106 sa in 6 cipher_algo 3des-cbc \
108 de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
109 auth_algo sha1-hmac \
110 auth_key de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
111 mode ipv6-tunnel src ${REMOTE_IPV6} dst ${LOCAL_IPV6}
114 sa out 8 cipher_algo 3des-cbc \
116 de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
117 auth_algo sha1-hmac \
118 auth_key de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
119 mode ipv4-tunnel src ${LOCAL_IPV4} dst ${REMOTE_IPV4}
121 sa out 6 cipher_algo 3des-cbc \
123 de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
124 auth_algo sha1-hmac \
125 auth_key de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \
126 mode ipv6-tunnel src ${LOCAL_IPV6} dst ${REMOTE_IPV6}
129 rt ipv4 dst ${REMOTE_IPV4}/32 port 0
130 rt ipv4 dst ${LOCAL_IPV4}/32 port 1
132 rt ipv6 dst ${REMOTE_IPV6}/128 port 0
133 rt ipv6 dst ${LOCAL_IPV6}/128 port 1
136 neigh port 0 ${REMOTE_MAC}
137 neigh port 1 ${LOCAL_MAC}