17
unknown
unknown
beakerlib-1.29.2-1.fc38.noarch
beakerlib-redhat-1-33.fc37eng.noarch
unknown
2022-09-24 10:07:12 EDT
2022-09-24 10:10:35 EDT
Fedora release 38 (Rawhide)
ampere-mtsnow-altramax-51.khw4.lab.eng.bos.redhat.com
unknown
0 x
63710 MB
894.12 GB
MACsec sanity check
1. Module load unload
Load macsec driver, configure some SC/SA then unload the
driver, repeat the loop 50 times.
2. Configuration
Setup macsec between 2 hosts and do basic check, should cover
ip-macsec options as many as possible
3. Run basic network traffic
4. MTU check
Output of 'modinfo macsec':--------------- OUTPUT START ---------------filename: /lib/modules/6.0.0-0.rc6.a63f2e7cb110.45.test.fc38.aarch64/kernel/drivers/net/macsec.ko.xzalias: rtnl-link-macsecalias: net-pf-16-proto-16-family-macsecdescription: MACsec IEEE 802.1AElicense: GPL v2vermagic: 6.0.0-0.rc6.a63f2e7cb110.45.test.fc38.aarch64 SMP preempt mod_unload aarch64name: macsecintree: Ydepends:rhelversion: 9.99sig_id: PKCS#7signer: Fedora kernel signing keysig_key: 62:F0:21:70:A3:8B:8B:13:A1:E0:80:28:AF:3E:B1:A4:37:30:6D:4Esig_hashalgo: sha256signature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utput of 'ip macsec help':--------------- OUTPUT START ---------------Usage: ip macsec add DEV tx sa { 0..3 } [ OPTS ] key ID KEYip macsec set DEV tx sa { 0..3 } [ OPTS ]ip macsec del DEV tx sa { 0..3 }ip macsec add DEV rx SCI [ on | off ]ip macsec set DEV rx SCI [ on | off ]ip macsec del DEV rx SCIip macsec add DEV rx SCI sa { 0..3 } [ OPTS ] key ID KEYip macsec set DEV rx SCI sa { 0..3 } [ OPTS ]ip macsec del DEV rx SCI sa { 0..3 }ip macsec showip macsec show DEVip macsec offload DEV [ off | phy | mac ]where OPTS := [ pn <u32> ] [ on | off ]ID := 128-bit hex stringKEY := 128-bit or 256-bit hex stringSCI := { sci <u64> | port { 1..2^16-1 } address <lladdr> }--------------- OUTPUT END ---------------PASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSOutput of 'ip link show ttt':--------------- OUTPUT START ---------------81: ttt@dummy0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1468 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000link/ether e6:41:1a:49:c8:6a brd ff:ff:ff:ff:ff:ff--------------- OUTPUT END ---------------PASSOutput of 'ip -d link show ttt':--------------- OUTPUT START ---------------81: ttt@dummy0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1468 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000link/ether e6:41:1a:49:c8:6a brd ff:ff:ff:ff:ff:ff promiscuity 0 minmtu 0 maxmtu 65535macsec sci e6411a49c86a0001 protect on cipher GCM-AES-128 icvlen 16 encodingsa 0 validate strict encrypt off send_sci on end_station off scb off replay off addrgenmode eui64 numtxqueues 1 numrxqueues 1 gso_max_size 65536 gso_max_segs 65535 gro_max_size 65536--------------- OUTPUT END ---------------PASSOutput of 'ip macsec show ttt':--------------- OUTPUT START ---------------81: ttt: protect on validate strict sc off sa off encrypt off send_sci on end_station off scb off replay offcipher suite: GCM-AES-128, using ICV length 16TXSC: e6411a49c86a0001 on SA 0offload: off--------------- OUTPUT END ---------------PASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPhases fingerprint: qYP1zJ4NAsserts fingerprint: xlgG/dyb