8
unknown
unknown
beakerlib-1.29.3-2.fc38.noarch
unknown
2023-02-06 12:51:22 CET
2023-02-06 12:54:16 CET
Fedora release 38 (Rawhide)
kvm-02-guest24.rhts.eng.brq.redhat.com
unknown
1 x Intel Core Processor (Broadwell, IBRS)
3914 MB
59.87 GB
MACsec sanity check
1. Module load unload
Load macsec driver, configure some SC/SA then unload the
driver, repeat the loop 50 times.
2. Configuration
Setup macsec between 2 hosts and do basic check, should cover
ip-macsec options as many as possible
3. Run basic network traffic
4. MTU check
Output of 'modinfo macsec':--------------- OUTPUT START ---------------filename: /lib/modules/6.2.0-rc6/kernel/drivers/net/macsec.kolicense: GPL v2description: MACsec IEEE 802.1AEalias: net-pf-16-proto-16-family-macsecalias: rtnl-link-macsecdepends:retpoline: Yintree: Yname: macsecvermagic: 6.2.0-rc6 SMP preempt mod_unloadsig_id: PKCS#7signer: Build time autogenerated kernel keysig_key: 49:E6:36:12:35:59:46:6D:1B:70:85:7F:BB:E9:F9:A1:F1:18:11:0Bsig_hashalgo: sha512signature: 90:9D:5D:AD:31:60:A1:48:A3:59:4A:51:9D:76:4F:5A:5F:06:DF:E7:64:A9:F0:77:AA:7C:20:95:04:C5:56:79:7B:AB:D5:F1:25:FD:1F:B7:52:42:E1:97:89:A4:60:41:74:1C:FE:BE:8B:DF:07:1B:5A:87:A1:1D:6E:50:C3:4F:9B:58:4B:BF:FC:BD:C8:A1:FB:13:E2:53:CF:17:08:C1:13:17:92:15:71:8B:1A:98:BB:EB:6B:8A:9D:EA:C9:71:C4:0D:94:6B:7E:B6:65:9C:C7:FE:18:7C:28:9C:E0:88:A4:A5:95:D2:56:67:9E:6D:9E:A7:51:D4:38:98:2E:55:E9:21:B1:AE:F7:B1:2D:D4:DB:7D:6F:92:DF:92:FF:05:43:EE:F2:80:B6:81:06:E8:9B:A6:D4:65:FD:DA:49:2B:DC:AB:49:B2:CF:0F:FD:F3:FD:FE:DA:08:BB:86:85:EC:96:72:86:E8:94:AD:FE:ED:E8:15:86:22:61:5F:A3:8F:78:1A:4D:BA:CA:DD:3D:32:F2:05:E0:C7:59:7D:0F:FA:DD:4D:10:88:F3:24:74:0C:81:E2:E4:76:B3:2D:5D:96:6B:75:59:C4:AD:F2:B5:AC:3A:BB:48:A5:BE:8C:3E:A5:F2:48:6C:0B:0C:BE:3F:B7:73:DB:E1:C7:20:6F:B7:C8:B3:2C:9F:49:92:46:AC:DB:AD:57:BD:FA:4D:5A:D6:BD:FA:C9:A3:1F:03:F3:58:BC:A2:D2:61:D7:33:F1:69:BC:B0:1F:BF:A0:9A:37:C9:BC:85:56:A5:A0:0E:56:0A:05:FA:E3:FE:36:2E:1E:E6:79:99:67:50:20:90:B1:FB:B7:08:F4:01:29:C2:F2:EB:26:C8:ED:43:09:47:93:54:6E:AC:C8:CF:8D:AE:45:44:07:68:A0:3F:3C:AC:7E:23:4B:1F:F1:B4:A3:B8:FF:D8:47:CC:96:59:E2:B9:D5:79:38:3A:8C:E3:01:3A:B6:8C:50:52:E4:2B:D8:81:8C:6F:0C:93:AB:C8:5F:F4:06:47:BD:21:70:71:BE:5C:DC:65:26:AE:0B:B9:4B:59:EF:2A:35:43:03:1D:D5:BA:3F:B3:77:E9:5C:33:D8:B6:E7:16:9F:D8:C2:EB:A8:5E:3B:35:A7:23:B8:6A:9A:89:9E:D9:E4:F7:B1:6D:F2:EA:03:66:CD:C2:20:68:41:B1:63:BB:B1:AF:77:9F:95:1D:50:BB:46:82:5F:AE:93:1E:24:25:F0:8C:11:77:6A:8F:C8:9C:7A:B0:80:00:92:FE:98:F5:64:1C:E1:17:77:0A:9F:8E:2A:55:95:36:97:19:A8:D5:BA:2D:39:ED:1F:8D:0C:3B:B3--------------- OUTPUT END ---------------PASSPASSOutput of 'ip macsec help':--------------- OUTPUT START ---------------Usage: ip macsec add DEV tx sa { 0..3 } [ OPTS ] key ID KEYip macsec set DEV tx sa { 0..3 } [ OPTS ]ip macsec del DEV tx sa { 0..3 }ip macsec add DEV rx SCI [ on | off ]ip macsec set DEV rx SCI [ on | off ]ip macsec del DEV rx SCIip macsec add DEV rx SCI sa { 0..3 } [ OPTS ] key ID KEYip macsec set DEV rx SCI sa { 0..3 } [ OPTS ]ip macsec del DEV rx SCI sa { 0..3 }ip macsec showip macsec show DEVip macsec offload DEV [ off | phy | mac ]where OPTS := [ pn <u32> | xpn <u64> ] [ salt SALT ] [ ssci <u32> ] [ on | off ]ID := 128-bit hex stringKEY := 128-bit or 256-bit hex stringSCI := { sci <u64> | port { 1..2^16-1 } address <lladdr> }SALT := 96-bit hex string--------------- OUTPUT END ---------------PASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSOutput of 'ip link show ttt':--------------- OUTPUT START ---------------81: ttt@dummy0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1468 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000link/ether 76:02:49:e4:e2:d8 brd ff:ff:ff:ff:ff:ff--------------- OUTPUT END ---------------PASSOutput of 'ip -d link show ttt':--------------- OUTPUT START ---------------81: ttt@dummy0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1468 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000link/ether 76:02:49:e4:e2:d8 brd ff:ff:ff:ff:ff:ff promiscuity 0 allmulti 0 minmtu 0 maxmtu 65535macsec sci 760249e4e2d80001 protect on cipher GCM-AES-128 icvlen 16 encodingsa 0 validate strict offload off encrypt off send_sci on end_station off scb off replay off addrgenmode eui64 numtxqueues 1 numrxqueues 1 gso_max_size 65536 gso_max_segs 65535 tso_max_size 65536 tso_max_segs 65535 gro_max_size 65536--------------- OUTPUT END ---------------PASSOutput of 'ip macsec show ttt':--------------- OUTPUT START ---------------81: ttt: protect on validate strict sc off sa off encrypt off send_sci on end_station off scb off replay offcipher suite: GCM-AES-128, using ICV length 16TXSC: 760249e4e2d80001 on SA 0offload: off--------------- OUTPUT END ---------------PASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPASSPhases fingerprint: qYP1zJ4NAsserts fingerprint: xlgG/dyb