• State Resolved
  • Locked Locked
  • Replies 4 replies
  • Subscribers 98 subscribers
  • Views 739 views
  • Users 0 members are here
Support feedback
Options
Options
Related

This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

IPSec example project - SA_UnitTest_K2KBiosTestProject

olcay davut
Intellectual 560 points

Hi everyone,

I am using IPSec ESP TEST_1_1 of SA_UnitTest_K2KBiosTestProject test project.

I try to observe ESP packets from wireshark. I run the test and I see that `ESP TEST PASSED`  but when I check esp packets from wireshark there is no any esp packets. I know that, after SA encryption, SA sends packet to SGMII. 

Should I set any define or variable for send packet to SGMII ?

Thanks

  • 0
    TI__Expert 5805 points
    Hi my name is Javier and I will be looking into this issue. Please allow me until Monday to provide a more relevant response.

    Kind regards,
    Javier
  • 0 in reply to Javier Malave-Bonet
    TI__Expert 5805 points

    The key to this will be under sauCreateIpsec (@testconn.c) you will see that route info is set to forward data to a general purpose queue after encryption and decryption. You can further confirm this under sauConnPktTest (@tectconn.c) where the host software waits for a packet to arrive at DEST_QUEUE_PKT_TX after encryption and manually sends it to Q640 (i.e. PDSP0 ) for classification and eventually decryption.


    If you wish to see the packet in wireshark you will have to either change route info on sauCreateIpsec to send packet directly to Q648 (i.e. CPSW) after encryption which will require a change at sauConnPktTest to skip the encryption polling. Or you can manually send the packet to Q648 after encryption polling. Furthermore, you will have to ensure the packet loops back into the switch to PA for classification and decryption for the test to pass. The packet must loop back "as is". CPSW configuration and SGMII configuration is needed. You will have to set the ALE to bypass and send directed packets on egress or add the MAC addresses to the ALE table for appropriate forwarding of incoming and outgoing packets. An example of CPSW/SGMII/ALE (bypass) programming may be found under pa_emacExample.

    Kind regards,

    Javier

  • 0 in reply to Javier Malave-Bonet
    Intellectual 560 points

    Thanks

    I will try your advice and reply immediately.

  • 0 in reply to olcay davut
    Intellectual 560 points

    Thanks Javier

    I solved the problem thanks to your advice.