FD.io VPP  v20.09-64-g4f7b92f0a
Vector Packet Processing
ipsec_cli.c File Reference
+ Include dependency graph for ipsec_cli.c:

Go to the source code of this file.

Functions

static clib_error_tset_interface_spd_command_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tipsec_sa_add_del_command_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tipsec_spd_add_del_command_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tipsec_policy_add_del_command_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static void ipsec_sa_show_all (vlib_main_t *vm, ipsec_main_t *im, u8 detail)
 
static void ipsec_spd_show_all (vlib_main_t *vm, ipsec_main_t *im)
 
static void ipsec_spd_bindings_show_all (vlib_main_t *vm, ipsec_main_t *im)
 
static walk_rc_t ipsec_tun_protect_show_one (index_t itpi, void *ctx)
 
static void ipsec_tunnel_show_all (vlib_main_t *vm)
 
static clib_error_tshow_ipsec_command_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tshow_ipsec_sa_command_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tclear_ipsec_sa_command_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tshow_ipsec_spd_command_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tshow_ipsec_tunnel_command_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tipsec_show_backends_command_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tipsec_select_backend_command_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tclear_ipsec_counters_command_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static u32 ipsec_tun_mk_local_sa_id (u32 ti)
 
static u32 ipsec_tun_mk_remote_sa_id (u32 ti)
 
static clib_error_tcreate_ipsec_tunnel_command_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tipsec_tun_protect_cmd (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tipsec_tun_protect_show (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tipsec_tun_protect_hash_show (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
clib_error_tipsec_cli_init (vlib_main_t *vm)
 
static clib_error_tset_async_mode_command_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 

Variables

static vlib_cli_command_t set_interface_spd_command
 (constructor) VLIB_CLI_COMMAND (set_interface_spd_command) More...
 
static vlib_cli_command_t ipsec_sa_add_del_command
 (constructor) VLIB_CLI_COMMAND (ipsec_sa_add_del_command) More...
 
static vlib_cli_command_t ipsec_spd_add_del_command
 (constructor) VLIB_CLI_COMMAND (ipsec_spd_add_del_command) More...
 
static vlib_cli_command_t ipsec_policy_add_del_command
 (constructor) VLIB_CLI_COMMAND (ipsec_policy_add_del_command) More...
 
static vlib_cli_command_t show_ipsec_command
 (constructor) VLIB_CLI_COMMAND (show_ipsec_command) More...
 
static vlib_cli_command_t show_ipsec_sa_command
 (constructor) VLIB_CLI_COMMAND (show_ipsec_sa_command) More...
 
static vlib_cli_command_t clear_ipsec_sa_command
 (constructor) VLIB_CLI_COMMAND (clear_ipsec_sa_command) More...
 
static vlib_cli_command_t show_ipsec_spd_command
 (constructor) VLIB_CLI_COMMAND (show_ipsec_spd_command) More...
 
static vlib_cli_command_t show_ipsec_tunnel_command
 (constructor) VLIB_CLI_COMMAND (show_ipsec_tunnel_command) More...
 
static vlib_cli_command_t ipsec_show_backends_command
 (constructor) VLIB_CLI_COMMAND (ipsec_show_backends_command) More...
 
static vlib_cli_command_t ipsec_select_backend_command
 (constructor) VLIB_CLI_COMMAND (ipsec_select_backend_command) More...
 
static vlib_cli_command_t clear_ipsec_counters_command
 (constructor) VLIB_CLI_COMMAND (clear_ipsec_counters_command) More...
 
static vlib_cli_command_t create_ipsec_tunnel_command
 (constructor) VLIB_CLI_COMMAND (create_ipsec_tunnel_command) More...
 
static vlib_cli_command_t ipsec_tun_protect_cmd_node
 Protect tunnel with IPSEC. More...
 
static vlib_cli_command_t ipsec_tun_protect_show_node
 show IPSEC tunnel protection More...
 
static vlib_cli_command_t ipsec_tun_protect_hash_show_node
 show IPSEC tunnel protection hash tables More...
 
static vlib_cli_command_t set_async_mode_command
 (constructor) VLIB_CLI_COMMAND (set_async_mode_command) More...
 

Function Documentation

◆ clear_ipsec_counters_command_fn()

static clib_error_t* clear_ipsec_counters_command_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 765 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ clear_ipsec_sa_command_fn()

static clib_error_t* clear_ipsec_sa_command_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 527 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ create_ipsec_tunnel_command_fn()

static clib_error_t* create_ipsec_tunnel_command_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 796 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ ipsec_cli_init()

clib_error_t* ipsec_cli_init ( vlib_main_t vm)

Definition at line 1107 of file ipsec_cli.c.

+ Here is the caller graph for this function:

◆ ipsec_policy_add_del_command_fn()

static clib_error_t* ipsec_policy_add_del_command_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 278 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ ipsec_sa_add_del_command_fn()

static clib_error_t* ipsec_sa_add_del_command_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 84 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ ipsec_sa_show_all()

static void ipsec_sa_show_all ( vlib_main_t vm,
ipsec_main_t im,
u8  detail 
)
static

Definition at line 418 of file ipsec_cli.c.

+ Here is the caller graph for this function:

◆ ipsec_select_backend_command_fn()

static clib_error_t* ipsec_select_backend_command_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 696 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ ipsec_show_backends_command_fn()

static clib_error_t* ipsec_show_backends_command_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 629 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ ipsec_spd_add_del_command_fn()

static clib_error_t* ipsec_spd_add_del_command_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 225 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ ipsec_spd_bindings_show_all()

static void ipsec_spd_bindings_show_all ( vlib_main_t vm,
ipsec_main_t im 
)
static

Definition at line 443 of file ipsec_cli.c.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ ipsec_spd_show_all()

static void ipsec_spd_show_all ( vlib_main_t vm,
ipsec_main_t im 
)
static

Definition at line 431 of file ipsec_cli.c.

+ Here is the caller graph for this function:

◆ ipsec_tun_mk_local_sa_id()

static u32 ipsec_tun_mk_local_sa_id ( u32  ti)
static

Definition at line 784 of file ipsec_cli.c.

+ Here is the caller graph for this function:

◆ ipsec_tun_mk_remote_sa_id()

static u32 ipsec_tun_mk_remote_sa_id ( u32  ti)
static

Definition at line 790 of file ipsec_cli.c.

+ Here is the caller graph for this function:

◆ ipsec_tun_protect_cmd()

static clib_error_t* ipsec_tun_protect_cmd ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 977 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ ipsec_tun_protect_hash_show()

static clib_error_t* ipsec_tun_protect_hash_show ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 1055 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ ipsec_tun_protect_show()

static clib_error_t* ipsec_tun_protect_show ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 1034 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ ipsec_tun_protect_show_one()

static walk_rc_t ipsec_tun_protect_show_one ( index_t  itpi,
void *  ctx 
)
static

Definition at line 461 of file ipsec_cli.c.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ ipsec_tunnel_show_all()

static void ipsec_tunnel_show_all ( vlib_main_t vm)
static

Definition at line 469 of file ipsec_cli.c.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ set_async_mode_command_fn()

static clib_error_t* set_async_mode_command_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 1115 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ set_interface_spd_command_fn()

static clib_error_t* set_interface_spd_command_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 29 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ show_ipsec_command_fn()

static clib_error_t* show_ipsec_command_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 475 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ show_ipsec_sa_command_fn()

static clib_error_t* show_ipsec_sa_command_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 500 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ show_ipsec_spd_command_fn()

static clib_error_t* show_ipsec_spd_command_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 575 of file ipsec_cli.c.

+ Here is the call graph for this function:

◆ show_ipsec_tunnel_command_fn()

static clib_error_t* show_ipsec_tunnel_command_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 611 of file ipsec_cli.c.

+ Here is the call graph for this function:

Variable Documentation

◆ clear_ipsec_counters_command

vlib_cli_command_t clear_ipsec_counters_command
static
Initial value:
= {
.path = "clear ipsec counters",
.short_help = "clear ipsec counters",
}
static clib_error_t * clear_ipsec_counters_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:765

(constructor) VLIB_CLI_COMMAND (clear_ipsec_counters_command)

Definition at line 776 of file ipsec_cli.c.

◆ clear_ipsec_sa_command

vlib_cli_command_t clear_ipsec_sa_command
static
Initial value:
= {
.path = "clear ipsec sa",
.short_help = "clear ipsec sa [index]",
}
static clib_error_t * clear_ipsec_sa_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:527

(constructor) VLIB_CLI_COMMAND (clear_ipsec_sa_command)

Definition at line 567 of file ipsec_cli.c.

◆ create_ipsec_tunnel_command

vlib_cli_command_t create_ipsec_tunnel_command
static
Initial value:
= {
.path = "create ipsec tunnel",
.short_help = "create ipsec tunnel local-ip <addr> local-spi <spi> "
"remote-ip <addr> remote-spi <spi> [instance <inst_num>] [udp-encap] [use-esn] [use-anti-replay] "
"[tx-table <table-id>]",
}
static clib_error_t * create_ipsec_tunnel_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:796

(constructor) VLIB_CLI_COMMAND (create_ipsec_tunnel_command)

Definition at line 967 of file ipsec_cli.c.

◆ ipsec_policy_add_del_command

vlib_cli_command_t ipsec_policy_add_del_command
static
Initial value:
= {
.path = "ipsec policy",
.short_help =
"ipsec policy [add|del] spd <id> priority <n> ",
}
static clib_error_t * ipsec_policy_add_del_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:278

(constructor) VLIB_CLI_COMMAND (ipsec_policy_add_del_command)

Definition at line 409 of file ipsec_cli.c.

◆ ipsec_sa_add_del_command

vlib_cli_command_t ipsec_sa_add_del_command
static
Initial value:
= {
.path = "ipsec sa",
.short_help =
"ipsec sa [add|del]",
}
static clib_error_t * ipsec_sa_add_del_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:84

(constructor) VLIB_CLI_COMMAND (ipsec_sa_add_del_command)

Definition at line 216 of file ipsec_cli.c.

◆ ipsec_select_backend_command

vlib_cli_command_t ipsec_select_backend_command
static
Initial value:
= {
.path = "ipsec select backend",
.short_help = "ipsec select backend <ah|esp> <backend index>",
}
static clib_error_t * ipsec_select_backend_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:696

(constructor) VLIB_CLI_COMMAND (ipsec_select_backend_command)

Definition at line 756 of file ipsec_cli.c.

◆ ipsec_show_backends_command

vlib_cli_command_t ipsec_show_backends_command
static
Initial value:
= {
.path = "show ipsec backends",
.short_help = "show ipsec backends",
}
static clib_error_t * ipsec_show_backends_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:629

(constructor) VLIB_CLI_COMMAND (ipsec_show_backends_command)

Definition at line 688 of file ipsec_cli.c.

◆ ipsec_spd_add_del_command

vlib_cli_command_t ipsec_spd_add_del_command
static
Initial value:
= {
.path = "ipsec spd",
.short_help =
"ipsec spd [add|del] <id>",
}
static clib_error_t * ipsec_spd_add_del_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:225

(constructor) VLIB_CLI_COMMAND (ipsec_spd_add_del_command)

Definition at line 268 of file ipsec_cli.c.

◆ ipsec_tun_protect_cmd_node

vlib_cli_command_t ipsec_tun_protect_cmd_node
static
Initial value:
=
{
.path = "ipsec tunnel protect",
.function = ipsec_tun_protect_cmd,
.short_help = "ipsec tunnel protect <interface> input-sa <SA> output-sa <SA>",
}
static clib_error_t * ipsec_tun_protect_cmd(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:977

Protect tunnel with IPSEC.

(constructor) VLIB_CLI_COMMAND (ipsec_tun_protect_cmd_node)

Definition at line 1023 of file ipsec_cli.c.

◆ ipsec_tun_protect_hash_show_node

vlib_cli_command_t ipsec_tun_protect_hash_show_node
static
Initial value:
=
{
.path = "show ipsec protect-hash",
.short_help = "show ipsec protect-hash",
}
static clib_error_t * ipsec_tun_protect_hash_show(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:1055

show IPSEC tunnel protection hash tables

(constructor) VLIB_CLI_COMMAND (ipsec_tun_protect_hash_show_node)

Definition at line 1098 of file ipsec_cli.c.

◆ ipsec_tun_protect_show_node

vlib_cli_command_t ipsec_tun_protect_show_node
static
Initial value:
=
{
.path = "show ipsec protect",
.short_help = "show ipsec protect",
}
static clib_error_t * ipsec_tun_protect_show(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:1034

show IPSEC tunnel protection

(constructor) VLIB_CLI_COMMAND (ipsec_tun_protect_show_node)

Definition at line 1046 of file ipsec_cli.c.

◆ set_async_mode_command

vlib_cli_command_t set_async_mode_command
static
Initial value:
= {
.path = "set ipsec async mode",
.short_help = "set ipsec async mode on|off",
}
static clib_error_t * set_async_mode_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:1115

(constructor) VLIB_CLI_COMMAND (set_async_mode_command)

Definition at line 1143 of file ipsec_cli.c.

◆ set_interface_spd_command

vlib_cli_command_t set_interface_spd_command
static
Initial value:
= {
.path = "set interface ipsec spd",
.short_help =
"set interface ipsec spd <int> <id>",
}
static clib_error_t * set_interface_spd_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:29

(constructor) VLIB_CLI_COMMAND (set_interface_spd_command)

Definition at line 75 of file ipsec_cli.c.

◆ show_ipsec_command

vlib_cli_command_t show_ipsec_command
static
Initial value:
= {
.path = "show ipsec all",
.short_help = "show ipsec all",
.function = show_ipsec_command_fn,
}
static clib_error_t * show_ipsec_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:475

(constructor) VLIB_CLI_COMMAND (show_ipsec_command)

Definition at line 492 of file ipsec_cli.c.

◆ show_ipsec_sa_command

vlib_cli_command_t show_ipsec_sa_command
static
Initial value:
= {
.path = "show ipsec sa",
.short_help = "show ipsec sa [index]",
}
static clib_error_t * show_ipsec_sa_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:500

(constructor) VLIB_CLI_COMMAND (show_ipsec_sa_command)

Definition at line 561 of file ipsec_cli.c.

◆ show_ipsec_spd_command

vlib_cli_command_t show_ipsec_spd_command
static
Initial value:
= {
.path = "show ipsec spd",
.short_help = "show ipsec spd [index]",
}
static clib_error_t * show_ipsec_spd_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:575

(constructor) VLIB_CLI_COMMAND (show_ipsec_spd_command)

Definition at line 603 of file ipsec_cli.c.

◆ show_ipsec_tunnel_command

vlib_cli_command_t show_ipsec_tunnel_command
static
Initial value:
= {
.path = "show ipsec tunnel",
.short_help = "show ipsec tunnel",
}
static clib_error_t * show_ipsec_tunnel_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: ipsec_cli.c:611

(constructor) VLIB_CLI_COMMAND (show_ipsec_tunnel_command)

Definition at line 621 of file ipsec_cli.c.