mirror of
https://gitlab.freedesktop.org/NetworkManager/NetworkManager
synced 2024-09-06 09:04:55 +00:00
contrib: add macsec test script
This commit is contained in:
parent
d197c0626a
commit
c46627e1dc
102
contrib/scripts/test-macsec
Executable file
102
contrib/scripts/test-macsec
Executable file
|
@ -0,0 +1,102 @@
|
|||
#!/bin/sh
|
||||
|
||||
# Test for MACsec in PSK mode
|
||||
|
||||
if [ "$#" = 2 ]; then
|
||||
# DHCP helper
|
||||
dev=$1
|
||||
addr=$2
|
||||
net=${addr%.*}
|
||||
|
||||
while [ ! -d "/sys/class/net/$dev" ]; do
|
||||
sleep 1
|
||||
done
|
||||
|
||||
ip a add $addr/24 dev "$dev"
|
||||
|
||||
dnsmasq --conf-file --no-hosts --keep-in-foreground --listen-address=$addr \
|
||||
--dhcp-range=$net.250,$net.255,60m -i "$dev" \
|
||||
--bind-interface --except-interface=lo
|
||||
|
||||
exit 0
|
||||
fi
|
||||
|
||||
TMPDIR=$(mktemp -d /tmp/macsec-XXXXXX)
|
||||
ADDR=172.16.10.1
|
||||
MKA_CAK=00112233445566778899001122334455
|
||||
MKA_CKN=5544332211009988776655443322110055443322110099887766554433221100
|
||||
|
||||
trap 'rm -rf "$TMPDIR"; kill $(jobs -p)' EXIT
|
||||
|
||||
echo "* Setup..."
|
||||
|
||||
# Clean up
|
||||
ip netns del macsec-ns 2> /dev/null
|
||||
ip link del macsec-veth 2> /dev/null
|
||||
# Create namespace
|
||||
ip netns add macsec-ns
|
||||
# Create interfaces
|
||||
ip link add macsec-veth type veth peer name macsec-vethp
|
||||
# Move interfaces into namespace
|
||||
ip link set macsec-vethp netns macsec-ns
|
||||
# Bring up interfaces
|
||||
ip link set macsec-veth up
|
||||
ip -n macsec-ns link set macsec-vethp up
|
||||
|
||||
echo "* Start wpa_supplicant..."
|
||||
|
||||
cat <<EOF > $TMPDIR/wpa_supplicant.conf
|
||||
ctrl_interface=/var/run/hostapd1
|
||||
eapol_version=3
|
||||
ap_scan=0
|
||||
fast_reauth=1
|
||||
network={
|
||||
key_mgmt=NONE
|
||||
eapol_flags=0
|
||||
macsec_policy=1
|
||||
mka_cak=$MKA_CAK
|
||||
mka_ckn=$MKA_CKN
|
||||
}
|
||||
EOF
|
||||
ip netns exec macsec-ns wpa_supplicant \
|
||||
-c "$TMPDIR/wpa_supplicant.conf" -i macsec-vethp -Dmacsec_linux -dd > /dev/null 2>&1 &
|
||||
ip netns exec macsec-ns $0 macsec0 $ADDR > /dev/null 2>&1 &
|
||||
|
||||
echo "* Create connections..."
|
||||
|
||||
nmcli connection delete test-macsec+ test-veth+ > /dev/null 2>&1
|
||||
nmcli connection add type ethernet ifname macsec-veth con-name test-veth+ \
|
||||
ipv4.method disabled ipv6.method ignore
|
||||
nmcli connection add type macsec con-name test-macsec+ ifname macsec0 \
|
||||
connection.autoconnect no \
|
||||
macsec.parent macsec-veth macsec.mode psk \
|
||||
macsec.mka-cak $MKA_CAK \
|
||||
macsec.mka-cak-flags 0 \
|
||||
macsec.mka-ckn $MKA_CKN
|
||||
|
||||
echo "* Bring up connections..."
|
||||
nmcli connection up test-veth+
|
||||
nmcli connection up test-macsec+
|
||||
|
||||
echo "* Test connectivity..."
|
||||
ping $ADDR -c2 -q > /dev/null
|
||||
res=$?
|
||||
|
||||
echo "* Clean up..."
|
||||
|
||||
nmcli connection delete test-macsec+ test-veth+ > /dev/null 2>&1
|
||||
ip link del macsec-veth 2> /dev/null
|
||||
ip netns del macsec-ns 2> /dev/null
|
||||
|
||||
echo
|
||||
|
||||
if [ "$res" = 0 ]; then
|
||||
echo "Success"
|
||||
else
|
||||
echo "Failure"
|
||||
fi
|
||||
|
||||
exit $res
|
||||
|
||||
|
||||
|
Loading…
Reference in a new issue