smoketest: ipsec: T4126: verify configured priority

1 files changed, 13 insertions, 1 deletions

diff --git a/smoketest/scripts/cli/test_vpn_ipsec.py b/smoketest/scripts/cli/test_vpn_ipsec.py
index 59ce0a84f..1433c7329 100755
--- a/smoketest/scripts/cli/test_vpn_ipsec.py
+++ b/smoketest/scripts/cli/test_vpn_ipsec.py
@@ -170,6 +170,7 @@ class TestVPNIPsec(VyOSUnitTestSHIM.TestCase):
 
         # Site to site
         local_address = '192.0.2.10'
+        priority = '20'
         peer_base_path = base_path + ['site-to-site', 'peer', peer_ip]
 
         self.cli_set(peer_base_path + ['authentication', 'mode', 'pre-shared-secret'])
@@ -185,6 +186,10 @@ class TestVPNIPsec(VyOSUnitTestSHIM.TestCase):
         self.cli_set(peer_base_path + ['tunnel', '1', 'remote', 'prefix', '172.17.11.0/24'])
         self.cli_set(peer_base_path + ['tunnel', '1', 'remote', 'port', '443'])
 
+        self.cli_set(peer_base_path + ['tunnel', '2', 'local', 'prefix', '10.1.0.0/16'])
+        self.cli_set(peer_base_path + ['tunnel', '2', 'remote', 'prefix', '10.2.0.0/16'])
+        self.cli_set(peer_base_path + ['tunnel', '2', 'priority', priority])
+
         self.cli_commit()
 
         # Verify strongSwan configuration
@@ -199,8 +204,15 @@ class TestVPNIPsec(VyOSUnitTestSHIM.TestCase):
             f'local_addrs = {local_address} # dhcp:no',
             f'remote_addrs = {peer_ip}',
             f'mode = tunnel',
+            f'peer_{peer_ip.replace(".","-")}_tunnel_1',
             f'local_ts = 172.16.10.0/24[tcp/443],172.16.11.0/24[tcp/443]',
-            f'remote_ts = 172.17.10.0/24[tcp/443],172.17.11.0/24[tcp/443]'
+            f'remote_ts = 172.17.10.0/24[tcp/443],172.17.11.0/24[tcp/443]',
+            f'mode = tunnel',
+            f'peer_{peer_ip.replace(".","-")}_tunnel_2',
+            f'local_ts = 10.1.0.0/16',
+            f'remote_ts = 10.2.0.0/16',
+            f'priority = {priority}',
+            f'mode = tunnel',
         ]
         for line in swanctl_conf_lines:
             self.assertIn(line, swanctl_conf)