From 5d352d7902019469d2f87aa8fc398af2de213dee Mon Sep 17 00:00:00 2001 From: Christian Breunig Date: Sat, 31 Oct 2026 14:44:57 +0100 Subject: smoketest: T9543: assign the local address in the ipsec reset test The reset test configured its peers with a local address that was not present on any interface, so starting the peer at commit relied on how charon handles a source address the router does not own. Assign the address to the interface IPsec is bound to and remove it again at the end of the test. --- smoketest/scripts/cli/test_vpn_ipsec.py | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'smoketest/scripts/cli') diff --git a/smoketest/scripts/cli/test_vpn_ipsec.py b/smoketest/scripts/cli/test_vpn_ipsec.py index 80d9c25c9..6672690b3 100755 --- a/smoketest/scripts/cli/test_vpn_ipsec.py +++ b/smoketest/scripts/cli/test_vpn_ipsec.py @@ -897,6 +897,11 @@ class TestVPNIPsec(VyOSUnitTestSHIM.TestCase): 'initiate', ) + # IPsec is bound to this interface in setUpClass() + self.cli_set( + ethernet_path + [interface, 'vif', vif, 'address', f'{local_address}/24'] + ) + psk_base_path = base_path + ['authentication', 'psk', connection_name] self.cli_set(psk_base_path + ['id', local_address]) self.cli_set(psk_base_path + ['id', peer_ip]) @@ -973,6 +978,8 @@ class TestVPNIPsec(VyOSUnitTestSHIM.TestCase): out = self.op_mode(['reset', 'vpn', 'ipsec', 'site-to-site', 'peer', name]) self.assertNotIn('initiate result', out) + self.cli_delete(ethernet_path + [interface, 'vif', vif, 'address']) + def test_dmvpn(self): ike_lifetime = '3600' esp_lifetime = '1800' -- cgit v1.2.3