Freescale Semiconductor Document Number: VQSSIMICSQSG Quick Start Guide Rev. 0, 06/2009 VortiQa Software for Service Provider SIMICs Demo Quick Start Guide This document provides the instructions to install and run the Fast Path UTM application on a simulated p4080 platform running on a X86 Host. The P4080 in this demo is configured to run the control plane in one partition (core 0) and the data plane code in three partitions (cores 1, 2 and 3). The remaining four partitions are unused. Contents 1 Terminology... 2 2 Prerequisites... 2 3 Installation of the Demo Package... 3 4 Quick Guide to Start the Application... 3 5 Revision History... 19 This document does not cover the SIMICS and LTIB installation instructions. Freescale Semiconductor, Inc., 2009. All rights reserved.
Table 1. System Requirements Recommended Host Platfom Intel Core 2 QUAD CPU Q9300 @ 2.50GHz, Minimum memory 4 GB, Minimum three 1 Gb NIC interfaces Operating System UbuntuVersion 8.04 (64 bit) SIMICS Simics Base 4.0.23,P4080-R1 4.0.pre8 LTIB 8.1.2(1.393.2.3) 3 to 4 Vlan tag capable switches, Minimum 4 High End PCs, Minimum Test Equipment two large size monitors. SDK 1.0 B 1 Terminology Target Linux The Linux that runs on P4080 platform. igateway Fast Path UTM control plane applications runs on this Linux and data plane applications are started through this Linux. LWE application Application that runs on the Light weight Executive, the dataplane part of the FPUTM runs on the LWE partitions. Simics Host PC running ubuntu 8.04 (64 Bit). The p4080 simulator tool Simics, runs on this host machine. This machine should be capable of connecting to a FlexLm server that maintains and serves SIMICS licenses. Ltib Install path Path where the ltib.iso was installed on the Simics host. Generally ltib install Path is /home/b2xxxx/ltib/ltib-e500mc-20080924. 2 Prerequisites SIMICS and LTIB should have been already installed on the Simics host. Bridge Utilities The test setup requires bridging capabilities on the Simics Host. Therefore the Bridge control utility, brctl has to be available on the simics host. To check if the bridge utilities are available type, sudo brctl show on the Simics Host. If the utility has been already installed the display is as below b22174@intoto-desktop:~$ sudo brctl show bridge name bridge id STP enabled interfaces 2 Freescale Semiconductor
If this utility is not present you will see an error that says command not found. In such a case, install the package by typing sudo apt-get install bridge-utils on the shell of the Simics Host. 3 Installation of the Demo Package Copy IgwDemoPkg_1.00.00D_MM-DD-YYYY.tgz into ltib install path. (Generally ltib install Path is /home/b2xxxx/ltib/ltib-e500mc-20080924.) CAUTION This tar archive overwrites the list of files mentioned below. rootfs/boot/vmlinux.stripped rootfs/boot/hv-8p-lnx-lwe.dtb rootfs.ext2.gz rootfs/boot/u-boot.bin rootfs/boot/hv.uimage bin/s4_hv-8p-lnx-lwe.simics bin/s4_boot.simics bin/xtel.sh rootfs/igateway-fputm/ startup.sh igwstart.sh Target linux image device tree image u-boot image hypervisor image simics script simics script terminal server image igateway binaries Simics host demo start script Script to start Simics. This is executed with in startup.sh Backup the above files if required. Untar IgwDemoPkg_1.00.00D_MM-DD-YYYY.tgz. This package contains the files to start FPUTM application and the scripts to configure Firewall and VPN. sudo tar zxvf IgwDemoPkg_1.00.00D_MM-DD-YYYY.tgz 4 Quick Guide to Start the Application The following two steps are the only ones required to bring up the igateway FPUTM application: Step 1: Start the Simics application cd /home/b2xxxx/ltib/ltib-e500mc-20080924./startup.sh Step 2: Start igateway FPUTM Application start Freescale Semiconductor 3
At the login prompt of the target Linux shell,, enter root as user name and root as password. cd /igateway-fputm./load.sh 7 00:11:22:33:44:55 The following subsection provides a detailed explanation. 4.1 Running the igateway FPUTM Application Open a terminal window on the Simics Host. Change the directory ltib install path cd /home/b2xxxx/ltib/ltib-e500mc-20080924 run startup.sh This script creates 10 TUN/TAP interfaces, fman0_eth0 thru fman0_eth4 and fman1_eth0 thru fman1_eth4. The script also creates three bridges br0, br1, and br2. These bridge interfaces connect the Target application to the real world, as follows: Bridge br0 bridges ports fman0_eth1 and eth1 Bridge br1 bridges ports fman0_eth2 and eth2 Bridge br2 bridges ports fman0_eth3 and eth3 physical ports. NOTE As eth1, eth2 and eth3 ports of the Simics host are bridged, applications other than simics that might be running on the host and using these interfaces will loose connectivity. 7 xterm windows are spawned one for each LWE partition. Two serial consoles appear on UART0 and UART2. The Hypervisor image running on all cores uses UART0 for its console. The control plane Target Linux image uses UART2 for its console. The two UART consoles overlap each other; you can drag these windows apart and away from the xterm windows to have a good view of all of the windows simultaneously. The following is a sample screen shot after the startup.sh is executed. 4 Freescale Semiconductor
The terminal on which the startup script was executed becomes the simics console. To verify if the script executed correctly and to examine if all of the interfaces required are available. ifconfig -s Among other interfaces on the system you should see 10 tun/tap interfaces with names fman0_eth0 to fman0_eth4 and fman1_eth0 to fman1_eth4. and both bridges br0 and br1 Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg br0 1500 0 27 0 0 0 6 0 0 0 BMRU br1 1500 0 273 0 0 0 6 0 0 0 BMRU br2 1500 0 273 0 0 0 6 0 0 0 BMRU eth0 1500 0 153 0 0 0 154 0 0 0 BMRU eth1 1500 0 160 0 0 0 161 0 0 0 B MRU eth2 1500 0 0 0 0 0 0 0 0 0 BMU eth3 1500 0 0 0 0 0 0 0 0 0 BMU eth4 1500 0 0 0 0 0 0 0 0 0 BMU eth5 1500 0 3050 0 0 0 1464 0 0 0 BMRU eth6 1500 0 0 0 0 0 0 0 0 0 BMU eth7 1500 0 0 0 0 0 0 0 0 0 B MU fman0_eth0 1500 0 39 0 0 0 40 0 27 0 BMRU Freescale Semiconductor 5
fman0_eth1 1500 0 151 0 0 0 162 0 26 0 BMRU fman0_eth2 1500 0 154 0 0 0 169 0 27 0 BMRU fman0_eth3 1500 0 0 0 0 0 10 0 26 0 BMRU fman0_eth4 1500 0 0 0 0 0 10 0 26 0 BMRU fman1_eth0 1500 0 0 0 0 0 10 0 26 0 BMRU fman1_eth1 1500 0 0 0 0 0 9 0 28 0 BMRU fman1_eth2 1500 0 0 0 0 0 10 0 26 0 BMRU fman1_eth3 1500 0 0 0 0 0 9 0 28 0 BMRU fman1_eth4 1500 0 0 0 0 0 9 0 28 0 BMRU lo 16436 0 16968 0 0 0 16968 0 0 0 L RU 4.2 Stopping the Simics Application On the Simics console type <Ctrl> C. You will be at the simics prompt; type exit to exit the demo. 4.3 Starting the FPUTM Application Login on the target Linux window with user name as root and password as root. Change dir to igateway-fputm. cd /igateway-fputm From the target Linux prompt type./load.sh 7 00:11:22:33:44:55 This script starts the FPUTM DP and CP Applications. load.sh scripts accepts two parameters. The first is the core mask which is a bitmap of data plane cores that are to be included for the DP application. For example, if cores 1 and 2 are to be used the coremask value will be 6 and for 0 thru 2 coremask would be 7. The second parameter takes the Base MAC address of the pseudo Ethernet interfaces created by igateway CP application. This Mac address is assigned to the first pseudo Ethernet interface on the target Linux and the remaining interfaces get the incremented value of the last octet. This value should be different for each igateway-fputm application in order to avoid MAC address conflicts with in the test network. 6 Freescale Semiconductor
After you see the line Initial loading completed message on the target Linux window start igateway s command line interface by typing./cli Freescale Semiconductor 7
If you intend to build your own version of Target Linux, the following changes have to be made for Target Linux. This Step is not required if you plan to install and run the demo binary. The following modules from the Target Linux kernel should be disabled Freescale Datapath(Qman/Bman) support Freescale Datapath Frame Manager Ethernet. Module Versioning support. How to check and disable these modules from the Target Linux?./ltib configure This will display a screen as shown below. 8 Freescale Semiconductor
Now from the above wizard, grep for configure the kernel and press space bar and <EXIT> Freescale Semiconductor 9
Select yes After the above step lot of messages appear on the terminal and one more screen appears as 10 Freescale Semiconductor
Scroll down and select Device Drivers Find hardware Queue support and press select Freescale Semiconductor 11
Unselect the Freescale datapath (Qman/Bman) support and <EXIT> 12 Freescale Semiconductor
Then Find the Network Device support under Device Drivers Freescale Semiconductor 13
Find the Ethernet (10000 Mbit) 14 Freescale Semiconductor
Find Freescale Data path Frame manager Ethernet and unselect <EXIT> <EXIT> <EXIT> Freescale Semiconductor 15
4.3.1 Removing Versioning Support Under kernel configuration find Enable loadable module support 16 Freescale Semiconductor
Unselect Module versioning support <EXIT> <EXIT doubt need to be clarified >> Freescale Semiconductor 17
Now kernel configuration has changed,so after the above step kernel starts preparing a build with new configuration and at the end it as shown below Build, install and deploy the kernel #cd /home/b2xxxx/ltib/ltib-e500mc-20080924./ltib m scbuild p kernel./ltib m scdeploy p kernel 4.4 Demo Scripts Firewall and VPN scripts are provided in the binary package under two directories named fw-scripts and vpn-scripts to verify the functionality. These scripts are available on the p4080 target. On the UART2 console, typing the following takes to these script directories. /#cd /igateway-fputm/demo-scripts /igateway-fputm/demo-scripts#ls fw-scripts vpn-scripts Various use cases defined in the FPUTM_On_P4080_Demo_Use_Cases_vX.doc, are mapped to these scripts. 18 Freescale Semiconductor
5 Revision History Table 2 summarizes revisions to this document. Table 2. Revision History Revision Comments 0 Initial release Freescale Semiconductor 19
How to Reach Us: Home Page: www.freescale.com Web Support: http://www.freescale.com/support USA/Europe or Locations Not Listed: Freescale Semiconductor, Inc. Technical Information Center, EL516 2100 East Elliot Road Tempe, Arizona 85284 1-800-521-6274 or +1-480-768-2130 www.freescale.com/support Europe, Middle East, and Africa: Freescale Halbleiter Deutschland GmbH Technical Information Center Schatzbogen 7 81829 Muenchen, Germany +44 1296 380 456 (English) +46 8 52200080 (English) +49 89 92103 559 (German) +33 1 69 35 48 48 (French) www.freescale.com/support Japan: Freescale Semiconductor Japan Ltd. Headquarters ARCO Tower 15F 1-8-1, Shimo-Meguro, Meguro-ku, Tokyo 153-0064 Japan 0120 191014 or +81 3 5437 9125 support.japan@freescale.com Information in this document is provided solely to enable system and software implementers to use Freescale Semiconductor products. There are no express or implied copyright licenses granted hereunder to design or fabricate any integrated circuits or integrated circuits based on the information in this document. Freescale Semiconductor reserves the right to make changes without further notice to any products herein. Freescale Semiconductor makes no warranty, representation or guarantee regarding the suitability of its products for any particular purpose, nor does Freescale Semiconductor assume any liability arising out of the application or use of any product or circuit, and specifically disclaims any and all liability, including without limitation consequential or incidental damages. Typical parameters that may be provided in Freescale Semiconductor data sheets and/or specifications can and do vary in different applications and actual performance may vary over time. All operating parameters, including Typicals, must be validated for each customer application by customer s technical experts. Freescale Semiconductor does not convey any license under its patent rights nor the rights of others. Freescale Semiconductor products are not designed, intended, or authorized for use as components in systems intended for surgical implant into the body, or other applications intended to support or sustain life, or for any other application in which the failure of the Freescale Semiconductor product could create a situation where personal injury or death may occur. Should Buyer purchase or use Freescale Semiconductor products for any such unintended or unauthorized application, Buyer shall indemnify and hold Freescale Semiconductor and its officers, employees, subsidiaries, affiliates, and distributors harmless against all claims, costs, damages, and expenses, and reasonable attorney fees arising out of, directly or indirectly, any claim of personal injury or death associated with such unintended or unauthorized use, even if such claim alleges that Freescale Semiconductor was negligent regarding the design or manufacture of the part. Freescale, the Freescale logo, PowerQUICC, QorIQ,and VortiQa are trademarks or registered trademarks of Freescale Semiconductor, Inc. in the U.S. and other countries. All other product or service names are the property of their respective owners. Freescale Semiconductor, Inc. 2009. All rights reserved. Asia/Pacific: Freescale Semiconductor China Ltd. Exchange Building 23F No. 118 Jianguo Road Chaoyang District Beijing 100022 China +86 10 5879 8000 support.asia@freescale.com For Literature Requests Only: Freescale Semiconductor Literature Distribution Center 1-800-441-2447 or +303-675-2140 Fax: +303-675-2150 LDCForFreescaleSemiconductor@hibbertgroup.com Document Number: VQSSIMICSQSG Rev. 0 06/2009