
NETKEY test for passthrough of a single port

A standard westnet-eastnet IPsec SA is established. A passthrough IPsec SA is
setup for port 7 with. Packets for port 7 SHOULD NOT be encrypted with IPsec.
Packets for port 222 SHOULD be encrypted with IPsec

This test case fails the policy checks within NETKEY. The passthrough connection
on west yields:

src 192.0.1.0/24 dst 192.0.2.0/24 proto tcp dport 7
	dir fwd priority 1768 ptype main
src 192.0.1.0/24 dst 192.0.2.0/24 proto tcp dport 7
	dir in priority 1768 ptype main
src 192.0.1.0/24 dst 192.0.2.0/24 proto tcp dport 7
	dir out priority 1768 ptype main

West should yield:

src 192.0.2.0/24 dst 192.0.1.0/24 proto tcp sport 7
	dir fwd priority 1704 ptype main
src 192.0.2.0/24 dst 192.0.1.0/24 proto tcp sport 7
	dir in priority 1704 ptype main
src 192.0.1.0/24 dst 192.0.2.0/24 proto tcp dport 7
	dir out priority 1704 ptype main

which was confirmed using no passthrough route and running the below on west:

ip xfrm policy add src 192.0.2.0/24 dst 192.0.1.0/24 proto tcp sport 7 dir fwd priority 1704 ptype main
ip xfrm policy add src 192.0.2.0/24 dst 192.0.1.0/24 proto tcp sport 7 dir  in priority 1704 ptype main
ip xfrm policy add src 192.0.1.0/24 dst 192.0.2.0/24 proto tcp dport 7 dir out priority 1704 ptype main
