2.15. test_acl_plugin_l2l3 module¶
ACL IRB Test Case HLD:
- config
- L2 MAC learning enabled in l2bd
- 2 routed interfaces untagged, bvi (Bridge Virtual Interface)
- 2 bridged interfaces in l2bd with bvi
- test
- sending ip4 eth pkts between routed interfaces
- 2 routed interfaces
- 2 bridged interfaces
- 64B, 512B, 1518B, 9200B (ether_size)
- burst of pkts per interface
- 257pkts per burst
- routed pkts hitting different FIB entries
- bridged pkts hitting different MAC entries
- verify
- all packets received correctly
-
class
test_acl_plugin_l2l3.TestIpIrb(methodName='runTest')¶ Bases:
framework.VppTestCaseIRB Test Case
-
apply_acl_ip46_both_directions_reflect(primary_is_bridged_to_routed, reflect_on_l2, is_ip6, add_eh)¶
-
apply_acl_ip46_bridged_to_routed(test_l2_deny, is_ip6, is_reflect, add_eh)¶
-
apply_acl_ip46_routed_to_bridged(test_l2_deny, is_ip6, is_reflect, add_eh)¶
-
apply_acl_ip46_x_to_y(bridged_to_routed, test_l2_deny, is_ip6, is_reflect, add_eh)¶ Apply the ACLs
-
create_acls_for_a_stream(stream_dict, test_l2_action, is_reflect)¶
-
create_stream(src_ip_if, dst_ip_if, reverse, packet_sizes, is_ip6, expect_blocked, expect_established, add_extension_header)¶
-
run_test_ip46_bridged_to_routed(test_l2_deny, is_ip6, is_reflect, add_eh)¶
-
run_test_ip46_bridged_to_routed_and_back(test_l2_action, is_ip6, add_eh)¶
-
run_test_ip46_routed_to_bridged(test_l2_deny, is_ip6, is_reflect, add_eh)¶
-
run_test_ip46_routed_to_bridged_and_back(test_l2_action, is_ip6, add_eh)¶
-
run_traffic_ip46_bridged_to_routed(test_l2_deny, is_ip6, is_reflect, is_established, add_eh)¶
-
run_traffic_ip46_routed_to_bridged(test_l2_deny, is_ip6, is_reflect, is_established, add_eh)¶
-
run_traffic_ip46_x_to_y(bridged_to_routed, test_l2_deny, is_ip6, is_reflect, is_established, add_eh)¶
-
classmethod
setUpClass()¶ - Create BD with MAC learning enabled and put interfaces to this BD.
- Configure IPv4 addresses on loopback interface and routed interface.
- Configure MAC address binding to IPv4 neighbors on loop0.
- Configure MAC address on pg2.
- Loopback BVI interface has remote hosts, one half of hosts are behind pg0 second behind pg1.
-
tearDown()¶ Run standard test teardown and log
show l2patch,show l2fib verbose,``show bridge-domain <bd_id> detail``,show ip arp.
-
test_0000_ip6_irb_1()¶ ACL plugin prepare
-
test_0001_ip6_irb_1()¶ ACL IPv6 routed -> bridged, L2 ACL deny
-
test_0002_ip6_irb_1()¶ ACL IPv6 routed -> bridged, L3 ACL deny
-
test_0003_ip4_irb_1()¶ ACL IPv4 routed -> bridged, L2 ACL deny
-
test_0004_ip4_irb_1()¶ ACL IPv4 routed -> bridged, L3 ACL deny
-
test_0005_ip6_irb_1()¶ ACL IPv6 bridged -> routed, L2 ACL deny
-
test_0006_ip6_irb_1()¶ ACL IPv6 bridged -> routed, L3 ACL deny
-
test_0007_ip6_irb_1()¶ ACL IPv4 bridged -> routed, L2 ACL deny
-
test_0008_ip6_irb_1()¶ ACL IPv4 bridged -> routed, L3 ACL deny
-
test_0101_ip6_irb_1()¶ ACL IPv6 routed -> bridged, L2 ACL permit+reflect
-
test_0102_ip6_irb_1()¶ ACL IPv6 bridged -> routed, L2 ACL permit+reflect
-
test_0103_ip6_irb_1()¶ ACL IPv4 routed -> bridged, L2 ACL permit+reflect
-
test_0104_ip6_irb_1()¶ ACL IPv4 bridged -> routed, L2 ACL permit+reflect
-
test_0111_ip6_irb_1()¶ ACL IPv6 routed -> bridged, L3 ACL permit+reflect
-
test_0112_ip6_irb_1()¶ ACL IPv6 bridged -> routed, L3 ACL permit+reflect
-
test_0113_ip6_irb_1()¶ ACL IPv4 routed -> bridged, L3 ACL permit+reflect
-
test_0114_ip6_irb_1()¶ ACL IPv4 bridged -> routed, L3 ACL permit+reflect
-
test_1001_ip6_irb_1()¶ ACL IPv6+EH routed -> bridged, L2 ACL deny
-
test_1002_ip6_irb_1()¶ ACL IPv6+EH routed -> bridged, L3 ACL deny
-
test_1005_ip6_irb_1()¶ ACL IPv6+EH bridged -> routed, L2 ACL deny
-
test_1006_ip6_irb_1()¶ ACL IPv6+EH bridged -> routed, L3 ACL deny
-
test_1101_ip6_irb_1()¶ ACL IPv6+EH routed -> bridged, L2 ACL permit+reflect
-
test_1102_ip6_irb_1()¶ ACL IPv6+EH bridged -> routed, L2 ACL permit+reflect
-
test_1111_ip6_irb_1()¶ ACL IPv6+EH routed -> bridged, L3 ACL permit+reflect
-
test_1112_ip6_irb_1()¶ ACL IPv6+EH bridged -> routed, L3 ACL permit+reflect
-
test_1201_ip6_irb_1()¶ ACL IPv4+MF routed -> bridged, L2 ACL deny
-
test_1202_ip6_irb_1()¶ ACL IPv4+MF routed -> bridged, L3 ACL deny
-
test_1205_ip6_irb_1()¶ ACL IPv4+MF bridged -> routed, L2 ACL deny
-
test_1206_ip6_irb_1()¶ ACL IPv4+MF bridged -> routed, L3 ACL deny
-
test_1301_ip6_irb_1()¶ ACL IPv4+MF routed -> bridged, L2 ACL permit+reflect
-
test_1302_ip6_irb_1()¶ ACL IPv4+MF bridged -> routed, L2 ACL permit+reflect
-
test_1311_ip6_irb_1()¶ ACL IPv4+MF routed -> bridged, L3 ACL permit+reflect
-
test_1312_ip6_irb_1()¶ ACL IPv4+MF bridged -> routed, L3 ACL permit+reflect
-
verify_capture(dst_ip_if, src_ip_if, capture, reverse)¶
-