2.49. test_nat module

class test_nat.MethodHolder(methodName='runTest')

Bases: framework.VppTestCase

NAT create capture and verify method holder

check_icmp_checksum(pkt)

Check ICMP checksum in IPv4 packet

Parameters:pkt – Packet to check ICMP checksum

check_icmp_errror_embedded(pkt)

Check ICMP error embeded packet checksum

Parameters:pkt – Packet to check ICMP error embeded packet checksum

check_icmpv6_checksum(pkt)

Check ICMPv6 checksum in IPv4 packet

Parameters:pkt – Packet to check ICMPv6 checksum

check_ip_checksum(pkt)

Check IP checksum of the packet

Parameters:pkt – Packet to check IP checksum

check_tcp_checksum(pkt)

Check TCP checksum in IP packet

Parameters:pkt – Packet to check TCP checksum

check_udp_checksum(pkt)

Check UDP checksum in IP packet

Parameters:pkt – Packet to check UDP checksum

compose_ip6(ip4, pref, plen)

Compose IPv4-embedded IPv6 addresses

Parameters:

• ip4 – IPv4 address
• pref – IPv6 prefix
• plen – IPv6 prefix length

Returns:

IPv4-embedded IPv6 addresses

create_stream_frag(src_if, dst, sport, dport, data)

Create fragmented packet stream

Parameters:

• src_if – Source interface
• dst – Destination IPv4 address
• sport – Source TCP port
• dport – Destination TCP port
• data – Payload data

Returns:

Fragmets

create_stream_frag_ip6(src_if, dst, sport, dport, data, pref=None, plen=0, frag_size=128)

Create fragmented packet stream

Parameters:

• src_if – Source interface
• dst – Destination IPv4 address
• sport – Source TCP port
• dport – Destination TCP port
• data – Payload data
• pref – NAT64 prefix
• plen – NAT64 prefix length
• fragsize – size of fragments

Returns:

Fragmets

create_stream_in(in_if, out_if, ttl=64)

Create packet stream for inside network

Parameters:

• in_if – Inside interface
• out_if – Outside interface
• ttl – TTL of generated packets

create_stream_in_ip6(in_if, out_if, hlim=64, pref=None, plen=0)

Create IPv6 packet stream for inside network

Parameters:

• in_if – Inside interface
• out_if – Outside interface
• ttl – Hop Limit of generated packets
• pref – NAT64 prefix
• plen – NAT64 prefix length

create_stream_out(out_if, dst_ip=None, ttl=64, use_inside_ports=False)

Create packet stream for outside network

Parameters:

• out_if – Outside interface
• dst_ip – Destination IP address (Default use global NAT address)
• ttl – TTL of generated packets
• use_inside_ports – Use inside NAT ports as destination ports instead of outside ports

reass_frags_and_verify(frags, src, dst)

Reassemble and verify fragmented packet

Parameters:

• frags – Captured fragments
• src – Source IPv4 address to verify
• dst – Destination IPv4 address to verify

Returns:

Reassembled IPv4 packet

reass_frags_and_verify_ip6(frags, src, dst)

Reassemble and verify fragmented packet

Parameters:

• frags – Captured fragments
• src – Source IPv6 address to verify
• dst – Destination IPv6 address to verify

Returns:

Reassembled IPv6 packet

classmethod setUpClass()

tearDown()

verify_capture_in(capture, in_if, packet_num=3)

Verify captured packets on inside network

Parameters:

• capture – Captured packets
• in_if – Inside interface
• packet_num – Expected number of packets (Default 3)

verify_capture_in_ip6(capture, src_ip, dst_ip, packet_num=3)

Verify captured IPv6 packets on inside network

Parameters:

• capture – Captured packets
• src_ip – Source IP
• dst_ip – Destination IP address
• packet_num – Expected number of packets (Default 3)

verify_capture_in_with_icmp_errors(capture, in_if, packet_num=3, icmp_type=11)

Verify captured packets with ICMP errors on inside network

Parameters:

• capture – Captured packets
• in_if – Inside interface
• packet_num – Expected number of packets (Default 3)
• icmp_type – Type of error ICMP packet we are expecting (Default 11)

verify_capture_no_translation(capture, ingress_if, egress_if)

Verify captured packet that don’t have to be translated

Parameters:

• capture – Captured packets
• ingress_if – Ingress interface
• egress_if – Egress interface

verify_capture_out(capture, nat_ip=None, same_port=False, packet_num=3, dst_ip=None)

Verify captured packets on outside network

Parameters:

• capture – Captured packets
• nat_ip – Translated IP address (Default use global NAT address)
• same_port – Sorce port number is not translated (Default False)
• packet_num – Expected number of packets (Default 3)
• dst_ip – Destination IP address (Default do not verify)

verify_capture_out_with_icmp_errors(capture, src_ip=None, packet_num=3, icmp_type=11)

Verify captured packets with ICMP errors on outside network

Parameters:

• capture – Captured packets
• src_ip – Translated IP address or IP address of VPP (Default use global NAT address)
• packet_num – Expected number of packets (Default 3)
• icmp_type – Type of error ICMP packet we are expecting (Default 11)

verify_ipfix_addr_exhausted(data)

Verify IPFIX NAT addresses event

Parameters:data – Decoded IPFIX data records

verify_ipfix_nat44_ses(data)

Verify IPFIX NAT44 session create/delete event

Parameters:data – Decoded IPFIX data records

class test_nat.TestDSlite(methodName='runTest')

Bases: test_nat.MethodHolder

DS-Lite Test Cases

classmethod setUpClass()

tearDown()

test_dslite()

Test DS-Lite

class test_nat.TestDeterministicNAT(methodName='runTest')

Bases: test_nat.MethodHolder

Deterministic NAT Test Cases

clear_nat_det()

Clear deterministic NAT configuration.

create_stream_in(in_if, out_if, ttl=64)

Create packet stream for inside network

Parameters:

• in_if – Inside interface
• out_if – Outside interface
• ttl – TTL of generated packets

create_stream_out(out_if, dst_ip=None, ttl=64)

Create packet stream for outside network

Parameters:

• out_if – Outside interface
• dst_ip – Destination IP address (Default use global NAT address)
• ttl – TTL of generated packets

initiate_tcp_session(in_if, out_if)

Initiates TCP session

Parameters:

• in_if – Inside interface
• out_if – Outside interface

classmethod setUpClass()

classmethod setUpConstants()

tearDown()

test_det_in()

Deterministic NAT translation test (TCP, UDP, ICMP)

test_deterministic_mode()

NAT plugin run deterministic mode

test_multiple_users()

Deterministic NAT multiple users

test_session_limit_per_user(*args, **kwargs)

Deterministic NAT maximum sessions per user limit

test_session_timeout(*args, **kwargs)

Deterministic NAT session timeouts

test_set_timeouts()

Set deterministic NAT timeouts

test_tcp_session_close_detection_in()

Deterministic NAT TCP session close from inside network

test_tcp_session_close_detection_out()

Deterministic NAT TCP session close from outside network

verify_capture_out(capture, nat_ip=None, packet_num=3)

Verify captured packets on outside network

Parameters:

• capture – Captured packets
• nat_ip – Translated IP address (Default use global NAT address)
• same_port – Sorce port number is not translated (Default False)
• packet_num – Expected number of packets (Default 3)

verify_ipfix_max_entries_per_user(data)

Verify IPFIX maximum entries per user exceeded event

Parameters:data – Decoded IPFIX data records

class test_nat.TestNAT44(methodName='runTest')

Bases: test_nat.MethodHolder

NAT44 Test Cases

clear_nat44()

Clear NAT44 configuration.

nat44_add_address(ip, is_add=1, vrf_id=4294967295, twice_nat=0)

Add/delete NAT44 address

Parameters:

• ip – IP address
• is_add – 1 if add, 0 if delete (Default add)
• twice_nat – twice NAT address for extenal hosts

nat44_add_static_mapping(local_ip, external_ip='0.0.0.0', local_port=0, external_port=0, vrf_id=0, is_add=1, external_sw_if_index=4294967295, proto=0, twice_nat=0)

Add/delete NAT44 static mapping

Parameters:

• local_ip – Local IP address
• external_ip – External IP address
• local_port – Local port number (Optional)
• external_port – External port number (Optional)
• vrf_id – VRF ID (Default 0)
• is_add – 1 if add, 0 if delete (Default add)
• external_sw_if_index – External interface instead of IP address
• proto – IP protocol (Mandatory if port specified)
• twice_nat – 1 if translate external host address and port

classmethod setUpClass()

tearDown()

test_del_session()

Delete NAT44 session

test_dynamic()

NAT44 dynamic translation test

test_dynamic_icmp_errors_in2out_ttl_1()

NAT44 handling of client packets with TTL=1

test_dynamic_icmp_errors_in2out_ttl_2()

NAT44 handling of error responses to client packets with TTL=2

test_dynamic_icmp_errors_out2in_ttl_1()

NAT44 handling of server packets with TTL=1

test_dynamic_icmp_errors_out2in_ttl_2()

NAT44 handling of error responses to server packets with TTL=2

test_dynamic_ipless_interfaces()

NAT44 interfaces without configured IP address

test_forwarding()

NAT44 forwarding test

test_frag_in_order()

NAT44 translate fragments arriving in order

test_frag_out_of_order()

NAT44 translate fragments arriving out of order

test_hairpinning()

NAT44 hairpinning - 1:1 NAPT

test_hairpinning2()

NAT44 hairpinning - 1:1 NAT

test_hairpinning_static_unknown_proto()

1:1 NAT translate packet with unknown protocol - hairpinning

test_hairpinning_unknown_proto()

NAT44 translate packet with unknown protocol - hairpinning

test_identity_nat()

Identity NAT

test_inside_overlapping_interfaces()

NAT44 multiple inside interfaces with overlapping address space

test_interface_addr()

Acquire NAT44 addresses from interface

test_interface_addr_identity_nat()

Identity NAT with addresses from interface

test_interface_addr_static_mapping()

Static mapping with addresses from interface

test_ipfix_addr_exhausted()

IPFIX logging NAT addresses exhausted

test_ipfix_nat44_sess()

IPFIX logging NAT44 session created/delted

test_max_translations_per_user()

MAX translations per user - recycle the least recently used

test_multiple_inside_interfaces()

NAT44 multiple non-overlapping address space inside interfaces

test_one_armed_nat44()

One armed NAT44

test_output_feature()

NAT44 interface output feature (in2out postrouting)

test_output_feature_hairpinning()

NAT44 interface output feature hairpinning (in2out postrouting)

test_output_feature_vrf_aware()

NAT44 interface output feature VRF aware (in2out postrouting)

test_ping_internal_host_from_outside()

Ping internal host from outside network

test_ping_out_interface_from_outside()

Ping NAT44 out interface from outside network

test_pool_addr_fib()

NAT44 add pool addresses to FIB

test_port_restricted()

Port restricted NAT44 (MAP-E CE)

test_reass_hairpinning()

NAT44 fragments hairpinning

test_set_get_reass()

NAT44 set/get virtual fragmentation reassembly

test_static_in()

1:1 NAT initialized from inside network

test_static_ipless_interfaces()

NAT44 interfaces without configured IP address - 1:1 NAT

test_static_lb()

NAT44 local service load balancing

test_static_out()

1:1 NAT initialized from outside network

test_static_unknown_proto()

1:1 NAT translate packet with unknown protocol

test_static_vrf_aware()

1:1 NAT VRF awareness

test_static_with_port_in()

1:1 NAPT initialized from inside network

test_static_with_port_ipless_interfaces()

NAT44 interfaces without configured IP address - 1:1 NAPT

test_static_with_port_out()

1:1 NAPT initialized from outside network

test_twice_nat()

Twice NAT44

test_twice_nat_interface_addr()

Acquire twice NAT44 addresses from interface

test_twice_nat_lb()

Twice NAT44 local service load balancing

test_unknown_proto()

NAT44 translate packet with unknown protocol

test_vrf_feature_independent()

NAT44 tenant VRF independent address pool mode

test_vrf_mode()

NAT44 tenant VRF aware address pool mode

class test_nat.TestNAT64(methodName='runTest')

Bases: test_nat.MethodHolder

NAT64 Test Cases

clear_nat64()

Clear NAT64 configuration.

nat64_get_ses_num()

Return number of active NAT64 sessions.

classmethod setUpClass()

tearDown()

test_dynamic()

NAT64 dynamic translation test

test_frag_in_order()

NAT64 translate fragments arriving in order

test_frag_out_of_order()

NAT64 translate fragments arriving out of order

test_hairpinning()

NAT64 hairpinning

test_hairpinning_unknown_proto()

NAT64 translate packet with unknown protocol - hairpinning

test_icmp_error()

NAT64 ICMP Error message translation

test_interface()

Enable/disable NAT64 feature on the interface

test_interface_addr()

Acquire NAT64 pool addresses from interface

test_one_armed_nat64()

One armed NAT64

test_pool()

Add/delete address to NAT64 pool

test_prefix()

NAT64 Network-Specific Prefix

test_reass_hairpinning()

NAT64 fragments hairpinning

test_session_timeout(*args, **kwargs)

NAT64 session timeout

test_set_timeouts()

Set NAT64 timeouts

test_static()

NAT64 static translation test

test_static_bib()

Add/delete static BIB entry

test_unknown_proto()

NAT64 translate packet with unknown protocol