aboutsummaryrefslogtreecommitdiffstats
path: root/tests/suites/cop
diff options
context:
space:
mode:
Diffstat (limited to 'tests/suites/cop')
-rw-r--r--tests/suites/cop/cop_whitelist_blacklist.robot48
-rw-r--r--tests/suites/cop/cop_whitelist_blacklist_IPv6.robot51
2 files changed, 54 insertions, 45 deletions
diff --git a/tests/suites/cop/cop_whitelist_blacklist.robot b/tests/suites/cop/cop_whitelist_blacklist.robot
index 24bde134e6..c83b5e109b 100644
--- a/tests/suites/cop/cop_whitelist_blacklist.robot
+++ b/tests/suites/cop/cop_whitelist_blacklist.robot
@@ -27,13 +27,18 @@
| ... | AND | Update All Interface Data On All Nodes | ${nodes}
| Test Setup | Clear interface counters on all vpp nodes in topology | ${nodes}
| Test Teardown | Show packet trace on all DUTs | ${nodes}
-| Documentation | *COP Blacklist and Whitelist Tests*
-| ... | COP tests use 3-node topology TG - DUT1 - DUT2 - TG with one
-| ... | link between nodes. DUT1 is configured with COP whitelist or
-| ... | blacklist on link to TG, DUT2 is configured with L2
-| ... | xconnect. Test packets are sent in one direction by TG on
-| ... | link to DUT1 and received on TG link to DUT2. On receive TG
-| ... | verifies packet IP src-addr, dst-addr and MAC addresses.
+| Documentation | *COP Security IPv4 Blacklist and Whitelist Tests*
+| ...
+| ... | *[Top] Network Topologies:* TG-DUT1-DUT2-TG 3-node circular topology
+| ... | with single links between nodes.
+| ... | *[Enc] Packet Encapsulations:* Eth-IPv4-ICMPv4 on all links.
+| ... | *[Cfg] DUT configuration:* DUT1 is configured with IPv4 routing and
+| ... | static routes. COP security white-lists are applied on DUT1 ingress
+| ... | interface from TG. DUT2 is configured with L2XC.
+| ... | *[Ver] TG verification:* Test ICMPv4 Echo Request packets are sent in
+| ... | one direction by TG on link to DUT1; on receive TG verifies packets for
+| ... | correctness and drops as applicable.
+| ... | *[Ref] Applicable standard specifications:*
*** Variables ***
| ${tg_node}= | ${nodes['TG']}
@@ -57,13 +62,13 @@
*** Test Cases ***
| TC01: DUT permits IPv4 pkts with COP whitelist set with IPv4 src-addr
-| | [Documentation] | Eth-IPv4-ICMPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2: On
-| | ... | DUT1 configure interface IPv4 addresses and routes in the
-| | ... | main routing domain. Add COP whitelist with IPv4 src-addr
-| | ... | matching packets generated by TG. On DUT2 configure L2
-| | ... | xconnect. Make TG send ICMPv4 Echo Req on its interface to
-| | ... | DUT1. Make TG verify received ICMPv4 Echo Replies are
-| | ... | correct.
+| | [Documentation]
+| | ... | [Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 \
+| | ... | configure interface IPv4 addresses and routes in the main
+| | ... | routing domain, add COP whitelist on interface to TG with IPv4
+| | ... | src-addr matching packets generated by TG; on DUT2 configure L2
+| | ... | xconnect. [Ver] Make TG send ICMPv4 Echo Req on its interface to
+| | ... | DUT1; verify received ICMPv4 Echo Req pkts are correct. [Ref]
| | Given Path for 3-node testing is set
| | ... | ${tg_node} | ${dut1_node} | ${dut2_node} | ${tg_node}
| | And Interfaces in 3-node path are up
@@ -89,15 +94,14 @@
| | ... | ${dut1_to_tg_mac} | ${tg_to_dut2} | ${dut1_to_dut2_mac}
| | ... | ${tg_to_dut2_mac}
-
| TC02: DUT drops IPv4 pkts with COP blacklist set with IPv4 src-addr
-| | [Documentation] | Eth-IPv4-ICMPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2: On
-| | ... | DUT1 configure interface IPv4 addresses and routes in the
-| | ... | main routing domain. Add COP blacklist with IPv4 src-addr
-| | ... | matching packets generated by TG. On DUT2 configure L2
-| | ... | xconnect. Make TG send ICMPv4 Echo Req on its interface to
-| | ... | DUT1. Make TG verify blacklisted ICMPv4 Echo Replies are
-| | ... | dropped.
+| | [Documentation]
+| | ... | [Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 \
+| | ... | configure interface IPv4 addresses and routes in the main
+| | ... | routing domain, add COP blacklist on interface to TG with IPv4
+| | ... | src-addr matching packets generated by TG; on DUT2 configure L2
+| | ... | xconnect. [Ver] Make TG send ICMPv4 Echo Req on its interface to
+| | ... | DUT1; verify no ICMPv4 Echo Req pkts are received. [Ref]
| | Given Path for 3-node testing is set
| | ... | ${tg_node} | ${dut1_node} | ${dut2_node} | ${tg_node}
| | And Interfaces in 3-node path are up
diff --git a/tests/suites/cop/cop_whitelist_blacklist_IPv6.robot b/tests/suites/cop/cop_whitelist_blacklist_IPv6.robot
index b2f6d319d7..054e376789 100644
--- a/tests/suites/cop/cop_whitelist_blacklist_IPv6.robot
+++ b/tests/suites/cop/cop_whitelist_blacklist_IPv6.robot
@@ -27,13 +27,18 @@
| ... | AND | Update All Interface Data On All Nodes | ${nodes}
| Test Setup | Clear interface counters on all vpp nodes in topology | ${nodes}
| Test Teardown | Show packet trace on all DUTs | ${nodes}
-| Documentation | *COP Blacklist and Whitelist Tests*
-| ... | COP tests use 3-node topology TG - DUT1 - DUT2 - TG with one
-| ... | link between nodes. DUT1 is configured with COP whitelist or
-| ... | blacklist on link to TG, DUT2 is configured with L2
-| ... | xconnect. Test packets are sent in one direction by TG on
-| ... | link to DUT1 and received on TG link to DUT2. On receive TG
-| ... | verifies packet IP src-addr, dst-addr and MAC addresses.
+| Documentation | *COP Security IPv6 Blacklist and Whitelist Tests*
+| ...
+| ... | *[Top] Network Topologies:* TG-DUT1-DUT2-TG 3-node circular topology
+| ... | with single links between nodes.
+| ... | *[Enc] Packet Encapsulations:* Eth-IPv6-ICMPv6 on all links.
+| ... | *[Cfg] DUT configuration:* DUT1 is configured with IPv6 routing and
+| ... | static routes. COP security white-lists are applied on DUT1 ingress
+| ... | interface from TG. DUT2 is configured with L2XC.
+| ... | *[Ver] TG verification:* Test ICMPv6 Echo Request packets are sent in
+| ... | one direction by TG on link to DUT1; on receive TG verifies packets for
+| ... | correctness and drops as applicable.
+| ... | *[Ref] Applicable standard specifications:*
*** Variables ***
| ${tg_node}= | ${nodes['TG']}
@@ -60,14 +65,14 @@
| ${fib_table_number}= | 1
*** Test Cases ***
-| TC03: DUT permits IPv6 pkts with COP whitelist set with IPv6 src-addr
-| | [Documentation] | Eth-IPv6-ICMPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2: On
-| | ... | DUT1 configure interface IPv6 addresses and routes in the
-| | ... | main routing domain. Add COP whitelist with IPv6 src-addr
-| | ... | matching packets generated by TG. On DUT2 configure L2
-| | ... | xconnect. Make TG send ICMPv6 Echo Req on its interface to
-| | ... | DUT1. Make TG verify received ICMPv6 Echo Replies are
-| | ... | correct.
+| TC01: DUT permits IPv6 pkts with COP whitelist set with IPv6 src-addr
+| | [Documentation]
+| | ... | [Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-ICMPv6. [Cfg] On DUT1 \
+| | ... | configure interface IPv6 addresses and routes in the main
+| | ... | routing domain, add COP whitelist on interface to TG with IPv6
+| | ... | src-addr matching packets generated by TG; on DUT2 configure L2
+| | ... | xconnect. [Ver] Make TG send ICMPv6 Echo Req on its interface to
+| | ... | DUT1; verify received ICMPv6 Echo Req pkts are correct. [Ref]
| | Given Path for 3-node testing is set
| | ... | ${tg_node} | ${dut1_node} | ${dut2_node} | ${tg_node}
| | And Interfaces in 3-node path are up
@@ -98,14 +103,14 @@
| | ... | ${dut1_to_tg_mac} | ${tg_to_dut2} | ${dut1_to_dut2_mac}
| | ... | ${tg_to_dut2_mac}
-| TC04: DUT drops IPv6 pkts with COP blacklist set with IPv6 src-addr
-| | [Documentation] | Eth-IPv6-ICMPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2: On
-| | ... | DUT1 configure interface IPv6 addresses and routes in the
-| | ... | main routing domain. Add COP blacklist with IPv6 src-addr
-| | ... | matching packets generated by TG. On DUT2 configure L2
-| | ... | xconnect. Make TG send ICMPv6 Echo Req on its interface to
-| | ... | DUT1. Make TG verify blacklisted ICMPv6 Echo Replies are
-| | ... | dropped.
+| TC02: DUT drops IPv6 pkts with COP blacklist set with IPv6 src-addr
+| | [Documentation]
+| | ... | [Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv6-ICMPv6. [Cfg] On DUT1 \
+| | ... | configure interface IPv6 addresses and routes in the main
+| | ... | routing domain, add COP blacklist on interface to TG with IPv6
+| | ... | src-addr matching packets generated by TG; on DUT2 configure L2
+| | ... | xconnect. [Ver] Make TG send ICMPv6 Echo Req on its interface to
+| | ... | DUT1; verify no ICMPv6 Echo Req pkts are received. [Ref]
| | Given Path for 3-node testing is set
| | ... | ${tg_node} | ${dut1_node} | ${dut2_node} | ${tg_node}
| | And Interfaces in 3-node path are up