diff options
Diffstat (limited to 'tests')
| -rw-r--r-- | tests/suites/cop/cop_whitelist_blacklist.robot | 32 | ||||
| -rw-r--r-- | tests/suites/cop/cop_whitelist_blacklist_IPv6.robot | 33 |
2 files changed, 44 insertions, 21 deletions
diff --git a/tests/suites/cop/cop_whitelist_blacklist.robot b/tests/suites/cop/cop_whitelist_blacklist.robot index 00267bf29b..24bde134e6 100644 --- a/tests/suites/cop/cop_whitelist_blacklist.robot +++ b/tests/suites/cop/cop_whitelist_blacklist.robot @@ -28,12 +28,12 @@ | Test Setup | Clear interface counters on all vpp nodes in topology | ${nodes} | Test Teardown | Show packet trace on all DUTs | ${nodes} | Documentation | *COP Blacklist and Whitelist Tests* -| ... -| ... | Test suite uses 3-node topology TG - DUT1 - DUT2 - TG -| ... | with one link between nodes where DUT2 has xconnect. -| ... | Test packets are sent only in one direction with COP set either as -| ... | whitelist or blacklist. Subsequently, packet's IP src/dst and -| ... | MAC addresses are checked. +| ... | COP tests use 3-node topology TG - DUT1 - DUT2 - TG with one +| ... | link between nodes. DUT1 is configured with COP whitelist or +| ... | blacklist on link to TG, DUT2 is configured with L2 +| ... | xconnect. Test packets are sent in one direction by TG on +| ... | link to DUT1 and received on TG link to DUT2. On receive TG +| ... | verifies packet IP src-addr, dst-addr and MAC addresses. *** Variables *** | ${tg_node}= | ${nodes['TG']} @@ -56,8 +56,14 @@ | ${fib_table_number}= | 1 *** Test Cases *** -| VPP permits packets based on IPv4 src addr -| | [Documentation] | COP Whitelist test with basic setup. +| TC01: DUT permits IPv4 pkts with COP whitelist set with IPv4 src-addr +| | [Documentation] | Eth-IPv4-ICMPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2: On +| | ... | DUT1 configure interface IPv4 addresses and routes in the +| | ... | main routing domain. Add COP whitelist with IPv4 src-addr +| | ... | matching packets generated by TG. On DUT2 configure L2 +| | ... | xconnect. Make TG send ICMPv4 Echo Req on its interface to +| | ... | DUT1. Make TG verify received ICMPv4 Echo Replies are +| | ... | correct. | | Given Path for 3-node testing is set | | ... | ${tg_node} | ${dut1_node} | ${dut2_node} | ${tg_node} | | And Interfaces in 3-node path are up @@ -84,8 +90,14 @@ | | ... | ${tg_to_dut2_mac} -| VPP drops packets based on IPv4 src addr -| | [Documentation] | COP blacklist test with basic setup. +| TC02: DUT drops IPv4 pkts with COP blacklist set with IPv4 src-addr +| | [Documentation] | Eth-IPv4-ICMPv4 on links TG-DUT1, TG-DUT2, DUT1-DUT2: On +| | ... | DUT1 configure interface IPv4 addresses and routes in the +| | ... | main routing domain. Add COP blacklist with IPv4 src-addr +| | ... | matching packets generated by TG. On DUT2 configure L2 +| | ... | xconnect. Make TG send ICMPv4 Echo Req on its interface to +| | ... | DUT1. Make TG verify blacklisted ICMPv4 Echo Replies are +| | ... | dropped. | | Given Path for 3-node testing is set | | ... | ${tg_node} | ${dut1_node} | ${dut2_node} | ${tg_node} | | And Interfaces in 3-node path are up diff --git a/tests/suites/cop/cop_whitelist_blacklist_IPv6.robot b/tests/suites/cop/cop_whitelist_blacklist_IPv6.robot index cb3871cd07..b2f6d319d7 100644 --- a/tests/suites/cop/cop_whitelist_blacklist_IPv6.robot +++ b/tests/suites/cop/cop_whitelist_blacklist_IPv6.robot @@ -28,12 +28,12 @@ | Test Setup | Clear interface counters on all vpp nodes in topology | ${nodes} | Test Teardown | Show packet trace on all DUTs | ${nodes} | Documentation | *COP Blacklist and Whitelist Tests* -| ... -| ... | Test suite uses 3-node topology TG - DUT1 - DUT2 - TG -| ... | with one link between nodes where DUT2 has xconnect. -| ... | Test packets are sent only in one direction with COP set either as -| ... | whitelist or blacklist. Subsequently, packet's IP src/dst and -| ... | MAC addresses are checked. +| ... | COP tests use 3-node topology TG - DUT1 - DUT2 - TG with one +| ... | link between nodes. DUT1 is configured with COP whitelist or +| ... | blacklist on link to TG, DUT2 is configured with L2 +| ... | xconnect. Test packets are sent in one direction by TG on +| ... | link to DUT1 and received on TG link to DUT2. On receive TG +| ... | verifies packet IP src-addr, dst-addr and MAC addresses. *** Variables *** | ${tg_node}= | ${nodes['TG']} @@ -60,8 +60,14 @@ | ${fib_table_number}= | 1 *** Test Cases *** -| VPP permits packets based on IPv6 src addr -| | [Documentation] | COP Whitelist test with basic setup. +| TC03: DUT permits IPv6 pkts with COP whitelist set with IPv6 src-addr +| | [Documentation] | Eth-IPv6-ICMPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2: On +| | ... | DUT1 configure interface IPv6 addresses and routes in the +| | ... | main routing domain. Add COP whitelist with IPv6 src-addr +| | ... | matching packets generated by TG. On DUT2 configure L2 +| | ... | xconnect. Make TG send ICMPv6 Echo Req on its interface to +| | ... | DUT1. Make TG verify received ICMPv6 Echo Replies are +| | ... | correct. | | Given Path for 3-node testing is set | | ... | ${tg_node} | ${dut1_node} | ${dut2_node} | ${tg_node} | | And Interfaces in 3-node path are up @@ -92,9 +98,14 @@ | | ... | ${dut1_to_tg_mac} | ${tg_to_dut2} | ${dut1_to_dut2_mac} | | ... | ${tg_to_dut2_mac} - -| VPP drops packets based on IPv6 src addr -| | [Documentation] | COP blacklist test with basic setup. +| TC04: DUT drops IPv6 pkts with COP blacklist set with IPv6 src-addr +| | [Documentation] | Eth-IPv6-ICMPv6 on links TG-DUT1, TG-DUT2, DUT1-DUT2: On +| | ... | DUT1 configure interface IPv6 addresses and routes in the +| | ... | main routing domain. Add COP blacklist with IPv6 src-addr +| | ... | matching packets generated by TG. On DUT2 configure L2 +| | ... | xconnect. Make TG send ICMPv6 Echo Req on its interface to +| | ... | DUT1. Make TG verify blacklisted ICMPv6 Echo Replies are +| | ... | dropped. | | Given Path for 3-node testing is set | | ... | ${tg_node} | ${dut1_node} | ${dut2_node} | ${tg_node} | | And Interfaces in 3-node path are up |