diff options
| author |   Neale Ranns <nranns@cisco.com> | 2019-03-29 05:08:27 -0700 |
|---|---|---|
| committer | Neale Ranns <nranns@cisco.com> | 2019-04-03 13:48:19 +0000 |
| commit | 2b600184f3f43e740b54a1c51d3a35f8c1a77868 (patch) | |
| tree | ce2384579f02214589729ee90642aec035906f47 /test/test_gbp.py | |
| parent | 7cae003a68ed3e1022bcc8d33d0b5375918a83f7 (diff) | |
GBP: iVXLAN reflection check
packets should not egress on an iVXLAN tunnel if they
arrived on one.
Change-Id: I9adca30252364b4878f99e254aebc73b70a5d4d6
Signed-off-by: Neale Ranns <nranns@cisco.com>
Diffstat (limited to 'test/test_gbp.py')
| -rw-r--r-- | test/test_gbp.py | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/test/test_gbp.py b/test/test_gbp.py index 17e9f93e938..7f9032970d5 100644 --- a/test/test_gbp.py +++ b/test/test_gbp.py @@ -3562,6 +3562,21 @@ class TestGBP(VppTestCase): self.assertFalse(find_gbp_endpoint(self, ip="10.222.0.1")) # + # ping from host in remote to remote external subnets + # this is dropped by reflection check. + # + p = (Ether(src=self.pg7.remote_mac, dst=self.pg7.local_mac) / + IP(src=self.pg7.remote_ip4, dst=self.pg7.local_ip4) / + UDP(sport=1234, dport=48879) / + VXLAN(vni=445, gpid=4222, flags=0x88, gpflags='A') / + Ether(src=self.pg0.remote_mac, dst=str(self.router_mac)) / + IP(src="10.222.0.1", dst="10.222.0.2") / + UDP(sport=1234, dport=1234) / + Raw('\xa5' * 100)) + + rxs = self.send_and_assert_no_replies(self.pg7, p * 3) + + # # cleanup # self.pg7.unconfig_ip4() |