from framework import VppTestCase, VppTestRunner
from vpp_sub_interface import VppSubInterface, VppDot1QSubint
+from vpp_pg_interface import is_ipv6_misc
from scapy.packet import Raw
from scapy.layers.l2 import Ether, Dot1Q
-from scapy.layers.inet6 import IPv6, UDP, ICMPv6ND_NS, ICMPv6ND_RS, ICMPv6ND_RA, \
- ICMPv6NDOptSrcLLAddr, getmacbyip6, ICMPv6MRD_Solicitation
+from scapy.layers.inet6 import IPv6, UDP, ICMPv6ND_NS, ICMPv6ND_RS, \
+ ICMPv6ND_RA, ICMPv6NDOptSrcLLAddr, getmacbyip6, ICMPv6MRD_Solicitation
from util import ppp
from scapy.utils6 import in6_getnsma, in6_getnsmac, in6_ptop, in6_islladdr, \
- in6_mactoifaceid
+ in6_mactoifaceid, in6_ismaddr
from scapy.utils import inet_pton, inet_ntop
-
def mk_ll_addr(mac):
euid = in6_mactoifaceid(mac)
addr = "fe80::" + euid
payload_info = self.payload_to_info(str(packet[Raw]))
packet_index = payload_info.index
self.assertEqual(payload_info.dst, dst_sw_if_index)
- self.logger.debug("Got packet on port %s: src=%u (id=%u)" %
- (dst_if.name, payload_info.src, packet_index))
+ self.logger.debug(
+ "Got packet on port %s: src=%u (id=%u)" %
+ (dst_if.name, payload_info.src, packet_index))
next_info = self.get_next_packet_info_for_interface2(
payload_info.src, dst_sw_if_index,
last_info[payload_info.src])
intf.assert_nothing_captured(remark=remark)
def test_ns(self):
- """ IPv6 Neighbour Soliciatation Exceptions
+ """ IPv6 Neighbour Solicitation Exceptions
- Test sceanrio:
+ Test scenario:
- Send an NS Sourced from an address not covered by the link sub-net
- Send an NS to an mcast address the router has not joined
- Send NS for a target address the router does not onn.
ICMPv6NDOptSrcLLAddr(lladdr=self.pg0.remote_mac))
pkts = [p]
- self.send_and_assert_no_replies(self.pg0, pkts,
- "No response to NS source by address not on sub-net")
+ self.send_and_assert_no_replies(
+ self.pg0, pkts,
+ "No response to NS source by address not on sub-net")
#
- # An NS for sent to a solicited mcast group the router is not a member of
- # FAILS
+ # An NS for sent to a solicited mcast group the router is
+ # not a member of FAILS
#
if 0:
nsma = in6_getnsma(inet_pton(socket.AF_INET6, "fd::ffff"))
ICMPv6NDOptSrcLLAddr(lladdr=self.pg0.remote_mac))
pkts = [p]
- self.send_and_assert_no_replies(self.pg0, pkts,
- "No response to NS sent to unjoined mcast address")
+ self.send_and_assert_no_replies(
+ self.pg0, pkts,
+ "No response to NS sent to unjoined mcast address")
#
# An NS whose target address is one the router does not own
self.send_and_assert_no_replies(self.pg0, pkts,
"No response to NS for unknown target")
- def send_and_expect_ra(self, intf, pkts, remark, src_ip=None):
- if not src_ip:
- src_ip = intf.remote_ip6
- intf.add_stream(pkts)
- self.pg0.add_stream(pkts)
- self.pg_enable_capture(self.pg_interfaces)
- self.pg_start()
- rx = intf.get_capture(1)
+ def validate_ra(self, intf, rx, dst_ip=None):
+ if not dst_ip:
+ dst_ip = intf.remote_ip6
- self.assertEqual(len(rx), 1)
- rx = rx[0]
+ # unicasted packets must come to the unicast mac
+ self.assertEqual(rx[Ether].dst, intf.remote_mac)
+
+ # and from the router's MAC
+ self.assertEqual(rx[Ether].src, intf.local_mac)
# the rx'd RA should be addressed to the sender's source
self.assertTrue(rx.haslayer(ICMPv6ND_RA))
self.assertEqual(in6_ptop(rx[IPv6].dst),
- in6_ptop(src_ip))
+ in6_ptop(dst_ip))
# and come from the router's link local
self.assertTrue(in6_islladdr(rx[IPv6].src))
self.assertEqual(in6_ptop(rx[IPv6].src),
in6_ptop(mk_ll_addr(intf.local_mac)))
+
+ def send_and_expect_ra(self, intf, pkts, remark, dst_ip=None,
+ filter_out_fn=is_ipv6_misc):
+ intf.add_stream(pkts)
+ self.pg0.add_stream(pkts)
+ self.pg_enable_capture(self.pg_interfaces)
+ self.pg_start()
+ rx = intf.get_capture(1, filter_out_fn=filter_out_fn)
+
+ self.assertEqual(len(rx), 1)
+ rx = rx[0]
+ self.validate_ra(intf, rx, dst_ip)
+
def test_rs(self):
- """ IPv6 Router Soliciatation Exceptions
+ """ IPv6 Router Solicitation Exceptions
- Test sceanrio:
+ Test scenario:
"""
#
- # Before we begin change the IPv6 RA responses to use the unicast address
- # that way we will not confuse them with the periodic Ras which go to the Mcast
- # address
+ # Before we begin change the IPv6 RA responses to use the unicast
+ # address - that way we will not confuse them with the periodic
+ # RAs which go to the mcast address
+ # Sit and wait for the first periodic RA.
+ #
+ # TODO
#
self.pg0.ip6_ra_config(send_unicast=1)
#
# When we reconfiure the IPv6 RA config, we reset the RA rate limiting,
- # so we need to do this before each test below so as not to drop packets for
- # rate limiting reasons. Test this works here.
+ # so we need to do this before each test below so as not to drop
+ # packets for rate limiting reasons. Test this works here.
#
self.pg0.ip6_ra_config(send_unicast=1)
self.send_and_expect_ra(self.pg0, pkts, "Rate limit reset RS")
IPv6(dst=self.pg0.local_ip6, src=ll) /
ICMPv6ND_RS())
pkts = [p]
- self.send_and_expect_ra(
- self.pg0, pkts, "RS sourced from link-local", src_ip=ll)
+ self.send_and_expect_ra(self.pg0, pkts,
+ "RS sourced from link-local",
+ dst_ip=ll)
#
- # Source from the unspecified address ::. This happens when the RS is sent before
- # the host has a configured address/sub-net, i.e. auto-config.
- # Since the sender has no IP address, the reply comes back mcast - so the
- # capture needs to not filter this.
- # If we happen to pick up the periodic RA at this point then so be it, it's not
- # an error.
+ # Send the RS multicast
#
self.pg0.ip6_ra_config(send_unicast=1)
- p = (Ether(dst=self.pg0.local_mac, src=self.pg0.remote_mac) /
- IPv6(dst=self.pg0.local_ip6, src="::") /
+ dmac = in6_getnsmac(inet_pton(socket.AF_INET6, "ff02::2"))
+ ll = mk_ll_addr(self.pg0.remote_mac)
+ p = (Ether(dst=dmac, src=self.pg0.remote_mac) /
+ IPv6(dst="ff02::2", src=ll) /
ICMPv6ND_RS())
pkts = [p]
-
- self.pg0.add_stream(pkts)
- self.pg0.add_stream(pkts)
- self.pg_enable_capture(self.pg_interfaces)
- self.pg_start()
- capture = self.pg0.get_capture(1, filter_out_fn=None)
- found = 0
- for rx in capture:
- if (rx.haslayer(ICMPv6ND_RA)):
- # and come from the router's link local
- self.assertTrue(in6_islladdr(rx[IPv6].src))
- self.assertEqual(in6_ptop(rx[IPv6].src),
- in6_ptop(mk_ll_addr(self.pg0.local_mac)))
- # sent to the all hosts mcast
- self.assertEqual(in6_ptop(rx[IPv6].dst), "ff02::1")
-
- found = 1
- self.assertTrue(found)
-
- @unittest.skip("Unsupported")
- def test_mrs(self):
- """ IPv6 Multicast Router Soliciatation Exceptions
-
- Test sceanrio:
- """
+ self.send_and_expect_ra(self.pg0, pkts,
+ "RS sourced from link-local",
+ dst_ip=ll)
#
- # An RS from a link source address
- # - expect an RA in return
+ # Source from the unspecified address ::. This happens when the RS
+ # is sent before the host has a configured address/sub-net,
+ # i.e. auto-config. Since the sender has no IP address, the reply
+ # comes back mcast - so the capture needs to not filter this.
+ # If we happen to pick up the periodic RA at this point then so be it,
+ # it's not an error.
#
- nsma = in6_getnsma(inet_pton(socket.AF_INET6, self.pg0.local_ip6))
- d = inet_ntop(socket.AF_INET6, nsma)
-
- p = (Ether(dst=getmacbyip6("ff02::2")) /
- IPv6(dst=d, src=self.pg0.remote_ip6) /
- ICMPv6MRD_Solicitation())
+ self.pg0.ip6_ra_config(send_unicast=1, suppress=1)
+ p = (Ether(dst=dmac, src=self.pg0.remote_mac) /
+ IPv6(dst="ff02::2", src="::") /
+ ICMPv6ND_RS())
pkts = [p]
-
- self.pg0.add_stream(pkts)
- self.pg_enable_capture(self.pg_interfaces)
- self.pg_start()
- self.pg0.assert_nothing_captured(
- remark="No response to NS source by address not on sub-net")
+ self.send_and_expect_ra(self.pg0, pkts,
+ "RS sourced from unspecified",
+ dst_ip="ff02::1",
+ filter_out_fn=None)
#
- # An RS from a non link source address
+ # Reset the periodic advertisements back to default values
#
- nsma = in6_getnsma(inet_pton(socket.AF_INET6, self.pg0.local_ip6))
- d = inet_ntop(socket.AF_INET6, nsma)
-
- p = (Ether(dst=getmacbyip6("ff02::2")) /
- IPv6(dst=d, src="2002::2") /
- ICMPv6MRD_Solicitation())
- pkts = [p]
-
- self.send_and_assert_no_replies(self.pg0, pkts,
- "RA rate limited")
- self.pg0.add_stream(pkts)
- self.pg_enable_capture(self.pg_interfaces)
- self.pg_start()
- self.pg0.assert_nothing_captured(
- remark="No response to NS source by address not on sub-net")
-
+ self.pg0.ip6_ra_config(no=1, suppress=1, send_unicast=0)
if __name__ == '__main__':
unittest.main(testRunner=VppTestRunner)
Code Review / vpp.git / blobdiff