X-Git-Url: https://gerrit.fd.io/r/gitweb?a=blobdiff_plain;ds=sidebyside;f=tests%2Fsuites%2Fcop%2Fcop_whitelist_blacklist.robot;h=c83b5e109b5697b13d75662ddf78efa0b68dcbc9;hb=01c9b7fb1cca656502910d3f4b391ebec8308551;hp=00267bf29b87820b5151d29b9165216a733dedc5;hpb=7dbda72563912b656bde2ee4b4611a0b284b933e;p=csit.git diff --git a/tests/suites/cop/cop_whitelist_blacklist.robot b/tests/suites/cop/cop_whitelist_blacklist.robot index 00267bf29b..c83b5e109b 100644 --- a/tests/suites/cop/cop_whitelist_blacklist.robot +++ b/tests/suites/cop/cop_whitelist_blacklist.robot @@ -27,13 +27,18 @@ | ... | AND | Update All Interface Data On All Nodes | ${nodes} | Test Setup | Clear interface counters on all vpp nodes in topology | ${nodes} | Test Teardown | Show packet trace on all DUTs | ${nodes} -| Documentation | *COP Blacklist and Whitelist Tests* +| Documentation | *COP Security IPv4 Blacklist and Whitelist Tests* | ... -| ... | Test suite uses 3-node topology TG - DUT1 - DUT2 - TG -| ... | with one link between nodes where DUT2 has xconnect. -| ... | Test packets are sent only in one direction with COP set either as -| ... | whitelist or blacklist. Subsequently, packet's IP src/dst and -| ... | MAC addresses are checked. +| ... | *[Top] Network Topologies:* TG-DUT1-DUT2-TG 3-node circular topology +| ... | with single links between nodes. +| ... | *[Enc] Packet Encapsulations:* Eth-IPv4-ICMPv4 on all links. +| ... | *[Cfg] DUT configuration:* DUT1 is configured with IPv4 routing and +| ... | static routes. COP security white-lists are applied on DUT1 ingress +| ... | interface from TG. DUT2 is configured with L2XC. +| ... | *[Ver] TG verification:* Test ICMPv4 Echo Request packets are sent in +| ... | one direction by TG on link to DUT1; on receive TG verifies packets for +| ... | correctness and drops as applicable. +| ... | *[Ref] Applicable standard specifications:* *** Variables *** | ${tg_node}= | ${nodes['TG']} @@ -56,8 +61,14 @@ | ${fib_table_number}= | 1 *** Test Cases *** -| VPP permits packets based on IPv4 src addr -| | [Documentation] | COP Whitelist test with basic setup. +| TC01: DUT permits IPv4 pkts with COP whitelist set with IPv4 src-addr +| | [Documentation] +| | ... | [Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 \ +| | ... | configure interface IPv4 addresses and routes in the main +| | ... | routing domain, add COP whitelist on interface to TG with IPv4 +| | ... | src-addr matching packets generated by TG; on DUT2 configure L2 +| | ... | xconnect. [Ver] Make TG send ICMPv4 Echo Req on its interface to +| | ... | DUT1; verify received ICMPv4 Echo Req pkts are correct. [Ref] | | Given Path for 3-node testing is set | | ... | ${tg_node} | ${dut1_node} | ${dut2_node} | ${tg_node} | | And Interfaces in 3-node path are up @@ -83,9 +94,14 @@ | | ... | ${dut1_to_tg_mac} | ${tg_to_dut2} | ${dut1_to_dut2_mac} | | ... | ${tg_to_dut2_mac} - -| VPP drops packets based on IPv4 src addr -| | [Documentation] | COP blacklist test with basic setup. +| TC02: DUT drops IPv4 pkts with COP blacklist set with IPv4 src-addr +| | [Documentation] +| | ... | [Top] TG-DUT1-DUT2-TG. [Enc] Eth-IPv4-ICMPv4. [Cfg] On DUT1 \ +| | ... | configure interface IPv4 addresses and routes in the main +| | ... | routing domain, add COP blacklist on interface to TG with IPv4 +| | ... | src-addr matching packets generated by TG; on DUT2 configure L2 +| | ... | xconnect. [Ver] Make TG send ICMPv4 Echo Req on its interface to +| | ... | DUT1; verify no ICMPv4 Echo Req pkts are received. [Ref] | | Given Path for 3-node testing is set | | ... | ${tg_node} | ${dut1_node} | ${dut2_node} | ${tg_node} | | And Interfaces in 3-node path are up