X-Git-Url: https://gerrit.fd.io/r/gitweb?a=blobdiff_plain;f=resources%2Ftest_data%2Fhoneycomb%2Fplugin_acl.py;h=b72a3391a0d1348db1b51756eb2c97858bac4096;hb=refs%2Fchanges%2F13%2F19913%2F28;hp=9741da8fde80231fdefd34824a6cb173f743b8cd;hpb=15b51f686ef338bad639ba6fb7d0332958285539;p=csit.git

diff --git a/resources/test_data/honeycomb/plugin_acl.py b/resources/test_data/honeycomb/plugin_acl.py
index 9741da8fde..b72a3391a0 100644
--- a/resources/test_data/honeycomb/plugin_acl.py
+++ b/resources/test_data/honeycomb/plugin_acl.py
@@ -126,6 +126,9 @@ def get_variables(test_case, name):
             "dut_to_tg_if2_ip": "20::2",
             "prefix_length": 64,
             "gateway": "20::1",
+            # classified networks
+            "classify_src_net": "12::",
+            "classify_dst_net": "13::",
             # ICMP code and type for control packet
             "icmp_type": 1,
             "icmp_code": 0,
@@ -152,367 +155,390 @@ def get_variables(test_case, name):
     }
     acl_data = {
         # ACL configuration for L2 tests
+
         "macip": {
             "acl": [{
-                "acl-type":
-                    "vpp-acl:vpp-macip-acl",
-                "acl-name": name,
-                "access-list-entries": {"ace": [
-                    {
-                        "rule-name": "rule1",
-                        "matches": {
-                            "vpp-macip-ace-nodes": {
-                                "source-mac-address":
-                                    test_vars["macip"]["classify_src"],
-                                "source-mac-address-mask":
-                                    test_vars["macip"]["src_mask"],
-                                "source-ipv4-network": "16.0.0.0/24"
+                "name": name,
+                "type": "vpp-acl:vpp-macip-acl",
+                "aces": {
+                    "ace": [
+                        {
+                            "name": "rule1",
+                            "matches": {
+
+                                "eth": {
+                                    "source-mac-address": test_vars["macip"]["classify_src"],
+                                    "source-mac-address-mask": test_vars["macip"]["src_mask"]
+                                },
+                                "ipv4": {
+
+                                    "source-ipv4-network": "16.0.0.0/24"
+                                }
+                            },
+
+                            "actions": {
+                                "forwarding": "ietf-access-control-list:drop"
                             }
                         },
-                        "actions": {
-                            "deny": {}
-                        }
-                    },
-                    {
-                        "rule-name": "rule_all",
-                        "matches": {
-                            "vpp-macip-ace-nodes": {
-                                "source-mac-address":
-                                    test_vars["macip"]["classify_src"],
-                                "source-mac-address-mask": "00:00:00:00:00:00",
-                                "source-ipv4-network": "0.0.0.0/0"
+                        {
+                            "name": "rule_all",
+                            "matches": {
+
+                                "eth": {
+                                    "source-mac-address": test_vars["macip"]["classify_src"],
+                                    "source-mac-address-mask": "00:00:00:00:00:00"
+                                },
+
+                                "ipv4": {
+                                    "source-ipv4-network": "0.0.0.0/0"
+                                }
+                            },
+                            "actions": {
+                                "forwarding": "ietf-access-control-list:accept"
                             }
-                        },
-                        "actions": {
-                            "permit": {}
                         }
-                    },
-                ]}
-            }]
+                    ]}
+                }
+            ]
         },
         # ACL configuration for L3 IPv4 tests
         "l3_ip4": {
-            "acl": [{
-                "acl-type":
-                    "vpp-acl:vpp-acl",
-                "acl-name": name,
-                "access-list-entries": {"ace": [
-                    {
-                        "rule-name": "rule1",
-                        "matches": {
-                            "vpp-ace-nodes": {
-                                "source-ipv4-network":
-                                    "{0}/{1}".format(
-                                        test_vars["l3_ip4"]["classify_src_net"],
-                                        test_vars["l3_ip4"]["prefix_length"]),
-                                "destination-ipv4-network":
-                                    "{0}/{1}".format(
-                                        test_vars["l3_ip4"]["classify_dst_net"],
-                                        test_vars["l3_ip4"]["prefix_length"]),
-                                "udp-nodes": {
-                                    "source-port-range": {
-                                        "lower-port": "0",
-                                        "upper-port": "65535"
+            "acl": [
+                {
+                    "name": name,
+                    "type": "vpp-acl:vpp-acl",
+                    "aces": {
+                        "ace": [
+                            {
+                                "name": "rule1",
+                                "matches": {
+                                    "ipv4": {
+                                        "destination-ipv4-network": "{0}/{1}".format(
+                                            test_vars["l3_ip4"]["classify_dst_net"],
+                                            test_vars["l3_ip4"]["prefix_length"]),
+                                        "source-ipv4-network": "{0}/{1}".format(
+                                            test_vars["l3_ip4"]["classify_src_net"],
+                                            test_vars["l3_ip4"]["prefix_length"])
                                     },
-                                    "destination-port-range": {
-                                        "lower-port": "0",
-                                        "upper-port": "65535"
+                                    "udp":{
+                                        "source-port": {
+                                            "lower-port": "0",
+                                            "upper-port": "65535"
+                                        },
+                                        "destination-port": {
+                                            "lower-port": "0",
+                                            "upper-port": "65535"
+                                        }
                                     }
+                                },
+                                "actions": {
+                                    "forwarding": "ietf-access-control-list:drop"
+                                }
+                            },
+                            {
+                                "name": "rule_all",
+                                "matches": {
+                                    "ipv4": {
+                                        "destination-ipv4-network": "0.0.0.0/0",
+                                        "source-ipv4-network": "0.0.0.0/0"
+                                    }
+                                },
+                                "actions": {
+                                    "forwarding": "ietf-access-control-list:accept"
                                 }
                             }
-                        },
-                        "actions": {
-                            "deny": {}
-                        },
-                    },
-                    {
-                        "rule-name": "rule_all",
-                        "matches": {
-                            "vpp-ace-nodes": {
-                                "source-ipv4-network": "0.0.0.0/0",
-                                "destination-ipv4-network": "0.0.0.0/0",
-                            }
-                        },
-                        "actions": {
-                            "permit": {}
-                        }
+                        ]
                     }
-                ]}
-            }]
+                }
+            ]
         },
         # ACL settings for L3 IPv6 tests
         "l3_ip6": {
-            "acl": [{
-                "acl-type":
-                    "vpp-acl:vpp-acl",
-                "acl-name": name,
-                "access-list-entries": {"ace": [
-                    {
-                        "rule-name": "rule1",
-                        "matches": {
-                            "vpp-ace-nodes": {
-                                "source-ipv6-network":
-                                    "{0}/{1}".format(
-                                        test_vars["l3_ip6"]["classify_src_net"],
-                                        test_vars["l3_ip6"]["prefix_length"]),
-                                "destination-ipv6-network":
-                                    "{0}/{1}".format(
-                                        test_vars["l3_ip6"]["classify_dst_net"],
-                                        test_vars["l3_ip6"]["prefix_length"]),
-                                "udp-nodes": {
-                                    "source-port-range": {
-                                        "lower-port": "0",
-                                        "upper-port": "65535"
+            "acl": [
+                {
+                    "name": name,
+                    "type": "vpp-acl:vpp-acl",
+                    "aces": {
+                        "ace": [
+                            {
+                                "name": "rule1",
+                                "matches": {
+                                    "ipv6": {
+                                        "destination-ipv6-network": "{0}/{1}".format(
+                                            test_vars["l3_ip6"]["classify_dst_net"],
+                                            test_vars["l3_ip6"]["prefix_length"]),
+                                        "source-ipv6-network": "{0}/{1}".format(
+                                            test_vars["l3_ip6"]["classify_src_net"],
+                                            test_vars["l3_ip6"]["prefix_length"])
                                     },
-                                    "destination-port-range": {
-                                        "lower-port": "0",
-                                        "upper-port": "65535"
+                                    "udp":{
+                                        "source-port": {
+                                            "lower-port": "0",
+                                            "upper-port": "65535"
+                                        },
+                                        "destination-port": {
+                                            "lower-port": "0",
+                                            "upper-port": "65535"
+                                        }
                                     }
+                                },
+                                "actions": {
+                                    "forwarding": "ietf-access-control-list:drop"
+                                }
+                            },
+                            {
+                                "name": "rule_all",
+                                "matches": {
+                                    "ipv6": {
+                                        "destination-ipv6-network": "0::0/0",
+                                        "source-ipv6-network": "0::0/0"
+                                    }
+                                },
+                                "actions": {
+                                    "forwarding": "ietf-access-control-list:accept"
                                 }
                             }
-                        },
-                        "actions": {
-                            "deny": {}
-                        }
-                    },
-                    {
-                        "rule-name": "rule_all",
-                        "matches": {
-                            "vpp-ace-nodes": {
-                                "source-ipv6-network": "0::0/0",
-                                "destination-ipv6-network": "0::0/0",
-                            }
-                        },
-                        "actions": {
-                            "permit": {}
-                        }
+                        ]
                     }
-                ]}
-            }]
+                }
+            ]
         },
         # ACL configuration for L4 tests
         "l4": {
-            "acl": [{
-                "acl-type":
-                    "vpp-acl:vpp-acl",
-                "acl-name": name,
-                "access-list-entries": {"ace": [{
-                    "rule-name": "rule1",
-                    "matches": {
-                        "vpp-ace-nodes": {
-                            "source-ipv4-network": "0.0.0.0/0",
-                            "tcp-nodes": {
-                                "destination-port-range": {
-                                    "lower-port":
-                                        test_vars["l4"]["classify_dst"],
-                                    "upper-port":
-                                        test_vars["l4"]["classify_dst"] + 10
+            "acl": [
+                {
+                    "name": name,
+                    "type": "vpp-acl:vpp-acl",
+                    "aces": {
+                        "ace": [
+                            {
+                                "name": "rule1",
+                                "matches": {
+                                    "ipv4": {
+                                        "source-ipv4-network": "0.0.0.0/0"
+                                    },
+                                    "tcp": {
+                                        "source-port": {
+                                            "lower-port": test_vars["l4"]["classify_src"],
+                                            "upper-port": test_vars["l4"]["classify_src"] + 10
+                                        },
+                                        "destination-port":{
+                                            "lower-port": test_vars["l4"]["classify_dst"],
+                                            "upper-port": test_vars["l4"]["classify_dst"] + 10
+                                        }
+                                    }
                                 },
-                                "source-port-range": {
-                                    "lower-port":
-                                        test_vars["l4"]["classify_src"],
-                                    "upper-port":
-                                        test_vars["l4"]["classify_src"] + 10
+                                "actions":{
+                                    "forwarding": "ietf-access-control-list:drop"
+                                }
+                            },
+                            {
+                                "name": "rule_all",
+                                "matches": {
+                                    "ipv4": {
+                                        "source-ipv4-network": "0.0.0.0/0",
+                                        "destination-ipv4-network": "0.0.0.0/0"
+                                    }
+                                },
+                                "actions": {
+                                    "forwarding": "ietf-access-control-list:accept"
                                 }
                             }
-                        }
-                    },
-                    "actions": {
-                        "deny": {}
-                    },
-                },
-                    {
-                        "rule-name": "rule_all",
-                        "matches": {
-                            "vpp-ace-nodes": {
-                                "source-ipv4-network": "0.0.0.0/0",
-                                "destination-ipv4-network": "0.0.0.0/0",
-                            }
-                        },
-                        "actions": {
-                            "permit": {}
-                        }
+                        ]
                     }
-                ]}
-            }]
+                }
+            ]
         },
         "mixed": {
-            "acl": [{
-                "acl-type":
-                    "vpp-acl:vpp-acl",
-                "acl-name": name,
-                "access-list-entries": {"ace": [{
-                    "rule-name": "ports",
-                    "matches": {
-                        "vpp-ace-nodes": {
-                            "source-ipv4-network": "0.0.0.0/0",
-                            "tcp-nodes": {
-                                "destination-port-range": {
-                                    "lower-port":
-                                        test_vars["l4"]["classify_dst"],
-                                    "upper-port":
-                                        test_vars["l4"]["classify_dst"] + 10
+            "acl": [
+                {
+                    "name": name,
+                    "type": "vpp-acl:vpp-acl",
+                    "aces": {
+                        "ace": [
+                            {
+                                "name": "ports",
+                                "matches": {
+                                    "ipv4": {
+                                        "source-ipv4-network": "0.0.0.0/0"
+                                    },
+                                    "tcp": {
+                                        "source-port": {
+                                            "lower-port": test_vars["l4"]["classify_src"],
+                                            "upper-port": test_vars["l4"]["classify_src"] + 10
+                                        },
+                                        "destination-port":{
+                                            "lower-port": test_vars["l4"]["classify_dst"],
+                                            "upper-port": test_vars["l4"]["classify_dst"] + 10
+                                        }
+                                    }
                                 },
-                                "source-port-range": {
-                                    "lower-port":
-                                        test_vars["l4"]["classify_src"],
-                                    "upper-port":
-                                        test_vars["l4"]["classify_src"] + 10
+                                "actions":{
+                                    "forwarding": "ietf-access-control-list:drop"
+                                }
+                            },
+                            {
+                                "name": "rule_all",
+                                "matches": {
+                                    "ipv4": {
+                                        "destination-ipv4-network": "0.0.0.0/0",
+                                        "source-ipv4-network": "0.0.0.0/0"
+                                    }
+                                },
+                                "actions": {
+                                    "forwarding": "ietf-access-control-list:accept"
                                 }
                             }
-                        }
-                    },
-                    "actions": {
-                        "deny": {}
-                    },
-                },
-                    {
-                        "rule-name": "rule_all",
-                        "matches": {
-                            "vpp-ace-nodes": {
-                                "source-ipv4-network": "0.0.0.0/0",
-                                "destination-ipv4-network": "0.0.0.0/0",
-                            }
-                        },
-                        "actions": {
-                            "permit": {}
-                        }
+                        ]
                     }
-                ]}
-            }]
+                }
+            ]
         },
         "icmp": {
-            "acl": [{
-                "acl-type":
-                    "vpp-acl:vpp-acl",
-                "acl-name": name,
-                "access-list-entries": {"ace": [
-                    {
-                        "rule-name": "rule1",
-                        "matches": {
-                            "vpp-ace-nodes": {
-                                "source-ipv4-network": "0.0.0.0/0",
-                                "icmp-nodes": {
-                                    "icmp-type-range": {
-                                        "first": "1",
-                                        "last": "5"
+            "acl": [
+                {
+                    "name": name,
+                    "type": "vpp-acl:vpp-acl",
+                    "aces": {
+                        "ace": [
+                            {
+                                "name": "rule1",
+                                "matches": {
+                                    "ipv4": {
+                                        "source-ipv4-network": "0.0.0.0/0"
                                     },
-                                    "icmp-code-range": {
-                                        "first": "1",
-                                        "last": "5"
+                                    "icmp": {
+                                        "vpp-acl:vpp-icmp-ace": {
+                                            "vpp-acl:icmp-type-range": {
+                                                "first": "1",
+                                                "last": "5"
+                                            },
+                                            "vpp-acl:icmp-code-range": {
+                                                "first": "1",
+                                                "last": "5"
+                                            }
+                                        }
                                     }
+                                },
+                                "actions": {
+                                    "forwarding": "ietf-access-control-list:drop"
+                                }
+                            },
+                            {
+                                "name": "rule_all",
+                                "matches": {
+                                    "ipv4": {
+                                        "source-ipv4-network": "0.0.0.0/0",
+                                        "destination-ipv4-network": "0.0.0.0/0"
+                                    }
+                                },
+                                "actions": {
+                                    "forwarding": "ietf-access-control-list:accept"
                                 }
                             }
-                        },
-                        "actions": {
-                            "deny": {}
-                        },
-                    },
-                    {
-                        "rule-name": "rule_all",
-                        "matches": {
-                            "vpp-ace-nodes": {
-                                "source-ipv4-network": "0.0.0.0/0",
-                                "destination-ipv4-network": "0.0.0.0/0",
-                            }
-                        },
-                        "actions": {
-                            "permit": {}
-                        }
+                        ]
                     }
-                ]}
-            }]
+                }
+            ]
         },
         "icmpv6": {
-            "acl": [{
-                "acl-type":
-                    "vpp-acl:vpp-acl",
-                "acl-name": name,
-                "access-list-entries": {"ace": [
-                    {
-                        "rule-name": "rule1",
-                        "matches": {
-                            "vpp-ace-nodes": {
-                                "source-ipv6-network": "::/0",
-                                "icmp-v6-nodes": {
-                                    "icmp-type-range": {
-                                        "first": "1",
-                                        "last": "5"
+            "acl": [
+                {
+                    "name": name,
+                    "type": "vpp-acl:vpp-acl",
+                    "aces": {
+                        "ace": [
+                            {
+                                "name": "rule1",
+                                "matches": {
+                                    "ipv6": {
+                                        "source-ipv6-network": "::/0",
                                     },
-                                    "icmp-code-range": {
-                                        "first": "1",
-                                        "last": "5"
+                                    "icmp": {
+                                        "vpp-acl:vpp-icmp-ace": {
+                                            "vpp-acl:icmp-type-range": {
+                                                "first": "1",
+                                                "last": "5"
+                                            },
+                                            "vpp-acl:icmp-code-range": {
+                                                "first": "1",
+                                                "last": "5"
+                                            }
+                                        }
                                     }
+                                },
+                                "actions": {
+                                    "forwarding": "ietf-access-control-list:drop"
+                                }
+                            },
+                            {
+                                "name": "rule_all",
+                                "matches": {
+                                    "ipv6": {
+                                        "destination-ipv6-network": "0::0/0",
+                                        "source-ipv6-network": "::/0",
+                                    }
+                                },
+                                "actions": {
+                                    "forwarding": "ietf-access-control-list:accept"
                                 }
                             }
-                        },
-                        "actions": {
-                            "deny": {}
-                        },
-                    },
-                    {
-                        "rule-name": "rule_all",
-                        "matches": {
-                            "vpp-ace-nodes": {
-                                "source-ipv6-network": "0::0/0",
-                                "destination-ipv6-network": "0::0/0",
-                            }
-                        },
-                        "actions": {
-                            "permit": {}
-                        }
+                        ]
                     }
-                ]}
-            }]
+                }
+            ]
         },
         "reflex": {
-            "acl": [{
-                "acl-type":
-                    "vpp-acl:vpp-acl",
-                "acl-name": name,
-                "access-list-entries": {"ace": [
-                    {
-                        "rule-name": "rule1",
-                        "matches": {
-                            "vpp-ace-nodes": {
-                                "source-ipv4-network":
-                                    "{0}/{1}".format(
-                                        test_vars["reflex"]["classify_dst_net"],
-                                        test_vars["reflex"]["prefix_length"]),
-                                "destination-ipv4-network":
-                                    "{0}/{1}".format(
-                                        test_vars["reflex"]["classify_src_net"],
-                                        test_vars["reflex"]["prefix_length"]),
+            "acl": [
+                {
+                    "name": name,
+                    "type": "vpp-acl:vpp-acl",
+                    "aces": {
+                        "ace": [
+                            {
+                                "name": "rule1",
+                                "matches": {
+                                    "ipv4": {
+                                        "destination-ipv4-network": "{0}/{1}".format(
+                                            test_vars["reflex"]["classify_src_net"],
+                                            test_vars["reflex"]["prefix_length"]),
+                                        "source-ipv4-network": "{0}/{1}".format(
+                                            test_vars["reflex"]["classify_dst_net"],
+                                            test_vars["reflex"]["prefix_length"])
+                                    }
+                                },
+                                "actions": {
+                                    "forwarding": "vpp-acl:accept-and-reflect"
+                                }
                             }
-                        },
-                        "actions": {
-                            # TODO: will be renamed in HC2VPP-57
-                            "vpp-acl:permit": {}
-                        },
-                    },
-                ]}
-            }]
+                        ]
+                    }
+                }
+            ]
         },
         "block_all": {
-            "acl": [{
-                "acl-type":
-                    "vpp-acl:vpp-acl",
-                "acl-name": name,
-                "access-list-entries": {"ace": [
-                    {
-                        "rule-name": "rule_all",
-                        "matches": {
-                            "vpp-ace-nodes": {
-                                "source-ipv4-network": "0.0.0.0/0",
-                                "destination-ipv4-network": "0.0.0.0/0",
+            "acl": [
+                {
+                    "name": name,
+                    "type": "vpp-acl:vpp-acl",
+                    "aces": {
+                        "ace": [
+                            {
+                                "name": "rule_all",
+                                "matches": {
+                                    "ipv4": {
+                                        "destination-ipv4-network": "0.0.0.0/0",
+                                        "source-ipv4-network": "0.0.0.0/0"
+                                    }
+                                },
+                                "actions": {
+                                    "forwarding": "ietf-access-control-list:drop"
+                                }
                             }
-                        },
-                        "actions": {
-                            "deny": {}
-                        }
+                        ]
                     }
-                ]}
-            }]
+                }
+            ]
         },
     }