selftests: forwarding: test for bridge port isolation
This test checks if the bridge port isolation feature works as expected by performing ping/ping6 tests between hosts that are isolated (should not work) and between an isolated and non-isolated hosts (should work). Same test is performed for flooding from and to isolated and non-isolated ports. Signed-off-by: Nikolay Aleksandrov <nikolay@cumulusnetworks.com> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
967450c543
commit
a14e9fafaa
|
@ -0,0 +1,151 @@
|
|||
#!/bin/bash
|
||||
# SPDX-License-Identifier: GPL-2.0
|
||||
|
||||
ALL_TESTS="ping_ipv4 ping_ipv6 flooding"
|
||||
NUM_NETIFS=6
|
||||
CHECK_TC="yes"
|
||||
source lib.sh
|
||||
|
||||
h1_create()
|
||||
{
|
||||
simple_if_init $h1 192.0.2.1/24 2001:db8:1::1/64
|
||||
}
|
||||
|
||||
h1_destroy()
|
||||
{
|
||||
simple_if_fini $h1 192.0.2.1/24 2001:db8:1::1/64
|
||||
}
|
||||
|
||||
h2_create()
|
||||
{
|
||||
simple_if_init $h2 192.0.2.2/24 2001:db8:1::2/64
|
||||
}
|
||||
|
||||
h2_destroy()
|
||||
{
|
||||
simple_if_fini $h2 192.0.2.2/24 2001:db8:1::2/64
|
||||
}
|
||||
|
||||
h3_create()
|
||||
{
|
||||
simple_if_init $h3 192.0.2.3/24 2001:db8:1::3/64
|
||||
}
|
||||
|
||||
h3_destroy()
|
||||
{
|
||||
simple_if_fini $h3 192.0.2.3/24 2001:db8:1::3/64
|
||||
}
|
||||
|
||||
switch_create()
|
||||
{
|
||||
ip link add dev br0 type bridge
|
||||
|
||||
ip link set dev $swp1 master br0
|
||||
ip link set dev $swp2 master br0
|
||||
ip link set dev $swp3 master br0
|
||||
|
||||
ip link set dev $swp1 type bridge_slave isolated on
|
||||
check_err $? "Can't set isolation on port $swp1"
|
||||
ip link set dev $swp2 type bridge_slave isolated on
|
||||
check_err $? "Can't set isolation on port $swp2"
|
||||
ip link set dev $swp3 type bridge_slave isolated off
|
||||
check_err $? "Can't disable isolation on port $swp3"
|
||||
|
||||
ip link set dev br0 up
|
||||
ip link set dev $swp1 up
|
||||
ip link set dev $swp2 up
|
||||
ip link set dev $swp3 up
|
||||
}
|
||||
|
||||
switch_destroy()
|
||||
{
|
||||
ip link set dev $swp3 down
|
||||
ip link set dev $swp2 down
|
||||
ip link set dev $swp1 down
|
||||
|
||||
ip link del dev br0
|
||||
}
|
||||
|
||||
setup_prepare()
|
||||
{
|
||||
h1=${NETIFS[p1]}
|
||||
swp1=${NETIFS[p2]}
|
||||
|
||||
swp2=${NETIFS[p3]}
|
||||
h2=${NETIFS[p4]}
|
||||
|
||||
swp3=${NETIFS[p5]}
|
||||
h3=${NETIFS[p6]}
|
||||
|
||||
vrf_prepare
|
||||
|
||||
h1_create
|
||||
h2_create
|
||||
h3_create
|
||||
|
||||
switch_create
|
||||
}
|
||||
|
||||
cleanup()
|
||||
{
|
||||
pre_cleanup
|
||||
|
||||
switch_destroy
|
||||
|
||||
h3_destroy
|
||||
h2_destroy
|
||||
h1_destroy
|
||||
|
||||
vrf_cleanup
|
||||
}
|
||||
|
||||
ping_ipv4()
|
||||
{
|
||||
RET=0
|
||||
ping_do $h1 192.0.2.2
|
||||
check_fail $? "Ping worked when it should not have"
|
||||
|
||||
RET=0
|
||||
ping_do $h3 192.0.2.2
|
||||
check_err $? "Ping didn't work when it should have"
|
||||
|
||||
log_test "Isolated port ping"
|
||||
}
|
||||
|
||||
ping_ipv6()
|
||||
{
|
||||
RET=0
|
||||
ping6_do $h1 2001:db8:1::2
|
||||
check_fail $? "Ping6 worked when it should not have"
|
||||
|
||||
RET=0
|
||||
ping6_do $h3 2001:db8:1::2
|
||||
check_err $? "Ping6 didn't work when it should have"
|
||||
|
||||
log_test "Isolated port ping6"
|
||||
}
|
||||
|
||||
flooding()
|
||||
{
|
||||
local mac=de:ad:be:ef:13:37
|
||||
local ip=192.0.2.100
|
||||
|
||||
RET=0
|
||||
flood_test_do false $mac $ip $h1 $h2
|
||||
check_err $? "Packet was flooded when it should not have been"
|
||||
|
||||
RET=0
|
||||
flood_test_do true $mac $ip $h3 $h2
|
||||
check_err $? "Packet was not flooded when it should have been"
|
||||
|
||||
log_test "Isolated port flooding"
|
||||
}
|
||||
|
||||
trap cleanup EXIT
|
||||
|
||||
setup_prepare
|
||||
setup_wait
|
||||
|
||||
tests_run
|
||||
|
||||
exit $EXIT_STATUS
|
Loading…
Reference in New Issue