| #!/bin/bash |
| # SPDX-License-Identifier: GPL-2.0 |
| |
| ALL_TESTS="ping_ipv4 ping_ipv6 flooding" |
| NUM_NETIFS=6 |
| CHECK_TC="yes" |
| source lib.sh |
| |
| h1_create() |
| { |
| simple_if_init $h1 192.0.2.1/24 2001:db8:1::1/64 |
| } |
| |
| h1_destroy() |
| { |
| simple_if_fini $h1 192.0.2.1/24 2001:db8:1::1/64 |
| } |
| |
| h2_create() |
| { |
| simple_if_init $h2 192.0.2.2/24 2001:db8:1::2/64 |
| } |
| |
| h2_destroy() |
| { |
| simple_if_fini $h2 192.0.2.2/24 2001:db8:1::2/64 |
| } |
| |
| h3_create() |
| { |
| simple_if_init $h3 192.0.2.3/24 2001:db8:1::3/64 |
| } |
| |
| h3_destroy() |
| { |
| simple_if_fini $h3 192.0.2.3/24 2001:db8:1::3/64 |
| } |
| |
| switch_create() |
| { |
| ip link add dev br0 type bridge |
| |
| ip link set dev $swp1 master br0 |
| ip link set dev $swp2 master br0 |
| ip link set dev $swp3 master br0 |
| |
| ip link set dev $swp1 type bridge_slave isolated on |
| check_err $? "Can't set isolation on port $swp1" |
| ip link set dev $swp2 type bridge_slave isolated on |
| check_err $? "Can't set isolation on port $swp2" |
| ip link set dev $swp3 type bridge_slave isolated off |
| check_err $? "Can't disable isolation on port $swp3" |
| |
| ip link set dev br0 up |
| ip link set dev $swp1 up |
| ip link set dev $swp2 up |
| ip link set dev $swp3 up |
| } |
| |
| switch_destroy() |
| { |
| ip link set dev $swp3 down |
| ip link set dev $swp2 down |
| ip link set dev $swp1 down |
| |
| ip link del dev br0 |
| } |
| |
| setup_prepare() |
| { |
| h1=${NETIFS[p1]} |
| swp1=${NETIFS[p2]} |
| |
| swp2=${NETIFS[p3]} |
| h2=${NETIFS[p4]} |
| |
| swp3=${NETIFS[p5]} |
| h3=${NETIFS[p6]} |
| |
| vrf_prepare |
| |
| h1_create |
| h2_create |
| h3_create |
| |
| switch_create |
| } |
| |
| cleanup() |
| { |
| pre_cleanup |
| |
| switch_destroy |
| |
| h3_destroy |
| h2_destroy |
| h1_destroy |
| |
| vrf_cleanup |
| } |
| |
| ping_ipv4() |
| { |
| RET=0 |
| ping_do $h1 192.0.2.2 |
| check_fail $? "Ping worked when it should not have" |
| |
| RET=0 |
| ping_do $h3 192.0.2.2 |
| check_err $? "Ping didn't work when it should have" |
| |
| log_test "Isolated port ping" |
| } |
| |
| ping_ipv6() |
| { |
| RET=0 |
| ping6_do $h1 2001:db8:1::2 |
| check_fail $? "Ping6 worked when it should not have" |
| |
| RET=0 |
| ping6_do $h3 2001:db8:1::2 |
| check_err $? "Ping6 didn't work when it should have" |
| |
| log_test "Isolated port ping6" |
| } |
| |
| flooding() |
| { |
| local mac=de:ad:be:ef:13:37 |
| local ip=192.0.2.100 |
| |
| RET=0 |
| flood_test_do false $mac $ip $h1 $h2 |
| check_err $? "Packet was flooded when it should not have been" |
| |
| RET=0 |
| flood_test_do true $mac $ip $h3 $h2 |
| check_err $? "Packet was not flooded when it should have been" |
| |
| log_test "Isolated port flooding" |
| } |
| |
| trap cleanup EXIT |
| |
| setup_prepare |
| setup_wait |
| |
| tests_run |
| |
| exit $EXIT_STATUS |