| #!/bin/bash | |
| # SPDX-License-Identifier: GPL-2.0 | |
| ALL_TESTS="ping_ipv4 ping_ipv6 learning flooding vlan_deletion extern_learn other_tpid 8021p drop_untagged" | |
| NUM_NETIFS=4 | |
| CHECK_TC="yes" | |
| source lib.sh | |
| h1_create() | |
| { | |
| simple_if_init $h1 192.0.2.1/24 2001:db8:1::1/64 | |
| } | |
| h1_destroy() | |
| { | |
| simple_if_fini $h1 192.0.2.1/24 2001:db8:1::1/64 | |
| } | |
| h2_create() | |
| { | |
| simple_if_init $h2 192.0.2.2/24 2001:db8:1::2/64 | |
| } | |
| h2_destroy() | |
| { | |
| simple_if_fini $h2 192.0.2.2/24 2001:db8:1::2/64 | |
| } | |
| switch_create() | |
| { | |
| ip link add dev br0 type bridge \ | |
| vlan_filtering 1 \ | |
| ageing_time $LOW_AGEING_TIME \ | |
| mcast_snooping 0 | |
| ip link set dev $swp1 master br0 | |
| ip link set dev $swp2 master br0 | |
| ip link set dev br0 up | |
| ip link set dev $swp1 up | |
| ip link set dev $swp2 up | |
| } | |
| switch_destroy() | |
| { | |
| ip link set dev $swp2 down | |
| ip link set dev $swp1 down | |
| ip link del dev br0 | |
| } | |
| setup_prepare() | |
| { | |
| h1=${NETIFS[p1]} | |
| swp1=${NETIFS[p2]} | |
| swp2=${NETIFS[p3]} | |
| h2=${NETIFS[p4]} | |
| vrf_prepare | |
| h1_create | |
| h2_create | |
| switch_create | |
| } | |
| cleanup() | |
| { | |
| pre_cleanup | |
| switch_destroy | |
| h2_destroy | |
| h1_destroy | |
| vrf_cleanup | |
| } | |
| ping_ipv4() | |
| { | |
| ping_test $h1 192.0.2.2 | |
| } | |
| ping_ipv6() | |
| { | |
| ping6_test $h1 2001:db8:1::2 | |
| } | |
| learning() | |
| { | |
| learning_test "br0" $swp1 $h1 $h2 | |
| } | |
| flooding() | |
| { | |
| flood_test $swp2 $h1 $h2 | |
| } | |
| vlan_deletion() | |
| { | |
| # Test that the deletion of a VLAN on a bridge port does not affect | |
| # the PVID VLAN | |
| log_info "Add and delete a VLAN on bridge port $swp1" | |
| bridge vlan add vid 10 dev $swp1 | |
| bridge vlan del vid 10 dev $swp1 | |
| ping_ipv4 | |
| ping_ipv6 | |
| } | |
| extern_learn() | |
| { | |
| local mac=de:ad:be:ef:13:37 | |
| local ageing_time | |
| # Test that externally learned FDB entries can roam, but not age out | |
| RET=0 | |
| bridge fdb add de:ad:be:ef:13:37 dev $swp1 master extern_learn vlan 1 | |
| bridge fdb show brport $swp1 | grep -q de:ad:be:ef:13:37 | |
| check_err $? "Did not find FDB entry when should" | |
| # Wait for 10 seconds after the ageing time to make sure the FDB entry | |
| # was not aged out | |
| ageing_time=$(bridge_ageing_time_get br0) | |
| sleep $((ageing_time + 10)) | |
| bridge fdb show brport $swp1 | grep -q de:ad:be:ef:13:37 | |
| check_err $? "FDB entry was aged out when should not" | |
| $MZ $h2 -c 1 -p 64 -a $mac -t ip -q | |
| bridge fdb show brport $swp2 | grep -q de:ad:be:ef:13:37 | |
| check_err $? "FDB entry did not roam when should" | |
| log_test "Externally learned FDB entry - ageing & roaming" | |
| bridge fdb del de:ad:be:ef:13:37 dev $swp2 master vlan 1 &> /dev/null | |
| bridge fdb del de:ad:be:ef:13:37 dev $swp1 master vlan 1 &> /dev/null | |
| } | |
| other_tpid() | |
| { | |
| local mac=de:ad:be:ef:13:37 | |
| # Test that packets with TPID 802.1ad VID 3 + TPID 802.1Q VID 5 are | |
| # classified as untagged by a bridge with vlan_protocol 802.1Q, and | |
| # are processed in the PVID of the ingress port (here 1). Not VID 3, | |
| # and not VID 5. | |
| RET=0 | |
| tc qdisc add dev $h2 clsact | |
| tc filter add dev $h2 ingress protocol all pref 1 handle 101 \ | |
| flower dst_mac $mac action drop | |
| ip link set $h2 promisc on | |
| ethtool -K $h2 rx-vlan-filter off rx-vlan-stag-filter off | |
| $MZ -q $h1 -c 1 -b $mac -a own "88:a8 00:03 81:00 00:05 08:00 aa-aa-aa-aa-aa-aa-aa-aa-aa" | |
| sleep 1 | |
| # Match on 'self' addresses as well, for those drivers which | |
| # do not push their learned addresses to the bridge software | |
| # database | |
| bridge -j fdb show $swp1 | \ | |
| jq -e ".[] | select(.mac == \"$(mac_get $h1)\") | select(.vlan == 1)" &> /dev/null | |
| check_err $? "FDB entry was not learned when it should" | |
| log_test "FDB entry in PVID for VLAN-tagged with other TPID" | |
| RET=0 | |
| tc -j -s filter show dev $h2 ingress \ | |
| | jq -e ".[] | select(.options.handle == 101) \ | |
| | select(.options.actions[0].stats.packets == 1)" &> /dev/null | |
| check_err $? "Packet was not forwarded when it should" | |
| log_test "Reception of VLAN with other TPID as untagged" | |
| bridge vlan del dev $swp1 vid 1 | |
| $MZ -q $h1 -c 1 -b $mac -a own "88:a8 00:03 81:00 00:05 08:00 aa-aa-aa-aa-aa-aa-aa-aa-aa" | |
| sleep 1 | |
| RET=0 | |
| tc -j -s filter show dev $h2 ingress \ | |
| | jq -e ".[] | select(.options.handle == 101) \ | |
| | select(.options.actions[0].stats.packets == 1)" &> /dev/null | |
| check_err $? "Packet was forwarded when should not" | |
| log_test "Reception of VLAN with other TPID as untagged (no PVID)" | |
| bridge vlan add dev $swp1 vid 1 pvid untagged | |
| ip link set $h2 promisc off | |
| tc qdisc del dev $h2 clsact | |
| } | |
| 8021p_do() | |
| { | |
| local should_fail=$1; shift | |
| local mac=de:ad:be:ef:13:37 | |
| tc filter add dev $h2 ingress protocol all pref 1 handle 101 \ | |
| flower dst_mac $mac action drop | |
| $MZ -q $h1 -c 1 -b $mac -a own "81:00 00:00 08:00 aa-aa-aa-aa-aa-aa-aa-aa-aa" | |
| sleep 1 | |
| tc -j -s filter show dev $h2 ingress \ | |
| | jq -e ".[] | select(.options.handle == 101) \ | |
| | select(.options.actions[0].stats.packets == 1)" &> /dev/null | |
| check_err_fail $should_fail $? "802.1p-tagged reception" | |
| tc filter del dev $h2 ingress pref 1 | |
| } | |
| 8021p() | |
| { | |
| RET=0 | |
| tc qdisc add dev $h2 clsact | |
| ip link set $h2 promisc on | |
| # Test that with the default_pvid, 1, packets tagged with VID 0 are | |
| # accepted. | |
| 8021p_do 0 | |
| # Test that packets tagged with VID 0 are still accepted after changing | |
| # the default_pvid. | |
| ip link set br0 type bridge vlan_default_pvid 10 | |
| 8021p_do 0 | |
| log_test "Reception of 802.1p-tagged traffic" | |
| ip link set $h2 promisc off | |
| tc qdisc del dev $h2 clsact | |
| } | |
| send_untagged_and_8021p() | |
| { | |
| ping_do $h1 192.0.2.2 | |
| check_fail $? | |
| 8021p_do 1 | |
| } | |
| drop_untagged() | |
| { | |
| RET=0 | |
| tc qdisc add dev $h2 clsact | |
| ip link set $h2 promisc on | |
| # Test that with no PVID, untagged and 802.1p-tagged traffic is | |
| # dropped. | |
| ip link set br0 type bridge vlan_default_pvid 1 | |
| # First we reconfigure the default_pvid, 1, as a non-PVID VLAN. | |
| bridge vlan add dev $swp1 vid 1 untagged | |
| send_untagged_and_8021p | |
| bridge vlan add dev $swp1 vid 1 pvid untagged | |
| # Next we try to delete VID 1 altogether | |
| bridge vlan del dev $swp1 vid 1 | |
| send_untagged_and_8021p | |
| bridge vlan add dev $swp1 vid 1 pvid untagged | |
| # Set up the bridge without a default_pvid, then check that the 8021q | |
| # module, when the bridge port goes down and then up again, does not | |
| # accidentally re-enable untagged packet reception. | |
| ip link set br0 type bridge vlan_default_pvid 0 | |
| ip link set $swp1 down | |
| ip link set $swp1 up | |
| setup_wait | |
| send_untagged_and_8021p | |
| # Remove swp1 as a bridge port and let it rejoin the bridge while it | |
| # has no default_pvid. | |
| ip link set $swp1 nomaster | |
| ip link set $swp1 master br0 | |
| send_untagged_and_8021p | |
| # Restore settings | |
| ip link set br0 type bridge vlan_default_pvid 1 | |
| log_test "Dropping of untagged and 802.1p-tagged traffic with no PVID" | |
| ip link set $h2 promisc off | |
| tc qdisc del dev $h2 clsact | |
| } | |
| trap cleanup EXIT | |
| setup_prepare | |
| setup_wait | |
| tests_run | |
| exit $EXIT_STATUS |