]> git.ipfire.org Git - thirdparty/libvirt.git/commitdiff
Add test cases for VLAN traffic filtering
authorStefan Berger <stefanb@linux.vnet.ibm.com>
Sat, 19 Nov 2011 12:26:56 +0000 (07:26 -0500)
committerStefan Berger <stefanb@us.ibm.com>
Sat, 19 Nov 2011 12:26:56 +0000 (07:26 -0500)
This patch adds a few test cases for the XML parsing of VLAN filtering nodes.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
tests/nwfilterxml2xmlin/vlan-test.xml [new file with mode: 0644]
tests/nwfilterxml2xmlout/vlan-test.xml [new file with mode: 0644]
tests/nwfilterxml2xmltest.c

diff --git a/tests/nwfilterxml2xmlin/vlan-test.xml b/tests/nwfilterxml2xmlin/vlan-test.xml
new file mode 100644 (file)
index 0000000..8bbd44d
--- /dev/null
@@ -0,0 +1,45 @@
+<filter name='testcase'>
+  <uuid>5c6d49af-b071-6127-b4ec-6f8ed4b55335</uuid>
+  <rule action='continue' direction='inout'>
+     <vlan srcmacaddr='1:2:3:4:5:6' srcmacmask='ff:ff:ff:ff:ff:ff'
+           dstmacaddr='aa:bb:cc:dd:ee:ff' dstmacmask='ff:ff:ff:ff:ff:ff'
+           vlanid='0x123'
+     />
+  </rule>
+
+  <rule action='return' direction='inout'>
+     <vlan srcmacaddr='1:2:3:4:5:6' srcmacmask='ff:ff:ff:ff:ff:ff'
+           dstmacaddr='aa:bb:cc:dd:ee:ff' dstmacmask='ff:ff:ff:ff:ff:ff'
+           vlanid='1234'
+     />
+  </rule>
+
+  <rule action='reject' direction='in'>
+     <vlan srcmacaddr='1:2:3:4:5:6' srcmacmask='ff:ff:ff:ff:ff:ff'
+           dstmacaddr='aa:bb:cc:dd:ee:ff' dstmacmask='ff:ff:ff:ff:ff:ff'
+           vlanid='0x123'
+     />
+  </rule>
+
+  <rule action='accept' direction='in'>
+     <vlan srcmacaddr='1:2:3:4:5:6' srcmacmask='ff:ff:ff:ff:ff:ff'
+           dstmacaddr='aa:bb:cc:dd:ee:ff' dstmacmask='ff:ff:ff:ff:ff:ff'
+           vlanid='0xffff'
+     />
+  </rule>
+
+  <rule action='drop' direction='out'>
+     <vlan srcmacaddr='1:2:3:4:5:6' srcmacmask='ff:ff:ff:ff:ff:ff'
+           dstmacaddr='aa:bb:cc:dd:ee:ff' dstmacmask='ff:ff:ff:ff:ff:ff'
+           encap-protocol='arp'
+     />
+  </rule>
+
+  <rule action='accept' direction='out'>
+     <vlan srcmacaddr='1:2:3:4:5:6' srcmacmask='ff:ff:ff:ff:ff:ff'
+           dstmacaddr='aa:bb:cc:dd:ee:ff' dstmacmask='ff:ff:ff:ff:ff:ff'
+           encap-protocol='0x1234'
+     />
+  </rule>
+
+</filter>
diff --git a/tests/nwfilterxml2xmlout/vlan-test.xml b/tests/nwfilterxml2xmlout/vlan-test.xml
new file mode 100644 (file)
index 0000000..cea4ef7
--- /dev/null
@@ -0,0 +1,21 @@
+<filter name='testcase' chain='root'>
+  <uuid>5c6d49af-b071-6127-b4ec-6f8ed4b55335</uuid>
+  <rule action='continue' direction='inout' priority='500'>
+    <vlan srcmacaddr='01:02:03:04:05:06' srcmacmask='ff:ff:ff:ff:ff:ff' dstmacaddr='aa:bb:cc:dd:ee:ff' dstmacmask='ff:ff:ff:ff:ff:ff' vlanid='0x123'/>
+  </rule>
+  <rule action='return' direction='inout' priority='500'>
+    <vlan srcmacaddr='01:02:03:04:05:06' srcmacmask='ff:ff:ff:ff:ff:ff' dstmacaddr='aa:bb:cc:dd:ee:ff' dstmacmask='ff:ff:ff:ff:ff:ff' vlanid='1234'/>
+  </rule>
+  <rule action='reject' direction='in' priority='500'>
+    <vlan srcmacaddr='01:02:03:04:05:06' srcmacmask='ff:ff:ff:ff:ff:ff' dstmacaddr='aa:bb:cc:dd:ee:ff' dstmacmask='ff:ff:ff:ff:ff:ff' vlanid='0x123'/>
+  </rule>
+  <rule action='accept' direction='in' priority='500'>
+    <vlan srcmacaddr='01:02:03:04:05:06' srcmacmask='ff:ff:ff:ff:ff:ff' dstmacaddr='aa:bb:cc:dd:ee:ff' dstmacmask='ff:ff:ff:ff:ff:ff'/>
+  </rule>
+  <rule action='drop' direction='out' priority='500'>
+    <vlan srcmacaddr='01:02:03:04:05:06' srcmacmask='ff:ff:ff:ff:ff:ff' dstmacaddr='aa:bb:cc:dd:ee:ff' dstmacmask='ff:ff:ff:ff:ff:ff' encap-protocol='arp'/>
+  </rule>
+  <rule action='accept' direction='out' priority='500'>
+    <vlan srcmacaddr='01:02:03:04:05:06' srcmacmask='ff:ff:ff:ff:ff:ff' dstmacaddr='aa:bb:cc:dd:ee:ff' dstmacmask='ff:ff:ff:ff:ff:ff' encap-protocol='0x1234'/>
+  </rule>
+</filter>
index 645c246b51d13b0b9026a86626f89b36a9c798e5..0e0dc438be15cc7f901402364bd427f700198a10 100644 (file)
@@ -108,6 +108,7 @@ mymain(void)
     } while (0)
 
     DO_TEST("mac-test", true);
+    DO_TEST("vlan-test", true);
     DO_TEST("arp-test", true);
     DO_TEST("rarp-test", true);
     DO_TEST("ip-test", true);