Link-In
The following scenario shows how to filter packets based on
VLAN attributes using traffic selectors. The policy is
attached to DUT0’s link-in hook; DUT1 originates the
traffic and DUT0’s journal is checked.
Test VLAN Selector (802.1Q) Link-In
Description
A traffic policy MATCH_VLAN is configured on DUT0’s
parent interface (eth0) in the link-in hook.
The traffic selector VLAN filters packets with
ether-type 8021q and vlan id 100, logging
matches with prefix MATCH_VLAN. DUT1 sends a ping
through the 802.1Q VLAN; DUT0 sees it on link-in.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.790 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.790/0.790/0.790/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.2.*10.0.0.1.*Show output
May 19 12:21:41.854433 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 19 12:21:41.858250 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=de:ad:be:ef:6c:00:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=62158 DF PROTO=ICMP TYPE=8 CODE=0 ID=68 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.351 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.351/0.351/0.351/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.2.*10.0.0.1.*Show output
May 14 07:28:26.280561 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 14 07:28:26.280852 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=00:a0:26:e3:01:4c:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=35316 DF PROTO=ICMP TYPE=8 CODE=0 ID=218 SEQ=1 May 14 07:28:27.340463 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=00:a0:26:e3:01:4c:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=35748 DF PROTO=ICMP TYPE=8 CODE=0 ID=219 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.682 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.682/0.682/0.682/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.2.*10.0.0.1.*Show output
May 14 07:35:00.457346 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 14 07:35:00.461261 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:99:35:97:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=39578 DF PROTO=ICMP TYPE=8 CODE=0 ID=284 SEQ=1 May 14 07:35:01.500554 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:99:35:97:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=40160 DF PROTO=ICMP TYPE=8 CODE=0 ID=285 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0p0 mtu 1390 set interfaces ethernet eth0p0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0p0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=1.17 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.172/1.172/1.172/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0p0.*10.0.0.2.*10.0.0.1.*Show output
May 14 10:47:38.973479 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 14 10:47:38.974244 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= MAC=00:a0:26:0e:59:16:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=3053 DF PROTO=ICMP TYPE=8 CODE=0 ID=803 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth4 mtu 1390 set interfaces ethernet eth4 traffic policy link-in MATCH_VLAN set interfaces ethernet eth4 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.147 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.147/0.147/0.147/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth4.*10.0.0.2.*10.0.0.1.*Show output
May 13 11:45:18.553588 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 13 11:45:18.831152 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 13 11:45:18.831302 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=00:a0:26:04:00:3a:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=28861 DF PROTO=ICMP TYPE=8 CODE=0 ID=222 SEQ=1 May 13 11:45:19.913185 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=00:a0:26:04:00:3a:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=28956 DF PROTO=ICMP TYPE=8 CODE=0 ID=223 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.490 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.490/0.490/0.490/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.2.*10.0.0.1.*Show output
May 13 00:57:22.819576 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 13 00:57:22.819620 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=40:64:dc:38:ed:02:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=65003 DF PROTO=ICMP TYPE=8 CODE=0 ID=285 SEQ=1
Step 5: Clean all the configuration in DUT0:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 6: Clean all the configuration in DUT1:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 7: Clean all the configuration in DUT2:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 8: Set the following configuration in DUT0 :
set interfaces ethernet eth5 mtu 1390 set interfaces ethernet eth5 traffic policy link-in MATCH_VLAN set interfaces ethernet eth5 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 9: Set the following configuration in DUT1 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 10: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.500 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.500/0.500/0.500/0.000 ms
Step 11: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth5.*10.0.0.2.*10.0.0.1.*Show output
May 13 00:57:34.015571 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth5 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:11 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 13 00:57:34.015608 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth5 OUT= MAC=40:64:dc:38:ed:07:de:ad:be:ef:6c:11:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=572 DF PROTO=ICMP TYPE=8 CODE=0 ID=287 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.831 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.831/0.831/0.831/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.2.*10.0.0.1.*Show output
May 13 23:36:35.535435 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:ff:ef:6c:10:de:ad:be:ef:6c:10:86:dd SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0001:ffef:6c10 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0 May 13 23:36:35.576312 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 13 23:36:35.579893 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:8b:01:36:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=41069 DF PROTO=ICMP TYPE=8 CODE=0 ID=782 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.335 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.335/0.335/0.335/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.2.*10.0.0.1.*Show output
May 14 03:47:18.369952 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 14 03:47:18.372165 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:16:00:16:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=46568 DF PROTO=ICMP TYPE=8 CODE=0 ID=684 SEQ=1 May 14 03:47:19.412343 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:16:00:16:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=46881 DF PROTO=ICMP TYPE=8 CODE=0 ID=685 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth2 mtu 1390 set interfaces ethernet eth2 traffic policy link-in MATCH_VLAN set interfaces ethernet eth2 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.744 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.744/0.744/0.744/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth2.*10.0.0.2.*10.0.0.1.*Show output
May 15 00:57:06.262619 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 15 00:57:06.338701 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 15 00:57:06.346642 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 15 00:57:06.858669 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 15 00:57:06.858935 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=02:a0:26:54:55:14:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=23069 DF PROTO=ICMP TYPE=8 CODE=0 ID=1544 SEQ=1 May 15 00:57:07.898111 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=02:a0:26:54:55:14:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=23436 DF PROTO=ICMP TYPE=8 CODE=0 ID=1545 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.295 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.295/0.295/0.295/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.2.*10.0.0.1.*Show output
May 20 01:43:12.673272 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 20 01:43:12.705214 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 20 01:43:12.705475 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:18:00:9d:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=48750 DF PROTO=ICMP TYPE=8 CODE=0 ID=1106 SEQ=1 May 20 01:43:12.801214 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 20 01:43:13.771011 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:18:00:9d:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=48761 DF PROTO=ICMP TYPE=8 CODE=0 ID=1107 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.380 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.380/0.380/0.380/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.2.*10.0.0.1.*Show output
May 18 14:13:11.819135 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 18 14:13:12.138975 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 18 14:13:12.139621 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:12:00:3b:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=63695 DF PROTO=ICMP TYPE=8 CODE=0 ID=1511 SEQ=1 May 18 14:13:13.194448 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:12:00:3b:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=64361 DF PROTO=ICMP TYPE=8 CODE=0 ID=1512 SEQ=1
Test VLAN Selector (QinQ) Link-In
Description
A traffic policy MATCH_VLAN is configured on DUT0’s
parent interface (eth0) in the link-in hook.
The traffic selector VLAN filters packets with
ether-type 8021ad, vlan id 100,
vlan protocol 8021q and vlan inner-id 200. DUT1
sends a ping through the QinQ VLAN; DUT0 sees the
double-tagged packet on link-in.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.744 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.744/0.744/0.744/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 19 12:21:53.253839 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=de:ad:be:ef:6c:00:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.621 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.621/0.621/0.621/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 14 07:28:49.397679 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=00:a0:26:e3:01:4c:de:ad:be:ef:6c:10:81:00 May 14 07:28:50.445969 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=00:a0:26:e3:01:4c:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.394 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.394/0.394/0.394/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 14 07:35:23.322451 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:99:35:97:de:ad:be:ef:6c:10:81:00 May 14 07:35:24.374583 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:99:35:97:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0p0 mtu 1390 set interfaces ethernet eth0p0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0p0 vif 100 ethertype 802.1ad set interfaces ethernet eth0p0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.960 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.960/0.960/0.960/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0p0.*Show output
May 14 10:48:08.841312 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= MAC=00:a0:26:0e:59:16:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth4 mtu 1390 set interfaces ethernet eth4 traffic policy link-in MATCH_VLAN set interfaces ethernet eth4 vif 100 ethertype 802.1ad set interfaces ethernet eth4 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.515 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.515/0.515/0.515/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth4.*Show output
May 13 11:45:34.346254 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=00:a0:26:04:00:3a:de:ad:be:ef:6c:10:81:00 May 13 11:45:35.425083 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=00:a0:26:04:00:3a:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.642 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.642/0.642/0.642/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 13 00:57:44.287489 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=40:64:dc:38:ed:02:de:ad:be:ef:6c:10:81:00
Step 5: Clean all the configuration in DUT0:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 6: Clean all the configuration in DUT1:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 7: Clean all the configuration in DUT2:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 8: Set the following configuration in DUT0 :
set interfaces ethernet eth5 mtu 1390 set interfaces ethernet eth5 traffic policy link-in MATCH_VLAN set interfaces ethernet eth5 vif 100 ethertype 802.1ad set interfaces ethernet eth5 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 9: Set the following configuration in DUT1 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 10: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.489 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.489/0.489/0.489/0.000 ms
Step 11: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth5.*Show output
May 13 00:57:56.287485 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth5 OUT= MAC=40:64:dc:38:ed:07:de:ad:be:ef:6c:11:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.929 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.929/0.929/0.929/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 13 23:36:50.166591 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:8b:01:36:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.683 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.683/0.683/0.683/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 14 03:47:34.814887 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:16:00:16:de:ad:be:ef:6c:10:81:00 May 14 03:47:35.864310 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:16:00:16:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth2 mtu 1390 set interfaces ethernet eth2 traffic policy link-in MATCH_VLAN set interfaces ethernet eth2 vif 100 ethertype 802.1ad set interfaces ethernet eth2 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.401 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.401/0.401/0.401/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth2.*Show output
May 15 00:57:30.442974 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=02:a0:26:54:55:14:de:ad:be:ef:6c:10:81:00 May 15 00:57:31.490979 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=02:a0:26:54:55:14:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.504 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.504/0.504/0.504/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 20 01:43:37.401268 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:18:00:9d:de:ad:be:ef:6c:10:81:00 May 20 01:43:38.452581 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:18:00:9d:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.627 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.627/0.627/0.627/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 18 14:13:36.876799 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:12:00:3b:de:ad:be:ef:6c:10:81:00 May 18 14:13:37.930231 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:12:00:3b:de:ad:be:ef:6c:10:81:00
Test VLAN Selector (QinQ) With PCP Matches Link-In
Description
The traffic selector VLAN filters QinQ packets
matching vlan id 100, vlan pcp 3,
vlan inner-id 200 and vlan inner-pcp 5. Traffic
policies OUTER_COS and INNER_COS on DUT1’s outer
and inner VLAN sub-interfaces set the required PCP
values, which DUT0 matches on link-in.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy OUTER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.600 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.600/0.600/0.600/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 19 12:22:05.022193 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=de:ad:be:ef:6c:00:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy OUTER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.381 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.381/0.381/0.381/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 14 07:29:12.969948 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=00:a0:26:e3:01:4c:de:ad:be:ef:6c:10:81:00 May 14 07:29:14.024111 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=00:a0:26:e3:01:4c:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy OUTER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.459 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.459/0.459/0.459/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 14 07:35:47.473797 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:99:35:97:de:ad:be:ef:6c:10:81:00 May 14 07:35:48.516528 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:99:35:97:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0p0 mtu 1390 set interfaces ethernet eth0p0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0p0 vif 100 ethertype 802.1ad set interfaces ethernet eth0p0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy OUTER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=1.37 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.371/1.371/1.371/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0p0.*Show output
May 14 10:48:38.630535 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= MAC=00:a0:26:0e:59:16:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth4 mtu 1390 set interfaces ethernet eth4 traffic policy link-in MATCH_VLAN set interfaces ethernet eth4 vif 100 ethertype 802.1ad set interfaces ethernet eth4 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy OUTER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.305 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.305/0.305/0.305/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth4.*Show output
May 13 11:45:52.054413 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=00:a0:26:04:00:3a:de:ad:be:ef:6c:10:81:00 May 13 11:45:53.112190 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=00:a0:26:04:00:3a:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy OUTER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.848 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.848/0.848/0.848/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 13 00:58:07.951459 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=40:64:dc:38:ed:02:de:ad:be:ef:6c:10:81:00
Step 5: Clean all the configuration in DUT0:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 6: Clean all the configuration in DUT1:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 7: Clean all the configuration in DUT2:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 8: Set the following configuration in DUT0 :
set interfaces ethernet eth5 mtu 1390 set interfaces ethernet eth5 traffic policy link-in MATCH_VLAN set interfaces ethernet eth5 vif 100 ethertype 802.1ad set interfaces ethernet eth5 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 9: Set the following configuration in DUT1 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth1 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy OUTER_COS rule 1 set cos-mark 3
Step 10: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.574 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.574/0.574/0.574/0.000 ms
Step 11: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth5.*Show output
May 13 00:58:19.159459 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth5 OUT= MAC=40:64:dc:38:ed:07:de:ad:be:ef:6c:11:81:00 May 13 00:58:20.371457 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth5 OUT= MAC=40:64:dc:38:ed:07:de:ad:be:ef:6c:11:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy OUTER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.898 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.898/0.898/0.898/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 13 23:37:04.890847 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:8b:01:36:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy OUTER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.429 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.429/0.429/0.429/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 14 03:47:52.539389 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:16:00:16:de:ad:be:ef:6c:10:81:00 May 14 03:47:53.581804 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:16:00:16:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth2 mtu 1390 set interfaces ethernet eth2 traffic policy link-in MATCH_VLAN set interfaces ethernet eth2 vif 100 ethertype 802.1ad set interfaces ethernet eth2 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy OUTER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.351 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.351/0.351/0.351/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth2.*Show output
May 15 00:57:56.103475 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=02:a0:26:54:55:14:de:ad:be:ef:6c:10:81:00 May 15 00:57:57.155229 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=02:a0:26:54:55:14:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy OUTER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.566 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.566/0.566/0.566/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 20 01:44:02.016605 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:18:00:9d:de:ad:be:ef:6c:10:81:00 May 20 01:44:04.102607 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:18:00:9d:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy OUTER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.423 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.423/0.423/0.423/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 18 14:14:01.793733 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:12:00:3b:de:ad:be:ef:6c:10:81:00 May 18 14:14:02.830406 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:12:00:3b:de:ad:be:ef:6c:10:81:00
Test VLAN Selector (802.1Q) With Not Vlan Id Link-In
Description
The traffic selector VLAN uses not vlan id 100.
DUT1 sends through VLAN 101, so the negated condition
matches on DUT0’s link-in hook (the packet’s VLAN id
differs from 100), causing rule 1 to log with prefix
MATCH_VLAN.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.652 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.652/0.652/0.652/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.2.*10.0.0.1.*Show output
May 19 12:22:15.847859 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 19 12:22:15.847928 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=de:ad:be:ef:6c:00:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=1921 DF PROTO=ICMP TYPE=8 CODE=0 ID=71 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.916 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.916/0.916/0.916/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.2.*10.0.0.1.*Show output
May 14 07:29:35.377931 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 14 07:29:36.453693 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 14 07:29:36.453974 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=00:a0:26:e3:01:4c:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=46769 DF PROTO=ICMP TYPE=8 CODE=0 ID=225 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.388 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.388/0.388/0.388/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.2.*10.0.0.1.*Show output
May 14 07:36:09.855425 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 14 07:36:09.855662 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:99:35:97:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=47972 DF PROTO=ICMP TYPE=8 CODE=0 ID=290 SEQ=1 May 14 07:36:10.015404 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 14 07:36:10.922360 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:99:35:97:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=48249 DF PROTO=ICMP TYPE=8 CODE=0 ID=291 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0p0 mtu 1390 set interfaces ethernet eth0p0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0p0 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=1.15 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.145/1.145/1.145/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0p0.*10.0.0.2.*10.0.0.1.*Show output
May 14 10:49:08.062289 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= MAC=33:33:ff:ef:6c:10:de:ad:be:ef:6c:10:86:dd SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0001:ffef:6c10 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0 May 14 10:49:08.086073 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 14 10:49:08.090055 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= MAC=00:a0:26:0e:59:16:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=15611 DF PROTO=ICMP TYPE=8 CODE=0 ID=806 SEQ=1 May 14 10:49:08.126234 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth4 mtu 1390 set interfaces ethernet eth4 traffic policy link-in MATCH_VLAN set interfaces ethernet eth4 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.526 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.526/0.526/0.526/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth4.*10.0.0.2.*10.0.0.1.*Show output
May 13 11:46:07.769841 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 13 11:46:07.769986 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=00:a0:26:04:00:3a:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=33794 DF PROTO=ICMP TYPE=8 CODE=0 ID=228 SEQ=1 May 13 11:46:08.840036 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=00:a0:26:04:00:3a:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=34139 DF PROTO=ICMP TYPE=8 CODE=0 ID=229 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.802 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.802/0.802/0.802/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.2.*10.0.0.1.*Show output
May 13 00:58:29.875418 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 13 00:58:29.875456 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=40:64:dc:38:ed:02:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=6435 DF PROTO=ICMP TYPE=8 CODE=0 ID=294 SEQ=1
Step 5: Clean all the configuration in DUT0:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 6: Clean all the configuration in DUT1:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 7: Clean all the configuration in DUT2:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 8: Set the following configuration in DUT0 :
set interfaces ethernet eth5 mtu 1390 set interfaces ethernet eth5 traffic policy link-in MATCH_VLAN set interfaces ethernet eth5 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 9: Set the following configuration in DUT1 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 10: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.742 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.742/0.742/0.742/0.000 ms
Step 11: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth5.*10.0.0.2.*10.0.0.1.*Show output
May 13 00:58:41.043417 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth5 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:11 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 13 00:58:41.043458 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth5 OUT= MAC=40:64:dc:38:ed:07:de:ad:be:ef:6c:11:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=8435 DF PROTO=ICMP TYPE=8 CODE=0 ID=296 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.797 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.797/0.797/0.797/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.2.*10.0.0.1.*Show output
May 13 23:37:18.601840 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 13 23:37:18.602252 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:8b:01:36:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=49439 DF PROTO=ICMP TYPE=8 CODE=0 ID=785 SEQ=1 May 13 23:37:18.650685 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:ff:ef:6c:10:de:ad:be:ef:6c:10:86:dd SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0001:ffef:6c10 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.729 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.729/0.729/0.729/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.2.*10.0.0.1.*Show output
May 14 03:48:08.251737 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 14 03:48:08.252184 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:16:00:16:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=54148 DF PROTO=ICMP TYPE=8 CODE=0 ID=690 SEQ=1 May 14 03:48:09.312171 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:16:00:16:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=54491 DF PROTO=ICMP TYPE=8 CODE=0 ID=691 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth2 mtu 1390 set interfaces ethernet eth2 traffic policy link-in MATCH_VLAN set interfaces ethernet eth2 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.540 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.540/0.540/0.540/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth2.*10.0.0.2.*10.0.0.1.*Show output
May 15 00:58:16.863254 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 15 00:58:16.863557 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=02:a0:26:54:55:14:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=29136 DF PROTO=ICMP TYPE=8 CODE=0 ID=1552 SEQ=1 May 15 00:58:17.918878 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=02:a0:26:54:55:14:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=29456 DF PROTO=ICMP TYPE=8 CODE=0 ID=1553 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.473 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.473/0.473/0.473/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.2.*10.0.0.1.*Show output
May 20 01:44:26.075448 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 20 01:44:26.079294 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:18:00:9d:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=58738 DF PROTO=ICMP TYPE=8 CODE=0 ID=1112 SEQ=1 May 20 01:44:27.139900 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:18:00:9d:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=59439 DF PROTO=ICMP TYPE=8 CODE=0 ID=1113 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.417 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.417/0.417/0.417/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.2.*10.0.0.1.*Show output
May 18 14:14:24.165752 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 18 14:14:24.293602 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 18 14:14:24.677725 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 18 14:14:24.681921 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:12:00:3b:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=4208 DF PROTO=ICMP TYPE=8 CODE=0 ID=1517 SEQ=1 May 18 14:14:25.708414 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:12:00:3b:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=4908 DF PROTO=ICMP TYPE=8 CODE=0 ID=1518 SEQ=1
Test VLAN Selector (802.1Q) With Not Vlan PCP Link-In
Description
The traffic selector VLAN uses vlan id 100 and
not vlan pcp 3. A traffic policy SET_COS on DUT1’s
VLAN sub-interface sets the PCP value to 5, so the negated
condition matches on DUT0’s link-in hook, causing rule 1
to log with prefix MATCH_VLAN.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy SET_COS rule 1 set cos-mark 5
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=1.24 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.241/1.241/1.241/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.2.*10.0.0.1.*Show output
May 19 12:22:26.607780 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 19 12:22:26.608219 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=de:ad:be:ef:6c:00:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=3498 DF PROTO=ICMP TYPE=8 CODE=0 ID=72 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy SET_COS rule 1 set cos-mark 5
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.702 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.702/0.702/0.702/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.2.*10.0.0.1.*Show output
May 14 07:29:58.166658 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 14 07:29:59.200752 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 14 07:29:59.202510 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=00:a0:26:e3:01:4c:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=51456 DF PROTO=ICMP TYPE=8 CODE=0 ID=227 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy SET_COS rule 1 set cos-mark 5
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.344 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.344/0.344/0.344/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.2.*10.0.0.1.*Show output
May 14 07:36:33.771394 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 14 07:36:33.771663 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:99:35:97:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=51890 DF PROTO=ICMP TYPE=8 CODE=0 ID=292 SEQ=1 May 14 07:36:34.802827 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:99:35:97:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=52373 DF PROTO=ICMP TYPE=8 CODE=0 ID=293 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0p0 mtu 1390 set interfaces ethernet eth0p0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0p0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy SET_COS rule 1 set cos-mark 5
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=1.56 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.555/1.555/1.555/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0p0.*10.0.0.2.*10.0.0.1.*Show output
May 14 10:49:37.534693 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 14 10:49:37.561276 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 14 10:49:37.561983 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= MAC=00:a0:26:0e:59:16:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=21736 DF PROTO=ICMP TYPE=8 CODE=0 ID=807 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth4 mtu 1390 set interfaces ethernet eth4 traffic policy link-in MATCH_VLAN set interfaces ethernet eth4 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy SET_COS rule 1 set cos-mark 5
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.477 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.477/0.477/0.477/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth4.*10.0.0.2.*10.0.0.1.*Show output
May 13 11:46:24.117374 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 13 11:46:24.117536 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=00:a0:26:04:00:3a:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=35052 DF PROTO=ICMP TYPE=8 CODE=0 ID=230 SEQ=1 May 13 11:46:25.255598 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=00:a0:26:04:00:3a:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=35841 DF PROTO=ICMP TYPE=8 CODE=0 ID=231 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy SET_COS rule 1 set cos-mark 5
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.831 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.831/0.831/0.831/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.2.*10.0.0.1.*Show output
May 13 00:58:51.203465 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 13 00:58:51.203502 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=40:64:dc:38:ed:02:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=10631 DF PROTO=ICMP TYPE=8 CODE=0 ID=297 SEQ=1
Step 5: Clean all the configuration in DUT0:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 6: Clean all the configuration in DUT1:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 7: Clean all the configuration in DUT2:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 8: Set the following configuration in DUT0 :
set interfaces ethernet eth5 mtu 1390 set interfaces ethernet eth5 traffic policy link-in MATCH_VLAN set interfaces ethernet eth5 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 9: Set the following configuration in DUT1 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 vif 100 address 10.0.0.2/24 set interfaces ethernet eth1 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy SET_COS rule 1 set cos-mark 5
Step 10: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.786 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.786/0.786/0.786/0.000 ms
Step 11: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth5.*10.0.0.2.*10.0.0.1.*Show output
May 13 00:59:03.403466 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth5 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:11 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 13 00:59:03.403506 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth5 OUT= MAC=40:64:dc:38:ed:07:de:ad:be:ef:6c:11:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=12161 DF PROTO=ICMP TYPE=8 CODE=0 ID=299 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy SET_COS rule 1 set cos-mark 5
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.762 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.762/0.762/0.762/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.2.*10.0.0.1.*Show output
May 13 23:37:33.030504 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 13 23:37:33.030951 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:8b:01:36:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=50398 DF PROTO=ICMP TYPE=8 CODE=0 ID=786 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy SET_COS rule 1 set cos-mark 5
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.535 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.535/0.535/0.535/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.2.*10.0.0.1.*Show output
May 14 03:48:24.628077 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 14 03:48:24.724084 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 14 03:48:24.724574 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:16:00:16:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=54871 DF PROTO=ICMP TYPE=8 CODE=0 ID=692 SEQ=1 May 14 03:48:24.820060 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 14 03:48:25.755612 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:16:00:16:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=55429 DF PROTO=ICMP TYPE=8 CODE=0 ID=693 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth2 mtu 1390 set interfaces ethernet eth2 traffic policy link-in MATCH_VLAN set interfaces ethernet eth2 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy SET_COS rule 1 set cos-mark 5
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.391 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.391/0.391/0.391/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth2.*10.0.0.2.*10.0.0.1.*Show output
May 15 00:58:37.308154 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 15 00:58:37.724152 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 15 00:58:37.724602 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=02:a0:26:54:55:14:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=31733 DF PROTO=ICMP TYPE=8 CODE=0 ID=1554 SEQ=1 May 15 00:58:37.820135 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 15 00:58:38.785067 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=02:a0:26:54:55:14:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=32068 DF PROTO=ICMP TYPE=8 CODE=0 ID=1555 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy SET_COS rule 1 set cos-mark 5
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.552 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.552/0.552/0.552/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.2.*10.0.0.1.*Show output
May 20 01:44:51.182539 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 20 01:44:51.183026 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:18:00:9d:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=60434 DF PROTO=ICMP TYPE=8 CODE=0 ID=1114 SEQ=1 May 20 01:44:52.263660 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:18:00:9d:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=60830 DF PROTO=ICMP TYPE=8 CODE=0 ID=1115 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy SET_COS rule 1 set cos-mark 5
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.530 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.530/0.530/0.530/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.2.*10.0.0.1.*Show output
May 18 14:14:49.157795 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 18 14:14:49.373737 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 18 14:14:49.821671 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=00:00:00:00:00:00 IPDST=10.0.0.1 May 18 14:14:49.822062 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:12:00:3b:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=9442 DF PROTO=ICMP TYPE=8 CODE=0 ID=1519 SEQ=1 May 18 14:14:50.865026 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:12:00:3b:de:ad:be:ef:6c:10:08:00 SRC=10.0.0.2 DST=10.0.0.1 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=9835 DF PROTO=ICMP TYPE=8 CODE=0 ID=1520 SEQ=1
Test VLAN Selector (QinQ) With Not Vlan Inner-id Link-In
Description
The traffic selector VLAN uses vlan id 100,
vlan protocol 8021q and not vlan inner-id 200.
DUT1 sends through C-VLAN 201, so the negated condition
matches on DUT0’s link-in hook (the packet’s inner VLAN
id differs from 200), causing rule 1 to log with prefix
MATCH_VLAN.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.747 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.747/0.747/0.747/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 19 12:22:37.716241 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 19 12:22:37.720318 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=de:ad:be:ef:6c:00:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.672 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.672/0.672/0.672/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 14 07:30:21.351182 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 14 07:30:22.401786 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 14 07:30:22.402069 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=00:a0:26:e3:01:4c:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.582 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.582/0.582/0.582/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 14 07:36:57.628379 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 14 07:36:57.628702 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:99:35:97:de:ad:be:ef:6c:10:81:00 May 14 07:36:58.667561 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:99:35:97:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0p0 mtu 1390 set interfaces ethernet eth0p0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0p0 vif 100 ethertype 802.1ad set interfaces ethernet eth0p0 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=1.09 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.089/1.089/1.089/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0p0.*Show output
May 14 10:50:06.133767 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 14 10:50:06.134222 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= MAC=00:a0:26:0e:59:16:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth4 mtu 1390 set interfaces ethernet eth4 traffic policy link-in MATCH_VLAN set interfaces ethernet eth4 vif 100 ethertype 802.1ad set interfaces ethernet eth4 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.534 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.534/0.534/0.534/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth4.*Show output
May 13 11:46:40.325374 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 13 11:46:40.329350 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=00:a0:26:04:00:3a:de:ad:be:ef:6c:10:81:00 May 13 11:46:41.391298 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=00:a0:26:04:00:3a:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.535 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.535/0.535/0.535/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 13 00:59:13.195413 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 13 00:59:13.195451 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=40:64:dc:38:ed:02:de:ad:be:ef:6c:10:81:00
Step 5: Clean all the configuration in DUT0:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 6: Clean all the configuration in DUT1:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 7: Clean all the configuration in DUT2:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 8: Set the following configuration in DUT0 :
set interfaces ethernet eth5 mtu 1390 set interfaces ethernet eth5 traffic policy link-in MATCH_VLAN set interfaces ethernet eth5 vif 100 ethertype 802.1ad set interfaces ethernet eth5 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 9: Set the following configuration in DUT1 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 10: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.705 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.705/0.705/0.705/0.000 ms
Step 11: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth5.*Show output
May 13 00:59:24.703410 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth5 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:11:81:00 May 13 00:59:24.703448 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth5 OUT= MAC=40:64:dc:38:ed:07:de:ad:be:ef:6c:11:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.923 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.923/0.923/0.923/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 13 23:37:46.863966 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:ff:ef:6c:10:de:ad:be:ef:6c:10:81:00 May 13 23:37:47.026002 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 13 23:37:47.026176 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:8b:01:36:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.362 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.362/0.362/0.362/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 14 03:48:41.744333 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 14 03:48:41.744761 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:16:00:16:de:ad:be:ef:6c:10:81:00 May 14 03:48:42.789814 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:16:00:16:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth2 mtu 1390 set interfaces ethernet eth2 traffic policy link-in MATCH_VLAN set interfaces ethernet eth2 vif 100 ethertype 802.1ad set interfaces ethernet eth2 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.452 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.452/0.452/0.452/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth2.*Show output
May 15 00:59:00.884488 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 15 00:59:00.887115 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=02:a0:26:54:55:14:de:ad:be:ef:6c:10:81:00 May 15 00:59:01.935772 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=02:a0:26:54:55:14:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.568 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.568/0.568/0.568/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 20 01:45:15.541727 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 20 01:45:16.245639 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 20 01:45:16.246872 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:18:00:9d:de:ad:be:ef:6c:10:81:00 May 20 01:45:17.310882 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:18:00:9d:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.550 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.550/0.550/0.550/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 18 14:15:12.680519 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 18 14:15:13.128389 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 18 14:15:13.128714 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:12:00:3b:de:ad:be:ef:6c:10:81:00 May 18 14:15:14.168781 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:12:00:3b:de:ad:be:ef:6c:10:81:00
Test VLAN Selector (QinQ) With Not Vlan Inner-pcp Link-In
Description
The traffic selector VLAN uses vlan id 100,
vlan protocol 8021q, vlan inner-id 200 and
not vlan inner-pcp 5. A traffic policy INNER_COS
on DUT1’s inner VLAN sub-interface sets the inner PCP
value to 3, so the negated condition matches on DUT0’s
link-in hook, causing rule 1 to log with prefix
MATCH_VLAN.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.680 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.680/0.680/0.680/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 19 12:22:48.455604 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 19 12:22:48.456312 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=de:ad:be:ef:6c:00:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.647 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.647/0.647/0.647/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 14 07:30:44.627215 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 14 07:30:44.627493 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=00:a0:26:e3:01:4c:de:ad:be:ef:6c:10:81:00 May 14 07:30:45.681084 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=00:a0:26:e3:01:4c:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.730 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.730/0.730/0.730/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 14 07:37:20.564390 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 14 07:37:21.024307 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 14 07:37:21.120305 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 14 07:37:21.121455 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:99:35:97:de:ad:be:ef:6c:10:81:00 May 14 07:37:22.171761 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:99:35:97:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0p0 mtu 1390 set interfaces ethernet eth0p0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0p0 vif 100 ethertype 802.1ad set interfaces ethernet eth0p0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=1.22 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.220/1.220/1.220/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0p0.*Show output
May 14 10:50:36.186767 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 14 10:50:36.187304 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= MAC=00:a0:26:0e:59:16:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth4 mtu 1390 set interfaces ethernet eth4 traffic policy link-in MATCH_VLAN set interfaces ethernet eth4 vif 100 ethertype 802.1ad set interfaces ethernet eth4 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.510 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.510/0.510/0.510/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth4.*Show output
May 13 11:46:56.668969 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 13 11:46:56.669138 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=00:a0:26:04:00:3a:de:ad:be:ef:6c:10:81:00 May 13 11:46:57.762008 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=00:a0:26:04:00:3a:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.707 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.707/0.707/0.707/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 13 00:59:35.467338 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 13 00:59:35.467376 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=40:64:dc:38:ed:02:de:ad:be:ef:6c:10:81:00
Step 5: Clean all the configuration in DUT0:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 6: Clean all the configuration in DUT1:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 7: Clean all the configuration in DUT2:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 8: Set the following configuration in DUT0 :
set interfaces ethernet eth5 mtu 1390 set interfaces ethernet eth5 traffic policy link-in MATCH_VLAN set interfaces ethernet eth5 vif 100 ethertype 802.1ad set interfaces ethernet eth5 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 9: Set the following configuration in DUT1 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth1 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 3
Step 10: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.823 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.823/0.823/0.823/0.000 ms
Step 11: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth5.*Show output
May 13 00:59:48.059337 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth5 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:11:81:00 May 13 00:59:48.059381 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth5 OUT= MAC=40:64:dc:38:ed:07:de:ad:be:ef:6c:11:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.917 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.917/0.917/0.917/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 13 23:38:01.489827 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 13 23:38:01.490043 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:8b:01:36:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.370 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.370/0.370/0.370/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 14 03:48:58.132662 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 14 03:48:58.133016 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:16:00:16:de:ad:be:ef:6c:10:81:00 May 14 03:48:59.175241 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:16:00:16:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth2 mtu 1390 set interfaces ethernet eth2 traffic policy link-in MATCH_VLAN set interfaces ethernet eth2 vif 100 ethertype 802.1ad set interfaces ethernet eth2 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.335 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.335/0.335/0.335/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth2.*Show output
May 15 00:59:25.377088 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 15 00:59:25.377205 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=02:a0:26:54:55:14:de:ad:be:ef:6c:10:81:00 May 15 00:59:26.405758 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=02:a0:26:54:55:14:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.548 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.548/0.548/0.548/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 20 01:45:41.119346 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 20 01:45:41.661490 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 20 01:45:41.661731 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:18:00:9d:de:ad:be:ef:6c:10:81:00 May 20 01:45:42.726298 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:18:00:9d:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 3
Step 3: Ping the IP address 10.0.0.1 from DUT1:
admin@DUT1$ ping 10.0.0.1 count 1 size 56 timeout 1Show output
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.751 ms --- 10.0.0.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.751/0.751/0.751/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 18 14:15:37.903107 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 18 14:15:38.191021 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 18 14:15:38.195001 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:12:00:3b:de:ad:be:ef:6c:10:81:00 May 18 14:15:39.245278 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=00:a0:26:12:00:3b:de:ad:be:ef:6c:10:81:00
Test VLAN Selector (802.1Q) With Not Vlan Protocol Link-In
Description
The traffic selector VLAN uses
not vlan protocol ip. DUT1 sends an arping (ARP):
since ARP is not IP, the negated condition matches on
DUT0’s link-in hook and rule 1 logs with prefix
MATCH_VLAN.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan protocol ip set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100 Unicast reply from 10.0.0.1 [DE:AD:BE:EF:6C:00] 0.802ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*Show output
May 19 12:22:59.082978 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan protocol ip set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100 Unicast reply from 10.0.0.1 [00:A0:26:E3:01:4C] 0.856ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*Show output
May 14 07:31:07.388150 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan protocol ip set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100 Unicast reply from 10.0.0.1 [00:A0:26:99:35:97] 0.868ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*Show output
May 14 07:37:45.728976 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 14 07:37:45.888909 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 14 07:37:46.540871 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0p0 mtu 1390 set interfaces ethernet eth0p0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0p0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan protocol ip set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100 Unicast reply from 10.0.0.1 [00:A0:26:0E:59:16] 1.089ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0p0.*Show output
May 14 10:51:04.834434 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= MAC=33:33:ff:ef:6c:10:de:ad:be:ef:6c:10:86:dd SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0001:ffef:6c10 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0 May 14 10:51:04.922119 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth4 mtu 1390 set interfaces ethernet eth4 traffic policy link-in MATCH_VLAN set interfaces ethernet eth4 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan protocol ip set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100 Unicast reply from 10.0.0.1 [00:A0:26:04:00:3A] 0.685ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth4.*Show output
May 13 11:47:13.956291 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan protocol ip set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100 Unicast reply from 10.0.0.1 [40:64:DC:38:ED:02] 0.755ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*Show output
May 13 00:59:57.831369 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.1
Step 5: Clean all the configuration in DUT0:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 6: Clean all the configuration in DUT1:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 7: Clean all the configuration in DUT2:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 8: Set the following configuration in DUT0 :
set interfaces ethernet eth5 mtu 1390 set interfaces ethernet eth5 traffic policy link-in MATCH_VLAN set interfaces ethernet eth5 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan protocol ip set traffic selector VLAN rule 1 vlan id 100
Step 9: Set the following configuration in DUT1 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 10: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth1.100 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth1.100 Unicast reply from 10.0.0.1 [40:64:DC:38:ED:07] 0.770ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 11: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth5.*Show output
May 13 01:00:09.127368 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth5 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:11 IPSRC=10.0.0.2 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan protocol ip set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100 Unicast reply from 10.0.0.1 [00:A0:26:8B:01:36] 0.772ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*Show output
May 13 23:38:14.647160 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan protocol ip set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100 Unicast reply from 10.0.0.1 [00:A0:26:16:00:16] 1.030ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*Show output
May 14 03:49:13.773515 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 14 03:49:13.869427 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 14 03:49:15.480367 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth2 mtu 1390 set interfaces ethernet eth2 traffic policy link-in MATCH_VLAN set interfaces ethernet eth2 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan protocol ip set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100 Unicast reply from 10.0.0.1 [02:A0:26:54:55:14] 0.862ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth2.*Show output
May 15 00:59:44.894912 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 15 00:59:45.444847 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 15 00:59:46.491264 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan protocol ip set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100 Unicast reply from 10.0.0.1 [00:A0:26:18:00:9D] 0.827ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*Show output
May 20 01:46:05.501201 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 20 01:46:07.105671 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan protocol ip set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100 Unicast reply from 10.0.0.1 [00:A0:26:12:00:3B] 1.013ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*Show output
May 18 14:16:01.794512 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 18 14:16:02.238504 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:86:dd SRC=fe80:0000:0000:0000:dcad:beff:feef:6c10 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 May 18 14:16:03.410610 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:10 IPSRC=10.0.0.2 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.1
Test VLAN Selector (QinQ) With Not Vlan Inner-protocol Link-In
Description
The traffic selector VLAN uses
not vlan inner-protocol ip. DUT1 sends an arping
(ARP): since ARP is not IP, the negated condition matches
on DUT0’s link-in hook and rule 1 logs with prefix
MATCH_VLAN.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-protocol ip set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100.200 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100.200 Unicast reply from 10.0.0.1 [DE:AD:BE:EF:6C:00] 0.953ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*Show output
May 19 12:23:09.606289 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-protocol ip set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100.200 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100.200 Unicast reply from 10.0.0.1 [00:A0:26:E3:01:4C] 0.863ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*Show output
May 14 07:31:28.569227 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 14 07:31:28.697166 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 14 07:31:29.883421 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-protocol ip set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100.200 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100.200 Unicast reply from 10.0.0.1 [00:A0:26:99:35:97] 0.886ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*Show output
May 14 07:38:07.945712 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 14 07:38:08.105655 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 14 07:38:09.241204 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0p0 mtu 1390 set interfaces ethernet eth0p0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0p0 vif 100 ethertype 802.1ad set interfaces ethernet eth0p0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-protocol ip set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100.200 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100.200 Unicast reply from 10.0.0.1 [00:A0:26:0E:59:16] 1.128ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0p0.*Show output
May 14 10:51:34.828030 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00 May 14 10:51:34.865671 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0p0 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth4 mtu 1390 set interfaces ethernet eth4 traffic policy link-in MATCH_VLAN set interfaces ethernet eth4 vif 100 ethertype 802.1ad set interfaces ethernet eth4 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-protocol ip set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100.200 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100.200 Unicast reply from 10.0.0.1 [00:A0:26:04:00:3A] 0.688ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth4.*Show output
May 13 11:47:30.405885 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth4 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-in MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-protocol ip set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100.200 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100.200 Unicast reply from 10.0.0.1 [40:64:DC:38:ED:02] 0.759ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*Show output
May 13 01:00:19.231311 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00
Step 5: Clean all the configuration in DUT0:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 6: Clean all the configuration in DUT1:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 7: Clean all the configuration in DUT2:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 8: Set the following configuration in DUT0 :
set interfaces ethernet eth5 mtu 1390 set interfaces ethernet eth5 traffic policy link-in MATCH_VLAN set interfaces ethernet eth5 vif 100 ethertype 802.1ad set interfaces ethernet eth5 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-protocol ip set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 9: Set the following configuration in DUT1 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 10: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth1.100.200 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth1.100.200 Unicast reply from 10.0.0.1 [40:64:DC:38:ED:07] 0.806ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 11: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth5.*Show output
May 13 01:00:30.911310 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth5 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:11:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-protocol ip set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100.200 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100.200 Unicast reply from 10.0.0.1 [00:A0:26:8B:01:36] 0.768ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*Show output
May 13 23:38:29.193174 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-protocol ip set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100.200 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100.200 Unicast reply from 10.0.0.1 [00:A0:26:16:00:16] 0.954ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*Show output
May 14 03:49:30.390306 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 14 03:49:30.486256 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 14 03:49:31.978681 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth2 mtu 1390 set interfaces ethernet eth2 traffic policy link-in MATCH_VLAN set interfaces ethernet eth2 vif 100 ethertype 802.1ad set interfaces ethernet eth2 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-protocol ip set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100.200 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100.200 Unicast reply from 10.0.0.1 [02:A0:26:54:55:14] 0.826ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth2.*Show output
May 15 01:00:05.904637 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 15 01:00:05.968580 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 15 01:00:07.577637 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth2 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-protocol ip set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100.200 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100.200 Unicast reply from 10.0.0.1 [00:A0:26:18:00:9D] 0.791ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*Show output
May 20 01:46:30.728065 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 20 01:46:30.856027 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 20 01:46:31.856775 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-in MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-protocol ip set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT1 to IP address 10.0.0.1:
admin@DUT1$ arping 10.0.0.1 interface eth0.100.200 timeout 5 count 1Show output
ARPING 10.0.0.1 from 10.0.0.2 eth0.100.200 Unicast reply from 10.0.0.1 [00:A0:26:12:00:3B] 0.885ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*Show output
May 18 14:16:26.537965 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 18 14:16:26.890038 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=33:33:00:00:00:16:de:ad:be:ef:6c:10:81:00 May 18 14:16:27.870939 osdx kernel: [MATCH_VLAN-1] ACCEPT IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:10:81:00