Link-Out
The following scenario shows how to filter packets based on
VLAN attributes using traffic selectors. The policy is
attached to DUT0’s link-out hook; DUT0 originates the
traffic and DUT0’s journal is checked.
Test VLAN Selector (802.1Q)
Description
A traffic policy MATCH_VLAN is configured on DUT0’s
parent interface (eth0) in the link-out hook.
The traffic selector VLAN filters packets with
ether-type 8021q and vlan id 100, logging
matches with prefix MATCH_VLAN. A ping through the
802.1Q VLAN verifies that the selector correctly identifies
tagged packets.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.862 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.862/0.862/0.862/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.1.*10.0.0.2.*Show output
May 19 12:20:10.622015 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=fe80:0000:0000:0000:dcad:beff:feef:6c00 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0x132 May 19 12:20:10.726031 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:00 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 19 12:20:10.726092 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=29249 DF PROTO=ICMP TYPE=8 CODE=0 ID=15 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.674 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.674/0.674/0.674/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.1.*10.0.0.2.*Show output
May 14 07:31:51.786683 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=fe80:0000:0000:0000:02a0:26ff:fee3:014c DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 14 07:31:52.119734 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:e3:01:4c IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 14 07:31:52.119951 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=22847 DF PROTO=ICMP TYPE=8 CODE=0 ID=106 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.938 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.938/0.938/0.938/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.1.*10.0.0.2.*Show output
May 14 07:38:30.901865 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe99:3597 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 14 07:38:31.389879 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe99:3597 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 14 07:38:31.425908 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:99:35:97 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 14 07:38:31.426095 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=40177 DF PROTO=ICMP TYPE=8 CODE=0 ID=213 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0p0 mtu 1390 set interfaces ethernet eth0p0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0p0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=1.07 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.070/1.070/1.070/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0p0.*10.0.0.1.*10.0.0.2.*Show output
May 14 10:52:04.207479 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0p0 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:0e:59:16 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 14 10:52:04.208078 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0p0 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=15432 DF PROTO=ICMP TYPE=8 CODE=0 ID=886 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth4 mtu 1390 set interfaces ethernet eth4 traffic policy link-out MATCH_VLAN set interfaces ethernet eth4 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.336 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.336/0.336/0.336/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth4.*10.0.0.1.*10.0.0.2.*Show output
May 13 11:42:56.552378 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xb2 May 13 11:42:56.772078 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xb2 May 13 11:42:57.156079 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:04:00:3a IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 13 11:42:57.156135 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=63189 DF PROTO=ICMP TYPE=8 CODE=0 ID=95 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.540 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.540/0.540/0.540/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.1.*10.0.0.2.*Show output
May 13 00:54:06.778869 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=fe80:0000:0000:0000:4264:dcff:fe38:ed02 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0x142 May 13 00:54:06.906865 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=40:64:dc:38:ed:02 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 13 00:54:06.906933 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=46840 DF PROTO=ICMP TYPE=8 CODE=0 ID=245 SEQ=1
Step 5: Clean all the configuration in DUT0:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 6: Clean all the configuration in DUT1:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 7: Clean all the configuration in DUT2:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 8: Set the following configuration in DUT0 :
set interfaces ethernet eth5 mtu 1390 set interfaces ethernet eth5 traffic policy link-out MATCH_VLAN set interfaces ethernet eth5 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 9: Set the following configuration in DUT1 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 10: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.404 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.404/0.404/0.404/0.000 ms
Step 11: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth5.*10.0.0.1.*10.0.0.2.*Show output
May 13 00:54:17.354863 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0x142 May 13 00:54:17.406865 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=40:64:dc:38:ed:07 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 13 00:54:17.406925 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=49225 DF PROTO=ICMP TYPE=8 CODE=0 ID=246 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.460 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.460/0.460/0.460/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.1.*10.0.0.2.*Show output
May 13 23:38:42.356454 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe8b:0136 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 13 23:38:42.540500 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:8b:01:36 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 13 23:38:42.540607 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=22360 DF PROTO=ICMP TYPE=8 CODE=0 ID=94 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=1.06 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.057/1.057/1.057/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.1.*10.0.0.2.*Show output
May 14 03:44:55.211913 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 14 03:44:55.491939 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0001:ff16:0016 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0 May 14 03:44:55.492063 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:16:00:16 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 14 03:44:55.492098 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=24308 DF PROTO=ICMP TYPE=8 CODE=0 ID=489 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth2 mtu 1390 set interfaces ethernet eth2 traffic policy link-out MATCH_VLAN set interfaces ethernet eth2 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.816 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.816/0.816/0.816/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth2.*10.0.0.1.*10.0.0.2.*Show output
May 15 01:00:27.215206 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 15 01:00:27.223190 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0001:ff54:5514 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0 May 15 01:00:27.503218 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=02:a0:26:54:55:14 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 15 01:00:27.503383 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=62086 DF PROTO=ICMP TYPE=8 CODE=0 ID=902 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.658 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.658/0.658/0.658/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.1.*10.0.0.2.*Show output
May 20 01:46:53.811355 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe18:009d DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 20 01:46:54.059340 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe18:009d DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 20 01:46:54.459380 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:18:00:9d IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 20 01:46:54.459676 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=26139 DF PROTO=ICMP TYPE=8 CODE=0 ID=16 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.696 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.696/0.696/0.696/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.1.*10.0.0.2.*Show output
May 18 14:09:27.530208 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe12:003b DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 18 14:09:27.858239 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:12:00:3b IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 18 14:09:27.858457 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=58482 DF PROTO=ICMP TYPE=8 CODE=0 ID=987 SEQ=1
Test VLAN Selector (QinQ)
Description
A traffic policy MATCH_VLAN is configured on DUT0’s
parent interface (eth0) in the link-out hook.
The traffic selector VLAN filters packets with
ether-type 8021ad, vlan id 100,
vlan protocol 8021q and vlan inner-id 200, logging
matches with prefix MATCH_VLAN. A ping through the QinQ
VLAN verifies that the selector correctly identifies
double-tagged packets.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.606 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.606/0.606/0.606/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 19 12:20:21.585665 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=de:ad:be:ef:6c:10:de:ad:be:ef:6c:00:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.684 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.684/0.684/0.684/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 14 07:32:13.491797 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=de:ad:be:ef:6c:10:00:a0:26:e3:01:4c:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.970 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.970/0.970/0.970/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 14 07:38:54.186102 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=de:ad:be:ef:6c:10:00:a0:26:99:35:97:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0p0 mtu 1390 set interfaces ethernet eth0p0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0p0 vif 100 ethertype 802.1ad set interfaces ethernet eth0p0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.857 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.857/0.857/0.857/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0p0.*Show output
May 14 10:52:33.426804 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0p0 MAC=de:ad:be:ef:6c:10:00:a0:26:0e:59:16:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth4 mtu 1390 set interfaces ethernet eth4 traffic policy link-out MATCH_VLAN set interfaces ethernet eth4 vif 100 ethertype 802.1ad set interfaces ethernet eth4 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.338 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.338/0.338/0.338/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth4.*Show output
May 13 11:43:12.497454 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 MAC=de:ad:be:ef:6c:10:00:a0:26:04:00:3a:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.390 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.390/0.390/0.390/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 13 00:54:28.331376 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=de:ad:be:ef:6c:10:40:64:dc:38:ed:02:81:00
Step 5: Clean all the configuration in DUT0:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 6: Clean all the configuration in DUT1:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 7: Clean all the configuration in DUT2:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 8: Set the following configuration in DUT0 :
set interfaces ethernet eth5 mtu 1390 set interfaces ethernet eth5 traffic policy link-out MATCH_VLAN set interfaces ethernet eth5 vif 100 ethertype 802.1ad set interfaces ethernet eth5 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 9: Set the following configuration in DUT1 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 10: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.516 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.516/0.516/0.516/0.000 ms
Step 11: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth5.*Show output
May 13 00:54:39.607375 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 MAC=de:ad:be:ef:6c:11:40:64:dc:38:ed:07:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.446 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.446/0.446/0.446/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 13 23:38:57.143628 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=de:ad:be:ef:6c:10:00:a0:26:8b:01:36:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.818 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.818/0.818/0.818/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 14 03:45:11.056308 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=de:ad:be:ef:6c:10:00:a0:26:16:00:16:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth2 mtu 1390 set interfaces ethernet eth2 traffic policy link-out MATCH_VLAN set interfaces ethernet eth2 vif 100 ethertype 802.1ad set interfaces ethernet eth2 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.774 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.774/0.774/0.774/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth2.*Show output
May 15 01:00:48.655421 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 MAC=de:ad:be:ef:6c:10:02:a0:26:54:55:14:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.531 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.531/0.531/0.531/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 20 01:47:18.455554 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=de:ad:be:ef:6c:10:00:a0:26:18:00:9d:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.663 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.663/0.663/0.663/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 18 14:09:50.840375 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=de:ad:be:ef:6c:10:00:a0:26:12:00:3b:81:00
Test VLAN Selector (QinQ) With PCP Matches
Description
A traffic policy MATCH_VLAN is configured on DUT0’s
parent interface (eth0) in the link-out hook.
The traffic selector VLAN filters QinQ packets
matching vlan id 100, vlan pcp 3,
vlan inner-id 200 and vlan inner-pcp 5. Traffic
policies OUTER_COS and INNER_COS on the outer and
inner VLAN sub-interfaces set the required PCP values.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy OUTER_COS rule 1 set cos-mark 3 set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.817 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.817/0.817/0.817/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 19 12:20:33.928144 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=de:ad:be:ef:6c:10:de:ad:be:ef:6c:00:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy OUTER_COS rule 1 set cos-mark 3 set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.832 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.832/0.832/0.832/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 14 07:32:36.418733 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=de:ad:be:ef:6c:10:00:a0:26:e3:01:4c:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set interfaces ethernet eth1 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy OUTER_COS rule 1 set cos-mark 3 set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.766 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.766/0.766/0.766/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 14 07:39:17.317756 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=de:ad:be:ef:6c:10:00:a0:26:99:35:97:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0p0 mtu 1390 set interfaces ethernet eth0p0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0p0 vif 100 ethertype 802.1ad set interfaces ethernet eth0p0 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth0p0 vif 100 vif-c 200 address 10.0.0.1/24 set interfaces ethernet eth0p0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy OUTER_COS rule 1 set cos-mark 3 set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.978 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.978/0.978/0.978/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0p0.*Show output
May 14 10:53:04.897005 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0p0 MAC=de:ad:be:ef:6c:10:00:a0:26:0e:59:16:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth4 mtu 1390 set interfaces ethernet eth4 traffic policy link-out MATCH_VLAN set interfaces ethernet eth4 vif 100 ethertype 802.1ad set interfaces ethernet eth4 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth4 vif 100 vif-c 200 address 10.0.0.1/24 set interfaces ethernet eth4 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy OUTER_COS rule 1 set cos-mark 3 set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.347 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.347/0.347/0.347/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth4.*Show output
May 13 11:43:29.259764 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 MAC=de:ad:be:ef:6c:10:00:a0:26:04:00:3a:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy OUTER_COS rule 1 set cos-mark 3 set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.332 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.332/0.332/0.332/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 13 00:54:49.767520 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=de:ad:be:ef:6c:10:40:64:dc:38:ed:02:81:00
Step 5: Clean all the configuration in DUT0:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 6: Clean all the configuration in DUT1:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 7: Clean all the configuration in DUT2:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 8: Set the following configuration in DUT0 :
set interfaces ethernet eth5 mtu 1390 set interfaces ethernet eth5 traffic policy link-out MATCH_VLAN set interfaces ethernet eth5 vif 100 ethertype 802.1ad set interfaces ethernet eth5 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth5 vif 100 vif-c 200 address 10.0.0.1/24 set interfaces ethernet eth5 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy OUTER_COS rule 1 set cos-mark 3 set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 9: Set the following configuration in DUT1 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 10: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.554 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.554/0.554/0.554/0.000 ms
Step 11: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth5.*Show output
May 13 00:55:01.639517 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 MAC=de:ad:be:ef:6c:11:40:64:dc:38:ed:07:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set interfaces ethernet eth1 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy OUTER_COS rule 1 set cos-mark 3 set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.458 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.458/0.458/0.458/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 13 23:39:12.076487 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=de:ad:be:ef:6c:10:00:a0:26:8b:01:36:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set interfaces ethernet eth1 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy OUTER_COS rule 1 set cos-mark 3 set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=1.14 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.138/1.138/1.138/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 14 03:45:27.767903 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=de:ad:be:ef:6c:10:00:a0:26:16:00:16:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth2 mtu 1390 set interfaces ethernet eth2 traffic policy link-out MATCH_VLAN set interfaces ethernet eth2 vif 100 ethertype 802.1ad set interfaces ethernet eth2 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth2 vif 100 vif-c 200 address 10.0.0.1/24 set interfaces ethernet eth2 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy OUTER_COS rule 1 set cos-mark 3 set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.783 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.783/0.783/0.783/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth2.*Show output
May 15 01:01:10.247159 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 MAC=de:ad:be:ef:6c:10:02:a0:26:54:55:14:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set interfaces ethernet eth1 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy OUTER_COS rule 1 set cos-mark 3 set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.561 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.561/0.561/0.561/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 20 01:47:43.367172 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=de:ad:be:ef:6c:10:00:a0:26:18:00:9d:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 traffic policy link-out OUTER_COS set interfaces ethernet eth1 vif 100 vif-c 200 address 10.0.0.1/24 set interfaces ethernet eth1 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 5 set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy OUTER_COS rule 1 set cos-mark 3 set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan inner-protocol ip set traffic selector VLAN rule 1 vlan pcp 3 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.798 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.798/0.798/0.798/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 18 14:10:15.284214 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=de:ad:be:ef:6c:10:00:a0:26:12:00:3b:81:00
Test VLAN Selector (802.1Q) With Not Vlan Id
Description
The traffic selector VLAN uses not vlan id 100.
Traffic is sent through VLAN 101, so the negated condition
matches (the packet’s VLAN id differs from 100), causing
rule 1 to match and log with prefix MATCH_VLAN.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.467 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.467/0.467/0.467/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.1.*10.0.0.2.*Show output
May 19 12:20:43.369074 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:00 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 19 12:20:43.369123 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=33682 DF PROTO=ICMP TYPE=8 CODE=0 ID=18 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.710 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.710/0.710/0.710/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.1.*10.0.0.2.*Show output
May 14 07:32:58.766677 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=fe80:0000:0000:0000:02a0:26ff:fee3:014c DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 14 07:32:59.090691 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:e3:01:4c IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 14 07:32:59.090894 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=32399 DF PROTO=ICMP TYPE=8 CODE=0 ID=109 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.649 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.649/0.649/0.649/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.1.*10.0.0.2.*Show output
May 14 07:39:38.997490 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe99:3597 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 14 07:39:39.309467 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe99:3597 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 14 07:39:39.457508 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:99:35:97 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 14 07:39:39.457712 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=49440 DF PROTO=ICMP TYPE=8 CODE=0 ID=216 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0p0 mtu 1390 set interfaces ethernet eth0p0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0p0 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=1.06 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.063/1.063/1.063/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0p0.*10.0.0.1.*10.0.0.2.*Show output
May 14 10:53:34.108337 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0p0 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:0e:59:16 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 14 10:53:34.108831 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0p0 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=28677 DF PROTO=ICMP TYPE=8 CODE=0 ID=889 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth4 mtu 1390 set interfaces ethernet eth4 traffic policy link-out MATCH_VLAN set interfaces ethernet eth4 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.334 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.334/0.334/0.334/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth4.*10.0.0.1.*10.0.0.2.*Show output
May 13 11:43:43.561371 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xb2 May 13 11:43:43.937370 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xb2 May 13 11:43:44.029373 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:04:00:3a IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 13 11:43:44.029454 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=4985 DF PROTO=ICMP TYPE=8 CODE=0 ID=98 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.399 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.399/0.399/0.399/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.1.*10.0.0.2.*Show output
May 13 00:55:11.839359 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=fe80:0000:0000:0000:4264:dcff:fe38:ed02 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0x142 May 13 00:55:11.851346 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=fe80:0000:0000:0000:4264:dcff:fe38:ed02 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0x142 May 13 00:55:11.927353 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=fe80:0000:0000:0000:4264:dcff:fe38:ed02 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0x142 May 13 00:55:11.927410 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=40:64:dc:38:ed:02 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 13 00:55:11.927426 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=55267 DF PROTO=ICMP TYPE=8 CODE=0 ID=251 SEQ=1
Step 5: Clean all the configuration in DUT0:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 6: Clean all the configuration in DUT1:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 7: Clean all the configuration in DUT2:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 8: Set the following configuration in DUT0 :
set interfaces ethernet eth5 mtu 1390 set interfaces ethernet eth5 traffic policy link-out MATCH_VLAN set interfaces ethernet eth5 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 9: Set the following configuration in DUT1 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 10: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.405 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.405/0.405/0.405/0.000 ms
Step 11: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth5.*10.0.0.1.*10.0.0.2.*Show output
May 13 00:55:23.087349 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0x142 May 13 00:55:23.151351 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=40:64:dc:38:ed:07 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 13 00:55:23.151409 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=56837 DF PROTO=ICMP TYPE=8 CODE=0 ID=252 SEQ=1 May 13 00:55:23.175346 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0001:ff38:ed07 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.465 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.465/0.465/0.465/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.1.*10.0.0.2.*Show output
May 13 23:39:25.675819 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:8b:01:36 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 13 23:39:25.675929 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=28946 DF PROTO=ICMP TYPE=8 CODE=0 ID=97 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.876 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.876/0.876/0.876/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.1.*10.0.0.2.*Show output
May 14 03:45:42.228496 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 14 03:45:42.288494 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0001:ff16:0016 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0 May 14 03:45:42.460544 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:16:00:16 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 14 03:45:42.464534 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=28166 DF PROTO=ICMP TYPE=8 CODE=0 ID=492 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth2 mtu 1390 set interfaces ethernet eth2 traffic policy link-out MATCH_VLAN set interfaces ethernet eth2 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.892 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.892/0.892/0.892/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth2.*10.0.0.1.*10.0.0.2.*Show output
May 15 01:01:32.978582 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 15 01:01:33.254583 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0001:ff54:5514 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0 May 15 01:01:33.830581 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 15 01:01:34.278581 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 SRC=fe80:0000:0000:0000:00a0:26ff:fe54:5514 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 15 01:01:34.290576 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 SRC=fe80:0000:0000:0000:00a0:26ff:fe54:5514 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 15 01:01:34.502588 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=02:a0:26:54:55:14 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 15 01:01:34.502721 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=12373 DF PROTO=ICMP TYPE=8 CODE=0 ID=905 SEQ=1 May 15 01:01:34.566574 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 SRC=fe80:0000:0000:0000:00a0:26ff:fe54:5514 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.571 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.571/0.571/0.571/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.1.*10.0.0.2.*Show output
May 20 01:48:06.039293 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe18:009d DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 20 01:48:06.631281 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe18:009d DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 20 01:48:06.907721 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:18:00:9d IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 20 01:48:06.907974 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=35684 DF PROTO=ICMP TYPE=8 CODE=0 ID=19 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 101 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 101 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.703 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.703/0.703/0.703/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.1.*10.0.0.2.*Show output
May 18 14:10:37.958934 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe12:003b DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 May 18 14:10:38.310955 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:12:00:3b IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 18 14:10:38.311169 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=2535 DF PROTO=ICMP TYPE=8 CODE=0 ID=990 SEQ=1
Test VLAN Selector (802.1Q) With Not Vlan PCP
Description
The traffic selector VLAN uses vlan id 100 and
not vlan pcp 3. A traffic policy SET_COS configured
on the VLAN sub-interface sets the PCP value to 5, so the
negated condition matches (the packet’s PCP differs from 3),
causing rule 1 to match and log with prefix MATCH_VLAN.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set interfaces ethernet eth0 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy SET_COS rule 1 set cos-mark 5 set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.620 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.620/0.620/0.620/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.1.*10.0.0.2.*Show output
May 19 12:20:52.579237 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:00 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 19 12:20:52.579289 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=35173 DF PROTO=ICMP TYPE=8 CODE=0 ID=19 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set interfaces ethernet eth0 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy SET_COS rule 1 set cos-mark 5 set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.738 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.738/0.738/0.738/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.1.*10.0.0.2.*Show output
May 14 07:33:19.582775 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=fe80:0000:0000:0000:02a0:26ff:fee3:014c DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 COS=0x5 May 14 07:33:19.926806 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:e3:01:4c IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 14 07:33:19.927008 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=36329 DF PROTO=ICMP TYPE=8 CODE=0 ID=110 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set interfaces ethernet eth1 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy SET_COS rule 1 set cos-mark 5 set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.765 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.765/0.765/0.765/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.1.*10.0.0.2.*Show output
May 14 07:40:01.201681 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe99:3597 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 COS=0x5 May 14 07:40:01.221656 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe99:3597 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 COS=0x5 May 14 07:40:01.955245 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:99:35:97 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 14 07:40:01.955464 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=49879 DF PROTO=ICMP TYPE=8 CODE=0 ID=217 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0p0 mtu 1390 set interfaces ethernet eth0p0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0p0 vif 100 address 10.0.0.1/24 set interfaces ethernet eth0p0 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy SET_COS rule 1 set cos-mark 5 set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=1.24 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.236/1.236/1.236/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0p0.*10.0.0.1.*10.0.0.2.*Show output
May 14 10:54:03.668093 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0p0 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:0e:59:16 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 14 10:54:03.668872 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0p0 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=33543 DF PROTO=ICMP TYPE=8 CODE=0 ID=890 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth4 mtu 1390 set interfaces ethernet eth4 traffic policy link-out MATCH_VLAN set interfaces ethernet eth4 vif 100 address 10.0.0.1/24 set interfaces ethernet eth4 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy SET_COS rule 1 set cos-mark 5 set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.325 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.325/0.325/0.325/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth4.*10.0.0.1.*10.0.0.2.*Show output
May 13 11:43:58.877534 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xb2 COS=0x5 May 13 11:43:59.289535 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0001:ff04:003a LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0 COS=0x5 May 13 11:43:59.297532 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:04:00:3a IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 13 11:43:59.297573 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=8788 DF PROTO=ICMP TYPE=8 CODE=0 ID=99 SEQ=1 May 13 11:43:59.381547 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xb2 COS=0x5
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set interfaces ethernet eth0 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy SET_COS rule 1 set cos-mark 5 set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.636 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.636/0.636/0.636/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*10.0.0.1.*10.0.0.2.*Show output
May 13 00:55:33.295433 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=fe80:0000:0000:0000:4264:dcff:fe38:ed02 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0x142 COS=0x5 May 13 00:55:33.331433 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=40:64:dc:38:ed:02 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 13 00:55:33.331500 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=57096 DF PROTO=ICMP TYPE=8 CODE=0 ID=253 SEQ=1
Step 5: Clean all the configuration in DUT0:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 6: Clean all the configuration in DUT1:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 7: Clean all the configuration in DUT2:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 8: Set the following configuration in DUT0 :
set interfaces ethernet eth5 mtu 1390 set interfaces ethernet eth5 traffic policy link-out MATCH_VLAN set interfaces ethernet eth5 vif 100 address 10.0.0.1/24 set interfaces ethernet eth5 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy SET_COS rule 1 set cos-mark 5 set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 9: Set the following configuration in DUT1 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 10: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.481 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.481/0.481/0.481/0.000 ms
Step 11: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth5.*10.0.0.1.*10.0.0.2.*Show output
May 13 00:55:44.359433 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0x142 COS=0x5 May 13 00:55:44.359469 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0001:ff38:ed07 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0 COS=0x5 May 13 00:55:44.907430 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0x142 COS=0x5 May 13 00:55:45.387430 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 SRC=fe80:0000:0000:0000:4264:dcff:fe38:ed07 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0x142 COS=0x5 May 13 00:55:45.399433 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 SRC=fe80:0000:0000:0000:4264:dcff:fe38:ed07 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0x142 COS=0x5 May 13 00:55:45.771430 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 SRC=fe80:0000:0000:0000:4264:dcff:fe38:ed07 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0x142 COS=0x5 May 13 00:55:45.867430 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 SRC=fe80:0000:0000:0000:4264:dcff:fe38:ed07 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0x142 COS=0x5 May 13 00:55:46.923444 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=40:64:dc:38:ed:07 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 13 00:55:46.923519 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=60158 DF PROTO=ICMP TYPE=8 CODE=0 ID=254 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set interfaces ethernet eth1 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy SET_COS rule 1 set cos-mark 5 set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.484 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.484/0.484/0.484/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.1.*10.0.0.2.*Show output
May 13 23:39:39.996181 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:8b:01:36 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 13 23:39:39.996290 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=31285 DF PROTO=ICMP TYPE=8 CODE=0 ID=98 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set interfaces ethernet eth1 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy SET_COS rule 1 set cos-mark 5 set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.909 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.909/0.909/0.909/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.1.*10.0.0.2.*Show output
May 14 03:45:58.636083 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 COS=0x5 May 14 03:45:58.900103 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:16:00:16 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 14 03:45:58.904154 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=29630 DF PROTO=ICMP TYPE=8 CODE=0 ID=493 SEQ=1 May 14 03:45:58.944086 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 COS=0x5
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth2 mtu 1390 set interfaces ethernet eth2 traffic policy link-out MATCH_VLAN set interfaces ethernet eth2 vif 100 address 10.0.0.1/24 set interfaces ethernet eth2 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy SET_COS rule 1 set cos-mark 5 set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.831 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.831/0.831/0.831/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth2.*10.0.0.1.*10.0.0.2.*Show output
May 15 01:01:56.787130 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 COS=0x5 May 15 01:01:57.127126 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=96 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 COS=0x5 May 15 01:01:57.639130 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0001:ff54:5514 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0 COS=0x5 May 15 01:01:58.295147 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=02:a0:26:54:55:14 IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 15 01:01:58.295289 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=14582 DF PROTO=ICMP TYPE=8 CODE=0 ID=906 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set interfaces ethernet eth1 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy SET_COS rule 1 set cos-mark 5 set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.584 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.584/0.584/0.584/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.1.*10.0.0.2.*Show output
May 20 01:48:30.511396 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe18:009d DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 COS=0x5 May 20 01:48:31.279406 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe18:009d DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 COS=0x5 May 20 01:48:31.347434 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:18:00:9d IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 20 01:48:31.347620 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=36533 DF PROTO=ICMP TYPE=8 CODE=0 ID=20 SEQ=1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 address 10.0.0.1/24 set interfaces ethernet eth1 vif 100 traffic policy link-out SET_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic policy SET_COS rule 1 set cos-mark 5 set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan pcp 3 set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.785 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.785/0.785/0.785/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth1.*10.0.0.1.*10.0.0.2.*Show output
May 18 14:11:07.747607 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=fe80:0000:0000:0000:02a0:26ff:fe12:003b DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=116 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0 MARK=0xf2 COS=0x5 May 18 14:11:08.527640 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=00:a0:26:12:00:3b IPSRC=10.0.0.1 MACDST=00:00:00:00:00:00 IPDST=10.0.0.2 May 18 14:11:08.527855 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 SRC=10.0.0.1 DST=10.0.0.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=5302 DF PROTO=ICMP TYPE=8 CODE=0 ID=991 SEQ=1
Test VLAN Selector (QinQ) With Not Vlan Inner-id
Description
The traffic selector VLAN uses vlan id 100,
vlan protocol 8021q and not vlan inner-id 200.
Traffic is sent through C-VLAN 201, so the negated condition
matches (the packet’s inner VLAN id differs from 200),
causing rule 1 to match and log with prefix MATCH_VLAN.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=4.20 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 4.198/4.198/4.198/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 19 12:21:02.161832 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:00:81:00 May 19 12:21:02.166002 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=de:ad:be:ef:6c:10:de:ad:be:ef:6c:00:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.667 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.667/0.667/0.667/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 14 07:33:41.518862 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=33:33:00:00:00:16:00:a0:26:e3:01:4c:81:00 May 14 07:33:42.082856 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=33:33:00:00:00:16:00:a0:26:e3:01:4c:81:00 May 14 07:33:42.274856 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=33:33:ff:e3:01:4c:00:a0:26:e3:01:4c:81:00 May 14 07:33:43.102896 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=ff:ff:ff:ff:ff:ff:00:a0:26:e3:01:4c:81:00 May 14 07:33:43.103096 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=de:ad:be:ef:6c:10:00:a0:26:e3:01:4c:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.649 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.649/0.649/0.649/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 14 07:40:24.061683 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=33:33:00:00:00:16:00:a0:26:99:35:97:81:00 May 14 07:40:24.885708 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=33:33:00:00:00:16:00:a0:26:99:35:97:81:00 May 14 07:40:24.977746 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=ff:ff:ff:ff:ff:ff:00:a0:26:99:35:97:81:00 May 14 07:40:24.977935 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=de:ad:be:ef:6c:10:00:a0:26:99:35:97:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0p0 mtu 1390 set interfaces ethernet eth0p0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0p0 vif 100 ethertype 802.1ad set interfaces ethernet eth0p0 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.926 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.926/0.926/0.926/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0p0.*Show output
May 14 10:54:32.299086 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0p0 MAC=ff:ff:ff:ff:ff:ff:00:a0:26:0e:59:16:81:00 May 14 10:54:32.299607 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0p0 MAC=de:ad:be:ef:6c:10:00:a0:26:0e:59:16:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth4 mtu 1390 set interfaces ethernet eth4 traffic policy link-out MATCH_VLAN set interfaces ethernet eth4 vif 100 ethertype 802.1ad set interfaces ethernet eth4 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.336 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.336/0.336/0.336/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth4.*Show output
May 13 11:44:14.897529 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 MAC=33:33:00:00:00:16:00:a0:26:04:00:3a:81:00 May 13 11:44:14.961454 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 MAC=33:33:ff:04:00:3a:00:a0:26:04:00:3a:81:00 May 13 11:44:15.404440 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 MAC=ff:ff:ff:ff:ff:ff:00:a0:26:04:00:3a:81:00 May 13 11:44:15.404540 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 MAC=de:ad:be:ef:6c:10:00:a0:26:04:00:3a:81:00 May 13 11:44:15.505454 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth4 MAC=33:33:00:00:00:16:00:a0:26:04:00:3a:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.401 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.401/0.401/0.401/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 13 00:55:57.183528 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=ff:ff:ff:ff:ff:ff:40:64:dc:38:ed:02:81:00 May 13 00:55:57.183588 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=de:ad:be:ef:6c:10:40:64:dc:38:ed:02:81:00
Step 5: Clean all the configuration in DUT0:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 6: Clean all the configuration in DUT1:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 7: Clean all the configuration in DUT2:
delete set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0
Step 8: Set the following configuration in DUT0 :
set interfaces ethernet eth5 mtu 1390 set interfaces ethernet eth5 traffic policy link-out MATCH_VLAN set interfaces ethernet eth5 vif 100 ethertype 802.1ad set interfaces ethernet eth5 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 9: Set the following configuration in DUT1 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 10: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.468 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.468/0.468/0.468/0.000 ms
Step 11: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth5.*Show output
May 13 00:56:08.299504 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 MAC=33:33:00:00:00:16:40:64:dc:38:ed:07:81:00 May 13 00:56:08.367508 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 MAC=33:33:00:00:00:16:40:64:dc:38:ed:07:81:00 May 13 00:56:08.367565 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 MAC=ff:ff:ff:ff:ff:ff:40:64:dc:38:ed:07:81:00 May 13 00:56:08.367581 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth5 MAC=de:ad:be:ef:6c:11:40:64:dc:38:ed:07:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.472 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.472/0.472/0.472/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 13 23:39:54.144269 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=ff:ff:ff:ff:ff:ff:00:a0:26:8b:01:36:81:00 May 13 23:39:54.144376 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=de:ad:be:ef:6c:10:00:a0:26:8b:01:36:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=1.14 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.138/1.138/1.138/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 14 03:46:13.628351 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=33:33:00:00:00:16:00:a0:26:16:00:16:81:00 May 14 03:46:13.904377 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=ff:ff:ff:ff:ff:ff:00:a0:26:16:00:16:81:00 May 14 03:46:13.908366 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=de:ad:be:ef:6c:10:00:a0:26:16:00:16:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth2 mtu 1390 set interfaces ethernet eth2 traffic policy link-out MATCH_VLAN set interfaces ethernet eth2 vif 100 ethertype 802.1ad set interfaces ethernet eth2 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.598 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.598/0.598/0.598/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth2.*Show output
May 15 01:02:17.642796 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 MAC=33:33:00:00:00:16:02:a0:26:54:55:14:81:00 May 15 01:02:17.958799 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 MAC=ff:ff:ff:ff:ff:ff:02:a0:26:54:55:14:81:00 May 15 01:02:17.958954 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 MAC=de:ad:be:ef:6c:10:02:a0:26:54:55:14:81:00 May 15 01:02:18.082798 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth2 MAC=33:33:00:00:00:16:02:a0:26:54:55:14:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.537 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.537/0.537/0.537/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 20 01:48:52.903237 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=33:33:00:00:00:16:00:a0:26:18:00:9d:81:00 May 20 01:48:53.255223 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=33:33:00:00:00:16:00:a0:26:18:00:9d:81:00 May 20 01:48:53.815307 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=ff:ff:ff:ff:ff:ff:00:a0:26:18:00:9d:81:00 May 20 01:48:53.815509 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=de:ad:be:ef:6c:10:00:a0:26:18:00:9d:81:00
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth1 mtu 1390 set interfaces ethernet eth1 traffic policy link-out MATCH_VLAN set interfaces ethernet eth1 vif 100 ethertype 802.1ad set interfaces ethernet eth1 vif 100 vif-c 201 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-id 200 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 201 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.693 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.693/0.693/0.693/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth1.*Show output
May 18 14:11:31.707738 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=33:33:00:00:00:16:00:a0:26:12:00:3b:81:00 May 18 14:11:32.147754 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=ff:ff:ff:ff:ff:ff:00:a0:26:12:00:3b:81:00 May 18 14:11:32.147966 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth1 MAC=de:ad:be:ef:6c:10:00:a0:26:12:00:3b:81:00
Test VLAN Selector (QinQ) With Not Vlan Inner-pcp
Description
The traffic selector VLAN uses vlan id 100,
vlan protocol 8021q, vlan inner-id 200 and
not vlan inner-pcp 5. A traffic policy INNER_COS
configured on the inner VLAN sub-interface sets the inner
PCP value to 3, so the negated condition matches (the
packet’s inner PCP differs from 5), causing rule 1 to match
and log with prefix MATCH_VLAN.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set interfaces ethernet eth0 vif 100 vif-c 200 traffic policy local-out INNER_COS set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy INNER_COS rule 1 set cos-mark 3 set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-pcp 5 set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Ping the IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=1.69 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.692/1.692/1.692/0.000 ms
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
(?i).*MATCH_VLAN-1.*eth0.*Show output
May 19 12:21:13.966696 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=33:33:00:00:00:16:de:ad:be:ef:6c:00:81:00 May 19 12:21:14.068982 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:00:81:00 May 19 12:21:14.069045 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=de:ad:be:ef:6c:10:de:ad:be:ef:6c:00:81:00
Test VLAN Selector (802.1Q) With Not Vlan Protocol
Description
The traffic selector VLAN uses
not vlan protocol ip. An arping (ARP) is sent: since
ARP is not IP, the negated condition matches and rule 1
logs with prefix MATCH_VLAN.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021q set traffic selector VLAN rule 1 not vlan protocol ip set traffic selector VLAN rule 1 vlan id 100
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT0 to IP address 10.0.0.2:
admin@DUT0$ arping 10.0.0.2 interface eth0.100 timeout 5 count 1Show output
ARPING 10.0.0.2 from 10.0.0.1 eth0.100 Unicast reply from 10.0.0.2 [DE:AD:BE:EF:6C:10] 0.825ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*Show output
May 19 12:21:22.520090 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=de:ad:be:ef:6c:00 IPSRC=10.0.0.1 MACDST=ff:ff:ff:ff:ff:ff IPDST=10.0.0.2
Test VLAN Selector (QinQ) With Not Vlan Inner-protocol
Description
The traffic selector VLAN uses
not vlan inner-protocol ip. An arping (ARP) is sent:
since ARP is not IP, the negated condition matches and
rule 1 logs with prefix MATCH_VLAN.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 traffic policy link-out MATCH_VLAN set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.1/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set traffic policy MATCH_VLAN rule 1 log prefix MATCH_VLAN set traffic policy MATCH_VLAN rule 1 selector VLAN set traffic selector VLAN rule 1 ether-type 8021ad set traffic selector VLAN rule 1 not vlan inner-protocol ip set traffic selector VLAN rule 1 vlan id 100 set traffic selector VLAN rule 1 vlan inner-id 200 set traffic selector VLAN rule 1 vlan protocol 8021q
Step 2: Set the following configuration in DUT1 :
set interfaces ethernet eth0 mtu 1390 set interfaces ethernet eth0 vif 100 ethertype 802.1ad set interfaces ethernet eth0 vif 100 vif-c 200 address 10.0.0.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Send an ARP ping from DUT0 to IP address 10.0.0.2:
admin@DUT0$ arping 10.0.0.2 interface eth0.100.200 timeout 5 count 1Show output
ARPING 10.0.0.2 from 10.0.0.1 eth0.100.200 Unicast reply from 10.0.0.2 [DE:AD:BE:EF:6C:10] 0.805ms Sent 1 probes (1 broadcast(s)) Received 1 response(s)
Step 4: Run the command system journal show | grep MATCH_VLAN on DUT0 and check whether the output matches the following regular expressions:
.*MATCH_VLAN-1.*eth0.*Show output
May 19 12:21:31.880696 osdx kernel: [MATCH_VLAN-1] ACCEPT IN= OUT=eth0 MAC=ff:ff:ff:ff:ff:ff:de:ad:be:ef:6c:00:81:00