firewall group attached two ports of router

Change-Id: Ia459073b8503a1ea2f3a571804f33a1bb51f319d
This commit is contained in:
dkumbhar 2020-11-27 06:35:56 +00:00
parent abf6fc9460
commit f90ca8fdce

View File

@ -413,6 +413,49 @@ class TestFwaasV2Ops(feature_manager.FeatureManager):
vm1_float_ip=float_ip, server=vm1) vm1_float_ip=float_ip, server=vm1)
return net_topo return net_topo
@decorators.attr(type='nsxv')
@decorators.idempotent_id('131288d7-9213-4b1e-b22d-15840c8e3f13')
def test_fwaas_group_attach_to_multiple_ports_of_router(self):
"""
Test fwaasv2 group attach to multiple ports of one router
"""
net_topo = self.create_network_topo(router_type='exclusive',
create_instance=True)
# Create another network and subnet and attach to router in net_topo
network2 = \
self.create_topology_network(network_name="fw-network2",
networks_client=self.networks_client)
router_id = net_topo['router']['id']
self.create_topology_subnet('subnet2', network2,
router_id=router_id,
networks_client=self.networks_client)
device_owner = u'network:router_interface'
ports_list = self.ports_client.list_ports(device_id=router_id,
device_owner=device_owner)
ports = []
for port in ports_list['ports']:
port_info = self.ports_client.show_port(port['id'])
ports.append(port_info['port']['id'])
self.project_id = net_topo['project']
ingr = {'enable': True,
'rules': [{'proto': 'icmp', 'action': 'allow'},
{'proto': 'tcp', 'action': 'allow'}
]}
egr = {'enable': True,
'rules': [{'proto': 'icmp', 'action': 'allow'},
{'proto': 'tcp', 'action': 'allow'}
]}
self.create_fw_basic_topo_port_per_protocol(ports,
net_topo['router'],
ingr, egr)
# verify int-VM to int-VM ping works
self.verify_connectivity_to_extvm(net_topo['server'],
traffic_result=True)
# verify ext-VM to intVM floating IP ping
out = self._test_ping_from_external_network(net_topo['vm1_float_ip'])
self.assertIn("2 received", str(out))
@decorators.attr(type='nsxv') @decorators.attr(type='nsxv')
@decorators.idempotent_id('131288d7-9213-4b1e-a11d-15840c8e3f13') @decorators.idempotent_id('131288d7-9213-4b1e-a11d-15840c8e3f13')
def test_fwaas_in_egr_allow_tcp_icmp_default_ip_address(self): def test_fwaas_in_egr_allow_tcp_icmp_default_ip_address(self):