firewall group attached two ports of router
Change-Id: Ia459073b8503a1ea2f3a571804f33a1bb51f319d
This commit is contained in:
parent
abf6fc9460
commit
f90ca8fdce
@ -413,6 +413,49 @@ class TestFwaasV2Ops(feature_manager.FeatureManager):
|
|||||||
vm1_float_ip=float_ip, server=vm1)
|
vm1_float_ip=float_ip, server=vm1)
|
||||||
return net_topo
|
return net_topo
|
||||||
|
|
||||||
|
@decorators.attr(type='nsxv')
|
||||||
|
@decorators.idempotent_id('131288d7-9213-4b1e-b22d-15840c8e3f13')
|
||||||
|
def test_fwaas_group_attach_to_multiple_ports_of_router(self):
|
||||||
|
"""
|
||||||
|
Test fwaasv2 group attach to multiple ports of one router
|
||||||
|
"""
|
||||||
|
net_topo = self.create_network_topo(router_type='exclusive',
|
||||||
|
create_instance=True)
|
||||||
|
# Create another network and subnet and attach to router in net_topo
|
||||||
|
network2 = \
|
||||||
|
self.create_topology_network(network_name="fw-network2",
|
||||||
|
networks_client=self.networks_client)
|
||||||
|
router_id = net_topo['router']['id']
|
||||||
|
self.create_topology_subnet('subnet2', network2,
|
||||||
|
router_id=router_id,
|
||||||
|
networks_client=self.networks_client)
|
||||||
|
device_owner = u'network:router_interface'
|
||||||
|
ports_list = self.ports_client.list_ports(device_id=router_id,
|
||||||
|
device_owner=device_owner)
|
||||||
|
ports = []
|
||||||
|
for port in ports_list['ports']:
|
||||||
|
port_info = self.ports_client.show_port(port['id'])
|
||||||
|
ports.append(port_info['port']['id'])
|
||||||
|
|
||||||
|
self.project_id = net_topo['project']
|
||||||
|
ingr = {'enable': True,
|
||||||
|
'rules': [{'proto': 'icmp', 'action': 'allow'},
|
||||||
|
{'proto': 'tcp', 'action': 'allow'}
|
||||||
|
]}
|
||||||
|
egr = {'enable': True,
|
||||||
|
'rules': [{'proto': 'icmp', 'action': 'allow'},
|
||||||
|
{'proto': 'tcp', 'action': 'allow'}
|
||||||
|
]}
|
||||||
|
self.create_fw_basic_topo_port_per_protocol(ports,
|
||||||
|
net_topo['router'],
|
||||||
|
ingr, egr)
|
||||||
|
# verify int-VM to int-VM ping works
|
||||||
|
self.verify_connectivity_to_extvm(net_topo['server'],
|
||||||
|
traffic_result=True)
|
||||||
|
# verify ext-VM to intVM floating IP ping
|
||||||
|
out = self._test_ping_from_external_network(net_topo['vm1_float_ip'])
|
||||||
|
self.assertIn("2 received", str(out))
|
||||||
|
|
||||||
@decorators.attr(type='nsxv')
|
@decorators.attr(type='nsxv')
|
||||||
@decorators.idempotent_id('131288d7-9213-4b1e-a11d-15840c8e3f13')
|
@decorators.idempotent_id('131288d7-9213-4b1e-a11d-15840c8e3f13')
|
||||||
def test_fwaas_in_egr_allow_tcp_icmp_default_ip_address(self):
|
def test_fwaas_in_egr_allow_tcp_icmp_default_ip_address(self):
|
||||||
|
Loading…
Reference in New Issue
Block a user