blob: 3b0d54a4585bd9a4fa7a159126b34ce2c08535dd (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
|
# $OpenBSD: Makefile,v 1.1 2012/01/31 00:14:02 bluhm Exp $
# The following ports must be installed:
#
# python-2.7 interpreted object-oriented programming language
# py-libdnet python interface to libdnet
# scapy powerful interactive packet manipulation in python
# This test needs a manual setup of two machines
# Set up machines: SRC DST
# SRC is the machine where this makefile is running.
# DST is running OpenBSD with pf to test the neighbor discovery states.
#
# +---+ 1 +---+
# |SRC| ----> |DST|
# +---+ +---+
# out in
# Configure Addresses on the machines.
# Adapt interface and addresse variables to your local setup.
#
SRC_IF = tun0
SRC_MAC = fe:e1:ba:d1:56:1f
DST_MAC = 52:54:00:12:34:50
SRC_OUT6 = fdd7:e83e:66bc:211:fce1:baff:fed1:561f
DST_IN6 = fdd7:e83e:66bc:211:5054:ff:fe12:3450
# pf rules on DST should look like this:
#
# block log
# pass inet6 proto icmp6 icmp6-type echoreq keep state
# pass inet6 proto icmp6 icmp6-type neighbrsol keep state
# pass inet6 proto icmp6 icmp6-type neighbradv keep state
# RFC 4861 7. describes the following test cases for ND:
#
# Duplicate Address Detection
# - request NS from unspecified address to target solicitated-node multicast
# - response NA from interface address to all-nodes multicast
#
# Address Resolution
# - request NS from interface address to target solicitated-node multicast
# - response NA from interface address to source of NS
#
# Unsolicited Neighbor Advertisements
# - request NA from interface address to all-nodes multicast
#
# Neighbor Unreachability Detection
# - request NS from interface address to target unicast
# - response NA from interface address to source of NS
depend: addr.py
# Create python include file containing the addresses.
addr.py: Makefile
rm -f $@ $@.tmp
echo 'SRC_IF = "${SRC_IF}"' >>$@.tmp
echo 'SRC_MAC = "${SRC_MAC}"' >>$@.tmp
echo 'DST_MAC = "${DST_MAC}"' >>$@.tmp
.for var in SRC_OUT DST_IN
echo '${var} = "${${var}}"' >>$@.tmp
echo '${var}6 = "${${var}6}"' >>$@.tmp
.endfor
mv $@.tmp $@
# Clear neighbor cache and ping all addresses. This ensures that
# the ip addresses are configured and all routing table are set up
# to allow bidirectional packet flow.
TARGETS += ping6
run-regress-ping6:
@echo '\n======== $@ ========'
sudo ndp -c
.for ip in SRC_OUT DST_IN
@echo Check ping6 ${ip}6:
ping6 -n -c 1 ${${ip}6}
.endfor
# Send hand-crafted duplicate address detection neighbor solicitation packet
TARGETS += nd6_dad
run-regress-nd6_dad: addr.py
@echo '\n======== $@ ========'
@echo Check duplicate address detection
${SUDO} python2.7 nd6_dad.py
# Send hand-crafted address resolution neighbor solicitation packet
TARGETS += nd6_ar
run-regress-nd6_ar: addr.py
@echo '\n======== $@ ========'
@echo Check address resolution
${SUDO} python2.7 nd6_ar.py
# Send hand-crafted unsolicited neighbor advertisement packet
TARGETS += nd6_una
run-regress-nd6_una: addr.py
@echo '\n======== $@ ========'
@echo Check unsolicited neighbor advertisement
${SUDO} python2.7 nd6_una.py
# Send hand-crafted neighbor unreachability detection solicitation packet
TARGETS += nd6_nud
run-regress-nd6_nud: addr.py
@echo '\n======== $@ ========'
@echo Check neighbor unreachability detection
${SUDO} python2.7 nd6_nud.py
REGRESS_TARGETS = ${TARGETS:S/^/run-regress-/}
CLEANFILES += addr.py *.pyc *.log
.include <bsd.regress.mk>
|
