From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id C4746C4332F for ; Wed, 2 Nov 2022 13:18:02 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231314AbiKBNSB (ORCPT ); Wed, 2 Nov 2022 09:18:01 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:57612 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231487AbiKBNRi (ORCPT ); Wed, 2 Nov 2022 09:17:38 -0400 Received: from mail-ej1-x632.google.com (mail-ej1-x632.google.com [IPv6:2a00:1450:4864:20::632]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 141742B1AE for ; Wed, 2 Nov 2022 06:17:18 -0700 (PDT) Received: by mail-ej1-x632.google.com with SMTP id bj12so45096510ejb.13 for ; Wed, 02 Nov 2022 06:17:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=blackwall-org.20210112.gappssmtp.com; s=20210112; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=W2GcMv8pOvaPEAMnxR0b2BFRXC3cBLDvdSpZBuBV1Jo=; b=DFPfB3M7oAMC8PkVivnCzgQtBs8Kl+Kxm4iFZUX85i3y/zxbsp8GJBbkwbWC8zs9/6 wDFSpVDIgIEcow+viNHpAUcg3A1zbBJ0Anchwb+GpDiRKpHNYTuBQtahpx97MliiwYxc 6UzOySWlUatBjH7Br9tfPFD2HSaKcJgwfEgYftIzLHH61aKu3JzVXnn/Dvk3JBYp5Sev RVMgJ0IUizD9ETrAltXjTdBocmplkPH4/A+fGsXQKxsXZfiK8ysuhTrYC7klDFV6eU32 3shOmCpL0VEJKeiRgSoxHdhS5cGgy4P9QgG95C8iNK/no8IDlHDFhs/o+cNvcwB9NUwo YIOQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=W2GcMv8pOvaPEAMnxR0b2BFRXC3cBLDvdSpZBuBV1Jo=; b=PEXrr7SuAoNvLuaH3BkmCv4DzhHdUuyIW5qp5UCtzfRdVb95QtkK4kVBMG4WEtY4nJ NbU/G9Y0O5owvxuzijv85vKG8jKWMp5YXuf/fqs6x4X5kIm7u2PXqR0bTdqKh+xxI+tL XySuLV4XKNFlWZSevyGjIhl/USM24o1H8U081ZmZuSvzKoRsaIy3OQN2DP7VX2Yuu0TK dY3U2j2GYn0LA9x/zCUdM9c4h/tn6juIMKTWsjqX3P8mLs+xun/MdFvQd3SN2LsrXYd6 w2/aApK57a58iIOVZQeoho3TElJXCO7he9Cky/K0jknJh8FJzID+IoCFaerqpDt9eYZH rL7Q== X-Gm-Message-State: ACrzQf095d2wc1gjEZuYzsX8/8/JsQSaMAQ+3YTIq18RLaN3Xv0EWhEd UXxKZEUtP/NK7vgod3su1m3mwA== X-Google-Smtp-Source: AMsMyM6txEVEJeNLSxpDnBkjqJ2yO8QGYeyGgGIMZVVy2WqGO9znnisGLd6jZDtsLN19HuuCNXqKwg== X-Received: by 2002:a17:907:7e87:b0:78e:1a4:130 with SMTP id qb7-20020a1709077e8700b0078e01a40130mr24314284ejc.101.1667395036455; Wed, 02 Nov 2022 06:17:16 -0700 (PDT) Received: from [192.168.0.161] (79-100-144-200.ip.btc-net.bg. [79.100.144.200]) by smtp.gmail.com with ESMTPSA id s14-20020a056402014e00b00463a83ce063sm2253048edu.96.2022.11.02.06.17.15 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 02 Nov 2022 06:17:16 -0700 (PDT) Message-ID: Date: Wed, 2 Nov 2022 15:17:15 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.2.1 Subject: Re: [PATCH net-next 2/2] selftests: forwarding: Add MAC Authentication Bypass (MAB) test cases Content-Language: en-US To: Ido Schimmel , netdev@vger.kernel.org, bridge@lists.linux-foundation.org Cc: davem@davemloft.net, kuba@kernel.org, pabeni@redhat.com, edumazet@google.com, roopa@nvidia.com, netdev@kapio-technology.com, vladimir.oltean@nxp.com, mlxsw@nvidia.com References: <20221101193922.2125323-1-idosch@nvidia.com> <20221101193922.2125323-3-idosch@nvidia.com> From: Nikolay Aleksandrov In-Reply-To: <20221101193922.2125323-3-idosch@nvidia.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org On 01/11/2022 21:39, Ido Schimmel wrote: > From: "Hans J. Schultz" > > Add four test cases to verify MAB functionality: > > * Verify that a locked FDB entry can be generated by the bridge, > preventing a host from communicating via the bridge. Test that user > space can clear the "locked" flag by replacing the entry, thereby > authenticating the host and allowing it to communicate via the bridge. > > * Test that an entry cannot roam to a locked port, but that it can roam > to an unlocked port. > > * Test that MAB can only be enabled on a port that is both locked and > has learning enabled. > > * Test that locked FDB entries are flushed from a port when MAB is > disabled. > > Signed-off-by: Hans J. Schultz > Signed-off-by: Ido Schimmel > --- > > Notes: > v1: > * Adjust commit message. > * Add FDB flushing test case. > > Changes made by me: > * Reword commit message. > * Remove blackhole tests as they are not relevant for this series. > * Add configuration test case. > * Add a few additional test cases. > > .../net/forwarding/bridge_locked_port.sh | 155 +++++++++++++++++- > tools/testing/selftests/net/forwarding/lib.sh | 8 + > 2 files changed, 162 insertions(+), 1 deletion(-) > Acked-by: Nikolay Aleksandrov