More tests

hknutzen · Jan 7, 2017 · c2a58f0 · c2a58f0
1 parent cea3faa
commit c2a58f0
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 4 deletions.
diff --git a/t/crypto.t b/t/crypto.t
@@ -2854,6 +2854,9 @@ service:s2 = {
  permit src = user;
         dst = network:n2, network:n1;
         prt = proto 50, proto 51;
+ deny   src = user;
+        dst = network:n2-sub;
+        prt = ip;
 }
 END
 
@@ -2862,6 +2865,7 @@ $out = <<'END';
 ip access-list extended n0_in
  deny ip any host 10.1.1.1
  deny ip any host 10.1.2.129
+ deny ip 10.1.0.0 0.0.0.63 10.1.2.0 0.0.0.127
  permit 50 10.1.0.0 0.0.0.255 10.1.2.0 0.0.0.127
  permit 50 10.1.0.0 0.0.0.63 10.1.1.0 0.0.0.255
  permit 50 10.1.0.0 0.0.0.63 10.1.2.0 0.0.0.255

diff --git a/t/local-opt.t b/t/local-opt.t
@@ -370,7 +370,7 @@ router:u = {
 network:t = { ip = 10.9.1.0/24; }
 
 router:r = {
- model = ASA;
+ model = ACE;
  managed;
  interface:t = { ip = 10.9.1.2; hardware = t; }
  interface:B = { ip = 10.2.1.1; hardware = B; }
@@ -394,11 +394,21 @@ $out = <<'END';
 -- r
 ! t_in
 object-group network g0
- network-object 10.1.1.0 255.255.255.0
- network-object 10.1.2.0 255.255.255.0
+ 10.1.1.0 255.255.255.0
+ 10.1.2.0 255.255.255.0
+access-list t_in extended deny ip any host 10.2.1.1
 access-list t_in extended permit tcp object-group g0 10.2.1.0 255.255.255.0 range 80 86
 access-list t_in extended deny ip any any
-access-group t_in in interface t
+--
+! B_in
+access-list B_in extended deny ip any any
+--
+interface t
+ ip address 10.9.1.2 255.255.255.0
+ access-group input t_in
+interface B
+ ip address 10.2.1.1 255.255.255.0
+ access-group input B_in
 END
 
 test_run($title, $in, $out);