• [DRAFT, UNDER DEVELOPMENT]
• Overview
• Scope
• Related DUT CLI commands
• Test structure
• Setup configuration
• Scripts for generating ACL configuration on SONIC
• Ansible scripts to setup and run ACL test
• acl_testbed.yml
• Setup of DUT switch
• J2 templates
• PTF Test
• Input files for PTF test
• Traffic validation in PTF
• Test cases
• Generic packet
• Test case #0 - Resources consuming test
• Test objective
• Test steps
• Test case #1 - Verify source IP match
• Test objective
• Packet to trigger the rule #1
• Test steps
• Test case #2 - Verify destination IP match
• Test objective
• Packet to trigger the rule #2
• Test steps
• Test case #3 - Verify L4 source port match
• Test objective
• Packet to trigger the rule #3
• Test steps
• Test case #4 - Verify L4 destination port match
• Test objective
• Packet to trigger the rule #4
• Test steps
• Test case #5 - Verify ether type match
• Test objective
• Packet to trigger the rule #5
• Test steps
• Test case #6 - Verify ip protocol match
• Test objective
• Packet to trigger the rule #6
• Test steps
• Test case #7 - Verify TCP flags match
• Test objective
• Packet to trigger the rule #7
• Test steps
• Test case #8 - Verify ip type match
• Test objective
• Test steps
• Test case #9 - Verify source port range match
• Test objective
• Packet to trigger the rule #9
• Test steps
• Test case #10 - Verify destination port range match
• Test objective
• Packet to trigger the rule #9
• Test steps
• Test case #11 - Verify rules priority
• Test objective
• Test steps
• Test case #12 - False rule triggering check
• Test objective
• Test steps
• Other possible tests
• TODO
• Open Questions