Commit b2ae6cf3 authored by Lluis Gifre Renom's avatar Lluis Gifre Renom
Browse files

Tests - ACL End-to-end integration test: 

- Updated README.md
parent 3f0dce82

src/tests/acl_end2end/README.md

+18 −16
Original line number Diff line number Diff line
@@ -47,31 +47,33 @@ sudo rm -rf clab-acl_end2end/ .acl_end2end.clab.yml.bak 
## Access cEOS Bash/CLI

```bash

docker exec -it clab-acl_end2end-firewall bash

docker exec -it clab-acl_end2end-firewall Cli

docker exec -it clab-acl_end2end-client1 bash

docker exec -it clab-acl_end2end-dc bash

docker exec -it clab-acl_end2end-client2 bash

docker exec -it clab-acl_end2end-firewall Cli

docker exec -it clab-acl_end2end-dc bash

```



## Configure ContainerLab clients

```bash

docker exec -it clab-acl_end2end-dc bash

    ip address add 172.16.10.10/24 dev eth1

    ip route add 172.16.11.0/24 via 172.16.10.1

    ip route add 172.16.12.0/24 via 172.16.10.1

    ping 172.16.11.10

    ping 172.16.12.10



docker exec -it clab-acl_end2end-client1 bash

    ip address add 172.16.1.10/24 dev eth1

    ip route add 172.16.0.0/24 via 172.16.1.1

    ip route add 172.16.2.0/24 via 172.16.1.1

    ping 172.16.0.10

    ip address add 172.16.11.10/24 dev eth1

    ip route add 172.16.10.0/24 via 172.16.11.1

    ip route add 172.16.12.0/24 via 172.16.11.1

    ping 172.16.10.10



docker exec -it clab-acl_end2end-dc bash

    ip address add 172.16.0.10/24 dev eth1

    ip route add 172.16.1.0/24 via 172.16.0.1

    ip route add 172.16.2.0/24 via 172.16.0.1

    ping 172.16.1.10



docker exec -it clab-acl_end2end-client2 bash

    ip address add 172.16.2.10/24 dev eth1

    ip route add 172.16.0.0/24 via 172.16.2.1

    ip route add 172.16.1.0/24 via 172.16.2.1

    ping 172.16.0.10

    ip address add 172.16.12.10/24 dev eth1

    ip route add 172.16.10.0/24 via 172.16.12.1

    ip route add 172.16.11.0/24 via 172.16.12.1

    ping 172.16.10.10

```



## Install gNMIc
@@ -111,7 +113,7 @@ gnmic --address clab-acl_end2end-firewall --port 6030 --username admin --passwor 
```



# ACL payload

`data/ietf-acl.json` contains an example ACL that blocks ICMP from client1 (172.16.1.10) to the DC (172.16.0.10) on the firewall ingress interface Ethernet10 while permitting other traffic. Post it to `/restconf/data/device=firewall/ietf-access-control-list:acls`.

`data/ietf-acl.json` contains an example ACL that blocks ICMP from client1 (172.16.11.10) to the DC (172.16.10.10) on the firewall ingress interface Ethernet11 while permitting other traffic. Post it to `/restconf/data/device=firewall/ietf-access-control-list:acls`.



# Delete elements:

```bash