1*6d548d0fSXin Xie#!/bin/bash 2*6d548d0fSXin Xie# SPDX-License-Identifier: GPL-2.0 3*6d548d0fSXin Xie# 4*6d548d0fSXin Xie# Test a PRP RedBox (PRP-SAN): a SAN that sits behind the interlink port must 5*6d548d0fSXin Xie# reach, and be reached by, a peer DANP on the PRP network with its own MAC 6*6d548d0fSXin Xie# preserved on the wire, and the RedBox must announce the SAN with a RedBox-MAC 7*6d548d0fSXin Xie# TLV (terminated by an EOT marker) in its PRP supervision frames. 8*6d548d0fSXin Xie# 9*6d548d0fSXin Xie# RB PRP RedBox: prp0 over rb_a/rb_b (LAN A/B) + interlink rb_il 10*6d548d0fSXin Xie# PEER peer DANP : prp0 over pe_a/pe_b, 100.64.0.2 11*6d548d0fSXin Xie# SAN SAN : san_il, own MAC, 100.64.0.51 (behind the interlink) 12*6d548d0fSXin Xie 13*6d548d0fSXin Xieipv6=false 14*6d548d0fSXin Xie 15*6d548d0fSXin Xiesource ./hsr_common.sh 16*6d548d0fSXin Xie 17*6d548d0fSXin Xiecheck_prerequisites 18*6d548d0fSXin Xie 19*6d548d0fSXin Xieif ! command -v tcpdump >/dev/null 2>&1; then 20*6d548d0fSXin Xie echo "SKIP: This test requires tcpdump" 21*6d548d0fSXin Xie exit $ksft_skip 22*6d548d0fSXin Xiefi 23*6d548d0fSXin Xie 24*6d548d0fSXin Xieif ! ip link help hsr 2>&1 | grep -q interlink; then 25*6d548d0fSXin Xie echo "SKIP: iproute2 too old (no hsr interlink support)" 26*6d548d0fSXin Xie exit $ksft_skip 27*6d548d0fSXin Xiefi 28*6d548d0fSXin Xie 29*6d548d0fSXin Xiesetup_ns RB PEER SAN 30*6d548d0fSXin Xietrap 'cleanup_ns "$RB" "$PEER" "$SAN"' EXIT 31*6d548d0fSXin Xie 32*6d548d0fSXin Xieip link add rb_a netns "$RB" type veth peer name pe_a netns "$PEER" 33*6d548d0fSXin Xieip link add rb_b netns "$RB" type veth peer name pe_b netns "$PEER" 34*6d548d0fSXin Xieip link add rb_il netns "$RB" type veth peer name san_il netns "$SAN" 35*6d548d0fSXin Xie 36*6d548d0fSXin Xieip -n "$RB" link set rb_a up 37*6d548d0fSXin Xieip -n "$RB" link set rb_b up 38*6d548d0fSXin Xieip -n "$RB" link set rb_il up 39*6d548d0fSXin Xieip -n "$PEER" link set pe_a up 40*6d548d0fSXin Xieip -n "$PEER" link set pe_b up 41*6d548d0fSXin Xieip -n "$SAN" link set san_il up 42*6d548d0fSXin Xieip -n "$SAN" addr add 100.64.0.51/24 dev san_il 43*6d548d0fSXin Xie 44*6d548d0fSXin Xie# Feature gate: PRP interlink (RedBox) creation. A kernel without PRP RedBox 45*6d548d0fSXin Xie# support rejects this with -EINVAL, so SKIP rather than FAIL. 46*6d548d0fSXin Xieif ! ip -n "$RB" link add name prp0 type hsr slave1 rb_a slave2 rb_b \ 47*6d548d0fSXin Xie interlink rb_il proto 1 2>/dev/null; then 48*6d548d0fSXin Xie echo "SKIP: kernel without PRP RedBox (interlink) support" 49*6d548d0fSXin Xie exit $ksft_skip 50*6d548d0fSXin Xiefi 51*6d548d0fSXin Xieip -n "$RB" link set prp0 up 52*6d548d0fSXin Xieip -n "$PEER" link add name prp0 type hsr slave1 pe_a slave2 pe_b proto 1 53*6d548d0fSXin Xieip -n "$PEER" link set prp0 up 54*6d548d0fSXin Xieip -n "$PEER" addr add 100.64.0.2/24 dev prp0 55*6d548d0fSXin Xiesleep 1 56*6d548d0fSXin Xie 57*6d548d0fSXin Xiesan_mac=$(ip -n "$SAN" -br link show san_il | awk '{print $3}') 58*6d548d0fSXin Xierb_mac=$(ip -n "$RB" -br link show rb_il | awk '{print $3}') 59*6d548d0fSXin Xie 60*6d548d0fSXin Xie# Bidirectional unicast across the interlink. 61*6d548d0fSXin Xiedo_ping "$PEER" 100.64.0.51 62*6d548d0fSXin Xiedo_ping "$SAN" 100.64.0.2 63*6d548d0fSXin Xiestop_if_error "PRP RedBox bidirectional unicast failed" 64*6d548d0fSXin Xie 65*6d548d0fSXin Xie# The SAN source MAC must be preserved on the PRP network, not laundered to the 66*6d548d0fSXin Xie# RedBox MAC: the peer resolves the SAN IP to the SAN's own MAC. 67*6d548d0fSXin Xieneigh=$(ip -n "$PEER" neigh show 100.64.0.51 | awk '{print $5}') 68*6d548d0fSXin Xieif [ "$neigh" != "$san_mac" ]; then 69*6d548d0fSXin Xie echo "SAN MAC preservation [ FAIL ]: peer resolved 100.64.0.51 to" \ 70*6d548d0fSXin Xie "'$neigh', expected $san_mac" 1>&2 71*6d548d0fSXin Xie ret=1 72*6d548d0fSXin Xiefi 73*6d548d0fSXin Xiestop_if_error "SAN MAC not preserved on the PRP network" 74*6d548d0fSXin Xie 75*6d548d0fSXin Xie# The proxy-announce supervision frame must carry, in order, the life-check TLV 76*6d548d0fSXin Xie# (type 0x14, len 6) + MacAddressA == SAN MAC + the RedBox-MAC TLV (type 0x1e, 77*6d548d0fSXin Xie# len 6) + MacAddressRedBox == RedBox MAC + the EOT marker (0x0000). 78*6d548d0fSXin Xieip netns exec "$SAN" ping -i 0.2 -q 100.64.0.2 >/dev/null 2>&1 & 79*6d548d0fSXin Xieping_pid=$! 80*6d548d0fSXin Xiecap=$(ip netns exec "$PEER" timeout 5 tcpdump -i pe_a -nn -x \ 81*6d548d0fSXin Xie "ether proto 0x88fb and ether src $rb_mac" 2>/dev/null || true) 82*6d548d0fSXin Xiekill "$ping_pid" 2>/dev/null || true 83*6d548d0fSXin Xiewait "$ping_pid" 2>/dev/null || true 84*6d548d0fSXin Xie 85*6d548d0fSXin Xiesan_hex=$(echo "$san_mac" | tr -d ':') 86*6d548d0fSXin Xierb_hex=$(echo "$rb_mac" | tr -d ':') 87*6d548d0fSXin Xie# Reassemble contiguous frame hex: drop the "0x0010:" offset labels and spaces. 88*6d548d0fSXin Xieframe_hex=$(echo "$cap" | awk '/^[[:space:]]*0x[0-9a-f]+:/ { 89*6d548d0fSXin Xie sub(/^[[:space:]]*0x[0-9a-f]+:[[:space:]]*/, ""); 90*6d548d0fSXin Xie gsub(/ /, ""); printf "%s", $0 }') 91*6d548d0fSXin Xieif ! echo "$frame_hex" | grep -q "1406${san_hex}1e06${rb_hex}0000"; then 92*6d548d0fSXin Xie echo "supervision RedBox-MAC TLV [ FAIL ]: missing SAN MAC, Type-30" \ 93*6d548d0fSXin Xie "payload, or EOT" 1>&2 94*6d548d0fSXin Xie ret=1 95*6d548d0fSXin Xiefi 96*6d548d0fSXin Xiestop_if_error "PRP RedBox supervision RedBox-MAC TLV/EOT check failed" 97*6d548d0fSXin Xie 98*6d548d0fSXin Xieecho "INFO: PRP RedBox (PRP-SAN) conformance checks passed" 99*6d548d0fSXin Xieexit $ret 100