NethServer 6

Test case

• physical interface role and other properties assignment; role release
• logical interface creation, composition, deletion (with and without role inheritance)
• DHCP protocol available only on red interfaces

• progress bar when changes are saved

• nethserver-base-2.2.1-57.0git27156ae2.ns6.noarch.rpm
• nethserver-nethgui-1.5.0-22.0git051080ae.ns6.noarch.rpm
  nethserver-nethgui-1.5.0-23.0git0d145f80.ns6.noarch.rpm

Only the following update are available on nethserver-testing repo:

• nethserver-base-2.2.1-60.0git4b6541f8.ns6
• nethserver-nethgui-1.5.0-26.0gitf9aa109c.ns6

I have done the following test for the physical interface, and they works:

1. progress bar does not appears
2. assign a role to an interface (ip, netmask and gateway): green,red,orange and blue.
3. assign a red net role with dhcp
4. modify a role (modify the ip address)
5. remove a role
6. create an alias

1. remove an alias: it works, but what is the scope or "Successore" field ?

I have done the following test for the logical interface, and they works:

1. creation of an interface bond
2. creation of an interface bridge
3. creation of a vlan
4. modification of the IP address of a created bond
5. modification of the IP address of a created bridge
6. modification of the IP address and role of a green bridge to red
7. deletion of a bond chosing an interface as role inheritance
8. deletion of a bond without chosing an interface as role inheritance
9. deletion of vlan
10. create an alias of a bond logical interface
11. create an alias of a ref bridge logical interface
12. eliminate an alias of a bond logical interface
13. eliminate an alias of a bridge logical interface

1. dhcp protocol is available only in red intarfaces.

The following test has been failed

1. creation of a vlan logical interface:
   1. the tag name must be only of numeric type: now it is possible to insert also a string value
   2. the vlan is never created: do not works.

The feature is not verified.

• updated NetworkDB library to handle vlan
• changed validator for vlan tag on Web UI
• changed write-config action to handle vlan

• nethserver-base-2.2.1-60.0gitb49d76d0.ns6.noarch.rpm

• Re-test vlan configuration

• The table shows an untranslated string alias_label,
• If a port forward is created, Shorewall fails while applying the new configuration:

  Jul  9 15:04:17 NethSecurity-NG-Corso esmith::event[19536]: Event: nethserver-firewall-base-save interface-update
  Jul  9 15:04:17 NethSecurity-NG-Corso esmith::event[19536]: expanding /etc/lsm/lsm.conf
  Jul  9 15:04:17 NethSecurity-NG-Corso esmith::event[19536]: expanding /etc/shorewall/shorewall.conf
  Jul  9 15:04:17 NethSecurity-NG-Corso esmith::event[19536]: expanding /etc/shorewall/tcrules
  Jul  9 15:04:17 NethSecurity-NG-Corso esmith::event[19536]: expanding /etc/shorewall/masq
  Jul  9 15:04:17 NethSecurity-NG-Corso esmith::event[19536]: expanding /etc/shorewall/tunnels
  Jul  9 15:04:18 NethSecurity-NG-Corso esmith::event[19536]: expanding /etc/shorewall/rtrules
  Jul  9 15:04:18 NethSecurity-NG-Corso esmith::event[19536]: expanding /etc/shorewall/tcpri
  Jul  9 15:04:18 NethSecurity-NG-Corso esmith::event[19536]: expanding /etc/shorewall/policy
  Jul  9 15:04:18 NethSecurity-NG-Corso esmith::event[19536]: expanding /etc/shorewall/tcinterfaces
  Jul  9 15:04:18 NethSecurity-NG-Corso esmith::event[19536]: expanding /etc/shorewall/providers
  Jul  9 15:04:18 NethSecurity-NG-Corso esmith::event[19536]: expanding /etc/shorewall/zones
  Jul  9 15:04:18 NethSecurity-NG-Corso esmith::event[19536]: expanding /etc/shorewall/rules
  Jul  9 15:04:18 NethSecurity-NG-Corso esmith::event[19536]: expanding /etc/shorewall/interfaces
  Jul  9 15:04:18 NethSecurity-NG-Corso esmith::event[19536]: expanding /etc/shorewall/hosts
  Jul  9 15:04:18 NethSecurity-NG-Corso esmith::event[19536]: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [1.254687]
  Jul  9 15:04:19 NethSecurity-NG-Corso esmith::event[19536]: [INFO] lsm is disabled: skipped
  Jul  9 15:04:19 NethSecurity-NG-Corso esmith::event[19536]: [INFO] service shorewall restart
  Jul  9 15:04:22 NethSecurity-NG-Corso esmith::event[19536]: Restarting shorewall:    ERROR: Undefined zone (alias) /etc/shorewall/policy (line 49)
  Jul  9 15:04:22 NethSecurity-NG-Corso logger: ERROR:Shorewall restart failed
  Jul  9 15:04:22 NethSecurity-NG-Corso esmith::event[19536]: [FALLITO]#015
  Jul  9 15:04:22 NethSecurity-NG-Corso esmith::event[19536]: [WARNING] service shorewall restart failed!
  Jul  9 15:04:22 NethSecurity-NG-Corso esmith::event[19536]: Action: /etc/e-smith/events/actions/adjust-services FAILED: 1 [3.887112]
  Jul  9 15:04:22 NethSecurity-NG-Corso esmith::event[19536]: Event: nethserver-firewall-base-save FAILED
  Jul  9 15:04:22 NethSecurity-NG-Corso esmith::event[18623]: Action: /etc/e-smith/events/interface-update/S90firewall-adjust FAILED: 1 [5.499073]
  Jul  9 15:04:22 NethSecurity-NG-Corso esmith::event[18623]: Event: interface-update FAILED
  

Davide Principi wrote:

• The table shows an untranslated string alias_label,

This is just a missing label inside the translation file, just addedd.

• If a port forward is created, Shorewall fails while applying the new configuration:[...]

This bug is related to #2774 inside nethserver-firewall-base package. By the way, the bug is not present.

• nethserver-firewall-base-1.1.0-99.0git62bf6314.ns6.noarch

FAILED

Allowed VLAN id range is 0-4094

Found sparse informations here

https://www.kernel.org/doc/Documentation/networking/pktgen.txt

I've tested the range: 0 is OK, 4094 is OK, 4095 fails.

Test case

Creating a VLAN logical interface, the VLAN id must be an integer in range [0-4094], otherwise validation fails.

In nethserver-testing:
nethserver-base-2.2.1-72.0git85f138e5.ns6.noarch.rpm

1. created a vlan with id 6666, it went into the network device table but with an error
2. deleted vlan
3. updated nethserver-base
4. tried to create a vlan with id 6677, refused with a notice that id has to be less than 4095

In nethserver-updates:
nethserver-base-2.3.0-1.ns6.noarch.rpm
nethserver-firewall-base-2.0.0-1.ns6.noarch.rpm