selftests: forwarding: Add test case for traffic redirection from a locked port

Check that traffic can be redirected from a locked bridge port and that
it does not create locked FDB entries.

Cc: Hans J. Schultz <netdev@kapio-technology.com>
Signed-off-by: Ido Schimmel <idosch@nvidia.com>
Reviewed-by: Petr Machata <petrm@nvidia.com>
Signed-off-by: Petr Machata <petrm@nvidia.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

diff --git a/tools/testing/selftests/net/forwarding/bridge_locked_port.sh b/tools/testing/selftests/net/forwarding/bridge_locked_port.sh
index dc92d32464f60cd5abca678ff13a597d80945979..9af9f6964808baee53e69c51ad1adb4128fc700a 100755 (executable)
--- a/tools/testing/selftests/net/forwarding/bridge_locked_port.sh
+++ b/tools/testing/selftests/net/forwarding/bridge_locked_port.sh
@@ -9,6 +9,7 @@ ALL_TESTS="
        locked_port_mab_roam
        locked_port_mab_config
        locked_port_mab_flush
+       locked_port_mab_redirect
 "
 
 NUM_NETIFS=4
@@ -319,6 +320,41 @@ locked_port_mab_flush()
        log_test "Locked port MAB FDB flush"
 }
 
+# Check that traffic can be redirected from a locked bridge port and that it
+# does not create locked FDB entries.
+locked_port_mab_redirect()
+{
+       RET=0
+       check_port_mab_support || return 0
+
+       bridge link set dev $swp1 learning on locked on mab on
+       tc qdisc add dev $swp1 clsact
+       tc filter add dev $swp1 ingress protocol all pref 1 handle 101 flower \
+               action mirred egress redirect dev $swp2
+
+       ping_do $h1 192.0.2.2
+       check_err $? "Ping did not work with redirection"
+
+       bridge fdb get `mac_get $h1` br br0 vlan 1 2> /dev/null | \
+               grep "dev $swp1" | grep -q "locked"
+       check_fail $? "Locked entry created for redirected traffic"
+
+       tc filter del dev $swp1 ingress protocol all pref 1 handle 101 flower
+
+       ping_do $h1 192.0.2.2
+       check_fail $? "Ping worked without redirection"
+
+       bridge fdb get `mac_get $h1` br br0 vlan 1 2> /dev/null | \
+               grep "dev $swp1" | grep -q "locked"
+       check_err $? "Locked entry not created after deleting filter"
+
+       bridge fdb del `mac_get $h1` vlan 1 dev $swp1 master
+       tc qdisc del dev $swp1 clsact
+       bridge link set dev $swp1 learning off locked off mab off
+
+       log_test "Locked port MAB redirect"
+}
+
 trap cleanup EXIT
 
 setup_prepare