mirror of
https://github.com/kernelkit/infix.git
synced 2026-07-30 12:33:02 +02:00
Joachim Wiberg
1bbd80d8c7
Let's drop the leading IETF or Infix prefixes from tests. Initially the idea was to mimnic the YANG models, but it's difficult to navigate and does not provide any real benefit to developers or end-users. Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
=== IPv6 LAN-WAN Firewall
ifdef::topdoc[:imagesdir: {topdoc}../../test/case/firewall/ipv6-lan-wan]
==== Description
IPv6 version of the typical home/office router scenario where the DUT acts as
a gateway with LAN-to-WAN traffic forwarding and IPv6 prefix delegation.
image::lan-wan.svg[align=center, scaledwidth=50%]
- DUT/Gateway with IPv6 firewall and forwarding
- Test host has two interfaces: a LAN-side and a WAN-side (Internet)
- Test host's LAN interface acts as an IPv6 client behind the router
- Test host's WAN interface acts as an IPv6 Internet server/destination
- Demonstrates IPv6 policy-based forwarding between zones
==== Topology
image::topology.svg[IPv6 LAN-WAN Firewall topology, align=center, scaledwidth=75%]
==== Sequence
. Set up topology and attach to gateway
. Configure gateway with firewall and forwarding
. Test connectivity to gateway
. Test LAN-to-WAN forwarding
. Test WAN-to-LAN blocking
. Verify LAN services accessibility