mirror of
https://github.com/kernelkit/infix.git
synced 2026-07-30 20:43:02 +02:00
Joachim Wiberg
1bbd80d8c7
Let's drop the leading IETF or Infix prefixes from tests. Initially the idea was to mimnic the YANG models, but it's difficult to navigate and does not provide any real benefit to developers or end-users. Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
34 lines
1019 B
Plaintext
34 lines
1019 B
Plaintext
=== LAN-WAN Firewall with Masquerading
|
|
|
|
ifdef::topdoc[:imagesdir: {topdoc}../../test/case/firewall/lan-wan]
|
|
|
|
==== Description
|
|
|
|
Typical home/office router scenario where the DUT acts as a gateway with
|
|
LAN-to-WAN traffic forwarding and masquerading (SNAT).
|
|
|
|
image::lan-wan.svg[align=center, scaledwidth=50%]
|
|
|
|
- DUT/Gateway with firewall and NAT
|
|
- Test host has two interfaces: a LAN-side and a WAN-side (Internet)
|
|
- Test host's LAN interface acts as a client behind the router
|
|
- Test host's WAN interface acts as an Internet server/destination
|
|
|
|
==== Topology
|
|
|
|
image::topology.svg[LAN-WAN Firewall with Masquerading topology, align=center, scaledwidth=75%]
|
|
|
|
==== Sequence
|
|
|
|
. Set up topology and attach to gateway
|
|
. Configure gateway with firewall and SNAT
|
|
. Verify LAN access to router
|
|
. Verify LAN services accessibility
|
|
. Verify WAN access to router is blocked
|
|
. Verify WAN blocks all well-known ports
|
|
. Verify LAN-to-WAN connectivity (outbound)
|
|
. Verify LAN-to-WAN masquerading
|
|
. Verify WAN-to-LAN blocking (inbound)
|
|
|
|
|