[nexus] add DBR-TC-7B test for bi-directional reachability (#12748)

This commit introduces the 1_3_DBR_TC_7B Nexus test case, which
verifies bi-directional reachability in a topology with multiple
Border Routers (BRs) and the presence of deprecated prefixes.

Key features of this test:
- Simulates a network with two BRs and a Thread Router.
- Configures an infrastructure link with a GUA prefix.
- Configures a deprecated prefix (PRE_1, P_preferred=false) in
  Network Data and ensures the DUT BR correctly generates its own
  OMR prefix when existing ones are not usable.
- Verifies that the DUT BR correctly multicasts Router Advertisements
  (RAs) on the infrastructure link containing both OMR and PRE_1
  routes.
- Confirms bi-directional ICMPv6 connectivity between an
  infrastructure device and a Thread Router.
- Ensures the DUT BR continues to advertise PRE_1 routes even after
  the originating BR (BR_2) is disabled, as long as the prefix
  remains in Network Data.

The implementation includes:
- tests/nexus/test_1_3_DBR_TC_7B.cpp: Test execution logic using
  direct method calls and Note-level logging.
- tests/nexus/verify_1_3_DBR_TC_7B.py: PCAP-based verification script
  with robust Network Data flag checking.
- Updates to tests/nexus/CMakeLists.txt and
  tests/nexus/run_nexus_tests.sh to register the new test case.
This commit is contained in:
Jonathan Hui
2026-03-24 14:05:30 -05:00
committed by GitHub
parent 1cbfe480c3
commit 5b38208dbf
4 changed files with 796 additions and 0 deletions
+1
View File
@@ -259,6 +259,7 @@ ot_nexus_test(1_3_DBR_TC_2 "cert;nexus")
ot_nexus_test(1_3_DBR_TC_3 "cert;nexus")
ot_nexus_test(1_3_DBR_TC_6 "cert;nexus")
ot_nexus_test(1_3_DBR_TC_7A "cert;nexus")
ot_nexus_test(1_3_DBR_TC_7B "cert;nexus")
# Misc tests
ot_nexus_test(border_admitter "core;nexus")
+1
View File
@@ -195,6 +195,7 @@ DEFAULT_TESTS=(
"1_3_DBR_TC_3"
"1_3_DBR_TC_6"
"1_3_DBR_TC_7A"
"1_3_DBR_TC_7B"
)
# Use provided arguments or the default test list
+413
View File
@@ -0,0 +1,413 @@
/*
* Copyright (c) 2026, The OpenThread Authors.
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions are met:
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
* 3. Neither the name of the copyright holder nor the
* names of its contributors may be used to endorse or promote products
* derived from this software without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
* ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
* POSSIBILITY OF SUCH DAMAGE.
*/
#include <stdio.h>
#include "platform/nexus_core.hpp"
#include "platform/nexus_node.hpp"
namespace ot {
namespace Nexus {
/**
* Time to advance for a node to form a network and become leader, in milliseconds.
*/
static constexpr uint32_t kFormNetworkTime = 13 * 1000;
/**
* Time to advance for a node to join as a child and upgrade to a router, in milliseconds.
*/
static constexpr uint32_t kJoinNetworkTime = 200 * 1000;
/**
* Time to advance for the BR to perform automatic actions (RA, Network Data), in milliseconds.
*/
static constexpr uint32_t kBrActionTime = 20 * 1000;
/**
* Time to advance for the ping response, in milliseconds.
*/
static constexpr uint32_t kPingResponseTime = 5 * 1000;
/**
* Time to advance for waiting, in milliseconds.
*/
static constexpr uint32_t kWaitTime = 20 * 1000;
/**
* Infrastructure interface index.
*/
static constexpr uint32_t kInfraIfIndex = 1;
/**
* Echo Request identifier.
*/
static constexpr uint16_t kEchoIdentifier = 0x1234;
/**
* Echo Request payload size.
*/
static constexpr uint16_t kEchoPayloadSize = 10;
/**
* IPv6 Prefix Length.
*/
static constexpr uint8_t kPrefixLength = 64;
/**
* Last byte of Eth 1 GUA address.
*/
static constexpr uint8_t kEth1GuaLastByte = 1;
void Test_1_3_DBR_TC_7B(void)
{
/**
* 1.7(b). [1.3] [CERT] Reachability - Multiple BRs - Single Thread / Single IPv6 Infrastructure - Presence of
* non-OMR prefixes
*
* 1.7b.1. Purpose
* To test the following:
* 1. Bi-directional reachability between single Thread Network and infrastructure devices
* 2. DUT BR creates own OMR prefix when existing prefixes are not usable (e.g. no SLAAC, or deprecated)
*
* 1.7b.2. Topology
* 1. Eth 1-Adjacent Infrastructure Link Reference Device
* 2. BR 1 (DUT) - Border Router
* 3. BR 2-Border Router Reference Device
* 4. Rtr 1-Thread Router Reference Device and Leader
*
* Spec Reference | V1.1 Section | V1.3.0 Section
* -----------------|--------------|---------------
* Reachability | N/A | 1.3
*/
Core nexus;
Node &eth1 = nexus.CreateNode();
Node &br1 = nexus.CreateNode();
Node &br2 = nexus.CreateNode();
Node &rtr1 = nexus.CreateNode();
eth1.SetName("Eth_1");
br1.SetName("BR_1");
br2.SetName("BR_2");
rtr1.SetName("RTR_1");
nexus.AdvanceTime(0);
Instance::SetLogLevel(kLogLevelNote);
Log("---------------------------------------------------------------------------------------");
Log("Step 0: Device: Eth 1 Description (DBR-1.7b): Enable.");
/**
* Step 0
* - Device: Eth 1
* - Description (DBR-1.7b): Enable. Harness configures Ethernet link with an on-link IPv6 GUA prefix GUA_1. Eth_1
* is configured to multicast ND RAS.
* - Pass Criteria:
* - N/A
*/
eth1.mInfraIf.Init(eth1);
static const char kGua1Prefix[] = "2001:db8:1::/64";
Ip6::Prefix gua1Prefix;
SuccessOrQuit(gua1Prefix.FromString(kGua1Prefix));
Ip6::Address gua1Address;
gua1Address = AsCoreType(&gua1Prefix.mPrefix);
gua1Address.mFields.m8[sizeof(Ip6::Address) - 1] = kEth1GuaLastByte;
eth1.mInfraIf.AddAddress(gua1Address);
eth1.mInfraIf.StartRouterAdvertisement(gua1Prefix);
nexus.AddTestVar("GUA_1", kGua1Prefix);
Log("---------------------------------------------------------------------------------------");
Log("Step 0b: Device: Rtr 1 Description (DBR-1.7b): Enable. Becomes Leader.");
/**
* Step 0b
* - Device: Rtr 1
* - Description (DBR-1.7b): Enable. Becomes Leader.
* - Pass Criteria:
* - N/A
*/
rtr1.Form();
nexus.AdvanceTime(kFormNetworkTime);
VerifyOrQuit(rtr1.Get<Mle::Mle>().IsLeader());
Log("---------------------------------------------------------------------------------------");
Log("Step 1: Device: Eth 1, BR 2, Rtr 1 Description (DBR-1.7b): Enable; connects to Rtr_1.");
/**
* Step 1
* - Device: Eth 1, BR 2, Rtr 1
* - Description (DBR-1.7b): Enable; connects to Rtr_1. Harness configures BR_2 Network Data with prefix PRE_1 as
* below. fd12:3456:abcd:1234::/64 (ULA prefix) P_slaac = true (SLAAC is enabled for prefix) P_on_mesh = true
* P_stable = true P_preferred = false (prefix is deprecated) P_dhcp = false P_default = true P_preference = 01
* (high) P_dp = false. Note: this looks like an OMR prefix, but due to deprecation it is not usable by (new)
* Thread Devices for connectivity. Note 1: the automatic creation of an OMR prefix as a BR would normally do, is
* disabled by the Harness for BR_2. Instead, the administratively configured PRE_1 is used only. Note 2: to
* disable the automatic OMR prefix creation as stated above, one method is (if no better method is available) to
* disable the BR_2 border routing using \"br disable\" OT CLI command to stop the automatic prefix creation. Then
* using \"netdata publish prefix\" the device could configure different PRE_1 prefixes as needed per test run.
* Form topology (if not already formed). Wait for BR_2 to: Register as border router in Thread Network Data with
* prefix PRE_1. Send multicast ND RAs on AIL.
* - Pass Criteria:
* - N/A
*/
br2.Join(rtr1);
nexus.AdvanceTime(kJoinNetworkTime);
VerifyOrQuit(br2.Get<Mle::Mle>().IsRouter());
static const char kPre1Prefix[] = "fd12:3456:abcd:1234::/64";
nexus.AddTestVar("PRE_1", kPre1Prefix);
NetworkData::OnMeshPrefixConfig config;
SuccessOrQuit(AsCoreType(&config.mPrefix).FromString(kPre1Prefix));
config.mPreference = NetworkData::kRoutePreferenceHigh;
config.mPreferred = false;
config.mSlaac = true;
config.mDhcp = false;
config.mDefaultRoute = true;
config.mOnMesh = true;
config.mStable = true;
SuccessOrQuit(br2.Get<NetworkData::Local>().AddOnMeshPrefix(config));
br2.Get<NetworkData::Notifier>().HandleServerDataUpdated();
br2.Get<BorderRouter::InfraIf>().Init(kInfraIfIndex, true);
br2.mInfraIf.Init(br2);
Ip6::Prefix pre1Prefix;
SuccessOrQuit(pre1Prefix.FromString(kPre1Prefix));
br2.mInfraIf.StartRouterAdvertisement(pre1Prefix);
nexus.AdvanceTime(kBrActionTime);
Log("---------------------------------------------------------------------------------------");
Log("Step 2: Device: BR 1 (DUT) Description (DBR-1.7b): Enable: switch on.");
/**
* Step 2
* - Device: BR 1 (DUT)
* - Description (DBR-1.7b): Enable: switch on.
* - Pass Criteria:
* - N/A
*/
br1.Join(rtr1);
nexus.AdvanceTime(kJoinNetworkTime);
br1.Get<BorderRouter::InfraIf>().Init(kInfraIfIndex, true);
br1.Get<BorderRouter::RoutingManager>().Init();
SuccessOrQuit(br1.Get<BorderRouter::RoutingManager>().SetEnabled(true));
Log("---------------------------------------------------------------------------------------");
Log("Step 3: Device: BR 1 (DUT) Description (DBR-1.7b): Automatically registers itself as a border router.");
/**
* Step 3
* - Device: BR 1 (DUT)
* - Description (DBR-1.7b): Automatically registers itself as a border router in the Thread Network Data and
* provides OMR prefix.
* - Pass Criteria:
* - The DUT MUST register a new OMR Prefix (OMR_1) in the Thread Network Data, in a Prefix TLV.
* - Flags in the Border Router sub-TLV MUST be:
* - 9. P_preference = 11 (Low)
* - 10. P_default = true
* - 11. P_stable = true
* - 12. P_on_mesh = true
* - 13. P_preferred = true
* - 14. P_slaac = true
* - 15. P_dhcp = false
* - 16. P_dp = false
* - OMR_1 MUST be 64 bits long and start with 0xFD.
*/
nexus.AdvanceTime(kBrActionTime);
Ip6::Prefix omr1;
SuccessOrQuit(br1.Get<BorderRouter::RoutingManager>().GetOmrPrefix(omr1));
nexus.AddTestVar("OMR_1", omr1.ToString().AsCString());
Log("---------------------------------------------------------------------------------------");
Log("Step 4: Device: BR 1 (DUT) Description (DBR-1.7b): Automatically multicasts ND RAs on AIL.");
/**
* Step 4
* - Device: BR 1 (DUT)
* - Description (DBR-1.7b): Automatically multicasts ND RAs on Adjacent Infrastructure Link.
* - Pass Criteria:
* - The DUT MUST multicast ND RAs on the infrastructure link:
* - IPv6 destination MUST be ff02::1
* - MUST NOT contain a Prefix Information Option (PIO) with a ULA prefix.
* - MUST contain a Route Information Option (RIO) with OMR_1.
* - MUST contain a Route Information Option (RIO) with PRE_1.
*/
// Time already advanced.
Log("---------------------------------------------------------------------------------------");
Log("Step 5: Device: Eth 1 Description (DBR-1.7b): Harness instructs device to send Echo Request to Rtr 1.");
/**
* Step 5
* - Device: Eth 1
* - Description (DBR-1.7b): Harness instructs the device to send an ICMPv6 Echo Request to Rtr 1 via BR_1 or BR_2.
* IPv6 Source: Eth 1 GUA IPv6 Destination: Rtr 1 OMR address
* - Pass Criteria:
* - Eth_1 receives an ICMPv6 Echo Reply from Rtr_1.
* - IPv6 Source: Rtr_1 OMR
* - IPv6 Destination: Eth 1 GUA
*/
const Ip6::Address &eth1Gua = eth1.mInfraIf.FindMatchingAddress(kGua1Prefix);
const Ip6::Address &rtr1Omr = rtr1.FindMatchingAddress(omr1.ToString().AsCString());
nexus.AddTestVar("ETH_1_GUA_ADDR", eth1Gua.ToString().AsCString());
nexus.AddTestVar("RTR_1_OMR_ADDR", rtr1Omr.ToString().AsCString());
eth1.mInfraIf.SendEchoRequest(eth1Gua, rtr1Omr, kEchoIdentifier, kEchoPayloadSize);
nexus.AdvanceTime(kPingResponseTime);
Log("---------------------------------------------------------------------------------------");
Log("Step 6: Device: Rtr 1 Description (DBR-1.7b): Harness instructs device to send Echo Request to Eth 1.");
/**
* Step 6
* - Device: Rtr 1
* - Description (DBR-1.7b): Harness instructs the device to send an ICMPv6 Echo Request to Eth 1. IPv6 Source:
* Rtr_1 OMR address IPv6 Destination: Eth_1 GUA
* - Pass Criteria:
* - Rtr_1 receives an ICMPv6 Echo Reply from Eth_1.
* - IPv6 Source: Eth 1 GUA
* - IPv6 Destination: Rtr_1 OMR address
*/
rtr1.SendEchoRequest(eth1Gua, kEchoIdentifier, kEchoPayloadSize, kPrefixLength, &rtr1Omr);
nexus.AdvanceTime(kPingResponseTime);
Log("---------------------------------------------------------------------------------------");
Log("Step 7: Device: BR_2 Description (DBR-1.7b): Harness disables the device.");
/**
* Step 7
* - Device: BR_2
* - Description (DBR-1.7b): Harness disables the device
* - Pass Criteria:
* - N/A
*/
br2.Get<Mle::Mle>().Stop();
Log("---------------------------------------------------------------------------------------");
Log("Step 7a: Device: N/A Description (DBR-1.7b): Harness waits -20 seconds.");
/**
* Step 7a
* - Device: N/A
* - Description (DBR-1.7b): Harness waits -20 seconds
* - Pass Criteria:
* - N/A
*/
nexus.AdvanceTime(kWaitTime);
Log("---------------------------------------------------------------------------------------");
Log("Step 7b: Device: Eth 1 Description (DBR-1.7b): Harness instructs device to send an ND RS message.");
/**
* Step 7b
* - Device: Eth 1
* - Description (DBR-1.7b): Harness instructs the device to send an ND RS message to trigger the DUT to send a ND
* RA for the next step. Note: in Linux, this is done with the command rdisc6v eth0. The output of the command is
* captured in the test log.
* - Pass Criteria:
* - N/A
*/
Ip6::Nd::RouterSolicitHeader rsHeader;
eth1.mInfraIf.SendIcmp6Nd(Ip6::Address::GetLinkLocalAllRoutersMulticast(),
reinterpret_cast<const uint8_t *>(&rsHeader), sizeof(rsHeader));
nexus.AdvanceTime(kPingResponseTime);
Log("---------------------------------------------------------------------------------------");
Log("Step 8: Device: BR 1 (DUT) Description (DBR-1.7b): Repeat Step 4.");
/**
* Step 8
* - Device: BR 1 (DUT)
* - Description (DBR-1.7b): Repeat Step 4. Note: since the prefix PRE_1 is still present in the Leader's Network
* Data for some time, BR_1 will continue to advertise the route for PRE_1 as indicated in Step 4 criteria.
* - Pass Criteria:
* - Repeat Step 4
*/
// Time already advanced.
Log("---------------------------------------------------------------------------------------");
Log("Step 9: Device: Eth 1 Description (DBR-1.7b): Repeat Step 5.");
/**
* Step 9
* - Device: Eth 1
* - Description (DBR-1.7b): Repeat Step 5
* - Pass Criteria:
* - Repeat Step 5
*/
eth1.mInfraIf.SendEchoRequest(eth1Gua, rtr1Omr, kEchoIdentifier, kEchoPayloadSize);
nexus.AdvanceTime(kPingResponseTime);
Log("---------------------------------------------------------------------------------------");
Log("Step 10: Device: Rtr_1 Description (DBR-1.7b): Repeat Step 6.");
/**
* Step 10
* - Device: Rtr_1
* - Description (DBR-1.7b): Repeat Step 6
* - Pass Criteria:
* - Repeat Step 6
*/
rtr1.SendEchoRequest(eth1Gua, kEchoIdentifier, kEchoPayloadSize, kPrefixLength, &rtr1Omr);
nexus.AdvanceTime(kPingResponseTime);
nexus.SaveTestInfo("test_1_3_DBR_TC_7B.json");
}
} // namespace Nexus
} // namespace ot
int main(void)
{
ot::Nexus::Test_1_3_DBR_TC_7B();
printf("All tests passed\n");
return 0;
}
+381
View File
@@ -0,0 +1,381 @@
#!/usr/bin/env python3
#
# Copyright (c) 2026, The OpenThread Authors.
# All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are met:
# 1. Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# 2. Redistributions in binary form must reproduce the above copyright
# notice, this list of conditions and the following disclaimer in the
# documentation and/or other materials provided with the distribution.
# 3. Neither the name of the copyright holder nor the
# names of its contributors may be used to endorse or promote products
# derived from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
# AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
# LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
# CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
# POSSIBILITY OF SUCH DAMAGE.
#
import sys
import os
# Add the current directory to sys.path to find verify_utils
CUR_DIR = os.path.dirname(os.path.abspath(__file__))
sys.path.append(CUR_DIR)
import verify_utils
from pktverify import consts
from pktverify.addrs import Ipv6Addr
from pktverify.null_field import nullField
# Constants
ULA_PREFIX_START_BYTE = 0xfd
BR_PREFERENCE_HIGH = 1
BR_PREFERENCE_MEDIUM = 0
BR_PREFERENCE_LOW = 3
BR_FLAG_R_TRUE = 1
BR_FLAG_O_TRUE = 1
BR_FLAG_P_TRUE = 1
BR_FLAG_S_TRUE = 1
BR_FLAG_D_FALSE = 0
BR_FLAG_DP_FALSE = 0
ICMPV6_TYPE_ROUTER_SOLICITATION = 133
def get_val(field_values, index):
vals = verify_utils.as_list(field_values)
if index < len(vals):
return vals[index]
return vals[0]
def check_step3(p, target_prefix, target_prefix_len):
# Check OMR prefix properties: 64 bits long and starts with ULA_PREFIX_START_BYTE
if target_prefix_len != 64 or target_prefix[0] != ULA_PREFIX_START_BYTE:
return False
try:
types = verify_utils.as_list(p.thread_nwd.tlv.type)
prefixes = verify_utils.as_list(p.thread_nwd.tlv.prefix)
stables = verify_utils.as_list(p.thread_nwd.tlv.stable)
except (AttributeError, IndexError):
return False
prefix_idx = 0
br_idx = 0
is_target = False
for i, t in enumerate(types):
if t == consts.NWD_PREFIX_TLV:
current_prefix = prefixes[prefix_idx]
current_stable = stables[i]
prefix_idx += 1
if current_prefix is nullField:
is_target = False
continue
is_target = (Ipv6Addr(current_prefix) == Ipv6Addr(target_prefix))
if is_target and current_stable != 1:
is_target = False
elif t in (consts.NWD_COMMISSIONING_DATA_TLV, consts.NWD_SERVICE_TLV):
is_target = False
elif t == consts.NWD_BORDER_ROUTER_TLV:
if is_target:
# This BR sub-TLV belongs to our target prefix!
try:
actual_pref = get_val(p.thread_nwd.tlv.border_router.pref, br_idx)
actual_r = get_val(p.thread_nwd.tlv.border_router.flag.r, br_idx)
actual_o = get_val(p.thread_nwd.tlv.border_router.flag.o, br_idx)
actual_p = get_val(p.thread_nwd.tlv.border_router.flag.p, br_idx)
actual_s = get_val(p.thread_nwd.tlv.border_router.flag.s, br_idx)
actual_d = get_val(p.thread_nwd.tlv.border_router.flag.d, br_idx)
actual_dp = get_val(p.thread_nwd.tlv.border_router.flag.dp, br_idx)
if actual_pref == BR_PREFERENCE_LOW and\
actual_r == BR_FLAG_R_TRUE and\
actual_o == BR_FLAG_O_TRUE and\
actual_p == BR_FLAG_P_TRUE and\
actual_s == BR_FLAG_S_TRUE and\
actual_d == BR_FLAG_D_FALSE and\
actual_dp == BR_FLAG_DP_FALSE:
return True
except (AttributeError, IndexError):
pass
br_idx += 1
return False
def check_step4(p, omr_prefix, pre_1_prefix, expect_high_pref=True):
if p.icmpv6.type != verify_utils.ICMPV6_TYPE_ROUTER_ADVERTISEMENT:
return False
# Check PIO (type ICMPV6_OPT_TYPE_PIO) and RIO (type ICMPV6_OPT_TYPE_RIO)
opts = verify_utils.as_list(p.icmpv6.opt.type)
if verify_utils.ICMPV6_OPT_TYPE_RIO not in opts:
return False
# MUST NOT contain a PIO with a ULA prefix.
if verify_utils.ICMPV6_OPT_TYPE_PIO in opts:
_, pio_prefixes = verify_utils.get_ra_prefixes(p)
for prefix in pio_prefixes:
if prefix[0] == ULA_PREFIX_START_BYTE:
return False
rio_prefixes, _ = verify_utils.get_ra_prefixes(p)
# MUST contain a Route Information Option (RIO) with OMR_1.
if omr_prefix not in rio_prefixes:
return False
# Check preference of OMR_1 RIO
if expect_high_pref:
# P_preference = 01 (High) or 00 (Medium).
# In RA RIO, pref is 2 bits. 01 is High, 00 is Medium, 11 is Low.
rio_idx = rio_prefixes.index(omr_prefix)
actual_pref = get_val(p.icmpv6.opt.route_info.flag.route_preference, rio_idx)
if actual_pref not in (BR_PREFERENCE_HIGH, BR_PREFERENCE_MEDIUM):
return False
# MUST contain a Route Information Option (RIO) with PRE_1.
if pre_1_prefix not in rio_prefixes:
return False
return True
def verify(pv):
# 1.7(b). [1.3] [CERT] Reachability - Multiple BRs - Single Thread / Single IPv6 Infrastructure - Presence of
# non-OMR prefixes
#
# 1.7b.1. Purpose
# To test the following:
# 1. Bi-directional reachability between single Thread Network and infrastructure devices
# 2. DUT BR creates own OMR prefix when existing prefixes are not usable (e.g. no SLAAC, or deprecated)
#
# 1.7b.2. Topology
# 1. Eth 1-Adjacent Infrastructure Link Reference Device
# 2. BR 1 (DUT) - Border Router
# 3. BR 2-Border Router Reference Device
# 4. Rtr 1-Thread Router Reference Device and Leader
#
# Spec Reference | V1.1 Section | V1.3.0 Section
# ---------------|--------------|---------------
# Reachability | N/A | 1.3
pkts = pv.pkts
pv.summary.show()
GUA_1 = Ipv6Addr(pv.vars['GUA_1'].split('/')[0])
PRE_1 = Ipv6Addr(pv.vars['PRE_1'].split('/')[0])
OMR_1 = Ipv6Addr(pv.vars['OMR_1'].split('/')[0])
OMR_1_LEN = 64
ETH_1_GUA_ADDR = Ipv6Addr(pv.vars['ETH_1_GUA_ADDR'])
RTR_1_OMR_ADDR = Ipv6Addr(pv.vars['RTR_1_OMR_ADDR'])
# Step 0
# Device: Eth 1
# Description (DBR-1.7b): Enable. Harness configures Ethernet link with an on-link IPv6 GUA prefix GUA_1.
# Eth_1 is configured to multicast ND RAS.
# Pass Criteria:
# - N/A
print("Step 0: Enable Eth 1 and configure GUA_1.")
# Step 0b
# Device: Rtr 1
# Description (DBR-1.7b): Enable. Becomes Leader.
# Pass Criteria:
# - N/A
print("Step 0b: Enable Rtr 1 and form network.")
# Step 1
# Device: Eth 1, BR 2, Rtr 1
# Description (DBR-1.7b): Enable; connects to Rtr_1. Harness configures BR_2 Network Data with prefix PRE_1 as
# below. fd12:3456:abcd:1234::/64 (ULA prefix) P_slaac = true (SLAAC is enabled for prefix) P_on_mesh = true
# P_stable = true P_preferred = false (prefix is deprecated) P_dhcp = false P_default = true P_preference = 01
# (high) P_dp = false. Note: this looks like an OMR prefix, but due to deprecation it is not usable by (new)
# Thread Devices for connectivity. Note 1: the automatic creation of an OMR prefix as a BR would normally do,
# is disabled by the Harness for BR_2. Instead, the administratively configured PRE_1 is used only. Note 2: to
# disable the automatic OMR prefix creation as stated above, one method is (if no better method is available)
# to disable the BR_2 border routing using \"br disable\" OT CLI command to stop the automatic prefix
# creation. Then using \"netdata publish prefix\" the device could configure different PRE_1 prefixes as
# needed per test run. Form topology (if not already formed). Wait for BR_2 to: Register as border router in
# Thread Network Data with prefix PRE_1. Send multicast ND RAs on AIL.
# Pass Criteria:
# - N/A
print("Step 1: Enable BR 2 and configure PRE_1 in Network Data.")
# Step 2
# Device: BR 1 (DUT)
# Description (DBR-1.7b): Enable: switch on.
# Pass Criteria:
# - N/A
print("Step 2: Enable BR 1 (DUT).")
# Step 3
# Device: BR 1 (DUT)
# Description (DBR-1.7b): Automatically registers itself as a border router in the Thread Network Data and
# provides OMR prefix.
# Pass Criteria:
# - The DUT MUST register a new OMR Prefix (OMR_1) in the Thread Network Data, in a Prefix TLV.
# - Flags in the Border Router sub-TLV MUST be:
# - 9. P_preference = 11 (Low)
# - 10. P_default = true
# - 11. P_stable = true
# - 12. P_on_mesh = true
# - 13. P_preferred = true
# - 14. P_slaac = true
# - 15. P_dhcp = false
# - 16. P_dp = false
# - OMR_1 MUST be 64 bits long and start with 0xFD.
print("Step 3: BR 1 (DUT) registers OMR_1 in Network Data.")
pkts.filter(lambda p: hasattr(p, 'mle') and\
p.mle.cmd in (consts.MLE_DATA_RESPONSE, consts.MLE_ADVERTISEMENT)).\
filter(lambda p: check_step3(p, OMR_1, OMR_1_LEN)).\
must_next()
# Step 4
# Device: BR 1 (DUT)
# Description (DBR-1.7b): Automatically multicasts ND RAs on Adjacent Infrastructure Link.
# Pass Criteria:
# - The DUT MUST multicast ND RAs on the infrastructure link:
# - IPv6 destination MUST be ff02::1
# - MUST NOT contain a Prefix Information Option (PIO) with a ULA prefix.
# - MUST contain a Route Information Option (RIO) with OMR_1.
# - MUST contain a Route Information Option (RIO) with PRE_1.
print("Step 4: BR 1 (DUT) multicasts ND RAs on AIL.")
pkts.filter_eth_src(pv.vars['BR_1_ETH']).\
filter_ipv6_dst("ff02::1").\
filter(lambda p: check_step4(p, OMR_1, PRE_1)).\
must_next()
# Step 5
# Device: Eth 1
# Description (DBR-1.7b): Harness instructs the device to send an ICMPv6 Echo Request to Rtr 1 via BR_1 or BR_2.
# IPv6 Source: Eth 1 GUA IPv6 Destination: Rtr 1 OMR address
# Pass Criteria:
# - Eth_1 receives an ICMPv6 Echo Reply from Rtr_1.
# - IPv6 Source: Rtr_1 OMR
# - IPv6 Destination: Eth 1 GUA
print("Step 5: Eth 1 pings RTR 1 OMR.")
_pkt = pkts.filter_eth_src(pv.vars['Eth_1_ETH']).\
filter_ipv6_src(ETH_1_GUA_ADDR).\
filter_ipv6_dst(RTR_1_OMR_ADDR).\
filter_ping_request().\
must_next()
pkts.filter(lambda p: p.eth.dst == pv.vars['Eth_1_ETH']).\
filter_ipv6_src(RTR_1_OMR_ADDR).\
filter_ipv6_dst(ETH_1_GUA_ADDR).\
filter_ping_reply(identifier=_pkt.icmpv6.echo.identifier).\
must_next()
# Step 6
# Device: Rtr 1
# Description (DBR-1.7b): Harness instructs the device to send an ICMPv6 Echo Request to Eth 1.
# IPv6 Source: Rtr_1 OMR address IPv6 Destination: Eth_1 GUA
# Pass Criteria:
# - Rtr_1 receives an ICMPv6 Echo Reply from Eth_1.
# - IPv6 Source: Eth 1 GUA
# - IPv6 Destination: Rtr_1 OMR address
print("Step 6: RTR 1 OMR pings Eth 1 GUA.")
_pkt = pkts.filter_ipv6_src(RTR_1_OMR_ADDR).\
filter_ipv6_dst(ETH_1_GUA_ADDR).\
filter_ping_request().\
must_next()
pkts.filter_ipv6_src(ETH_1_GUA_ADDR).\
filter_ipv6_dst(RTR_1_OMR_ADDR).\
filter_ping_reply(identifier=_pkt.icmpv6.echo.identifier).\
must_next()
# Step 7
# Device: BR_2
# Description (DBR-1.7b): Harness disables the device
# Pass Criteria:
# - N/A
print("Step 7: Disable BR 2.")
# Step 7a
# Device: N/A
# Description (DBR-1.7b): Harness waits -20 seconds
# Pass Criteria:
# - N/A
print("Step 7a: Wait 20 seconds.")
# Step 7b
# Device: Eth 1
# Description (DBR-1.7b): Harness instructs the device to send an ND RS message to trigger the DUT to send a ND
# RA for the next step. Note: in Linux, this is done with the command rdisc6v eth0.
# The output of the command is captured in the test log.
# Pass Criteria:
# - N/A
print("Step 7b: Eth 1 sends RS.")
pkts.filter_eth_src(pv.vars['Eth_1_ETH']).\
filter_ipv6_dst("ff02::2").\
filter(lambda p: p.icmpv6.type == ICMPV6_TYPE_ROUTER_SOLICITATION).\
must_next()
# Step 8
# Device: BR 1 (DUT)
# Description (DBR-1.7b): Repeat Step 4. Note: since the prefix PRE_1 is still present in the Leader's
# Network Data for some time, BR_1 will continue to advertise the route for PRE_1 as indicated in Step 4
# criteria.
# Pass Criteria:
# - Repeat Step 4
print("Step 8: BR 1 (DUT) repeats Step 4.")
pkts.filter_eth_src(pv.vars['BR_1_ETH']).\
filter_ipv6_dst("ff02::1").\
filter(lambda p: check_step4(p, OMR_1, PRE_1)).\
must_next()
# Step 9
# Device: Eth 1
# Description (DBR-1.7b): Repeat Step 5
# Pass Criteria:
# - Repeat Step 5
print("Step 9: Eth 1 repeats Step 5.")
_pkt = pkts.filter_eth_src(pv.vars['Eth_1_ETH']).\
filter_ipv6_src(ETH_1_GUA_ADDR).\
filter_ipv6_dst(RTR_1_OMR_ADDR).\
filter_ping_request().\
must_next()
pkts.filter(lambda p: p.eth.dst == pv.vars['Eth_1_ETH']).\
filter_ipv6_src(RTR_1_OMR_ADDR).\
filter_ipv6_dst(ETH_1_GUA_ADDR).\
filter_ping_reply(identifier=_pkt.icmpv6.echo.identifier).\
must_next()
# Step 10
# Device: Rtr_1
# Description (DBR-1.7b): Repeat Step 6
# Pass Criteria:
# - Repeat Step 6
print("Step 10: RTR 1 repeats Step 6.")
_pkt = pkts.filter_ipv6_src(RTR_1_OMR_ADDR).\
filter_ipv6_dst(ETH_1_GUA_ADDR).\
filter_ping_request().\
must_next()
pkts.filter_ipv6_src(ETH_1_GUA_ADDR).\
filter_ipv6_dst(RTR_1_OMR_ADDR).\
filter_ping_reply(identifier=_pkt.icmpv6.echo.identifier).\
must_next()
if __name__ == '__main__':
verify_utils.run_main(verify)