diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index f4bb07b7e5..167f5d5619 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -4,6 +4,8 @@ variables: include: - local: .gitlab/build.yml - local: .gitlab/cdrouter.yml + - local: .gitlab/cdrouter/glinet-b1300.yml + - local: .gitlab/cdrouter/turris-omnia.yml - local: .gitlab/coverity.yml - local: .gitlab/docker.yml - local: .gitlab/docker/builder/gitlab.yml @@ -26,87 +28,35 @@ stages: - cdrouter - coverity -.build test intel_mips prpl: +.build test intel_mips prpl webui: extends: .build test config -build test ipq40xx prpl: +build test ipq40xx prpl webui: extends: .build test config -build test mvebu prpl: +build test mvebu prpl webui: extends: .build test config -coverity scan ipq40xx prpl: - extends: .coverity scan config +build test x86_64 prpl webui: + extends: .build test config variables: - CI_COVERITY_COMPILER_TEMPLATE_LIST: > - arm-openwrt-linux-gcc - arm-openwrt-linux-muslgnueabi-gcc + CI_BUILD_CONFIG: > + +DEVEL +BUILD_LOG +SDK +IB +IB_STANDALONE -.run test NEC WX3000HP with system on NAND: +.run test NEC WX3000HP NAND: needs: - - build test intel_mips prpl + - job: build test intel_mips prpl webui + optional: true extends: .nec-wx3000hp testbed -run test Gl.iNet B1300 with system on initramfs: +run test Gl.iNet B1300 initramfs: needs: - - build test ipq40xx prpl + - job: build test ipq40xx prpl webui + optional: true extends: .glinet-b1300 testbed -run test Turris Omnia with system on initramfs: +run test Turris Omnia initramfs: needs: - - build test mvebu prpl + - job: build test mvebu prpl webui + optional: true extends: .turris-omnia testbed - -.CDRouter CDRouter-Top-100 package on NEC WX3000HP with system on NAND: - needs: - - build test intel_mips prpl - extends: - - .nec-wx3000hp testbed - - .cdrouter - variables: - LABGRID_TARGET: "$DUT_BOARD-firstboot" - -CDRouter CDRouter-Top-100 package on Gl.iNet B1300 with system on initramfs: - needs: - - build test ipq40xx prpl - extends: - - .glinet-b1300 testbed - - .cdrouter - -CDRouter CDRouter-Top-100 package on Turris Omnia with system on initramfs: - needs: - - build test mvebu prpl - extends: - - .turris-omnia testbed - - .cdrouter - -.CDRouter CDRouter-TR-069 package on NEC WX3000HP with system on NAND: - allow_failure: true - needs: - - build test intel_mips prpl - extends: - - .nec-wx3000hp testbed - - .cdrouter - -CDRouter CDRouter-TR-069 package on Gl.iNet B1300 with system on NOR: - allow_failure: true - needs: - - build test ipq40xx prpl - extends: - - .glinet-b1300 testbed - - .cdrouter - variables: - LABGRID_TARGET: glinet-b1300-nor - TFTP_IMAGE_FILENAME: openwrt-ipq40xx-generic-glinet_gl-b1300-squashfs-sysupgrade.bin - -CDRouter CDRouter-TR-069 package on Turris Omnia with system on eMMC: - allow_failure: true - needs: - - build test mvebu prpl - extends: - - .turris-omnia testbed - - .cdrouter - variables: - LABGRID_TARGET: turris-omnia-emmc - TFTP_IMAGE_FILENAME: openwrt-mvebu-cortexa9-cznic_turris-omnia-sysupgrade.img.gz - TFTP_IMAGE_UNPACK_COMMAND: "gunzip --force $TESTBED_TFTP_PATH/$TFTP_IMAGE_FILENAME || true" diff --git a/.gitlab/cdrouter.yml b/.gitlab/cdrouter.yml index c91840faaf..2f19608d95 100644 --- a/.gitlab/cdrouter.yml +++ b/.gitlab/cdrouter.yml @@ -7,23 +7,32 @@ - if: '$CI_COMMIT_BRANCH == $CI_DESIGNATED_BRANCH' - when: manual variables: - TEST_CONFIG: generic + CDROUTER_TEST_CONFIG: generic DUT_SLEEP_AFTER_BOOT: 20 CDROUTER_LAN_INTERFACE: eth1 CDROUTER_WAN_INTERFACE: eth2 CDROUTER_ETH0_MAC_ADDRESS: 00:03:2d:49:2e:d8 + CDROUTER_ETH0_MAC_ADDRESS_TESTBED_02: 00:03:2d:49:2e:c8 before_script: - - sudo etherwake -i $TESTBED_MNG_INTERFACE $CDROUTER_ETH0_MAC_ADDRESS 2> /dev/null + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-01; then + sudo etherwake -i $TESTBED_MNG_INTERFACE $CDROUTER_ETH0_MAC_ADDRESS 2> /dev/null + else + sudo etherwake -i $TESTBED_MNG_INTERFACE $CDROUTER_ETH0_MAC_ADDRESS_TESTBED_02 2> /dev/null + fi - sudo ip link set $TESTBED_LAN_INTERFACE up 2> /dev/null - sudo ip link set $TESTBED_WAN_INTERFACE up 2> /dev/null - sleep 10 - - eval $(ssh-agent -s) - - echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - - mkdir -p ~/.ssh; chmod 700 ~/.ssh - - ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null - - chmod 644 ~/.ssh/known_hosts + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-01; then + eval $(ssh-agent -s) + echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - + ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null + chmod 644 ~/.ssh/known_hosts + fi - > if [ -n "$TFTP_IMAGE_DOWNLOAD_URL" ]; then @@ -38,6 +47,12 @@ echo "Running $TFTP_IMAGE_UNPACK_COMMAND" eval "$TFTP_IMAGE_UNPACK_COMMAND" fi + + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-02; then + export TB_CONFIG=".testbed/labgrid/testbed-02.yaml" + fi + - .gitlab/scripts/testbed-device.py --target $LABGRID_TARGET boot_into shell - sudo ip link set $TESTBED_WAN_INTERFACE down 2> /dev/null - > @@ -46,21 +61,22 @@ --network lan --remote-host $TARGET_LAN_TEST_HOST - - > - retry_count=3; - while [ $retry_count -gt 0 ]; do - echo "Waiting for SSH availability on $TARGET_LAN_IP" - ssh-keyscan "$TARGET_LAN_IP" 2>&1 | grep -q "$TARGET_LAN_IP" && break - retry_count="$(( retry_count - 1 ))" - sleep 5 - done + - echo "Waiting for SSH connection availability with ${DUT_SSH_CONNECT_TIMEOUT}sec timeout, with $DUT_SSH_CONNECT_ATTEMPTS attempts..." + - time ssh -o BatchMode=yes -o StrictHostKeyChecking=no -o ConnectionAttempts=$DUT_SSH_CONNECT_ATTEMPTS -o ConnectTimeout=$DUT_SSH_CONNECT_TIMEOUT root@$TARGET_LAN_IP 'exit 0' - ssh-keyscan $TARGET_LAN_IP >> ~/.ssh/known_hosts 2> /dev/null - ssh root@$TARGET_LAN_IP "cat /var/log/messages" > syslog-$LABGRID_TARGET.txt 2> /dev/null || true - ssh root@$TARGET_LAN_IP "ubus call system board" | tee system-$LABGRID_TARGET.json - - scp .gitlab/mockups/tr181-mockups.tar.gz root@${TARGET_LAN_IP}:/tmp/ - - ssh root@$TARGET_LAN_IP "tar xzf /tmp/tr181-mockups.tar.gz -C / && /etc/init.d/tr181-mockups start" + - > + for dut_init_script in $DUT_INIT_SCRIPTS; + do echo "Running $dut_init_script"; /bin/sh "$dut_init_script"; + done + + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-02; then + export CDROUTER_API_TOKEN="$CDROUTER_API_TOKEN_TESTBED_02" + fi - .gitlab/scripts/testbed-cdrouter.py package_stop - .gitlab/scripts/testbed-cdrouter.py wait_for_netif $CDROUTER_LAN_INTERFACE @@ -71,14 +87,19 @@ script: - sleep $DUT_SLEEP_AFTER_BOOT - - export TEST_PACKAGE="$(echo $CI_JOB_NAME | sed 's/CDRouter \(.*\) package on .*/\1/')" - - .gitlab/scripts/testbed-cdrouter.py config_import $TEST_CONFIG + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-02; then + export CDROUTER_API_TOKEN="$CDROUTER_API_TOKEN_TESTBED_02" + fi + + - export TEST_PACKAGE="$(echo $CI_JOB_NAME | sed 's/\(\w\) .*/\1/')" + - .gitlab/scripts/testbed-cdrouter.py config_import $CDROUTER_TEST_CONFIG - .gitlab/scripts/testbed-cdrouter.py package_import $TEST_PACKAGE.gz - > .gitlab/scripts/testbed-cdrouter.py package_run $TEST_PACKAGE --device generic - --configuration $TEST_CONFIG + --configuration $CDROUTER_TEST_CONFIG --system-info system-$LABGRID_TARGET.json after_script: @@ -89,16 +110,30 @@ cat cdrouter-results/final.txt && .gitlab/scripts/cdrouter-pretty-failures.awk cdrouter-results/*.txt - - eval $(ssh-agent -s) - - echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - - mkdir -p ~/.ssh; chmod 700 ~/.ssh - - ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null - - chmod 644 ~/.ssh/known_hosts + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-01; then + eval $(ssh-agent -s) + echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - + ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null + chmod 644 ~/.ssh/known_hosts + fi - sudo ip link set $TESTBED_LAN_INTERFACE up 2> /dev/null - sudo ip link set $TESTBED_WAN_INTERFACE up 2> /dev/null - sleep 5 + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-02; then + export TB_CONFIG=".testbed/labgrid/testbed-02.yaml" + fi + + - > + ssh -o BatchMode=yes -o StrictHostKeyChecking=no -o ConnectTimeout=15 root@$TARGET_LAN_IP 'exit 0' || { + .gitlab/scripts/testbed-device.py --target $LABGRID_TARGET console_dump_system_state + .gitlab/scripts/testbed-device.py --target $LABGRID_TARGET console_recover_ssh_access + } || true + - ssh-keyscan $TARGET_LAN_IP >> ~/.ssh/known_hosts 2> /dev/null - > ssh root@$TARGET_LAN_IP exit && { @@ -113,6 +148,10 @@ - .gitlab/scripts/testbed-device.py --target $LABGRID_TARGET power off - mv console_$LABGRID_TARGET console_$LABGRID_TARGET.txt || true + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-02; then + export CDROUTER_API_TOKEN="$CDROUTER_API_TOKEN_TESTBED_02" + fi - .gitlab/scripts/testbed-cdrouter.py package_stop artifacts: diff --git a/.gitlab/cdrouter/glinet-b1300.yml b/.gitlab/cdrouter/glinet-b1300.yml new file mode 100644 index 0000000000..e3498a94e2 --- /dev/null +++ b/.gitlab/cdrouter/glinet-b1300.yml @@ -0,0 +1,63 @@ +.glinet-cdrouter: &glinet_cdrouter + needs: + - job: build test ipq40xx prpl webui + optional: true + extends: + - .glinet-b1300 testbed + - .cdrouter + +CDRouter-Top-100+mDNS Gl.iNet initramfs: + <<: *glinet_cdrouter + +CDRouter-Top-100+mDNS Gl.iNet VLAN WAN/LAN initramfs: + <<: *glinet_cdrouter + variables: + CDROUTER_TEST_CONFIG: vlan + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-vlans.sh + +CDRouter-Top-100+mDNS Gl.iNet PPPoE WAN initramfs: + <<: *glinet_cdrouter + variables: + CDROUTER_TEST_CONFIG: ppp + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-pppoe.sh + + +.glinet-cdrouter-ipv6: &glinet_cdrouter_ipv6 + <<: *glinet_cdrouter + allow_failure: true + rules: + - if: '$TFTP_IMAGE_DOWNLOAD_URL =~ $TFTP_IMAGE_FILENAME_PATTERN' + when: always + - if: '$TFTP_IMAGE_DOWNLOAD_URL' + when: never + - when: manual + +CDRouter-IPv6-Top-100+mDNS Gl.iNet initramfs: + <<: *glinet_cdrouter_ipv6 + variables: + CDROUTER_TEST_CONFIG: generic-ipv6 + +CDRouter-IPv6-Top-100+mDNS Gl.iNet VLAN WAN/LAN initramfs: + <<: *glinet_cdrouter_ipv6 + variables: + CDROUTER_TEST_CONFIG: vlan-ipv6 + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-vlans.sh + +CDRouter-TR-069 Gl.iNet NOR: + <<: *glinet_cdrouter + variables: + LABGRID_TARGET: glinet-b1300-nor + TFTP_IMAGE_FILENAME: openwrt-ipq40xx-generic-glinet_gl-b1300-squashfs-sysupgrade.bin + TFTP_IMAGE_FILENAME_PATTERN: /.*openwrt-ipq40xx-generic-glinet_gl-b1300-squashfs-sysupgrade.bin/ + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-tr181-mockups.sh + +CDRouter-IPv6-Top-100+mDNS Gl.iNet PPPoE WAN initramfs: + <<: *glinet_cdrouter_ipv6 + variables: + CDROUTER_TEST_CONFIG: ppp-ipv6 + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-pppoe.sh diff --git a/.gitlab/cdrouter/turris-omnia.yml b/.gitlab/cdrouter/turris-omnia.yml new file mode 100644 index 0000000000..26151d1b2f --- /dev/null +++ b/.gitlab/cdrouter/turris-omnia.yml @@ -0,0 +1,64 @@ +.turris-cdrouter: &turris_cdrouter + needs: + - job: build test mvebu prpl webui + optional: true + extends: + - .turris-omnia testbed + - .cdrouter + +CDRouter-Top-100+mDNS Turris initramfs: + <<: *turris_cdrouter + +CDRouter-Top-100+mDNS Turris VLAN WAN/LAN initramfs: + <<: *turris_cdrouter + variables: + CDROUTER_TEST_CONFIG: vlan + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-vlans.sh + +CDRouter-Top-100+mDNS Turris PPPoE WAN initramfs: + <<: *turris_cdrouter + variables: + CDROUTER_TEST_CONFIG: ppp + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-pppoe.sh + + +.turris-cdrouter-ipv6: &turris_cdrouter_ipv6 + <<: *turris_cdrouter + allow_failure: true + rules: + - if: '$TFTP_IMAGE_DOWNLOAD_URL =~ $TFTP_IMAGE_FILENAME_PATTERN' + when: always + - if: '$TFTP_IMAGE_DOWNLOAD_URL' + when: never + - when: manual + +CDRouter-IPv6-Top-100+mDNS Turris initramfs: + <<: *turris_cdrouter_ipv6 + variables: + CDROUTER_TEST_CONFIG: generic-ipv6 + +CDRouter-IPv6-Top-100+mDNS Turris VLAN WAN/LAN initramfs: + <<: *turris_cdrouter_ipv6 + variables: + CDROUTER_TEST_CONFIG: vlan-ipv6 + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-vlans.sh + +CDRouter-IPv6-Top-100+mDNS Turris PPPoE WAN initramfs: + <<: *turris_cdrouter_ipv6 + variables: + CDROUTER_TEST_CONFIG: ppp-ipv6 + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-pppoe.sh + +CDRouter-TR-069 Turris eMMC: + <<: *turris_cdrouter + variables: + LABGRID_TARGET: turris-omnia-emmc + TFTP_IMAGE_FILENAME: openwrt-mvebu-cortexa9-cznic_turris-omnia-sysupgrade.img.gz + TFTP_IMAGE_FILENAME_PATTERN: /.*openwrt-mvebu-cortexa9-cznic_turris-omnia-sysupgrade.img.gz/ + TFTP_IMAGE_UNPACK_COMMAND: "gunzip --force $TESTBED_TFTP_PATH/$TFTP_IMAGE_FILENAME || true" + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-tr181-mockups.sh diff --git a/.gitlab/docker/sdk/gitlab.yml b/.gitlab/docker/sdk/gitlab.yml index 770fbec2ae..87f425cdcc 100644 --- a/.gitlab/docker/sdk/gitlab.yml +++ b/.gitlab/docker/sdk/gitlab.yml @@ -1,6 +1,6 @@ .build Docker image sdk-intel_mips-xrx500: stage: docker SDK - needs: ["build test intel_mips prpl"] + needs: ["build test intel_mips prpl webui"] variables: DOCKER_DOCKERFILE_PATH: .gitlab/docker/sdk DOCKER_BUILD_EXTRA_ARGS: --build-arg DESIGNATED_BRANCH=$CI_DESIGNATED_BRANCH @@ -20,7 +20,7 @@ build Docker image sdk-ipq40xx-generic: stage: docker SDK - needs: ["build test ipq40xx prpl"] + needs: ["build test ipq40xx prpl webui"] variables: DOCKER_DOCKERFILE_PATH: .gitlab/docker/sdk DOCKER_BUILD_EXTRA_ARGS: --build-arg DESIGNATED_BRANCH=$CI_DESIGNATED_BRANCH @@ -40,7 +40,7 @@ deploy Docker image sdk-ipq40xx-generic: build Docker image sdk-mvebu-cortexa9: stage: docker SDK - needs: ["build test mvebu prpl"] + needs: ["build test mvebu prpl webui"] variables: DOCKER_DOCKERFILE_PATH: .gitlab/docker/sdk DOCKER_BUILD_EXTRA_ARGS: --build-arg DESIGNATED_BRANCH=$CI_DESIGNATED_BRANCH @@ -56,3 +56,23 @@ deploy Docker image sdk-mvebu-cortexa9: stage: docker SDK deploy extends: .deploy Docker image needs: ["test Docker image sdk-mvebu-cortexa9"] + + +build Docker image sdk-x86-64: + stage: docker SDK + needs: ["build test x86_64 prpl webui"] + variables: + DOCKER_DOCKERFILE_PATH: .gitlab/docker/sdk + DOCKER_BUILD_EXTRA_ARGS: --build-arg DESIGNATED_BRANCH=$CI_DESIGNATED_BRANCH + extends: .build Docker image + before_script: + - tar xf bin/targets/x86/64/openwrt-sdk-x86-64_gcc*.Linux-x86_64.tar.xz --strip=1 -C .gitlab/docker/sdk + +test Docker image sdk-x86-64: + extends: .test Docker SDK image + needs: ["build Docker image sdk-x86-64"] + +deploy Docker image sdk-x86-64: + stage: docker SDK deploy + extends: .deploy Docker image + needs: ["test Docker image sdk-x86-64"] diff --git a/.gitlab/docker/testbed/Dockerfile b/.gitlab/docker/testbed/Dockerfile index e93a33cecb..141477df82 100644 --- a/.gitlab/docker/testbed/Dockerfile +++ b/.gitlab/docker/testbed/Dockerfile @@ -28,14 +28,15 @@ RUN \ RUN localedef -i en_US -c -f UTF-8 -A /usr/share/locale/locale.alias en_US.UTF-8 ENV LANG=en_US.utf8 -ENV LABGRID_COMMIT=e1da2a319314 -RUN git clone --branch wip/testbed-next https://gitlab.com/prpl-foundation/prplOS/labgrid +ENV LABGRID_COMMIT=0e1ef80ca803 +RUN git clone --branch wip/testbed https://gitlab.com/prpl-foundation/prplOS/labgrid WORKDIR labgrid RUN git reset --hard $LABGRID_COMMIT RUN \ pip3 install -U pip && \ pip3 install -r requirements.txt && \ + pip3 install -r modbus-requirements.txt && \ python3 setup.py install && \ rm -fr /labgrid diff --git a/.gitlab/mockups/tr181-mockups.tar.gz b/.gitlab/mockups/tr181-mockups.tar.gz index 858d142ac8..a6c7844423 100644 Binary files a/.gitlab/mockups/tr181-mockups.tar.gz and b/.gitlab/mockups/tr181-mockups.tar.gz differ diff --git a/.gitlab/scripts/dut-init/cdrouter-dut-enable-pppoe.sh b/.gitlab/scripts/dut-init/cdrouter-dut-enable-pppoe.sh new file mode 100644 index 0000000000..46411b2d3e --- /dev/null +++ b/.gitlab/scripts/dut-init/cdrouter-dut-enable-pppoe.sh @@ -0,0 +1,9 @@ +#!/bin/bash + +ssh root@$TARGET_LAN_IP "ubus -t 200 wait_for PPP" +ssh root@$TARGET_LAN_IP "ubus -t 200 wait_for DHCPv4" +ssh root@$TARGET_LAN_IP "ubus -t 200 wait_for IP" +ssh root@$TARGET_LAN_IP "ubus call DHCPv4.Client.1 _set '{\"parameters\":{\"Enable\":0}}'" +ssh root@$TARGET_LAN_IP "ubus call PPP.Interface.1 _set '{\"parameters\":{\"Enable\":1}}'" +ssh root@$TARGET_LAN_IP "ubus call IP.Interface.2 _set '{\"parameters\":{\"LowerLayers\":\"Device.PPP.Interface.1.\"}}'" +ssh root@$TARGET_LAN_IP "ubus call IP.Interface.2.IPv4Address.1 _set '{\"parameters\":{\"AddressingType\":\"IPCP\"}}'" diff --git a/.gitlab/scripts/dut-init/cdrouter-dut-enable-vlans.sh b/.gitlab/scripts/dut-init/cdrouter-dut-enable-vlans.sh new file mode 100644 index 0000000000..b630717721 --- /dev/null +++ b/.gitlab/scripts/dut-init/cdrouter-dut-enable-vlans.sh @@ -0,0 +1,4 @@ +#!/bin/bash + +.gitlab/scripts/testbed-device.py --target "$LABGRID_TARGET" init_vlans +true diff --git a/.gitlab/scripts/dut-init/cdrouter-tr181-mockups.sh b/.gitlab/scripts/dut-init/cdrouter-tr181-mockups.sh new file mode 100644 index 0000000000..4f4f1ac173 --- /dev/null +++ b/.gitlab/scripts/dut-init/cdrouter-tr181-mockups.sh @@ -0,0 +1,4 @@ +#!/bin/bash + +scp .gitlab/mockups/tr181-mockups.tar.gz root@${TARGET_LAN_IP}:/tmp/ +ssh root@$TARGET_LAN_IP "tar xzf /tmp/tr181-mockups.tar.gz -C / && /etc/init.d/tr181-mockups start" diff --git a/.gitlab/scripts/prpl-jira.py b/.gitlab/scripts/prpl-jira.py index 97884aff89..1233b7a8d6 100755 --- a/.gitlab/scripts/prpl-jira.py +++ b/.gitlab/scripts/prpl-jira.py @@ -240,20 +240,10 @@ class JiraHelper: self.login() def login(self): - cert_data = None args = self.args - - with open(args.private_key, "r", errors="ignore") as cert_file: - cert_data = cert_file.read() - - oauth_dict = { - "access_token": args.access_token, - "access_token_secret": args.access_token_secret, - "consumer_key": args.consumer_key, - "key_cert": cert_data, - } - - self.jira = JIRA({"server": args.instance_url}, oauth=oauth_dict) + self.jira = JIRA( + args.instance_url, basic_auth=(args.api_username, args.api_token) + ) def create_or_update_issue(self, failure_type, failure_details): args = self.args @@ -378,24 +368,17 @@ def main(): ) parser.add_argument( - "--access-token", + "--api-username", type=str, - default=os.environ.get("JIRA_ACCESS_TOKEN"), - help="Jira access token (default: %(default)s)", + default=os.environ.get("JIRA_API_USERNAME"), + help="Jira API username", ) parser.add_argument( - "--access-token-secret", + "--api-token", type=str, - default=os.environ.get("JIRA_ACCESS_TOKEN_SECRET"), - help="Jira access token secret", - ) - - parser.add_argument( - "--consumer-key", - type=str, - default=os.environ.get("JIRA_CONSUMER_KEY"), - help="Jira consumer key", + default=os.environ.get("JIRA_API_TOKEN"), + help="Jira API token", ) parser.add_argument( @@ -405,13 +388,6 @@ def main(): help="Jira instance URL (default: %(default)s)", ) - parser.add_argument( - "--private-key", - type=str, - default=os.environ.get("JIRA_PRIVATE_KEY"), - help="Jira private key", - ) - parser.add_argument( "--project", type=str, diff --git a/.gitlab/scripts/testbed-device.py b/.gitlab/scripts/testbed-device.py index 73643b10a9..c3bfe9a5fb 100755 --- a/.gitlab/scripts/testbed-device.py +++ b/.gitlab/scripts/testbed-device.py @@ -4,18 +4,234 @@ import argparse import os import sys import logging +import json +import time from labgrid import Environment, StepReporter +from labgrid.driver import ExecutionError from labgrid.consoleloggingreporter import ConsoleLoggingReporter +class OpenWrtConsoleShell: + def __init__(self, args, shell): + self.args = args + self.shell = shell + + def run(self, cmd): + result = None + + try: + logging.info(f"executing: {cmd}") + result = self.shell.run_check(cmd) + except ExecutionError as e: + stdout = " ".join(e.stdout) + stderr = " ".join(e.stderr) + logging.error(f"failed: '{e.msg}' stdout='{stdout}' stderr='{stderr}'") + return None, (e.msg, e.stdout, e.stderr) + + if len(result) > 0: + logging.info("result:\n" + "\n".join(result) + "\n" + "-" * 80) + + return result + + def ubus_call(self, cmd): + result = None + + cmd = f"ubus call {cmd}" + try: + logging.info(f"executing: {cmd}") + result = self.shell.run_check(cmd) + except ExecutionError as e: + stdout = " ".join(e.stdout).replace("\t", "") + stderr = " ".join(e.stderr) + logging.error(f"failed: {e.msg} stdout='{stdout}' stderr='{stderr}'") + return None, e.stdout[-1], (e.msg, e.stdout, e.stderr) + + result = json.loads(" ".join(result)) + logging.info(f"result: {result}") + return result + + +class UbusTR181: + def __init__(self, args, shell): + self.args = args + self.shell = shell + + def api_call(self, method, path, parameters=None): + cmd = f"{path} {method}" + if parameters: + p = json.dumps({"parameters": parameters}) + cmd += f" '{p}'" + + return self.shell.ubus_call(cmd) + + def get(self, path, parameters=None): + return self.api_call("_get", path, parameters) + + def set(self, path, parameters): + return self.api_call("_set", path, parameters) + + def add(self, path, parameters): + return self.api_call("_add", path, parameters) + + def remove(self, path, parameters=None): + return self.api_call("_del", path, parameters) + + def call(self, path, method, parameters): + cmd = f"{path} {method}" + if parameters: + p = json.dumps(parameters) + cmd += f" '{p}'" + + return self.shell.ubus_call(cmd) + + class TestbedDevice: def __init__(self, args): self.args = args + self.shell = None self.env = Environment(config_file=self.args.config) ConsoleLoggingReporter.start(args.console_logpath) self.target = self.env.get_target(args.target) + def init_shell(self): + if self.shell: + return + + self.shell_driver = self.target.get_driver("ShellDriver") + self.shell = OpenWrtConsoleShell(self.args, self.shell_driver) + + def init_swconfig_glinet(self): + self.shell.run("swconfig dev switch0 vlan 1 set vid 201") + self.shell.run("swconfig dev switch0 vlan 1 set ports '0t 3t 4t'") + + self.shell.run("swconfig dev switch0 vlan 2 set vid 101") + self.shell.run("swconfig dev switch0 vlan 2 set ports '0t 5t'") + + self.shell.run("swconfig dev switch0 vlan 1 show") + self.shell.run("swconfig dev switch0 vlan 2 show") + + self.shell.run( + """ + uci add network switch_vlan && + uci set network.@switch_vlan[-1]=switch_vlan && + uci set network.@switch_vlan[-1].device='switch0' && + uci set network.@switch_vlan[-1].vlan='2' && + uci set network.@switch_vlan[-1].vid='101' && + uci set network.@switch_vlan[-1].ports='0t 5t' && + uci set network.@switch_vlan[0].vid='201' && + uci set network.@switch_vlan[0].ports='3t 4t 0t' && + uci commit network + """ + ) + + def _init_swconfig(self): + if self.board_name.startswith("glinet"): + self.init_swconfig_glinet() + + def _init_wan_vlan(self): + self.shell.run("ubus -t 60 wait_for X_PRPL-COM_WANManager.WAN") + self.ubus_tr181.set("X_PRPL-COM_WANManager.WAN.2.Intf.1", {"VlanID": 101}) + self.ubus_tr181.call( + "X_PRPL-COM_WANManager", "setWANMode", {"WANMode": "demo_vlanmode"} + ) + + def _init_lan_vlan(self): + bridge_lan_ports = { + "cznic,turris-omnia": "Bridging.Bridge.1.Port.5", + "EASY350 ANYWAN (GRX350) Axepoint Asurada model": "Bridging.Bridge.1.Port.5", + } + bridge_vlan_port = bridge_lan_ports.get( + self.board_name, "Bridging.Bridge.1.Port.2" + ) + + self.ubus_tr181.set("Bridging.Bridge.1", {"Standard": "802.1Q-2005"}) + self.ubus_tr181.add( + "Bridging.Bridge.1.VLAN", + {"Alias": "vlan201", "Name": "vlan201", "VLANID": 201, "Enable": 1}, + ) + self.ubus_tr181.set( + f"{bridge_vlan_port}", + { + "AcceptableFrameTypes": "AdmitOnlyVLANTagged", + "PVID": "201", + "Type": "CustomerVLANPort", + "Enable": 1, + }, + ) + self.ubus_tr181.add( + "Bridging.Bridge.1.VLANPort", + { + "Alias": "LAN", + "Name": "vlan201", + "Port": f"Device.{bridge_vlan_port}.", + "VLAN": "Device.Bridging.Bridge.1.VLAN.1.", + "Enable": 1, + }, + ) + + def init_vlans(self): + self.init_shell() + + system_info = self.shell.ubus_call("system board") + if not system_info: + logging.error("Unable to determine running DUT board!") + return + + self.board_name = system_info["board_name"] + logging.info(f"Running on {self.board_name} board") + + self.ubus_tr181 = UbusTR181(self.args, self.shell) + self._init_wan_vlan() + self._init_lan_vlan() + self._init_swconfig() + + logging.info( + "Let the system apply the new configuration, waiting 15 seconds..." + ) + time.sleep(15) + + self.ubus_tr181.get("Ethernet.VLANTermination") + self.shell.run("(cat /proc/vlan101 || cat /proc/net/vlan/vlan101) 2> /dev/null") + self.shell.run("(cat /proc/vlan201 || cat /proc/net/vlan/vlan201) 2> /dev/null") + self.shell.run("ip address show vlan101") + self.shell.run("ip address show vlan201") + self.shell.run("brctl show") + self.shell.run("ip route show") + + def console_dump_system_state(self): + self.init_shell() + + self.shell.ubus_call("system board") + + self.shell.run("df -h || df") + self.shell.run("free -h || free") + self.shell.run("ps auxfw || ps w") + self.shell.run("cat /etc/config/network") + self.shell.run("brctl show") + self.shell.run("ip route show") + self.shell.run("ip address show") + self.shell.run("ip link show") + self.shell.run("iptables-save") + self.shell.run("ip6tables-save") + self.shell.run("cat /var/log/messages || logread") + + self.ubus_tr181 = UbusTR181(self.args, self.shell) + self.ubus_tr181.call("IP", "_get", {"depth": 100}) + self.ubus_tr181.call("NetDev", "_get", {"depth": 100}) + self.ubus_tr181.call("NetModel", "_get", {"depth": 100}) + self.ubus_tr181.call("Bridging", "_get", {"depth": 100}) + self.ubus_tr181.call("Firewall", "_get", {"depth": 100}) + + def console_recover_ssh_access(self): + self.init_shell() + self.shell.run("iptables -P INPUT ACCEPT") + self.shell.run("iptables -L INPUT") + self.shell.run("/etc/init.d/dropbear restart; sleep 5") + self.shell.run("logread | grep dropbear | tail -10") + self.shell.run("netstat -nlp | grep :22") + self.shell.run("ping -c1 192.168.1.1; ping -c1 192.168.1.2") + def boot_into(self): strategy = self.target.get_driver("UBootStrategy") dest = self.args.destination @@ -117,6 +333,22 @@ def main(): ) subparser.set_defaults(func=TestbedDevice.check_network) + subparser = subparsers.add_parser( + "init_vlans", help="initialize VLAN configuration" + ) + subparser.set_defaults(func=TestbedDevice.init_vlans) + + subparser = subparsers.add_parser( + "console_dump_system_state", help="dump system state using serial console" + ) + subparser.set_defaults(func=TestbedDevice.console_dump_system_state) + + subparser = subparsers.add_parser( + "console_recover_ssh_access", + help="try to recover SSH access using serial console", + ) + subparser.set_defaults(func=TestbedDevice.console_recover_ssh_access) + args = parser.parse_args() if args.verbose >= 1: StepReporter.start() diff --git a/.gitlab/sdk.yml b/.gitlab/sdk.yml index 4525d4f26d..823ec098be 100644 --- a/.gitlab/sdk.yml +++ b/.gitlab/sdk.yml @@ -6,6 +6,8 @@ stages: - build .build feed with SDK: + tags: + - package-builder stage: build image: $CI_SDK_IMAGE variables: @@ -26,10 +28,6 @@ stages: - > for feed in $CI_SDK_INSTALL_FEEDS ci; do - sleep_interval="$(( (RANDOM % 60) + 1 ))" - echo "Waiting for $sleep_interval seconds..." - sleep "${sleep_interval}s" - ./scripts/feeds update "$feed" ; ./scripts/feeds install -a -p "$feed" ; done 2>&1 | tee logs/build.log @@ -104,6 +102,11 @@ stages: CI_SDK_BUILD_PACKAGES: | please-provide CI_SDK_PACKAGE_JOBS_TEMPLATE: | + {% if env['CI_SDK_PIPELINE_SOURCE'] %} + workflow: + rules: + - if: $$CI_PIPELINE_SOURCE == "{{ env['CI_SDK_PIPELINE_SOURCE'] }}" + {% endif %} include: - remote: https://gitlab.com/prpl-foundation/prplos/prplos/-/raw/$CI_DESIGNATED_BRANCH/.gitlab/sdk.yml {% for sdk in env['CI_SDK_TARGETS'].rstrip().split("\n") %} @@ -168,7 +171,18 @@ stages: variables: CI_SDK_IMAGE: registry.gitlab.com/prpl-foundation/prplos/prplos/$CI_DESIGNATED_BRANCH/sdk-mvebu-cortexa9:latest -.build feed with ath79-generic-22.03-SNAPSHOT SDK: +.build feed with x86-64 SDK: + extends: .build feed with SDK + variables: + CI_SDK_IMAGE: registry.gitlab.com/prpl-foundation/prplos/prplos/$CI_DESIGNATED_BRANCH/sdk-x86-64:latest + +.build feed with ath79-generic-19.07.7 SDK: extends: .build feed with OpenWrt SDK variables: - CI_SDK_IMAGE: openwrt/sdk:ath79-generic-22.03-SNAPSHOT + CI_SDK_IMAGE: openwrtorg/sdk:ath79-generic-19.07.7 + +.build feed with x86-64-22.03.2 SDK: + extends: .build feed with OpenWrt SDK + variables: + CI_SDK_BEFORE_COMPILE_COMMAND: sudo apt-get update; sudo apt-get install -y python3-yaml + CI_SDK_IMAGE: openwrt/sdk:x86-64-22.03.2 diff --git a/.gitlab/testbed.yml b/.gitlab/testbed.yml index 543a303ef6..7f89b9ee11 100644 --- a/.gitlab/testbed.yml +++ b/.gitlab/testbed.yml @@ -11,10 +11,16 @@ TESTBED_LAN_INTERFACE: enp2s0 TESTBED_WAN_INTERFACE: enp3s0 TESTBED_TFTP_PATH: /var/lib/tftpboot - TFTP_IMAGE_PATH: bin/targets/$DUT_ARCH/$DUT_SUBTARGET + TFTP_IMAGE_PATH: bin/targets/$DUT_TARGET/$DUT_SUBTARGET + PACKAGE_DIR: bin/packages + DUT_ARCH_PACKAGES_PATH: $PACKAGE_DIR/${DUT_ARCH}_${DUT_CPU_TYPE}_${DUT_CPU_SUBTYPE} TARGET_LAN_IP: 192.168.1.1 TARGET_LAN_TEST_HOST: 192.168.1.2 DUT_SLEEP_AFTER_BOOT: 90 + DUT_SSH_CONNECT_TIMEOUT: 30 + DUT_SSH_CONNECT_ATTEMPTS: 3 + DUT_TR181_WAN_INTERFACE: Device.Ethernet.Link.2. + DUT_TR181_LAN_INTERFACE: Device.Ethernet.Link.3. CRAM_REMOTE_COMMAND: ssh root@$TARGET_LAN_IP CRAM_TEST_SUITE: | .gitlab/tests/cram/generic/acceleration-plan-components @@ -29,11 +35,14 @@ - sudo ip link set $TESTBED_WAN_INTERFACE up 2> /dev/null - sleep 10 - - eval $(ssh-agent -s) - - echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - - mkdir -p ~/.ssh; chmod 700 ~/.ssh - - ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null - - chmod 644 ~/.ssh/known_hosts + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-01; then + eval $(ssh-agent -s) + echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - + ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null + chmod 644 ~/.ssh/known_hosts + fi - > if [ -n "$TFTP_IMAGE_DOWNLOAD_URL" ]; then @@ -48,6 +57,12 @@ echo "Running $TFTP_IMAGE_UNPACK_COMMAND" eval "$TFTP_IMAGE_UNPACK_COMMAND" fi + + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-02; then + export TB_CONFIG=".testbed/labgrid/testbed-02.yaml" + fi + - .gitlab/scripts/testbed-device.py --target $LABGRID_TARGET boot_into shell - > .gitlab/scripts/testbed-device.py @@ -55,14 +70,8 @@ --network lan --remote-host $TARGET_LAN_TEST_HOST - - > - retry_count=3; - while [ $retry_count -gt 0 ]; do - echo "Waiting for SSH availability on $TARGET_LAN_IP" - ssh-keyscan "$TARGET_LAN_IP" 2>&1 | grep -q "$TARGET_LAN_IP" && break - retry_count="$(( retry_count - 1 ))" - sleep 5 - done + - echo "Waiting for SSH connection availability with ${DUT_SSH_CONNECT_TIMEOUT}sec timeout, with $DUT_SSH_CONNECT_ATTEMPTS attempts..." + - time ssh -o BatchMode=yes -o StrictHostKeyChecking=no -o ConnectionAttempts=$DUT_SSH_CONNECT_ATTEMPTS -o ConnectTimeout=$DUT_SSH_CONNECT_TIMEOUT root@$TARGET_LAN_IP 'exit 0' - ssh-keyscan $TARGET_LAN_IP >> ~/.ssh/known_hosts 2> /dev/null - ssh root@$TARGET_LAN_IP "cat /var/log/messages" > syslog-$LABGRID_TARGET.txt 2> /dev/null || true @@ -82,11 +91,25 @@ true } - - eval $(ssh-agent -s) - - echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - - mkdir -p ~/.ssh; chmod 700 ~/.ssh - - ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null - - chmod 644 ~/.ssh/known_hosts + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-01; then + eval $(ssh-agent -s) + echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - + ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null + chmod 644 ~/.ssh/known_hosts + fi + + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-02; then + export TB_CONFIG=".testbed/labgrid/testbed-02.yaml" + fi + + - > + ssh -o BatchMode=yes -o StrictHostKeyChecking=no -o ConnectTimeout=15 root@$TARGET_LAN_IP 'exit 0' || { + .gitlab/scripts/testbed-device.py --target $LABGRID_TARGET console_dump_system_state + .gitlab/scripts/testbed-device.py --target $LABGRID_TARGET console_recover_ssh_access + } || true - ssh-keyscan $TARGET_LAN_IP >> ~/.ssh/known_hosts 2> /dev/null - > diff --git a/.gitlab/testbed/glinet-b1300.yml b/.gitlab/testbed/glinet-b1300.yml index 185ed1297a..ec181fa0ce 100644 --- a/.gitlab/testbed/glinet-b1300.yml +++ b/.gitlab/testbed/glinet-b1300.yml @@ -1,11 +1,14 @@ .glinet-b1300 testbed: extends: .testbed true.cz variables: - DUT_ARCH: ipq40xx + DUT_ARCH: arm + DUT_TARGET: ipq40xx DUT_SUBTARGET: generic DUT_BOARD: glinet-b1300 - DUT_WAN_INTERFACE: wan + DUT_CPU_TYPE: cortex-a7 + DUT_CPU_SUBTYPE: neon-vfpv4 LABGRID_TARGET: glinet-b1300-initramfs TFTP_IMAGE_FILENAME: openwrt-ipq40xx-generic-glinet_gl-b1300-initramfs-fit-zImage.itb + TFTP_IMAGE_FILENAME_PATTERN: /.*openwrt-ipq40xx-generic-glinet_gl-b1300-initramfs-fit-zImage.itb/ tags: - dut-glinet-b1300 diff --git a/.gitlab/testbed/nec-wx3000hp.yml b/.gitlab/testbed/nec-wx3000hp.yml index a3e06f25ba..d022e82bd3 100644 --- a/.gitlab/testbed/nec-wx3000hp.yml +++ b/.gitlab/testbed/nec-wx3000hp.yml @@ -1,10 +1,14 @@ .nec-wx3000hp testbed: extends: .testbed true.cz variables: - DUT_ARCH: intel_mips + DUT_ARCH: mips + DUT_TARGET: intel_mips DUT_SUBTARGET: xrx500 DUT_BOARD: nec-wx3000hp + DUT_CPU_TYPE: 24kc + DUT_CPU_SUBTYPE: nomips16 LABGRID_TARGET: nec-wx3000hp-nand TFTP_IMAGE_FILENAME: AX3000_1600_ETH_11AXUCI_ASURADA-squashfs-fullimage.img + TFTP_IMAGE_FILENAME_PATTERN: /.*AX3000_1600_ETH_11AXUCI_ASURADA-squashfs-fullimage.img/ tags: - dut-nec-wx3000hp diff --git a/.gitlab/testbed/turris-omnia.yml b/.gitlab/testbed/turris-omnia.yml index db092fb29c..f78c73a3cd 100644 --- a/.gitlab/testbed/turris-omnia.yml +++ b/.gitlab/testbed/turris-omnia.yml @@ -1,11 +1,15 @@ .turris-omnia testbed: extends: .testbed true.cz variables: - DUT_ARCH: mvebu + DUT_ARCH: arm + DUT_TARGET: mvebu DUT_SUBTARGET: cortexa9 DUT_BOARD: turris-omnia + DUT_CPU_TYPE: cortex-a9 + DUT_CPU_SUBTYPE: vfpv3-d16 DUT_WAN_INTERFACE: eth2 LABGRID_TARGET: turris-omnia-initramfs TFTP_IMAGE_FILENAME: openwrt-mvebu-cortexa9-cznic_turris-omnia-initramfs-kernel.bin + TFTP_IMAGE_FILENAME_PATTERN: /.*openwrt-mvebu-cortexa9-cznic_turris-omnia-initramfs-kernel.bin/ tags: - dut-turris-omnia diff --git a/.testbed/cdrouter/configurations/generic b/.testbed/cdrouter/configurations/generic index 2298816e47..ee070ccf95 100644 --- a/.testbed/cdrouter/configurations/generic +++ b/.testbed/cdrouter/configurations/generic @@ -332,7 +332,7 @@ SECTION "Base Configuration" { # testvar lanMask 255.255.255.0 # testvar lanDomainName qacafe.com # testvar lanMtu default - # testvar lanHostname mydut + testvar lanHostname prplOS # testvar lanGuestMode no SECTION "ARP Settings" { @@ -679,7 +679,7 @@ SECTION "Base Configuration" { testvar firewallTcpOpenPorts "50805" # testvar firewallTcpClosedPorts 2323 # testvar firewallUdpOpenPorts 1234 - # testvar firewallUdpClosedPorts 113 + testvar firewallUdpClosedPorts 68 # testvar firewallOutBlockedTcpPorts 1234 # testvar firewallOutBlockedUdpPorts 1234 # testvar firewallOutBlockedIpProtos 0 @@ -1292,7 +1292,7 @@ SECTION "CDRouter IPv6 Add-On" { SECTION "IPv6 LAN" { # testvar ipv6LanMode autoconf - # testvar ipv6LanIp 3001:dddd::%eui64% + testvar ipv6LanIp 3001:dddd::1 # testvar ipv6LanPrivacyAddresses no # testvar ipv6LanPrefixLen 64 # testvar ipv6MaxLanClients 32 diff --git a/.testbed/cdrouter/configurations/generic-ipv6 b/.testbed/cdrouter/configurations/generic-ipv6 new file mode 100644 index 0000000000..da373aacb7 --- /dev/null +++ b/.testbed/cdrouter/configurations/generic-ipv6 @@ -0,0 +1,2677 @@ +SECTION "About" { + + # Cable/DSL Router Test Suite + # + # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 + # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) + # + # Local.conf + # + # This is the main configuration file for CDRouter. This file defines the + # configuration of the router under test and controls various aspects of + # CDRouter's behavior. This file consists of a number of unique test variables + # called 'testvars' which are grouped by interface, protocol, or functionality. + # The basic syntax for all testvars is: + # + # testvar NAME VALUE + +} + +SECTION "Base Configuration" { + + SECTION "WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.1.1 + # testvar wanIspAssignIp 202.254.1.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.1.2 + # testvar wanIspNextIp 202.254.1.3 + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar wanIspAssignMask 255.255.255.0 + # testvar IPv4HopCount 1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + # testvar dhcpServerRapidCommit yes + # testvar dhcpServerClientIDBehavior rfc6842 + # testvar dhcpServerResponseDelay 4500 + # testvar dhcpConnectOnDemand no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar wanDhcpClientOptionCode1 60 + # testvar wanDhcpClientOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "DHCP Authentication" { + + # testvar supportsDhcpAuth no + + } + + SECTION "PPPoE Server" { + + # testvar pppoeConnectOnDemand no + # testvar pppoeIdleTimeout 60 + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + # testvar pppoeAcCookie auto + # testvar pppoeMaxPayload none + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpConnectOnDemand yes + # testvar pptpServerIp 202.254.201.1 + # testvar pptpClientIp 202.254.201.2 + # testvar pptpUseDHCP no + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpConnectOnDemand yes + # testvar l2tpServerIp 202.254.201.1 + # testvar l2tpClientIp 202.254.201.2 + # testvar l2tpUseDHCP no + + } + + SECTION "DS-Lite" { + + # testvar ipv6DsliteAftr 3001:aaaa::1 + # testvar dhcpv6WanAftrName aftr.qacafe.com + # testvar dsliteFirewallMode address-restricted + + } + + SECTION "MAP / LW4o6" { + + # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: + # testvar mapBmrRuleIpv6PrefixLen 48 + # testvar mapBmrRuleIpv4Prefix 5.0.0.0 + # testvar mapBmrRuleIpv4PrefixLen 24 + # testvar mapBmrRuleEABitLen 16 + + # testvar mapSharingRatio 256 + # testvar mapStartPort 4096 + # testvar mapPsid 255 + + # testvar mapEnableDhcpv6Options yes + + SECTION "MAP-E / LW4o6" { + + # testvar mapTunnelFlowLabel 0 + # testvar mapTunnelHopLimit 64 + # testvar mapTunnelTrafficClass 0 + + } + + SECTION "MAP-T" { + + # testvar mapDmrIpv6Prefix 5001:db8:: + # testvar mapDmrIpv6PrefixLen 48 + + # testvar mapTosTranslate yes + + } + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + # testvar pppConnectionDelay 10 + # testvar pppRestartTimeout 300000 + # testvar pppFailUsesICMP no + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "Wireless Access Point (AP)" { + + # testvar wanApBand 2.4GHz + # testvar wanApSSID qa-net + # testvar wanApChannel auto + + SECTION "WPA Authenticator" { + + # testvar wanApWpaMode RSN + # testvar wanApWpaKeyMgmt PSK + # testvar wanApWpaCipher CCMP-128 + # testvar wanApWpaGroupCipher auto + # testvar wanApWpaPMF auto + # testvar wanApWpaPsk qacafe123 + # testvar wanApWpaSaePassword "sae secret" + + } + } + + SECTION "WAN 802.1X and RADIUS" { + + SECTION "WAN RADIUS" { + + # testvar wanRadiusEnable no + # testvar wanRadiusInterface wan + # testvar wanRadiusIp 3.3.3.44 + # testvar wanRadiusSecret qacafe123 + # testvar wanRadiusServerAttrType1 200 + # testvar wanRadiusServerAttrData1 04040404 + + } + + SECTION "WAN EAP Settings" { + + # testvar wanEapType eap-md5 + + SECTION "WAN Supplicant Credentials" { + + # testvar wanEapIdentity1 user1 + # testvar wanEapPassword1 qacafe123 + + } + + SECTION "WAN Authentication Options" { + + # testvar wanEapRootCert /usr/cdrouter/tests/root.pem + # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem + # testvar wanEapServerCertPassword qacafe123 + # testvar wanEapFragmentSize 1024 + + } + + } + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.101.1 + # testvar wanBackupDnsServer 202.254.101.2 + # testvar wanBackupDnsServer2 0.0.0.0 + # testvar wanBackupDnsServer3 0.0.0.0 + # testvar DNStoDHCP no + # testvar supportsDnsProxy yes + # testvar supportsDnsCaching yes + # testvar dnsCacheSize 150 + # testvar dnsLookupTimeout 5 + # testvar dnsFailoverAuth "2 4 5" + # testvar dnsFailoverNonAuth "2 4 5" + # testvar dnsFailoverDelay 10 + # testvar dnsFailoverAttempts 20 + # testvar dnsRelayFailover 120 + # testvar dnsForwardServerStatus no + # testvar dnsUsageProfile opportunistic-privacy + # testvar dnsCaptive no + + SECTION "User Configurable DNS Entries" { + + # testvar dnsHostname1 test.qacafe.com + # testvar dnsIp1 5.5.5.5 + + } + + } + + SECTION "HTTP" { + + # testvar supportsHttpProxy yes + # testvar httpProxyIdleTimeout 30 + # testvar httpMaxHeaderCount 200 + + } + + SECTION "NTP" { + + # testvar ntpServer1 3.3.3.6 + # testvar ntpServerName1 time.nist.gov + # testvar ntpServer2 3.3.3.7 + # testvar ntpServerName2 time.foo.com + # testvar ntpStartDate "6/2/2007 11:00 am UTC" + # testvar ntpOffset 0 + # testvar enableRFC868TimeProtocol no + + } + + SECTION "Dynamic DNS" { + + # testvar supportsDynDns no + # testvar dynDnsServerIp 66.37.215.49 + # testvar dynDnsTransport http + # testvar dynDnsHostname test.domain.com + # testvar dynDnsUsername qacafe + # testvar dynDnsPassword qacafe123 + # testvar dynDnsSystem dyndns + # testvar dynDnsMx mail.domain.com + # testvar dynDnsBackMx no + # testvar dynDnsWildcard off + # testvar dynDnsAgent RAS/1.1 + # testvar dynDnsWait 30 + # testvar testDynDnsErrorCode no + # testvar dynDnsServerReturn !yours + + } + + SECTION "WINS Servers" { + + # testvar winsServer1 3.3.3.4 + # testvar winsServer2 3.3.3.5 + + } + + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanDomainName qacafe.com + # testvar lanMtu default + testvar lanHostname prplOS + # testvar lanGuestMode no + + SECTION "ARP Settings" { + + # testvar arpMode strict + # testvar arpSupportGratuitous yes + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + # testvar supportsDnsHostnameCreate no + + } + + SECTION "DHCP Client" { + + # testvar dhcpClientTimeout 5 + # testvar dhcpInform no + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpRapidCommit no + # testvar ipv4MaxLanClients auto + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpCreateDelay 0 + # testvar dhcpReleaseDelay 300 + # testvar dhcpServerMac auto + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + # testvar dhcpClientTrackSeconds no + # testvar dhcpClientRequestNtp no + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + SECTION "DHCP Client Extra Parameters" { + + # testvar dhcpExtraClientParams "69 70" + + } + + SECTION "DHCP Client Extra Options" { + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Hotspot Router Settings" { + + # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% + # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% + + SECTION "Hotspot Clients" { + + # testvar clientLoginName1 client1 + # testvar clientLoginPassword1 admin1 + + } + + SECTION "Advanced Hotspot Settings" { + + # testvar browserLoginProc example_login + # testvar browserLogoutProc example_logout + # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl + + } + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconRsnCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X and RADIUS" { + + SECTION "LAN RADIUS" { + + # testvar enableRADIUSserver yes + # testvar radiusHost remoteHost + # testvar radiusSecret qacafe123 + # testvar radiusServerAttrType1 200 + # testvar radiusServerAttrData1 04040404 + + } + + SECTION "LAN EAP Settings" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + SECTION "LAN Authentication Options" { + + # testvar eapRootCert /usr/cdrouter/tests/root.pem + # testvar eapServerCertPath /usr/cdrouter/tests/server.pem + # testvar eapServerCertPassword qacafe123 + # testvar eapFragmentSize 1024 + # testvar eapTxWhen 60 + # testvar eapQuietPeriod 60 + # testvar eapReAuthMax 2 + # testvar eapSendLogoffFailure yes + # testvar eapReAuthPeriod 0 + + } + + } + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "Firewall and NAT" { + + SECTION "NAT Options" { + + testvar natSimultaneousTcp yes + # testvar natSrcPort0 yes + # testvar natSupportsP2P yes + # testvar natPortParity yes + # testvar natMode port-restricted + # testvar natVerifyIpId yes + # testvar defaultTcpEchoPort 50000 + # testvar defaultUdpEchoPort 50000 + # testvar natRefreshBehavior both + + SECTION "NAT Timers" { + + # testvar natFinTimeout disabled + # testvar natRstTimeout disabled + # testvar natTcpTimeout disabled + # testvar natSynTimeout disabled + # testvar natUdpTimeout disabled + # testvar natDnsTimeout disabled + # testvar natIcmpTimeout disabled + # testvar natRtspTimeout disabled + # testvar natLagTime 0 + + } + + } + + SECTION "Protocol Pass Through" { + + SECTION "IPSEC Pass Through" { + + # testvar supportsIPSECpass yes + # testvar ipsecMaxTunnels 20 + # testvar ipsecScaleSameServer no + # testvar alwaysUseIke no + # testvar ipsecPassRetransmit no + # testvar unknownPassthrough yes + + } + + SECTION "PPTP Pass Through" { + + # testvar supportsPPTPpass yes + # testvar pptpMaxTunnels 20 + + } + + SECTION "L2TP Pass Through" { + + # testvar supportsL2TPpass yes + # testvar l2tpMaxTunnels 20 + + } + + SECTION "PPPoE Pass Through" { + + # testvar supportsPPPoEpass no + + } + + } + + SECTION "Port Triggers" { + + # testvar portTriggers no + # testvar portTriggerTimeout 0 + # testvar portTriggerDelay 0 + # testvar portTriggerOpenDelay 0 + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "Application Layer Gateways (ALGs)" { + + SECTION "MSN Messenger" { + + # testvar supportsMsnAlg no + # testvar msnNotificationServerPort 1863 + # testvar msnSwitchBoardServerPort 1863 + + } + + SECTION "RTSP" { + + # testvar supportsRtspAlg no + # testvar rtspTeardownDelay 5 + # testvar rtspGetParameterInterval 5 + + } + + SECTION "SIP" { + + # testvar supportsSipAlg yes + # testvar sipInterface wan + # testvar sipServerIp 3.3.3.8 + # testvar ipv6SipServerIp 3001:051a:cafe::4 + # testvar sipCallTeardownDelay 5 + # testvar sipMaxOutboundCalls 10 + # testvar sipMaxInboundCalls 10 + # testvar sipCallPacing 0 + # testvar sipScaleRunTime 30 + # testvar sipScaleServerPort 5060 + # testvar sipScaleClientPort 5060 + # testvar sipMaxUserNames -1 + # testvar rtpSendInterval 5000 + + } + + SECTION "FTP" { + + # testvar ftpPortTimeout 120 + + } + + } + + SECTION "Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + SECTION "Port Scanning, Firewall and DoS Options" { + + # testvar portScanStart 0 + # testvar portScanStop 65535 + # testvar portScanDelay 1 + testvar firewallTcpOpenPorts "50805" + # testvar firewallTcpClosedPorts 2323 + # testvar firewallUdpOpenPorts 1234 + testvar firewallUdpClosedPorts 68 + # testvar firewallOutBlockedTcpPorts 1234 + # testvar firewallOutBlockedUdpPorts 1234 + # testvar firewallOutBlockedIpProtos 0 + # testvar wanPingRespond no + + SECTION "Denial of Service Options" { + + # testvar dosRecoveryTime 5 + # testvar dosAttackAttempts 100 + # testvar dutMgmtPort 80 + # testvar dutSecureMgmtPort disabled + # testvar dosSynAttackPort 80 + # testvar dosSynAttackAttempts 100 + + } + + SECTION "Deprecated SSL Protocols and Ciphers" { + + # testvar sslDeprecatedProtocols "sslv2 sslv3" + # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" + + } + + } + + SECTION "DMZ" { + + # testvar lanDmzHost 192.168.1.253 + # testvar lanDmzTcpPortExceptions 113 + # testvar lanDmzUdpPortExceptions 1234 + # testvar lanDmzIpProtoExceptions 2,47 + # testvar lanDmzSupportsIcmp no + + } + + SECTION "URL Filtering" { + + # testvar urlFilterSupported no + # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" + # testvar non-filtered-urls http://qacafe.com + # testvar urlFilterBlockedText "This website is blocked" + + } + + SECTION "XBox Live Options" { + + # testvar xboxNatMinType open + # testvar xboxPort 3074 + # testvar xboxMtu 1364 + + } + + } + + SECTION "Advanced Protocols" { + + SECTION "RIP v1/v2" { + + # testvar ripSupported no + # testvar ripVersion 1 + # testvar ripV2mode multicast + # testvar ripAuthMode none + # testvar ripPassword qacafe123 + # testvar ripMaxRoutes 96 + # testvar ripRouteTimeout 180 + # testvar ripGarbageTimeout 120 + # testvar ripRouteDelay 5000 + # testvar ripAcceptWanUpdate no + + } + + SECTION "UPnP" { + + # testvar upnpSupported yes + # testvar upnpVersion 1.1 + # testvar upnpDevice InternetGatewayDevice:2 + # testvar upnpWANPPPConnection no + # testvar upnpLANDevice no + # testvar upnpMaxTcpMappings 10 + # testvar upnpMaxSubClients 10 + # testvar upnpMinSubTimeout 40 + # testvar upnpMaxSubTimeout 3600 + # testvar upnpWANFailureTimeout 120 + # testvar upnpPortStart 40000 + # testvar upnpPortStop 50000 + + } + + SECTION "LLDP" { + + # testvar supportsLLDP no + # testvar lldpLanMac none + # testvar lldpLanChassisMac auto + # testvar lldpMsgFastTx 1 + # testvar lldpMsgTxInterval 30 + # testvar lldpTxFastInit 4 + + } + + SECTION "IGMP (Multicast)" { + + # testvar supportsMulticast yes + # testvar multicastType proxy + # testvar supportsMulticastOut no + # testvar igmpVersion 2 + # testvar igmpFastLeave no + # testvar igmpRouterOption yes + # testvar igmpMaxGroups 64 + # testvar multicastCacheTimeout 10 + # testvar multicastPoolStart 224.0.1.0 + # testvar multicastPoolStop 239.255.255.255 + # testvar SSMulticastPoolStart 232.0.1.1 + # testvar SSMulticastPoolStop 232.0.1.255 + # testvar multicastJoinDelay 2 + # testvar multicastScaleDelay 1 + # testvar multicastInterface wan + # testvar multicastBypassPPPoE no + + SECTION "IGMP Timers" { + + # testvar igmpQueryInterval 125 + # testvar igmpRobustnessVariable 2 + # testvar igmpQueryResponseInterval 10 + + } + + SECTION "IPTV Options" { + + # testvar iptvChannelRange 200 + # testvar iptvChannelChangeDelay 200 + # testvar iptvMaxFailures 10 + + } + + } + + SECTION "GRE Tunnels" { + + # testvar greDFflag on + + IGNORE testvar_group greTunnel1 { + + SECTION "Generic IPv4 GRE Tunnel Endpoints" { + + # testvar greType IPv4 + # testvar greEndpoint 5.5.5.5 + # testvar greLocalNet 192.168.1.0 + # testvar greLocalMask 255.255.255.0 + + } + + SECTION "L2GRE Options" { + + # testvar greWanGroup wan2 + + } + + SECTION "L3GRE Remote IPv4 Network" { + + # testvar greHost 3.0.0.1 + # testvar greRemoteNet 3.0.0.0 + # testvar greRemoteMask 255.0.0.0 + + } + + } + + } + + } + + SECTION "Additional Features" { + + # testvar supportsIPv4 yes + # testvar internalSmtpServer 5.5.5.5 + # testvar remoteHostIp 3.3.3.3 + # testvar startOtherLanFirst no + # testvar cdrouterOui B0750C + # testvar forwardingMaxFailures 20 + # testvar forwardingPort 5001 + # testvar jumboMtu disabled + # testvar tcpUdpPortStart 10000 + + SECTION "General Purpose HTTP Server" { + + # testvar httpServerIp 3.3.3.16 + # testvar httpServerPort 80 + # testvar httpServerRoot /tmp + + } + + SECTION "Free Network Range" { + + # testvar FreeNetworkStart 200.0.0.0 + # testvar FreeNetworkMask 255.255.255.0 + # testvar FreeNetworkStop 201.0.0.0 + + } + + SECTION "TCP MSS Clamping" { + + # testvar mssClampingValue default + # testvar mssClampingInValue default + + } + + SECTION "TCP/UDP Scaling Options" { + + # testvar scaleTcpConnsPerHost 5 + # testvar natMaxTcpConns 200 + # testvar natMaxUdpConns 100 + + } + + SECTION "Global Wireless Options" { + + # testvar wirelessRetry 3 + # testvar lanWirelessMaxClients auto + # testvar wifiCapture off + # testvar wifiCaptureFilter {} + + } + + } + + SECTION "Test Execution Options and Auto-Reboot" { + + # testvar startDelay 3 + # testvar lanStartDelay 3 + # testvar startTimeout 90 + # testvar wanCloseOnExit yes + # testvar RestartDut none + # testvar RestartDutDelay disabled + # testvar ShutdownDut "echo -n" + # testvar cpeRebootMode skip + # testvar healthCheckEnable no + + } + +} + +SECTION "CDRouter DOCSIS Add-On" { + + # testvar supportsDocsis no + + SECTION "Basic Configuration" { + + # testvar docsisIpProvisioningMode ipv4-only + # testvar docsisBootDelay 30 + + # testvar docsisClientMac auto + + } + + SECTION "IPv4 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIp 10.10.10.1 + # testvar docsisMask 255.255.255.0 + + } + + SECTION "DHCPv4 Server" { + + # testvar docsisDhcpServer 10.10.10.3 + # testvar docsisAssignIp 10.10.10.2 + # testvar docsisDomain docsis.qacafe.com + # testvar docsisDhcpLeaseTime 300 + # testvar docsisDhcpRapidCommit no + + # testvar docsisDhcpServerOptionCode1 69 + # testvar docsisDhcpServerOptionData1 04040404 + + # testvar docsisDhcpClientOptionCode1 60 + # testvar docsisDhcpClientOptionData1 04040404 + + SECTION "DHCPv4 Relay" { + + # testvar docsisGateway 6.6.6.7 + # testvar docsisAssignGateway 6.6.6.6 + # testvar docsisAssignMask 255.255.255.0 + # testvar docsisDhcpRelayServer 6.6.6.7 + + } + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogServer 10.10.10.5 + # testvar docsisTimeServer 10.10.10.6 + # testvar docsisTftpServer 10.10.10.4 + + } + + } + + SECTION "IPv6 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIpv6 8001::1 + # testvar docsisIpv6PrefixLen 64 + + } + + SECTION "DHCPv6 Server" { + + # testvar docsisDhcpIpv6Server 8001::3 + # testvar docsisAssignIpv6 8001::2 + # testvar docsisDHCPv6PreferredLifetime 300 + # testvar docsisDHCPv6ValidLifetime 300 + # testvar docsisDhcpv6RapidCommit no + + # testvar docsisDhcpv6ServerOptionCode1 69 + # testvar docsisDhcpv6ServerOptionData1 04040404 + + # testvar docsisDhcpv6ClientOptionCode1 60 + # testvar docsisDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Relay" { + + # testvar docsisIpv6Gateway 9001::1 + # testvar docsisAssignIpv6PrefixLen 64 + # testvar docsisDhcpv6RelayServer 9001::1 + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogIpv6Server 8001::5 + # testvar docsisTimeIpv6Server 8001::6 + # testvar docsisTftpIpv6Server 8001::4 + + } + + } + + SECTION "CM Config File" { + + SECTION "Global TFTP Settings" { + + # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp + # testvar docsisTftpBootFile auto-docsis.bin + + } + + SECTION "Embedded Config File" { + + # testvar docsisConfig { + # Main + # { + # NetworkAccess 1; + # BaselinePrivacy + # { + # AuthTimeout 10; + # ReAuthTimeout 10; + # AuthGraceTime 600; + # OperTimeout 1; + # ReKeyTimeout 1; + # TEKGraceTime 600; + # AuthRejectTimeout 60; + # SAMapWaitTimeout 1; + # SAMapMaxRetries 4; + # } + # MaxCPE 3; + # UsServiceFlow + # { + # UsServiceFlowRef 2; + # QosParamSetType 7; + # } + # DsServiceFlow + # { + # DsServiceFlowRef 1; + # QosParamSetType 7; + # } + # SNMPv1v2cCoexistenceConfig + # { + # SNMPv1v2cCommunityName "public"; + # SNMPv1v2cTransportAddressAccess + # { + # SNMPv1v2cTransportAddress 0.0.0.0/0; + # SNMPv1v2cTransportAddressMask 0.0.0.0/0; + # } + # SNMPv1v2cAccessViewType 2; + # SNMPv1v2cAccessViewName "docsisManagerView"; + # } + # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ + # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ + # /*EndOfDataMkr*/ + # } + # } + + } + + SECTION "Vendor Defined Config File" { + + # testvar docsisConfigFile none + + } + + } + + SECTION "CM Firewall Configuration" { + + SECTION "IPv4" { + + # testvar docsisTcpOpenPorts "22 443" + # testvar docsisTcpClosedPorts all + # testvar docsisUdpOpenPorts 1234 + # testvar docsisUdpClosedPorts all + + } + + SECTION "IPv6" { + + # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" + # testvar docsisIpv6TcpClosedPorts "2323 80" + # testvar docsisIpv6UdpOpenPorts 1234 + # testvar docsisIpv6UdpClosedPorts 113 + + } + + } + +} + +SECTION "CDRouter HomeKit Add-On" { + + # testvar supportsHomeKit no + + # testvar homeKitRouterName "HomeKit Router" + # testvar homeKitHATHostname hat.local + # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ + # testvar homeKitRouterSetupCode + + # testvar homeKitManualEnabled yes + +} + +SECTION "CDRouter IKE Add-On" { + + SECTION "Global IKE Options" { + + # testvar ikeMaxPhase2SA 20 + # testvar ikeDeadPeerDetection no + # testvar ikeNewQuickModeDelay 1000 + # testvar ikeKeepAlive 20 + # testvar ikeMinimumLifetime 20 + # testvar ipsecMinimumLifetime 20 + # testvar ikePhase2DeleteDelay 100 + # testvar ikeMaxTransforms 21 + # testvar ikeInitialContact yes + # testvar ikeBringUpTunnels yes + # testvar ikeAlwaysInitiate no + # testvar useSameIpsecTunnel no + # testvar ikeNatTraversal no + # testvar ike_FQDN fqdn-test.cdrouter.com + # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com + + } + + SECTION "IPsec Tunnel Configurations" { + + SECTION "IPsec Tunnel Configuration 1" { + + # testvar ipsecTunnelKeyType1 manual + # testvar ipsecTunnelEndpoint1 5.0.0.1 + # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 + # testvar ipsecTunnelRemoteMask1 255.255.255.0 + # testvar ipsecTunnelHost1 5.0.0.2 + + SECTION "Manual IPsec Tunnel Configuration" { + + # testvar ipsecTunnelOutboundSpi1 1000 + # testvar ipsecTunnelOutEncrypt1 des + # testvar ipsecTunnelOutEncryptKey1 0102030405060708 + # testvar ipsecTunnelOutAuth1 md5-hmac + # testvar ipsecTunnelOutAuthKey1 6262626262626262 + # testvar ipsecTunnelInboundSpi1 1001 + # testvar ipsecTunnelInEncrypt1 des + # testvar ipsecTunnelInEncryptKey1 0102030405060708 + # testvar ipsecTunnelInAuth1 md5-hmac + # testvar ipsecTunnelInAuthKey1 6262626262626262 + + } + + SECTION "IKE IPsec Tunnel Configuration" { + + # testvar ipsecTunnelIkeEncrypt1 des + # testvar ipsecTunnelIkeAuth1 md5-hmac + # testvar ipsecTunnelIkeGroup1 1 + # testvar ipsecTunnelIkeLifetime1 300 + # testvar ipsecTunnelEncrypt1 3des + # testvar ipsecTunnelAuth1 sha1-hmac + # testvar ipsecTunnelPfsGroup1 1 + # testvar ipsecTunnelLifetime1 120 + # testvar ipsecTunnelPsk1 qacafe123 + # testvar ipsecTunnelIkeMode1 main + # testvar ipsecTunnelUsesNat1 no + + } + + } + + } + +} + +SECTION "CDRouter IPv6 Add-On" { + + testvar supportsIPv6 yes + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001::1 + # testvar ipv6WanIspAssignIp 3001::2 + # testvar ipv6WanIspNextIp 3001::3 + # testvar ipv6WanIspPrefixLen 64 + # testvar ipv6WanDutDuid 00000000 + # testvar ipv6RelayServer 192.88.99.1 + # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 + # testvar ipv6rdPrefix 2001:1234:: + # testvar ipv6rdPrefixLen 32 + # testvar ipv6rdIPv4MaskLen 0 + # testvar ipv6rdDHCPv4Option yes + # testvar ipv6TunnelMtuType static + # testvar ipv6WanMtu 1500 + # testvar ipv6WanMtuOption no + # testvar ipv6RASendInterval 10 + # testvar ipv6ExpectRAonWan no + + SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { + + # testvar ipv6WanIspGateway 3001::9 + # testvar ipv6WanAssignPrefixLen 64 + # testvar IPv6HopCount 1 + # testvar dhcpv6RelayServer 3001::9 + + } + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + # testvar ipv6WanRDNSS no + # testvar ipv6WanDNSSL no + + } + + SECTION "DHCPv6 Server" { + + # testvar dhcpv6IAValidLifetime 300 + # testvar dhcpv6IAPreferredLifetime 300 + # testvar dhcpv6DuidType 1 + # testvar dhcpv6RestartLatency 10 + # testvar dhcpv6ServerRapidCommit yes + + # testvar dhcpv6ServerOptionCode1 69 + # testvar dhcpv6ServerOptionData1 04040404 + + # testvar wanDhcpv6ClientOptionCode1 60 + # testvar wanDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Authentication" { + + # testvar supportsDhcpv6Auth no + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: + # testvar dhcpv6WanAssignPrefixLen 48 + # testvar dhcpv6PDLatency 30 + + } + + SECTION "IPv6 NTP" { + + # testvar ipv6NtpServer1 4321::23 + # testvar ipv6NtpServerName1 time.nist.gov + + # testvar ipv6NtpServer2 4321::24 + # testvar ipv6NtpServerName2 time.foo.com + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + testvar ipv6LanIp 3001:dddd::1 + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanPrefixLen 64 + # testvar ipv6MaxLanClients 32 + # testvar ipv6RAInterval 300 + # testvar ipv6LanSubnetId 1 + + SECTION "DHCPv6 Client" { + + # testvar dhcpv6ClientTimeout 5 + # testvar ipv6DhcpClientStart ::2 + # testvar ipv6DhcpClientEnd ::1f + # testvar ipv6DhcpClientExclude "::3 ::7" + # testvar ipv6DhcpClientValidLifetime 86400 + # testvar dhcpv6RapidCommit yes + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + SECTION "IPv6 LAN DNS" { + + # testvar ipv6DNStoLAN yes + # testvar ipv6RdnssSupport yes + # testvar ipv6DnsslSupport yes + # testvar ipv6LanStaticDns no + + } + + SECTION "Unique Local Address (ULA) Options" { + + # testvar supportsULA no + # testvar ipv6LanULAPrefix fd00:: + # testvar ipv6LanULAIp ::%eui64% + # testvar ipv6LanULAMode autoconf + + } + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + } + + SECTION "IPv6 Firewall" { + + # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" + # testvar ipv6FirewallTcpClosedPorts "2323 80" + # testvar ipv6FirewallUdpOpenPorts 1234 + # testvar ipv6FirewallUdpClosedPorts 113 + # testvar ipv6FirewallOutBlockedTcpPorts 1234 + # testvar ipv6FirewallOutBlockedUdpPorts 1234 + # testvar ipv6FirewallOutBlockedIpProtos 0 + # testvar ipv6WanPingRespond no + + SECTION "IPv6 TCP MSS Clamping" { + + # testvar ipv6MssClampingValue default + # testvar ipv6MssClampingInValue default + # testvar ipv6MssClampingTestPort 8096 + + } + + } + + SECTION "IPv6 Advanced Protocols" { + + SECTION "RIPng" { + + # testvar supportsRIPng no + + } + + SECTION "MLD (IPv6 Multicast)" { + + # testvar supportsIPv6Multicast yes + # testvar supportsIPv6MulticastOut no + # testvar mldVersion 2 + # testvar mldMaxGroups 64 + # testvar mldFastLeave no + # testvar ipv6MulticastCacheTimeout 10 + # testvar ipv6MulticastJoinDelay 2 + # testvar ipv6MulticastScaleDelay 1 + + SECTION "MLD Timers" { + + # testvar mldQueryInterval 125 + # testvar mldRobustnessVariable 2 + # testvar mldQueryResponseInterval 10 + + } + + SECTION "IPv6 IPTV Options" { + + # testvar ipv6IptvChannelRange 200 + # testvar ipv6IptvChannelChangeDelay 200 + # testvar ipv6IptvMaxFailures 10 + + } + + } + + } + + SECTION "IPv6 Additional Features" { + + SECTION "IPv6 Free Network Range" { + + # testvar ipv6RemoteHost 3001:051a:cafe::1 + # testvar ipv6FreeNetworkStart 3001:cafe:1:: + # testvar ipv6FreeNetworkPrefixLen 64 + # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: + + } + + SECTION "IPv6 Multicast Pool Ranges" { + + # testvar ipv6MulticastPoolStart ff0e::1 + # testvar ipv6MulticastPoolStop ff0e:ffff:: + # testvar ipv6SSMulticastPoolStart ff3e::8000:1 + # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff + + } + + } + +} + +SECTION "CDRouter Multiport Add-On" { + + SECTION "Additional WAN Interface Setup" { + + # testvar wanFailoverTimeout 300 + + IGNORE testvar_group wan2 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.2.1 + # testvar wanIspAssignIp 202.254.2.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.2.2 + # testvar wanIspNextIp 202.254.2.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.202.1 + # testvar pptpClientIp 202.254.202.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.202.1 + # testvar l2tpClientIp 202.254.202.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.102.1 + # testvar wanBackupDnsServer 202.254.102.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:2::1 + # testvar ipv6WanIspAssignIp 3001:0:0:2::2 + # testvar ipv6WanIspNextIp 3001:0:0:2::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + IGNORE testvar_group wan3 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.3.1 + # testvar wanIspAssignIp 202.254.3.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.3.2 + # testvar wanIspNextIp 202.254.3.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.203.1 + # testvar pptpClientIp 202.254.203.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.203.1 + # testvar l2tpClientIp 202.254.203.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.103.1 + # testvar wanBackupDnsServer 202.254.103.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:3::1 + # testvar ipv6WanIspAssignIp 3001:0:0:3::2 + # testvar ipv6WanIspNextIp 3001:0:0:3::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + } + + SECTION "Additional LAN Interface Setup" { + + # testvar useSameLanInterface no + + IGNORE testvar_group lan2 { + + SECTION "IPv4 LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanGuestMode no + + SECTION "LAN Host IP" { + + # testvar hostIp 192.168.1.0 + # testvar hostMask 255.255.255.0 + # testvar hostGateway 192.168.1.1 + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "DHCP Client Configuration" { + + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + # testvar dhcpExtraClientParams "69 70" + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Configuration Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + } + + SECTION "IPv4 Firewall and NAT" { + + SECTION "Static NAT" { + + # testvar staticNatIp 202.254.1.2 + # testvar staticNatFirewall yes + # testvar natMode port-restricted + + } + + SECTION "Special Application Port Triggers" { + + # testvar portTriggers no + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "TCP and UDP Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanStaticDns no + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + + SECTION "LAN IPv6 DHCP Client" { + + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + + } + + } + +} + +SECTION "CDRouter Performance Add-On" { + + # testvar supportsPerformance no + + SECTION "Basic Configuration" { + + # testvar perfWanIp 202.254.1.4 + # testvar perfWanIpv6 3001::4 + # testvar perfPort 19750 + # testvar perfPort2 19751 + + } + + SECTION "Performance Settings" { + + # testvar perfDuration 10 + # testvar perfDownloadBandwidth 0.0 + # testvar perfInterval auto + # testvar perfIncrement 5 + # testvar perfStreams 1 + # testvar perfStreamIncr 0 + # testvar perfUdpLen auto + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + # testvar perfOmit 0 + # testvar perfDSCP 0 + # testvar perfFairness no + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresholds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + SECTION "Advanced Options" { + + # testvar perfPingEnable no + # testvar perfEnableCapture no + # testvar perfLatencyAttempts 25 + # testvar perfApplicationAttempts 4 + # testvar perfApplicationDelay 100 + + } + + SECTION "Wireless" { + + IGNORE testvar_group wireless-performance { + + SECTION "Performance Settings" { + + # testvar perfDownloadBandwidth 0.0 + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresolds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + } + + } + +} + +SECTION "CDRouter Security Add-On" { + + SECTION "Internet Connection Sharing (ICS)" { + + # testvar enableICS no + # testvar icsInterface eth0 + # testvar icsShareIPv4 yes + # testvar icsShareIPv6 yes + + } + + SECTION "Traffic Analysis" { + + # testvar enableSuricata no + + } + + SECTION "Nmap Scans" { + + # testvar enableNmap no + # testvar nmapPorts 0-65535 + # testvar nmapScanTimeout 600 + # testvar nmapTimingTemplate 5 + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleBase auto + # testvar internetScheduleTimeZone auto + # testvar internetScheduleBlockedText "This website is blocked" + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + +} + +SECTION "CDRouter SNMP Add-On" { + + # testvar supportsSnmp no + + # testvar snmpPort 161 + # testvar snmpDefaultUser auto + # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" + # testvar snmpUpdateDelay 15 + + SECTION "SNMP Options and Users" { + + # testvar snmpManagerIp 3.3.3.33 + # testvar snmpManagerIpv6 3001:051a:cafe::33 + + IGNORE testvar_group snmpuser1 { + + # testvar snmpVersion 2c + + # testvar snmpAccess read-only + # testvar snmpTransport udp + # testvar snmpRetries 5 + # testvar snmpTimeout 5 + + SECTION "SNMP v1/2c Configuration" { + + # testvar snmpCommunity public + + } + + SECTION "SNMP v3 Configuration" { + + # testvar snmpSecurityLevel noAuthNoPriv + + # testvar snmpAuthProtocol MD5 + # testvar snmpAuthUsername qacafe + # testvar snmpAuthPassword qacafe123 + + # testvar snmpPrivacyProtocol DES + # testvar snmpPrivacyPassword qacafe123 + + # testvar snmpContextName bridge1 + # testvar snmpSecurityEngineId 800000020109840301 + # testvar snmpContextEngineId 800000020109840301 + + } + + } + + } + + SECTION "SNMP Scenarios" { + + # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp + # testvar snmpScenarioSingleMode no + # testvar snmpScenarioInterface lan + # testvar snmpScenarioIpVersion IPv4 + + } + +} + +SECTION "CDRouter Storage Add-On" { + + # testvar supportsStorage no + + # testvar storageFileSize 10 + # testvar storageUserFilePath none + # testvar useMulticastDNS no + + SECTION "SMB Options and Users" { + + # testvar supportsStorageSmb yes + # testvar storageSmbMaxSessions 20 + # testvar storageSmbTimeout 120 + # testvar storageSmbPacing 0 + + IGNORE testvar_group smbuser1 { + + # testvar server MyNAS + # testvar share data + # testvar folder /home/qacafe + # testvar guest no + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + + SECTION "FTP Options and Users" { + + # testvar supportsStorageFtp yes + # testvar supportsStorageFtps yes + # testvar storageFtpMaxSessions 20 + # testvar storageFtpTimeout 120 + # testvar storageFtpPacing 0 + + IGNORE testvar_group ftpuser1 { + + # testvar server MyNAS + # testvar path /home/qacafe + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + +} + +SECTION "CDRouter TR-069 Add-On" { + + testvar supportsCWMP yes + + SECTION "Basic ACS Configuration" { + + # testvar acsIp 6.0.0.1 + # testvar acsPort 80 + testvar acsDomain acs-download.qacafe.com + # testvar acsTransport http + # testvar acsAuth digest + # testvar acsDigestQopAuth yes + # testvar acsInterface wan + testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ + # testvar acsWaitForInform 120 + # testvar acsSkipInitialInform no + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar cwmpProtocolVersion 1.0 + # testvar acsDeviceDiscovery no + # testvar acsConfigurePeriodicInform yes + # testvar tr69InitiateConnection yes + testvar acsDefaultUser cdrouter + testvar acsDefaultPassword cdrouter + testvar acsCpeDefaultUser acs + testvar acsCpeDefaultPassword acs + # testvar acsFileServerUser file_server_user + # testvar acsFileServerPassword file_server_password + + } + + SECTION "XMPP Connection Request Configuration" { + + # testvar acsSupportsXmppConnReq no + + # testvar acsXmppServerConnectAlgorithm DNS-SRV + # testvar acsXmppConnReqUsername qacafe + # testvar acsXmppConnReqResource cdrouter + # testvar acsXmppConnReqPassword qacafe123 + # testvar acsXmppConnReqUseTls no + + } + + SECTION "Advanced ACS Configuration" { + + # testvar acsCpeKeepAlive yes + # testvar acsChunkedEncoding no + # testvar acsChunkSize 64 + # testvar acsAuthOncePerSession no + # testvar acsCookieMode rfc6265 + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + # testvar acsNumberCpeAttempts 2 + # testvar acsDelayCpeAttempts 10 + # testvar acsWaitForConnectionRequest yes + # testvar acsUseTcpOffload yes + # testvar acsTargetDevice tr069_device2 + # testvar acsDualStackIp 6000::1 + # testvar acsStrictSyntaxChecking on + + } + + SECTION "SSL Configuration" { + + # testvar acsSslVersion tls + # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem + # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem + # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsCipherSuite auto + # testvar acsClientCaCertPath /path/to/client/ca/file + + } + + SECTION "Profiles" { + + # testvar cwmpSupportedDataModel auto + # testvar cwmpDataValidation yes + # testvar cwmpSkipParameters empty + # testvar cwmpModifyParameters empty + # testvar cwmpVendorSpecificParams none + + SECTION "Custom CWMP Profiles" { + + IGNORE testvar_group cwmp_profile1 { + + # testvar cwmpProfileName myVendorParameters + # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp + # testvar cwmpProfileObject InternetGatewayDevice:1 + + } + + } + + } + + SECTION "CWMP Scenarios" { + + # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp + # testvar cwmpScenarioSingleMode no + # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp + + } + + SECTION "Additional TR-069 Options" { + + # testvar tr69DeviceType IGD + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69InformTimeout 120 + # testvar tr69MinPeriodicInform 60 + # testvar tr69ScheduleInformRPC yes + # testvar tr69UploadRPC no + # testvar tr69UploadPath /tmp + # testvar tr69ConfigUploadFilename vendor_configuration_file + # testvar tr69LogUploadFilename vendor_log_file + # testvar tr69FactoryResetRPC no + # testvar tr69CpeGetRPCs no + # testvar tr69ForceBoolean no + # testvar tr69XMLCapturePath /tmp/tr69-xml + # testvar tr69DownloadTimeout 600 + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadImageVersion 1.0 + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69RebootTimeout 300 + # testvar tr69RpcTimeout 180 + # testvar tr69DownloadConfig /path/to/config + # testvar tr69MaxUserNameLen 256 + # testvar tr69MaxPasswordLen 256 + # testvar tr69MaxCpeUserNameLen 256 + # testvar tr69MaxCpePasswordLen 256 + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DUInstallImageVersion 1.0 + # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image + # testvar tr69DUInstallImageAlternateVersion 1.0 + # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb + # testvar tr69DUChangeExecEnvRef openwrt + # testvar tr69DUChangeTimeout 600 + # testvar tr69WildcardPortMappingOnly no + # testvar tr69PortMapDeletionDelay 15 + # testvar tr69PortMapCreationDelay 0 + # testvar tr69PortMapDisableDelay 15 + # testvar tr69TraceRouteTimeout 120 + + } + + SECTION "TR-111 Parts 1 and 2" { + + # testvar supportsTr111Part1 yes + # testvar supportsTr111Part2 no + # testvar STUNMaximumKeepAlivePeriod 60 + # testvar STUNMinimumKeepAlivePeriod 60 + # testvar STUNAuth no + # testvar STUNUsername qacafe + # testvar STUNPassword qacafe123 + # testvar acsUdpConnectionDelay 0 + + } + + SECTION "TR-143 Performance Tests" { + + # testvar tr143HttpDownloadSize 1000000 + # testvar tr143HttpUploadSize 1000000 + + # testvar tr143HttpDownloadHighThreshold 0.0 + # testvar tr143HttpDownloadLowThreshold 5.0 + # testvar tr143HttpDownloadResponseMax 60 + + # testvar tr143HttpUploadHighThreshold 0.0 + # testvar tr143HttpUploadLowThreshold 5.0 + # testvar tr143HttpUploadResponseMax 60 + + } + + SECTION "TR-069 LAN Side Devices" { + + IGNORE testvar_group tr069_device2 { + + # testvar acsDefaultUser qacafe + # testvar acsDefaultPassword qacafe123 + # testvar acsCpeDefaultUser qacafe + # testvar acsCpeDefaultPassword qacafe123 + # testvar acsCreatePortMapOnIGD no + # testvar acsPortMapPublicPort 20000 + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69DeviceType IGD + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DownloadConfig /path/to/config + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + + } + + } + +} + +SECTION "CDRouter USP Add-On" { + + # testvar supportsUSP no + + SECTION "Basic Controller Configuration" { + + # testvar uspControllerID proto::controller-id + # testvar uspControllerInterface wan + + # testvar uspControllerIpMode ipv4-only + # testvar uspControllerIpv4 6.0.0.2 + # testvar uspControllerIpv6 6000::2 + # testvar uspControllerPort auto + # testvar uspControllerPath /controller-path + + # testvar uspControllerUseNonPayloadProtection no + # testvar uspControllerUseSessionContext no + # testvar uspControllerMTP websocket + # testvar uspControllerMTPEncryption no + # testvar uspControllerUSPEncryption no + # testvar uspControllerDomain controller.cdroutertest.com + + # testvar uspSegmentationEnable no + # testvar uspSegmentationSize auto + + # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + + # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + + # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerVerifyRecordIntegrity no + + # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem + + # testvar uspControllerHost any + # testvar uspControllerUsername qacafe + # testvar uspControllerPassword qacafe123 + + } + + SECTION "Basic Agent Configuration" { + + # testvar uspAgentID proto::agent-id + + # testvar uspAgentIpv4 auto + # testvar uspAgentIpv6 auto + # testvar uspAgentPort auto + # testvar uspAgentPath /agent-path + + # testvar uspMessageTimeout 30 + # testvar uspNotificationTimeout 30 + # testvar uspRebootTimeout 120 + + } + + SECTION "USP Scenarios" { + + # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp + # testvar uspScenarioSingleMode no + # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp + + } + + SECTION "Data Model" { + + # testvar uspSkipParameters empty + # testvar uspModifyParameters empty + # testvar uspSupportedDataModel all + + SECTION "Custom USP Data Model" { + + IGNORE testvar_group usp_profile_1 { + + # testvar uspProfileName myVendorParameters + # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml + + } + + } + + } + + SECTION "USP Agent Data Model Configuration" { + + # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + + # testvar uspParameterPath1 Device.DeviceInfo.ModelName + # testvar uspParameterPath2 Device.IP.Interface.3.Enable + # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory + # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode + + # testvar uspNotificationParamNewValue myCustomParameterValue + + # testvar uspObject1 Device.IP.Interface. + # testvar uspObject2 Device.WiFi.AccessPoint. + + # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} + # testvar uspValidSearchPathResultParam PeriodicNotifInterval + # testvar uspValidSearchPathResultValue 5000 + + # testvar uspFirmwareImage /path/to/firmware.bin + # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin + # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 + + } + +} + +SECTION "CDRouter BBF.069 Add-On" { + + # testvar supportsBBF069 yes + + SECTION "General" { + + SECTION "ACS URL" { + + # testvar bbf069ACSURL http://acs1.broadband-forum.org + # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org + + } + + SECTION "Security Certificates" { + + # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem + # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem + # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem + # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem + # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem + # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem + + } + + SECTION "HTTP Verification" { + + # testvar bbf069HTTPVerification no + + } + + } + + SECTION "Device Specific" { + + SECTION "General" { + + # testvar bbf069RootDataModel InternetGatewayDevice + # testvar bbf069UnsupportedRPC ChangeDUState + # testvar bbf069UploadType "1 Vendor Configuration File" + # testvar bbf069ExpectedUpgradeTime 100 + + } + + SECTION "Data Model" { + + # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069ActiveParamType unsignedInt + # testvar bbf069ActiveParamValue 60 + + # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069CompletePath1Type unsignedInt + # testvar bbf069CompletePath1Value 73 + + # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable + # testvar bbf069CompletePath2Type boolean + # testvar bbf069CompletePath2Value true + + # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. + # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. + # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv + # testvar bbf069InvalidPathType unsignedInt + + # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer + # testvar bbf069UnwritableType string + # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 + + } + + } + +} diff --git a/.testbed/cdrouter/configurations/ppp b/.testbed/cdrouter/configurations/ppp new file mode 100644 index 0000000000..fc348a6d6e --- /dev/null +++ b/.testbed/cdrouter/configurations/ppp @@ -0,0 +1,2677 @@ +SECTION "About" { + + # Cable/DSL Router Test Suite + # + # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 + # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) + # + # Local.conf + # + # This is the main configuration file for CDRouter. This file defines the + # configuration of the router under test and controls various aspects of + # CDRouter's behavior. This file consists of a number of unique test variables + # called 'testvars' which are grouped by interface, protocol, or functionality. + # The basic syntax for all testvars is: + # + # testvar NAME VALUE + +} + +SECTION "Base Configuration" { + + SECTION "WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + testvar wanMode PPPoE + # testvar wanIspIp 202.254.1.1 + # testvar wanIspAssignIp 202.254.1.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.1.2 + # testvar wanIspNextIp 202.254.1.3 + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar wanIspAssignMask 255.255.255.0 + # testvar IPv4HopCount 1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + # testvar dhcpServerRapidCommit yes + # testvar dhcpServerClientIDBehavior rfc6842 + # testvar dhcpServerResponseDelay 4500 + # testvar dhcpConnectOnDemand no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar wanDhcpClientOptionCode1 60 + # testvar wanDhcpClientOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "DHCP Authentication" { + + # testvar supportsDhcpAuth no + + } + + SECTION "PPPoE Server" { + + # testvar pppoeConnectOnDemand no + # testvar pppoeIdleTimeout 60 + testvar pppoeUser softathome + testvar pppoePassword softathome + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + # testvar pppoeAcCookie auto + # testvar pppoeMaxPayload none + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpConnectOnDemand yes + # testvar pptpServerIp 202.254.201.1 + # testvar pptpClientIp 202.254.201.2 + # testvar pptpUseDHCP no + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpConnectOnDemand yes + # testvar l2tpServerIp 202.254.201.1 + # testvar l2tpClientIp 202.254.201.2 + # testvar l2tpUseDHCP no + + } + + SECTION "DS-Lite" { + + # testvar ipv6DsliteAftr 3001:aaaa::1 + # testvar dhcpv6WanAftrName aftr.qacafe.com + # testvar dsliteFirewallMode address-restricted + + } + + SECTION "MAP / LW4o6" { + + # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: + # testvar mapBmrRuleIpv6PrefixLen 48 + # testvar mapBmrRuleIpv4Prefix 5.0.0.0 + # testvar mapBmrRuleIpv4PrefixLen 24 + # testvar mapBmrRuleEABitLen 16 + + # testvar mapSharingRatio 256 + # testvar mapStartPort 4096 + # testvar mapPsid 255 + + # testvar mapEnableDhcpv6Options yes + + SECTION "MAP-E / LW4o6" { + + # testvar mapTunnelFlowLabel 0 + # testvar mapTunnelHopLimit 64 + # testvar mapTunnelTrafficClass 0 + + } + + SECTION "MAP-T" { + + # testvar mapDmrIpv6Prefix 5001:db8:: + # testvar mapDmrIpv6PrefixLen 48 + + # testvar mapTosTranslate yes + + } + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + # testvar pppConnectionDelay 10 + # testvar pppRestartTimeout 300000 + # testvar pppFailUsesICMP no + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "Wireless Access Point (AP)" { + + # testvar wanApBand 2.4GHz + # testvar wanApSSID qa-net + # testvar wanApChannel auto + + SECTION "WPA Authenticator" { + + # testvar wanApWpaMode RSN + # testvar wanApWpaKeyMgmt PSK + # testvar wanApWpaCipher CCMP-128 + # testvar wanApWpaGroupCipher auto + # testvar wanApWpaPMF auto + # testvar wanApWpaPsk qacafe123 + # testvar wanApWpaSaePassword "sae secret" + + } + } + + SECTION "WAN 802.1X and RADIUS" { + + SECTION "WAN RADIUS" { + + # testvar wanRadiusEnable no + # testvar wanRadiusInterface wan + # testvar wanRadiusIp 3.3.3.44 + # testvar wanRadiusSecret qacafe123 + # testvar wanRadiusServerAttrType1 200 + # testvar wanRadiusServerAttrData1 04040404 + + } + + SECTION "WAN EAP Settings" { + + # testvar wanEapType eap-md5 + + SECTION "WAN Supplicant Credentials" { + + # testvar wanEapIdentity1 user1 + # testvar wanEapPassword1 qacafe123 + + } + + SECTION "WAN Authentication Options" { + + # testvar wanEapRootCert /usr/cdrouter/tests/root.pem + # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem + # testvar wanEapServerCertPassword qacafe123 + # testvar wanEapFragmentSize 1024 + + } + + } + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.101.1 + # testvar wanBackupDnsServer 202.254.101.2 + # testvar wanBackupDnsServer2 0.0.0.0 + # testvar wanBackupDnsServer3 0.0.0.0 + # testvar DNStoDHCP no + # testvar supportsDnsProxy yes + # testvar supportsDnsCaching yes + # testvar dnsCacheSize 150 + # testvar dnsLookupTimeout 5 + # testvar dnsFailoverAuth "2 4 5" + # testvar dnsFailoverNonAuth "2 4 5" + # testvar dnsFailoverDelay 10 + # testvar dnsFailoverAttempts 20 + # testvar dnsRelayFailover 120 + # testvar dnsForwardServerStatus no + # testvar dnsUsageProfile opportunistic-privacy + # testvar dnsCaptive no + + SECTION "User Configurable DNS Entries" { + + # testvar dnsHostname1 test.qacafe.com + # testvar dnsIp1 5.5.5.5 + + } + + } + + SECTION "HTTP" { + + # testvar supportsHttpProxy yes + # testvar httpProxyIdleTimeout 30 + # testvar httpMaxHeaderCount 200 + + } + + SECTION "NTP" { + + # testvar ntpServer1 3.3.3.6 + # testvar ntpServerName1 time.nist.gov + # testvar ntpServer2 3.3.3.7 + # testvar ntpServerName2 time.foo.com + # testvar ntpStartDate "6/2/2007 11:00 am UTC" + # testvar ntpOffset 0 + # testvar enableRFC868TimeProtocol no + + } + + SECTION "Dynamic DNS" { + + # testvar supportsDynDns no + # testvar dynDnsServerIp 66.37.215.49 + # testvar dynDnsTransport http + # testvar dynDnsHostname test.domain.com + # testvar dynDnsUsername qacafe + # testvar dynDnsPassword qacafe123 + # testvar dynDnsSystem dyndns + # testvar dynDnsMx mail.domain.com + # testvar dynDnsBackMx no + # testvar dynDnsWildcard off + # testvar dynDnsAgent RAS/1.1 + # testvar dynDnsWait 30 + # testvar testDynDnsErrorCode no + # testvar dynDnsServerReturn !yours + + } + + SECTION "WINS Servers" { + + # testvar winsServer1 3.3.3.4 + # testvar winsServer2 3.3.3.5 + + } + + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanDomainName qacafe.com + # testvar lanMtu default + testvar lanHostname prplOS + # testvar lanGuestMode no + + SECTION "ARP Settings" { + + # testvar arpMode strict + # testvar arpSupportGratuitous yes + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + # testvar supportsDnsHostnameCreate no + + } + + SECTION "DHCP Client" { + + # testvar dhcpClientTimeout 5 + # testvar dhcpInform no + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpRapidCommit no + # testvar ipv4MaxLanClients auto + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpCreateDelay 0 + # testvar dhcpReleaseDelay 300 + # testvar dhcpServerMac auto + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + # testvar dhcpClientTrackSeconds no + # testvar dhcpClientRequestNtp no + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + SECTION "DHCP Client Extra Parameters" { + + # testvar dhcpExtraClientParams "69 70" + + } + + SECTION "DHCP Client Extra Options" { + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Hotspot Router Settings" { + + # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% + # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% + + SECTION "Hotspot Clients" { + + # testvar clientLoginName1 client1 + # testvar clientLoginPassword1 admin1 + + } + + SECTION "Advanced Hotspot Settings" { + + # testvar browserLoginProc example_login + # testvar browserLogoutProc example_logout + # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl + + } + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconRsnCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X and RADIUS" { + + SECTION "LAN RADIUS" { + + # testvar enableRADIUSserver yes + # testvar radiusHost remoteHost + # testvar radiusSecret qacafe123 + # testvar radiusServerAttrType1 200 + # testvar radiusServerAttrData1 04040404 + + } + + SECTION "LAN EAP Settings" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + SECTION "LAN Authentication Options" { + + # testvar eapRootCert /usr/cdrouter/tests/root.pem + # testvar eapServerCertPath /usr/cdrouter/tests/server.pem + # testvar eapServerCertPassword qacafe123 + # testvar eapFragmentSize 1024 + # testvar eapTxWhen 60 + # testvar eapQuietPeriod 60 + # testvar eapReAuthMax 2 + # testvar eapSendLogoffFailure yes + # testvar eapReAuthPeriod 0 + + } + + } + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "Firewall and NAT" { + + SECTION "NAT Options" { + + # testvar natSimultaneousTcp no + # testvar natSrcPort0 yes + # testvar natSupportsP2P yes + # testvar natPortParity yes + # testvar natMode port-restricted + # testvar natVerifyIpId yes + # testvar defaultTcpEchoPort 50000 + # testvar defaultUdpEchoPort 50000 + # testvar natRefreshBehavior both + + SECTION "NAT Timers" { + + # testvar natFinTimeout disabled + # testvar natRstTimeout disabled + # testvar natTcpTimeout disabled + # testvar natSynTimeout disabled + # testvar natUdpTimeout disabled + # testvar natDnsTimeout disabled + # testvar natIcmpTimeout disabled + # testvar natRtspTimeout disabled + # testvar natLagTime 0 + + } + + } + + SECTION "Protocol Pass Through" { + + SECTION "IPSEC Pass Through" { + + # testvar supportsIPSECpass yes + # testvar ipsecMaxTunnels 20 + # testvar ipsecScaleSameServer no + # testvar alwaysUseIke no + # testvar ipsecPassRetransmit no + # testvar unknownPassthrough yes + + } + + SECTION "PPTP Pass Through" { + + # testvar supportsPPTPpass yes + # testvar pptpMaxTunnels 20 + + } + + SECTION "L2TP Pass Through" { + + # testvar supportsL2TPpass yes + # testvar l2tpMaxTunnels 20 + + } + + SECTION "PPPoE Pass Through" { + + # testvar supportsPPPoEpass no + + } + + } + + SECTION "Port Triggers" { + + # testvar portTriggers no + # testvar portTriggerTimeout 0 + # testvar portTriggerDelay 0 + # testvar portTriggerOpenDelay 0 + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "Application Layer Gateways (ALGs)" { + + SECTION "MSN Messenger" { + + # testvar supportsMsnAlg no + # testvar msnNotificationServerPort 1863 + # testvar msnSwitchBoardServerPort 1863 + + } + + SECTION "RTSP" { + + # testvar supportsRtspAlg no + # testvar rtspTeardownDelay 5 + # testvar rtspGetParameterInterval 5 + + } + + SECTION "SIP" { + + # testvar supportsSipAlg yes + # testvar sipInterface wan + # testvar sipServerIp 3.3.3.8 + # testvar ipv6SipServerIp 3001:051a:cafe::4 + # testvar sipCallTeardownDelay 5 + # testvar sipMaxOutboundCalls 10 + # testvar sipMaxInboundCalls 10 + # testvar sipCallPacing 0 + # testvar sipScaleRunTime 30 + # testvar sipScaleServerPort 5060 + # testvar sipScaleClientPort 5060 + # testvar sipMaxUserNames -1 + # testvar rtpSendInterval 5000 + + } + + SECTION "FTP" { + + # testvar ftpPortTimeout 120 + + } + + } + + SECTION "Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + SECTION "Port Scanning, Firewall and DoS Options" { + + # testvar portScanStart 0 + # testvar portScanStop 65535 + # testvar portScanDelay 1 + testvar firewallTcpOpenPorts "50805" + # testvar firewallTcpClosedPorts 2323 + # testvar firewallUdpOpenPorts 1234 + testvar firewallUdpClosedPorts 68 + # testvar firewallOutBlockedTcpPorts 1234 + # testvar firewallOutBlockedUdpPorts 1234 + # testvar firewallOutBlockedIpProtos 0 + # testvar wanPingRespond no + + SECTION "Denial of Service Options" { + + # testvar dosRecoveryTime 5 + # testvar dosAttackAttempts 100 + # testvar dutMgmtPort 80 + # testvar dutSecureMgmtPort disabled + # testvar dosSynAttackPort 80 + # testvar dosSynAttackAttempts 100 + + } + + SECTION "Deprecated SSL Protocols and Ciphers" { + + # testvar sslDeprecatedProtocols "sslv2 sslv3" + # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" + + } + + } + + SECTION "DMZ" { + + # testvar lanDmzHost 192.168.1.253 + # testvar lanDmzTcpPortExceptions 113 + # testvar lanDmzUdpPortExceptions 1234 + # testvar lanDmzIpProtoExceptions 2,47 + # testvar lanDmzSupportsIcmp no + + } + + SECTION "URL Filtering" { + + # testvar urlFilterSupported no + # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" + # testvar non-filtered-urls http://qacafe.com + # testvar urlFilterBlockedText "This website is blocked" + + } + + SECTION "XBox Live Options" { + + # testvar xboxNatMinType open + # testvar xboxPort 3074 + # testvar xboxMtu 1364 + + } + + } + + SECTION "Advanced Protocols" { + + SECTION "RIP v1/v2" { + + # testvar ripSupported no + # testvar ripVersion 1 + # testvar ripV2mode multicast + # testvar ripAuthMode none + # testvar ripPassword qacafe123 + # testvar ripMaxRoutes 96 + # testvar ripRouteTimeout 180 + # testvar ripGarbageTimeout 120 + # testvar ripRouteDelay 5000 + # testvar ripAcceptWanUpdate no + + } + + SECTION "UPnP" { + + # testvar upnpSupported yes + # testvar upnpVersion 1.1 + # testvar upnpDevice InternetGatewayDevice:2 + # testvar upnpWANPPPConnection no + # testvar upnpLANDevice no + # testvar upnpMaxTcpMappings 10 + # testvar upnpMaxSubClients 10 + # testvar upnpMinSubTimeout 40 + # testvar upnpMaxSubTimeout 3600 + # testvar upnpWANFailureTimeout 120 + # testvar upnpPortStart 40000 + # testvar upnpPortStop 50000 + + } + + SECTION "LLDP" { + + # testvar supportsLLDP no + # testvar lldpLanMac none + # testvar lldpLanChassisMac auto + # testvar lldpMsgFastTx 1 + # testvar lldpMsgTxInterval 30 + # testvar lldpTxFastInit 4 + + } + + SECTION "IGMP (Multicast)" { + + # testvar supportsMulticast yes + # testvar multicastType proxy + # testvar supportsMulticastOut no + # testvar igmpVersion 2 + # testvar igmpFastLeave no + # testvar igmpRouterOption yes + # testvar igmpMaxGroups 64 + # testvar multicastCacheTimeout 10 + # testvar multicastPoolStart 224.0.1.0 + # testvar multicastPoolStop 239.255.255.255 + # testvar SSMulticastPoolStart 232.0.1.1 + # testvar SSMulticastPoolStop 232.0.1.255 + # testvar multicastJoinDelay 2 + # testvar multicastScaleDelay 1 + # testvar multicastInterface wan + # testvar multicastBypassPPPoE no + + SECTION "IGMP Timers" { + + # testvar igmpQueryInterval 125 + # testvar igmpRobustnessVariable 2 + # testvar igmpQueryResponseInterval 10 + + } + + SECTION "IPTV Options" { + + # testvar iptvChannelRange 200 + # testvar iptvChannelChangeDelay 200 + # testvar iptvMaxFailures 10 + + } + + } + + SECTION "GRE Tunnels" { + + # testvar greDFflag on + + IGNORE testvar_group greTunnel1 { + + SECTION "Generic IPv4 GRE Tunnel Endpoints" { + + # testvar greType IPv4 + # testvar greEndpoint 5.5.5.5 + # testvar greLocalNet 192.168.1.0 + # testvar greLocalMask 255.255.255.0 + + } + + SECTION "L2GRE Options" { + + # testvar greWanGroup wan2 + + } + + SECTION "L3GRE Remote IPv4 Network" { + + # testvar greHost 3.0.0.1 + # testvar greRemoteNet 3.0.0.0 + # testvar greRemoteMask 255.0.0.0 + + } + + } + + } + + } + + SECTION "Additional Features" { + + # testvar supportsIPv4 yes + # testvar internalSmtpServer 5.5.5.5 + # testvar remoteHostIp 3.3.3.3 + # testvar startOtherLanFirst no + # testvar cdrouterOui B0750C + # testvar forwardingMaxFailures 20 + # testvar forwardingPort 5001 + # testvar jumboMtu disabled + # testvar tcpUdpPortStart 10000 + + SECTION "General Purpose HTTP Server" { + + # testvar httpServerIp 3.3.3.16 + # testvar httpServerPort 80 + # testvar httpServerRoot /tmp + + } + + SECTION "Free Network Range" { + + # testvar FreeNetworkStart 200.0.0.0 + # testvar FreeNetworkMask 255.255.255.0 + # testvar FreeNetworkStop 201.0.0.0 + + } + + SECTION "TCP MSS Clamping" { + + # testvar mssClampingValue default + # testvar mssClampingInValue default + + } + + SECTION "TCP/UDP Scaling Options" { + + # testvar scaleTcpConnsPerHost 5 + # testvar natMaxTcpConns 200 + # testvar natMaxUdpConns 100 + + } + + SECTION "Global Wireless Options" { + + # testvar wirelessRetry 3 + # testvar lanWirelessMaxClients auto + # testvar wifiCapture off + # testvar wifiCaptureFilter {} + + } + + } + + SECTION "Test Execution Options and Auto-Reboot" { + + # testvar startDelay 3 + # testvar lanStartDelay 3 + # testvar startTimeout 90 + # testvar wanCloseOnExit yes + # testvar RestartDut none + # testvar RestartDutDelay disabled + # testvar ShutdownDut "echo -n" + # testvar cpeRebootMode skip + # testvar healthCheckEnable no + + } + +} + +SECTION "CDRouter DOCSIS Add-On" { + + # testvar supportsDocsis no + + SECTION "Basic Configuration" { + + # testvar docsisIpProvisioningMode ipv4-only + # testvar docsisBootDelay 30 + + # testvar docsisClientMac auto + + } + + SECTION "IPv4 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIp 10.10.10.1 + # testvar docsisMask 255.255.255.0 + + } + + SECTION "DHCPv4 Server" { + + # testvar docsisDhcpServer 10.10.10.3 + # testvar docsisAssignIp 10.10.10.2 + # testvar docsisDomain docsis.qacafe.com + # testvar docsisDhcpLeaseTime 300 + # testvar docsisDhcpRapidCommit no + + # testvar docsisDhcpServerOptionCode1 69 + # testvar docsisDhcpServerOptionData1 04040404 + + # testvar docsisDhcpClientOptionCode1 60 + # testvar docsisDhcpClientOptionData1 04040404 + + SECTION "DHCPv4 Relay" { + + # testvar docsisGateway 6.6.6.7 + # testvar docsisAssignGateway 6.6.6.6 + # testvar docsisAssignMask 255.255.255.0 + # testvar docsisDhcpRelayServer 6.6.6.7 + + } + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogServer 10.10.10.5 + # testvar docsisTimeServer 10.10.10.6 + # testvar docsisTftpServer 10.10.10.4 + + } + + } + + SECTION "IPv6 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIpv6 8001::1 + # testvar docsisIpv6PrefixLen 64 + + } + + SECTION "DHCPv6 Server" { + + # testvar docsisDhcpIpv6Server 8001::3 + # testvar docsisAssignIpv6 8001::2 + # testvar docsisDHCPv6PreferredLifetime 300 + # testvar docsisDHCPv6ValidLifetime 300 + # testvar docsisDhcpv6RapidCommit no + + # testvar docsisDhcpv6ServerOptionCode1 69 + # testvar docsisDhcpv6ServerOptionData1 04040404 + + # testvar docsisDhcpv6ClientOptionCode1 60 + # testvar docsisDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Relay" { + + # testvar docsisIpv6Gateway 9001::1 + # testvar docsisAssignIpv6PrefixLen 64 + # testvar docsisDhcpv6RelayServer 9001::1 + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogIpv6Server 8001::5 + # testvar docsisTimeIpv6Server 8001::6 + # testvar docsisTftpIpv6Server 8001::4 + + } + + } + + SECTION "CM Config File" { + + SECTION "Global TFTP Settings" { + + # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp + # testvar docsisTftpBootFile auto-docsis.bin + + } + + SECTION "Embedded Config File" { + + # testvar docsisConfig { + # Main + # { + # NetworkAccess 1; + # BaselinePrivacy + # { + # AuthTimeout 10; + # ReAuthTimeout 10; + # AuthGraceTime 600; + # OperTimeout 1; + # ReKeyTimeout 1; + # TEKGraceTime 600; + # AuthRejectTimeout 60; + # SAMapWaitTimeout 1; + # SAMapMaxRetries 4; + # } + # MaxCPE 3; + # UsServiceFlow + # { + # UsServiceFlowRef 2; + # QosParamSetType 7; + # } + # DsServiceFlow + # { + # DsServiceFlowRef 1; + # QosParamSetType 7; + # } + # SNMPv1v2cCoexistenceConfig + # { + # SNMPv1v2cCommunityName "public"; + # SNMPv1v2cTransportAddressAccess + # { + # SNMPv1v2cTransportAddress 0.0.0.0/0; + # SNMPv1v2cTransportAddressMask 0.0.0.0/0; + # } + # SNMPv1v2cAccessViewType 2; + # SNMPv1v2cAccessViewName "docsisManagerView"; + # } + # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ + # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ + # /*EndOfDataMkr*/ + # } + # } + + } + + SECTION "Vendor Defined Config File" { + + # testvar docsisConfigFile none + + } + + } + + SECTION "CM Firewall Configuration" { + + SECTION "IPv4" { + + # testvar docsisTcpOpenPorts "22 443" + # testvar docsisTcpClosedPorts all + # testvar docsisUdpOpenPorts 1234 + # testvar docsisUdpClosedPorts all + + } + + SECTION "IPv6" { + + # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" + # testvar docsisIpv6TcpClosedPorts "2323 80" + # testvar docsisIpv6UdpOpenPorts 1234 + # testvar docsisIpv6UdpClosedPorts 113 + + } + + } + +} + +SECTION "CDRouter HomeKit Add-On" { + + # testvar supportsHomeKit no + + # testvar homeKitRouterName "HomeKit Router" + # testvar homeKitHATHostname hat.local + # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ + # testvar homeKitRouterSetupCode + + # testvar homeKitManualEnabled yes + +} + +SECTION "CDRouter IKE Add-On" { + + SECTION "Global IKE Options" { + + # testvar ikeMaxPhase2SA 20 + # testvar ikeDeadPeerDetection no + # testvar ikeNewQuickModeDelay 1000 + # testvar ikeKeepAlive 20 + # testvar ikeMinimumLifetime 20 + # testvar ipsecMinimumLifetime 20 + # testvar ikePhase2DeleteDelay 100 + # testvar ikeMaxTransforms 21 + # testvar ikeInitialContact yes + # testvar ikeBringUpTunnels yes + # testvar ikeAlwaysInitiate no + # testvar useSameIpsecTunnel no + # testvar ikeNatTraversal no + # testvar ike_FQDN fqdn-test.cdrouter.com + # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com + + } + + SECTION "IPsec Tunnel Configurations" { + + SECTION "IPsec Tunnel Configuration 1" { + + # testvar ipsecTunnelKeyType1 manual + # testvar ipsecTunnelEndpoint1 5.0.0.1 + # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 + # testvar ipsecTunnelRemoteMask1 255.255.255.0 + # testvar ipsecTunnelHost1 5.0.0.2 + + SECTION "Manual IPsec Tunnel Configuration" { + + # testvar ipsecTunnelOutboundSpi1 1000 + # testvar ipsecTunnelOutEncrypt1 des + # testvar ipsecTunnelOutEncryptKey1 0102030405060708 + # testvar ipsecTunnelOutAuth1 md5-hmac + # testvar ipsecTunnelOutAuthKey1 6262626262626262 + # testvar ipsecTunnelInboundSpi1 1001 + # testvar ipsecTunnelInEncrypt1 des + # testvar ipsecTunnelInEncryptKey1 0102030405060708 + # testvar ipsecTunnelInAuth1 md5-hmac + # testvar ipsecTunnelInAuthKey1 6262626262626262 + + } + + SECTION "IKE IPsec Tunnel Configuration" { + + # testvar ipsecTunnelIkeEncrypt1 des + # testvar ipsecTunnelIkeAuth1 md5-hmac + # testvar ipsecTunnelIkeGroup1 1 + # testvar ipsecTunnelIkeLifetime1 300 + # testvar ipsecTunnelEncrypt1 3des + # testvar ipsecTunnelAuth1 sha1-hmac + # testvar ipsecTunnelPfsGroup1 1 + # testvar ipsecTunnelLifetime1 120 + # testvar ipsecTunnelPsk1 qacafe123 + # testvar ipsecTunnelIkeMode1 main + # testvar ipsecTunnelUsesNat1 no + + } + + } + + } + +} + +SECTION "CDRouter IPv6 Add-On" { + + # testvar supportsIPv6 no + + SECTION "IPv6 WAN" { + + testvar ipv6WanMode PPPoE + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001::1 + # testvar ipv6WanIspAssignIp 3001::2 + # testvar ipv6WanIspNextIp 3001::3 + # testvar ipv6WanIspPrefixLen 64 + # testvar ipv6WanDutDuid 00000000 + # testvar ipv6RelayServer 192.88.99.1 + # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 + # testvar ipv6rdPrefix 2001:1234:: + # testvar ipv6rdPrefixLen 32 + # testvar ipv6rdIPv4MaskLen 0 + # testvar ipv6rdDHCPv4Option yes + # testvar ipv6TunnelMtuType static + # testvar ipv6WanMtu 1500 + # testvar ipv6WanMtuOption no + # testvar ipv6RASendInterval 10 + # testvar ipv6ExpectRAonWan no + + SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { + + # testvar ipv6WanIspGateway 3001::9 + # testvar ipv6WanAssignPrefixLen 64 + # testvar IPv6HopCount 1 + # testvar dhcpv6RelayServer 3001::9 + + } + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + # testvar ipv6WanRDNSS no + # testvar ipv6WanDNSSL no + + } + + SECTION "DHCPv6 Server" { + + # testvar dhcpv6IAValidLifetime 300 + # testvar dhcpv6IAPreferredLifetime 300 + # testvar dhcpv6DuidType 1 + # testvar dhcpv6RestartLatency 10 + # testvar dhcpv6ServerRapidCommit yes + + # testvar dhcpv6ServerOptionCode1 69 + # testvar dhcpv6ServerOptionData1 04040404 + + # testvar wanDhcpv6ClientOptionCode1 60 + # testvar wanDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Authentication" { + + # testvar supportsDhcpv6Auth no + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: + # testvar dhcpv6WanAssignPrefixLen 48 + # testvar dhcpv6PDLatency 30 + + } + + SECTION "IPv6 NTP" { + + # testvar ipv6NtpServer1 4321::23 + # testvar ipv6NtpServerName1 time.nist.gov + + # testvar ipv6NtpServer2 4321::24 + # testvar ipv6NtpServerName2 time.foo.com + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + testvar ipv6LanIp 3001:dddd::1 + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanPrefixLen 64 + # testvar ipv6MaxLanClients 32 + # testvar ipv6RAInterval 300 + # testvar ipv6LanSubnetId 1 + + SECTION "DHCPv6 Client" { + + # testvar dhcpv6ClientTimeout 5 + # testvar ipv6DhcpClientStart ::2 + # testvar ipv6DhcpClientEnd ::1f + # testvar ipv6DhcpClientExclude "::3 ::7" + # testvar ipv6DhcpClientValidLifetime 86400 + # testvar dhcpv6RapidCommit yes + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + SECTION "IPv6 LAN DNS" { + + # testvar ipv6DNStoLAN yes + # testvar ipv6RdnssSupport yes + # testvar ipv6DnsslSupport yes + # testvar ipv6LanStaticDns no + + } + + SECTION "Unique Local Address (ULA) Options" { + + # testvar supportsULA no + # testvar ipv6LanULAPrefix fd00:: + # testvar ipv6LanULAIp ::%eui64% + # testvar ipv6LanULAMode autoconf + + } + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + } + + SECTION "IPv6 Firewall" { + + # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" + # testvar ipv6FirewallTcpClosedPorts "2323 80" + # testvar ipv6FirewallUdpOpenPorts 1234 + # testvar ipv6FirewallUdpClosedPorts 113 + # testvar ipv6FirewallOutBlockedTcpPorts 1234 + # testvar ipv6FirewallOutBlockedUdpPorts 1234 + # testvar ipv6FirewallOutBlockedIpProtos 0 + # testvar ipv6WanPingRespond no + + SECTION "IPv6 TCP MSS Clamping" { + + # testvar ipv6MssClampingValue default + # testvar ipv6MssClampingInValue default + # testvar ipv6MssClampingTestPort 8096 + + } + + } + + SECTION "IPv6 Advanced Protocols" { + + SECTION "RIPng" { + + # testvar supportsRIPng no + + } + + SECTION "MLD (IPv6 Multicast)" { + + # testvar supportsIPv6Multicast yes + # testvar supportsIPv6MulticastOut no + # testvar mldVersion 2 + # testvar mldMaxGroups 64 + # testvar mldFastLeave no + # testvar ipv6MulticastCacheTimeout 10 + # testvar ipv6MulticastJoinDelay 2 + # testvar ipv6MulticastScaleDelay 1 + + SECTION "MLD Timers" { + + # testvar mldQueryInterval 125 + # testvar mldRobustnessVariable 2 + # testvar mldQueryResponseInterval 10 + + } + + SECTION "IPv6 IPTV Options" { + + # testvar ipv6IptvChannelRange 200 + # testvar ipv6IptvChannelChangeDelay 200 + # testvar ipv6IptvMaxFailures 10 + + } + + } + + } + + SECTION "IPv6 Additional Features" { + + SECTION "IPv6 Free Network Range" { + + # testvar ipv6RemoteHost 3001:051a:cafe::1 + # testvar ipv6FreeNetworkStart 3001:cafe:1:: + # testvar ipv6FreeNetworkPrefixLen 64 + # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: + + } + + SECTION "IPv6 Multicast Pool Ranges" { + + # testvar ipv6MulticastPoolStart ff0e::1 + # testvar ipv6MulticastPoolStop ff0e:ffff:: + # testvar ipv6SSMulticastPoolStart ff3e::8000:1 + # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff + + } + + } + +} + +SECTION "CDRouter Multiport Add-On" { + + SECTION "Additional WAN Interface Setup" { + + # testvar wanFailoverTimeout 300 + + IGNORE testvar_group wan2 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.2.1 + # testvar wanIspAssignIp 202.254.2.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.2.2 + # testvar wanIspNextIp 202.254.2.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.202.1 + # testvar pptpClientIp 202.254.202.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.202.1 + # testvar l2tpClientIp 202.254.202.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.102.1 + # testvar wanBackupDnsServer 202.254.102.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:2::1 + # testvar ipv6WanIspAssignIp 3001:0:0:2::2 + # testvar ipv6WanIspNextIp 3001:0:0:2::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + IGNORE testvar_group wan3 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.3.1 + # testvar wanIspAssignIp 202.254.3.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.3.2 + # testvar wanIspNextIp 202.254.3.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.203.1 + # testvar pptpClientIp 202.254.203.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.203.1 + # testvar l2tpClientIp 202.254.203.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.103.1 + # testvar wanBackupDnsServer 202.254.103.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:3::1 + # testvar ipv6WanIspAssignIp 3001:0:0:3::2 + # testvar ipv6WanIspNextIp 3001:0:0:3::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + } + + SECTION "Additional LAN Interface Setup" { + + # testvar useSameLanInterface no + + IGNORE testvar_group lan2 { + + SECTION "IPv4 LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanGuestMode no + + SECTION "LAN Host IP" { + + # testvar hostIp 192.168.1.0 + # testvar hostMask 255.255.255.0 + # testvar hostGateway 192.168.1.1 + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "DHCP Client Configuration" { + + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + # testvar dhcpExtraClientParams "69 70" + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Configuration Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + } + + SECTION "IPv4 Firewall and NAT" { + + SECTION "Static NAT" { + + # testvar staticNatIp 202.254.1.2 + # testvar staticNatFirewall yes + # testvar natMode port-restricted + + } + + SECTION "Special Application Port Triggers" { + + # testvar portTriggers no + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "TCP and UDP Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanStaticDns no + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + + SECTION "LAN IPv6 DHCP Client" { + + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + + } + + } + +} + +SECTION "CDRouter Performance Add-On" { + + # testvar supportsPerformance no + + SECTION "Basic Configuration" { + + # testvar perfWanIp 202.254.1.4 + # testvar perfWanIpv6 3001::4 + # testvar perfPort 19750 + # testvar perfPort2 19751 + + } + + SECTION "Performance Settings" { + + # testvar perfDuration 10 + # testvar perfDownloadBandwidth 0.0 + # testvar perfInterval auto + # testvar perfIncrement 5 + # testvar perfStreams 1 + # testvar perfStreamIncr 0 + # testvar perfUdpLen auto + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + # testvar perfOmit 0 + # testvar perfDSCP 0 + # testvar perfFairness no + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresholds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + SECTION "Advanced Options" { + + # testvar perfPingEnable no + # testvar perfEnableCapture no + # testvar perfLatencyAttempts 25 + # testvar perfApplicationAttempts 4 + # testvar perfApplicationDelay 100 + + } + + SECTION "Wireless" { + + IGNORE testvar_group wireless-performance { + + SECTION "Performance Settings" { + + # testvar perfDownloadBandwidth 0.0 + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresolds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + } + + } + +} + +SECTION "CDRouter Security Add-On" { + + SECTION "Internet Connection Sharing (ICS)" { + + # testvar enableICS no + # testvar icsInterface eth0 + # testvar icsShareIPv4 yes + # testvar icsShareIPv6 yes + + } + + SECTION "Traffic Analysis" { + + # testvar enableSuricata no + + } + + SECTION "Nmap Scans" { + + # testvar enableNmap no + # testvar nmapPorts 0-65535 + # testvar nmapScanTimeout 600 + # testvar nmapTimingTemplate 5 + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleBase auto + # testvar internetScheduleTimeZone auto + # testvar internetScheduleBlockedText "This website is blocked" + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + +} + +SECTION "CDRouter SNMP Add-On" { + + # testvar supportsSnmp no + + # testvar snmpPort 161 + # testvar snmpDefaultUser auto + # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" + # testvar snmpUpdateDelay 15 + + SECTION "SNMP Options and Users" { + + # testvar snmpManagerIp 3.3.3.33 + # testvar snmpManagerIpv6 3001:051a:cafe::33 + + IGNORE testvar_group snmpuser1 { + + # testvar snmpVersion 2c + + # testvar snmpAccess read-only + # testvar snmpTransport udp + # testvar snmpRetries 5 + # testvar snmpTimeout 5 + + SECTION "SNMP v1/2c Configuration" { + + # testvar snmpCommunity public + + } + + SECTION "SNMP v3 Configuration" { + + # testvar snmpSecurityLevel noAuthNoPriv + + # testvar snmpAuthProtocol MD5 + # testvar snmpAuthUsername qacafe + # testvar snmpAuthPassword qacafe123 + + # testvar snmpPrivacyProtocol DES + # testvar snmpPrivacyPassword qacafe123 + + # testvar snmpContextName bridge1 + # testvar snmpSecurityEngineId 800000020109840301 + # testvar snmpContextEngineId 800000020109840301 + + } + + } + + } + + SECTION "SNMP Scenarios" { + + # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp + # testvar snmpScenarioSingleMode no + # testvar snmpScenarioInterface lan + # testvar snmpScenarioIpVersion IPv4 + + } + +} + +SECTION "CDRouter Storage Add-On" { + + # testvar supportsStorage no + + # testvar storageFileSize 10 + # testvar storageUserFilePath none + # testvar useMulticastDNS no + + SECTION "SMB Options and Users" { + + # testvar supportsStorageSmb yes + # testvar storageSmbMaxSessions 20 + # testvar storageSmbTimeout 120 + # testvar storageSmbPacing 0 + + IGNORE testvar_group smbuser1 { + + # testvar server MyNAS + # testvar share data + # testvar folder /home/qacafe + # testvar guest no + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + + SECTION "FTP Options and Users" { + + # testvar supportsStorageFtp yes + # testvar supportsStorageFtps yes + # testvar storageFtpMaxSessions 20 + # testvar storageFtpTimeout 120 + # testvar storageFtpPacing 0 + + IGNORE testvar_group ftpuser1 { + + # testvar server MyNAS + # testvar path /home/qacafe + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + +} + +SECTION "CDRouter TR-069 Add-On" { + + testvar supportsCWMP yes + + SECTION "Basic ACS Configuration" { + + # testvar acsIp 6.0.0.1 + # testvar acsPort 80 + testvar acsDomain acs-download.qacafe.com + # testvar acsTransport http + # testvar acsAuth digest + # testvar acsDigestQopAuth yes + # testvar acsInterface wan + testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ + # testvar acsWaitForInform 120 + # testvar acsSkipInitialInform no + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar cwmpProtocolVersion 1.0 + # testvar acsDeviceDiscovery no + # testvar acsConfigurePeriodicInform yes + # testvar tr69InitiateConnection yes + testvar acsDefaultUser cdrouter + testvar acsDefaultPassword cdrouter + testvar acsCpeDefaultUser acs + testvar acsCpeDefaultPassword acs + # testvar acsFileServerUser file_server_user + # testvar acsFileServerPassword file_server_password + + } + + SECTION "XMPP Connection Request Configuration" { + + # testvar acsSupportsXmppConnReq no + + # testvar acsXmppServerConnectAlgorithm DNS-SRV + # testvar acsXmppConnReqUsername qacafe + # testvar acsXmppConnReqResource cdrouter + # testvar acsXmppConnReqPassword qacafe123 + # testvar acsXmppConnReqUseTls no + + } + + SECTION "Advanced ACS Configuration" { + + # testvar acsCpeKeepAlive yes + # testvar acsChunkedEncoding no + # testvar acsChunkSize 64 + # testvar acsAuthOncePerSession no + # testvar acsCookieMode rfc6265 + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + # testvar acsNumberCpeAttempts 2 + # testvar acsDelayCpeAttempts 10 + # testvar acsWaitForConnectionRequest yes + # testvar acsUseTcpOffload yes + # testvar acsTargetDevice tr069_device2 + # testvar acsDualStackIp 6000::1 + # testvar acsStrictSyntaxChecking on + + } + + SECTION "SSL Configuration" { + + # testvar acsSslVersion tls + # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem + # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem + # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsCipherSuite auto + # testvar acsClientCaCertPath /path/to/client/ca/file + + } + + SECTION "Profiles" { + + # testvar cwmpSupportedDataModel auto + # testvar cwmpDataValidation yes + # testvar cwmpSkipParameters empty + # testvar cwmpModifyParameters empty + # testvar cwmpVendorSpecificParams none + + SECTION "Custom CWMP Profiles" { + + IGNORE testvar_group cwmp_profile1 { + + # testvar cwmpProfileName myVendorParameters + # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp + # testvar cwmpProfileObject InternetGatewayDevice:1 + + } + + } + + } + + SECTION "CWMP Scenarios" { + + # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp + # testvar cwmpScenarioSingleMode no + # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp + + } + + SECTION "Additional TR-069 Options" { + + # testvar tr69DeviceType IGD + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69InformTimeout 120 + # testvar tr69MinPeriodicInform 60 + # testvar tr69ScheduleInformRPC yes + # testvar tr69UploadRPC no + # testvar tr69UploadPath /tmp + # testvar tr69ConfigUploadFilename vendor_configuration_file + # testvar tr69LogUploadFilename vendor_log_file + # testvar tr69FactoryResetRPC no + # testvar tr69CpeGetRPCs no + # testvar tr69ForceBoolean no + # testvar tr69XMLCapturePath /tmp/tr69-xml + # testvar tr69DownloadTimeout 600 + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadImageVersion 1.0 + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69RebootTimeout 300 + # testvar tr69RpcTimeout 180 + # testvar tr69DownloadConfig /path/to/config + # testvar tr69MaxUserNameLen 256 + # testvar tr69MaxPasswordLen 256 + # testvar tr69MaxCpeUserNameLen 256 + # testvar tr69MaxCpePasswordLen 256 + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DUInstallImageVersion 1.0 + # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image + # testvar tr69DUInstallImageAlternateVersion 1.0 + # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb + # testvar tr69DUChangeExecEnvRef openwrt + # testvar tr69DUChangeTimeout 600 + # testvar tr69WildcardPortMappingOnly no + # testvar tr69PortMapDeletionDelay 15 + # testvar tr69PortMapCreationDelay 0 + # testvar tr69PortMapDisableDelay 15 + # testvar tr69TraceRouteTimeout 120 + + } + + SECTION "TR-111 Parts 1 and 2" { + + # testvar supportsTr111Part1 yes + # testvar supportsTr111Part2 no + # testvar STUNMaximumKeepAlivePeriod 60 + # testvar STUNMinimumKeepAlivePeriod 60 + # testvar STUNAuth no + # testvar STUNUsername qacafe + # testvar STUNPassword qacafe123 + # testvar acsUdpConnectionDelay 0 + + } + + SECTION "TR-143 Performance Tests" { + + # testvar tr143HttpDownloadSize 1000000 + # testvar tr143HttpUploadSize 1000000 + + # testvar tr143HttpDownloadHighThreshold 0.0 + # testvar tr143HttpDownloadLowThreshold 5.0 + # testvar tr143HttpDownloadResponseMax 60 + + # testvar tr143HttpUploadHighThreshold 0.0 + # testvar tr143HttpUploadLowThreshold 5.0 + # testvar tr143HttpUploadResponseMax 60 + + } + + SECTION "TR-069 LAN Side Devices" { + + IGNORE testvar_group tr069_device2 { + + # testvar acsDefaultUser qacafe + # testvar acsDefaultPassword qacafe123 + # testvar acsCpeDefaultUser qacafe + # testvar acsCpeDefaultPassword qacafe123 + # testvar acsCreatePortMapOnIGD no + # testvar acsPortMapPublicPort 20000 + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69DeviceType IGD + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DownloadConfig /path/to/config + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + + } + + } + +} + +SECTION "CDRouter USP Add-On" { + + # testvar supportsUSP no + + SECTION "Basic Controller Configuration" { + + # testvar uspControllerID proto::controller-id + # testvar uspControllerInterface wan + + # testvar uspControllerIpMode ipv4-only + # testvar uspControllerIpv4 6.0.0.2 + # testvar uspControllerIpv6 6000::2 + # testvar uspControllerPort auto + # testvar uspControllerPath /controller-path + + # testvar uspControllerUseNonPayloadProtection no + # testvar uspControllerUseSessionContext no + # testvar uspControllerMTP websocket + # testvar uspControllerMTPEncryption no + # testvar uspControllerUSPEncryption no + # testvar uspControllerDomain controller.cdroutertest.com + + # testvar uspSegmentationEnable no + # testvar uspSegmentationSize auto + + # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + + # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + + # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerVerifyRecordIntegrity no + + # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem + + # testvar uspControllerHost any + # testvar uspControllerUsername qacafe + # testvar uspControllerPassword qacafe123 + + } + + SECTION "Basic Agent Configuration" { + + # testvar uspAgentID proto::agent-id + + # testvar uspAgentIpv4 auto + # testvar uspAgentIpv6 auto + # testvar uspAgentPort auto + # testvar uspAgentPath /agent-path + + # testvar uspMessageTimeout 30 + # testvar uspNotificationTimeout 30 + # testvar uspRebootTimeout 120 + + } + + SECTION "USP Scenarios" { + + # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp + # testvar uspScenarioSingleMode no + # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp + + } + + SECTION "Data Model" { + + # testvar uspSkipParameters empty + # testvar uspModifyParameters empty + # testvar uspSupportedDataModel all + + SECTION "Custom USP Data Model" { + + IGNORE testvar_group usp_profile_1 { + + # testvar uspProfileName myVendorParameters + # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml + + } + + } + + } + + SECTION "USP Agent Data Model Configuration" { + + # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + + # testvar uspParameterPath1 Device.DeviceInfo.ModelName + # testvar uspParameterPath2 Device.IP.Interface.3.Enable + # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory + # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode + + # testvar uspNotificationParamNewValue myCustomParameterValue + + # testvar uspObject1 Device.IP.Interface. + # testvar uspObject2 Device.WiFi.AccessPoint. + + # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} + # testvar uspValidSearchPathResultParam PeriodicNotifInterval + # testvar uspValidSearchPathResultValue 5000 + + # testvar uspFirmwareImage /path/to/firmware.bin + # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin + # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 + + } + +} + +SECTION "CDRouter BBF.069 Add-On" { + + # testvar supportsBBF069 yes + + SECTION "General" { + + SECTION "ACS URL" { + + # testvar bbf069ACSURL http://acs1.broadband-forum.org + # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org + + } + + SECTION "Security Certificates" { + + # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem + # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem + # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem + # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem + # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem + # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem + + } + + SECTION "HTTP Verification" { + + # testvar bbf069HTTPVerification no + + } + + } + + SECTION "Device Specific" { + + SECTION "General" { + + # testvar bbf069RootDataModel InternetGatewayDevice + # testvar bbf069UnsupportedRPC ChangeDUState + # testvar bbf069UploadType "1 Vendor Configuration File" + # testvar bbf069ExpectedUpgradeTime 100 + + } + + SECTION "Data Model" { + + # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069ActiveParamType unsignedInt + # testvar bbf069ActiveParamValue 60 + + # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069CompletePath1Type unsignedInt + # testvar bbf069CompletePath1Value 73 + + # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable + # testvar bbf069CompletePath2Type boolean + # testvar bbf069CompletePath2Value true + + # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. + # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. + # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv + # testvar bbf069InvalidPathType unsignedInt + + # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer + # testvar bbf069UnwritableType string + # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 + + } + + } + +} diff --git a/.testbed/cdrouter/configurations/ppp-ipv6 b/.testbed/cdrouter/configurations/ppp-ipv6 new file mode 100644 index 0000000000..5ba371b25f --- /dev/null +++ b/.testbed/cdrouter/configurations/ppp-ipv6 @@ -0,0 +1,2677 @@ +SECTION "About" { + + # Cable/DSL Router Test Suite + # + # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 + # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) + # + # Local.conf + # + # This is the main configuration file for CDRouter. This file defines the + # configuration of the router under test and controls various aspects of + # CDRouter's behavior. This file consists of a number of unique test variables + # called 'testvars' which are grouped by interface, protocol, or functionality. + # The basic syntax for all testvars is: + # + # testvar NAME VALUE + +} + +SECTION "Base Configuration" { + + SECTION "WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + testvar wanMode PPPoE + # testvar wanIspIp 202.254.1.1 + # testvar wanIspAssignIp 202.254.1.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.1.2 + # testvar wanIspNextIp 202.254.1.3 + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar wanIspAssignMask 255.255.255.0 + # testvar IPv4HopCount 1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + # testvar dhcpServerRapidCommit yes + # testvar dhcpServerClientIDBehavior rfc6842 + # testvar dhcpServerResponseDelay 4500 + # testvar dhcpConnectOnDemand no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar wanDhcpClientOptionCode1 60 + # testvar wanDhcpClientOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "DHCP Authentication" { + + # testvar supportsDhcpAuth no + + } + + SECTION "PPPoE Server" { + + # testvar pppoeConnectOnDemand no + # testvar pppoeIdleTimeout 60 + testvar pppoeUser softathome + testvar pppoePassword softathome + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + # testvar pppoeAcCookie auto + # testvar pppoeMaxPayload none + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpConnectOnDemand yes + # testvar pptpServerIp 202.254.201.1 + # testvar pptpClientIp 202.254.201.2 + # testvar pptpUseDHCP no + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpConnectOnDemand yes + # testvar l2tpServerIp 202.254.201.1 + # testvar l2tpClientIp 202.254.201.2 + # testvar l2tpUseDHCP no + + } + + SECTION "DS-Lite" { + + # testvar ipv6DsliteAftr 3001:aaaa::1 + # testvar dhcpv6WanAftrName aftr.qacafe.com + # testvar dsliteFirewallMode address-restricted + + } + + SECTION "MAP / LW4o6" { + + # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: + # testvar mapBmrRuleIpv6PrefixLen 48 + # testvar mapBmrRuleIpv4Prefix 5.0.0.0 + # testvar mapBmrRuleIpv4PrefixLen 24 + # testvar mapBmrRuleEABitLen 16 + + # testvar mapSharingRatio 256 + # testvar mapStartPort 4096 + # testvar mapPsid 255 + + # testvar mapEnableDhcpv6Options yes + + SECTION "MAP-E / LW4o6" { + + # testvar mapTunnelFlowLabel 0 + # testvar mapTunnelHopLimit 64 + # testvar mapTunnelTrafficClass 0 + + } + + SECTION "MAP-T" { + + # testvar mapDmrIpv6Prefix 5001:db8:: + # testvar mapDmrIpv6PrefixLen 48 + + # testvar mapTosTranslate yes + + } + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + # testvar pppConnectionDelay 10 + # testvar pppRestartTimeout 300000 + # testvar pppFailUsesICMP no + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "Wireless Access Point (AP)" { + + # testvar wanApBand 2.4GHz + # testvar wanApSSID qa-net + # testvar wanApChannel auto + + SECTION "WPA Authenticator" { + + # testvar wanApWpaMode RSN + # testvar wanApWpaKeyMgmt PSK + # testvar wanApWpaCipher CCMP-128 + # testvar wanApWpaGroupCipher auto + # testvar wanApWpaPMF auto + # testvar wanApWpaPsk qacafe123 + # testvar wanApWpaSaePassword "sae secret" + + } + } + + SECTION "WAN 802.1X and RADIUS" { + + SECTION "WAN RADIUS" { + + # testvar wanRadiusEnable no + # testvar wanRadiusInterface wan + # testvar wanRadiusIp 3.3.3.44 + # testvar wanRadiusSecret qacafe123 + # testvar wanRadiusServerAttrType1 200 + # testvar wanRadiusServerAttrData1 04040404 + + } + + SECTION "WAN EAP Settings" { + + # testvar wanEapType eap-md5 + + SECTION "WAN Supplicant Credentials" { + + # testvar wanEapIdentity1 user1 + # testvar wanEapPassword1 qacafe123 + + } + + SECTION "WAN Authentication Options" { + + # testvar wanEapRootCert /usr/cdrouter/tests/root.pem + # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem + # testvar wanEapServerCertPassword qacafe123 + # testvar wanEapFragmentSize 1024 + + } + + } + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.101.1 + # testvar wanBackupDnsServer 202.254.101.2 + # testvar wanBackupDnsServer2 0.0.0.0 + # testvar wanBackupDnsServer3 0.0.0.0 + # testvar DNStoDHCP no + # testvar supportsDnsProxy yes + # testvar supportsDnsCaching yes + # testvar dnsCacheSize 150 + # testvar dnsLookupTimeout 5 + # testvar dnsFailoverAuth "2 4 5" + # testvar dnsFailoverNonAuth "2 4 5" + # testvar dnsFailoverDelay 10 + # testvar dnsFailoverAttempts 20 + # testvar dnsRelayFailover 120 + # testvar dnsForwardServerStatus no + # testvar dnsUsageProfile opportunistic-privacy + # testvar dnsCaptive no + + SECTION "User Configurable DNS Entries" { + + # testvar dnsHostname1 test.qacafe.com + # testvar dnsIp1 5.5.5.5 + + } + + } + + SECTION "HTTP" { + + # testvar supportsHttpProxy yes + # testvar httpProxyIdleTimeout 30 + # testvar httpMaxHeaderCount 200 + + } + + SECTION "NTP" { + + # testvar ntpServer1 3.3.3.6 + # testvar ntpServerName1 time.nist.gov + # testvar ntpServer2 3.3.3.7 + # testvar ntpServerName2 time.foo.com + # testvar ntpStartDate "6/2/2007 11:00 am UTC" + # testvar ntpOffset 0 + # testvar enableRFC868TimeProtocol no + + } + + SECTION "Dynamic DNS" { + + # testvar supportsDynDns no + # testvar dynDnsServerIp 66.37.215.49 + # testvar dynDnsTransport http + # testvar dynDnsHostname test.domain.com + # testvar dynDnsUsername qacafe + # testvar dynDnsPassword qacafe123 + # testvar dynDnsSystem dyndns + # testvar dynDnsMx mail.domain.com + # testvar dynDnsBackMx no + # testvar dynDnsWildcard off + # testvar dynDnsAgent RAS/1.1 + # testvar dynDnsWait 30 + # testvar testDynDnsErrorCode no + # testvar dynDnsServerReturn !yours + + } + + SECTION "WINS Servers" { + + # testvar winsServer1 3.3.3.4 + # testvar winsServer2 3.3.3.5 + + } + + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanDomainName qacafe.com + # testvar lanMtu default + testvar lanHostname prplOS + # testvar lanGuestMode no + + SECTION "ARP Settings" { + + # testvar arpMode strict + # testvar arpSupportGratuitous yes + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + # testvar supportsDnsHostnameCreate no + + } + + SECTION "DHCP Client" { + + # testvar dhcpClientTimeout 5 + # testvar dhcpInform no + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpRapidCommit no + # testvar ipv4MaxLanClients auto + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpCreateDelay 0 + # testvar dhcpReleaseDelay 300 + # testvar dhcpServerMac auto + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + # testvar dhcpClientTrackSeconds no + # testvar dhcpClientRequestNtp no + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + SECTION "DHCP Client Extra Parameters" { + + # testvar dhcpExtraClientParams "69 70" + + } + + SECTION "DHCP Client Extra Options" { + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Hotspot Router Settings" { + + # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% + # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% + + SECTION "Hotspot Clients" { + + # testvar clientLoginName1 client1 + # testvar clientLoginPassword1 admin1 + + } + + SECTION "Advanced Hotspot Settings" { + + # testvar browserLoginProc example_login + # testvar browserLogoutProc example_logout + # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl + + } + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconRsnCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X and RADIUS" { + + SECTION "LAN RADIUS" { + + # testvar enableRADIUSserver yes + # testvar radiusHost remoteHost + # testvar radiusSecret qacafe123 + # testvar radiusServerAttrType1 200 + # testvar radiusServerAttrData1 04040404 + + } + + SECTION "LAN EAP Settings" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + SECTION "LAN Authentication Options" { + + # testvar eapRootCert /usr/cdrouter/tests/root.pem + # testvar eapServerCertPath /usr/cdrouter/tests/server.pem + # testvar eapServerCertPassword qacafe123 + # testvar eapFragmentSize 1024 + # testvar eapTxWhen 60 + # testvar eapQuietPeriod 60 + # testvar eapReAuthMax 2 + # testvar eapSendLogoffFailure yes + # testvar eapReAuthPeriod 0 + + } + + } + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "Firewall and NAT" { + + SECTION "NAT Options" { + + testvar natSimultaneousTcp yes + # testvar natSrcPort0 yes + # testvar natSupportsP2P yes + # testvar natPortParity yes + # testvar natMode port-restricted + # testvar natVerifyIpId yes + # testvar defaultTcpEchoPort 50000 + # testvar defaultUdpEchoPort 50000 + # testvar natRefreshBehavior both + + SECTION "NAT Timers" { + + # testvar natFinTimeout disabled + # testvar natRstTimeout disabled + # testvar natTcpTimeout disabled + # testvar natSynTimeout disabled + # testvar natUdpTimeout disabled + # testvar natDnsTimeout disabled + # testvar natIcmpTimeout disabled + # testvar natRtspTimeout disabled + # testvar natLagTime 0 + + } + + } + + SECTION "Protocol Pass Through" { + + SECTION "IPSEC Pass Through" { + + # testvar supportsIPSECpass yes + # testvar ipsecMaxTunnels 20 + # testvar ipsecScaleSameServer no + # testvar alwaysUseIke no + # testvar ipsecPassRetransmit no + # testvar unknownPassthrough yes + + } + + SECTION "PPTP Pass Through" { + + # testvar supportsPPTPpass yes + # testvar pptpMaxTunnels 20 + + } + + SECTION "L2TP Pass Through" { + + # testvar supportsL2TPpass yes + # testvar l2tpMaxTunnels 20 + + } + + SECTION "PPPoE Pass Through" { + + # testvar supportsPPPoEpass no + + } + + } + + SECTION "Port Triggers" { + + # testvar portTriggers no + # testvar portTriggerTimeout 0 + # testvar portTriggerDelay 0 + # testvar portTriggerOpenDelay 0 + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "Application Layer Gateways (ALGs)" { + + SECTION "MSN Messenger" { + + # testvar supportsMsnAlg no + # testvar msnNotificationServerPort 1863 + # testvar msnSwitchBoardServerPort 1863 + + } + + SECTION "RTSP" { + + # testvar supportsRtspAlg no + # testvar rtspTeardownDelay 5 + # testvar rtspGetParameterInterval 5 + + } + + SECTION "SIP" { + + # testvar supportsSipAlg yes + # testvar sipInterface wan + # testvar sipServerIp 3.3.3.8 + # testvar ipv6SipServerIp 3001:051a:cafe::4 + # testvar sipCallTeardownDelay 5 + # testvar sipMaxOutboundCalls 10 + # testvar sipMaxInboundCalls 10 + # testvar sipCallPacing 0 + # testvar sipScaleRunTime 30 + # testvar sipScaleServerPort 5060 + # testvar sipScaleClientPort 5060 + # testvar sipMaxUserNames -1 + # testvar rtpSendInterval 5000 + + } + + SECTION "FTP" { + + # testvar ftpPortTimeout 120 + + } + + } + + SECTION "Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + SECTION "Port Scanning, Firewall and DoS Options" { + + # testvar portScanStart 0 + # testvar portScanStop 65535 + # testvar portScanDelay 1 + testvar firewallTcpOpenPorts "50805" + # testvar firewallTcpClosedPorts 2323 + # testvar firewallUdpOpenPorts 1234 + testvar firewallUdpClosedPorts 68 + # testvar firewallOutBlockedTcpPorts 1234 + # testvar firewallOutBlockedUdpPorts 1234 + # testvar firewallOutBlockedIpProtos 0 + # testvar wanPingRespond no + + SECTION "Denial of Service Options" { + + # testvar dosRecoveryTime 5 + # testvar dosAttackAttempts 100 + # testvar dutMgmtPort 80 + # testvar dutSecureMgmtPort disabled + # testvar dosSynAttackPort 80 + # testvar dosSynAttackAttempts 100 + + } + + SECTION "Deprecated SSL Protocols and Ciphers" { + + # testvar sslDeprecatedProtocols "sslv2 sslv3" + # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" + + } + + } + + SECTION "DMZ" { + + # testvar lanDmzHost 192.168.1.253 + # testvar lanDmzTcpPortExceptions 113 + # testvar lanDmzUdpPortExceptions 1234 + # testvar lanDmzIpProtoExceptions 2,47 + # testvar lanDmzSupportsIcmp no + + } + + SECTION "URL Filtering" { + + # testvar urlFilterSupported no + # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" + # testvar non-filtered-urls http://qacafe.com + # testvar urlFilterBlockedText "This website is blocked" + + } + + SECTION "XBox Live Options" { + + # testvar xboxNatMinType open + # testvar xboxPort 3074 + # testvar xboxMtu 1364 + + } + + } + + SECTION "Advanced Protocols" { + + SECTION "RIP v1/v2" { + + # testvar ripSupported no + # testvar ripVersion 1 + # testvar ripV2mode multicast + # testvar ripAuthMode none + # testvar ripPassword qacafe123 + # testvar ripMaxRoutes 96 + # testvar ripRouteTimeout 180 + # testvar ripGarbageTimeout 120 + # testvar ripRouteDelay 5000 + # testvar ripAcceptWanUpdate no + + } + + SECTION "UPnP" { + + # testvar upnpSupported yes + # testvar upnpVersion 1.1 + # testvar upnpDevice InternetGatewayDevice:2 + # testvar upnpWANPPPConnection no + # testvar upnpLANDevice no + # testvar upnpMaxTcpMappings 10 + # testvar upnpMaxSubClients 10 + # testvar upnpMinSubTimeout 40 + # testvar upnpMaxSubTimeout 3600 + # testvar upnpWANFailureTimeout 120 + # testvar upnpPortStart 40000 + # testvar upnpPortStop 50000 + + } + + SECTION "LLDP" { + + # testvar supportsLLDP no + # testvar lldpLanMac none + # testvar lldpLanChassisMac auto + # testvar lldpMsgFastTx 1 + # testvar lldpMsgTxInterval 30 + # testvar lldpTxFastInit 4 + + } + + SECTION "IGMP (Multicast)" { + + # testvar supportsMulticast yes + # testvar multicastType proxy + # testvar supportsMulticastOut no + # testvar igmpVersion 2 + # testvar igmpFastLeave no + # testvar igmpRouterOption yes + # testvar igmpMaxGroups 64 + # testvar multicastCacheTimeout 10 + # testvar multicastPoolStart 224.0.1.0 + # testvar multicastPoolStop 239.255.255.255 + # testvar SSMulticastPoolStart 232.0.1.1 + # testvar SSMulticastPoolStop 232.0.1.255 + # testvar multicastJoinDelay 2 + # testvar multicastScaleDelay 1 + # testvar multicastInterface wan + # testvar multicastBypassPPPoE no + + SECTION "IGMP Timers" { + + # testvar igmpQueryInterval 125 + # testvar igmpRobustnessVariable 2 + # testvar igmpQueryResponseInterval 10 + + } + + SECTION "IPTV Options" { + + # testvar iptvChannelRange 200 + # testvar iptvChannelChangeDelay 200 + # testvar iptvMaxFailures 10 + + } + + } + + SECTION "GRE Tunnels" { + + # testvar greDFflag on + + IGNORE testvar_group greTunnel1 { + + SECTION "Generic IPv4 GRE Tunnel Endpoints" { + + # testvar greType IPv4 + # testvar greEndpoint 5.5.5.5 + # testvar greLocalNet 192.168.1.0 + # testvar greLocalMask 255.255.255.0 + + } + + SECTION "L2GRE Options" { + + # testvar greWanGroup wan2 + + } + + SECTION "L3GRE Remote IPv4 Network" { + + # testvar greHost 3.0.0.1 + # testvar greRemoteNet 3.0.0.0 + # testvar greRemoteMask 255.0.0.0 + + } + + } + + } + + } + + SECTION "Additional Features" { + + # testvar supportsIPv4 yes + # testvar internalSmtpServer 5.5.5.5 + # testvar remoteHostIp 3.3.3.3 + # testvar startOtherLanFirst no + # testvar cdrouterOui B0750C + # testvar forwardingMaxFailures 20 + # testvar forwardingPort 5001 + # testvar jumboMtu disabled + # testvar tcpUdpPortStart 10000 + + SECTION "General Purpose HTTP Server" { + + # testvar httpServerIp 3.3.3.16 + # testvar httpServerPort 80 + # testvar httpServerRoot /tmp + + } + + SECTION "Free Network Range" { + + # testvar FreeNetworkStart 200.0.0.0 + # testvar FreeNetworkMask 255.255.255.0 + # testvar FreeNetworkStop 201.0.0.0 + + } + + SECTION "TCP MSS Clamping" { + + # testvar mssClampingValue default + # testvar mssClampingInValue default + + } + + SECTION "TCP/UDP Scaling Options" { + + # testvar scaleTcpConnsPerHost 5 + # testvar natMaxTcpConns 200 + # testvar natMaxUdpConns 100 + + } + + SECTION "Global Wireless Options" { + + # testvar wirelessRetry 3 + # testvar lanWirelessMaxClients auto + # testvar wifiCapture off + # testvar wifiCaptureFilter {} + + } + + } + + SECTION "Test Execution Options and Auto-Reboot" { + + # testvar startDelay 3 + # testvar lanStartDelay 3 + # testvar startTimeout 90 + # testvar wanCloseOnExit yes + # testvar RestartDut none + # testvar RestartDutDelay disabled + # testvar ShutdownDut "echo -n" + # testvar cpeRebootMode skip + # testvar healthCheckEnable no + + } + +} + +SECTION "CDRouter DOCSIS Add-On" { + + # testvar supportsDocsis no + + SECTION "Basic Configuration" { + + # testvar docsisIpProvisioningMode ipv4-only + # testvar docsisBootDelay 30 + + # testvar docsisClientMac auto + + } + + SECTION "IPv4 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIp 10.10.10.1 + # testvar docsisMask 255.255.255.0 + + } + + SECTION "DHCPv4 Server" { + + # testvar docsisDhcpServer 10.10.10.3 + # testvar docsisAssignIp 10.10.10.2 + # testvar docsisDomain docsis.qacafe.com + # testvar docsisDhcpLeaseTime 300 + # testvar docsisDhcpRapidCommit no + + # testvar docsisDhcpServerOptionCode1 69 + # testvar docsisDhcpServerOptionData1 04040404 + + # testvar docsisDhcpClientOptionCode1 60 + # testvar docsisDhcpClientOptionData1 04040404 + + SECTION "DHCPv4 Relay" { + + # testvar docsisGateway 6.6.6.7 + # testvar docsisAssignGateway 6.6.6.6 + # testvar docsisAssignMask 255.255.255.0 + # testvar docsisDhcpRelayServer 6.6.6.7 + + } + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogServer 10.10.10.5 + # testvar docsisTimeServer 10.10.10.6 + # testvar docsisTftpServer 10.10.10.4 + + } + + } + + SECTION "IPv6 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIpv6 8001::1 + # testvar docsisIpv6PrefixLen 64 + + } + + SECTION "DHCPv6 Server" { + + # testvar docsisDhcpIpv6Server 8001::3 + # testvar docsisAssignIpv6 8001::2 + # testvar docsisDHCPv6PreferredLifetime 300 + # testvar docsisDHCPv6ValidLifetime 300 + # testvar docsisDhcpv6RapidCommit no + + # testvar docsisDhcpv6ServerOptionCode1 69 + # testvar docsisDhcpv6ServerOptionData1 04040404 + + # testvar docsisDhcpv6ClientOptionCode1 60 + # testvar docsisDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Relay" { + + # testvar docsisIpv6Gateway 9001::1 + # testvar docsisAssignIpv6PrefixLen 64 + # testvar docsisDhcpv6RelayServer 9001::1 + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogIpv6Server 8001::5 + # testvar docsisTimeIpv6Server 8001::6 + # testvar docsisTftpIpv6Server 8001::4 + + } + + } + + SECTION "CM Config File" { + + SECTION "Global TFTP Settings" { + + # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp + # testvar docsisTftpBootFile auto-docsis.bin + + } + + SECTION "Embedded Config File" { + + # testvar docsisConfig { + # Main + # { + # NetworkAccess 1; + # BaselinePrivacy + # { + # AuthTimeout 10; + # ReAuthTimeout 10; + # AuthGraceTime 600; + # OperTimeout 1; + # ReKeyTimeout 1; + # TEKGraceTime 600; + # AuthRejectTimeout 60; + # SAMapWaitTimeout 1; + # SAMapMaxRetries 4; + # } + # MaxCPE 3; + # UsServiceFlow + # { + # UsServiceFlowRef 2; + # QosParamSetType 7; + # } + # DsServiceFlow + # { + # DsServiceFlowRef 1; + # QosParamSetType 7; + # } + # SNMPv1v2cCoexistenceConfig + # { + # SNMPv1v2cCommunityName "public"; + # SNMPv1v2cTransportAddressAccess + # { + # SNMPv1v2cTransportAddress 0.0.0.0/0; + # SNMPv1v2cTransportAddressMask 0.0.0.0/0; + # } + # SNMPv1v2cAccessViewType 2; + # SNMPv1v2cAccessViewName "docsisManagerView"; + # } + # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ + # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ + # /*EndOfDataMkr*/ + # } + # } + + } + + SECTION "Vendor Defined Config File" { + + # testvar docsisConfigFile none + + } + + } + + SECTION "CM Firewall Configuration" { + + SECTION "IPv4" { + + # testvar docsisTcpOpenPorts "22 443" + # testvar docsisTcpClosedPorts all + # testvar docsisUdpOpenPorts 1234 + # testvar docsisUdpClosedPorts all + + } + + SECTION "IPv6" { + + # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" + # testvar docsisIpv6TcpClosedPorts "2323 80" + # testvar docsisIpv6UdpOpenPorts 1234 + # testvar docsisIpv6UdpClosedPorts 113 + + } + + } + +} + +SECTION "CDRouter HomeKit Add-On" { + + # testvar supportsHomeKit no + + # testvar homeKitRouterName "HomeKit Router" + # testvar homeKitHATHostname hat.local + # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ + # testvar homeKitRouterSetupCode + + # testvar homeKitManualEnabled yes + +} + +SECTION "CDRouter IKE Add-On" { + + SECTION "Global IKE Options" { + + # testvar ikeMaxPhase2SA 20 + # testvar ikeDeadPeerDetection no + # testvar ikeNewQuickModeDelay 1000 + # testvar ikeKeepAlive 20 + # testvar ikeMinimumLifetime 20 + # testvar ipsecMinimumLifetime 20 + # testvar ikePhase2DeleteDelay 100 + # testvar ikeMaxTransforms 21 + # testvar ikeInitialContact yes + # testvar ikeBringUpTunnels yes + # testvar ikeAlwaysInitiate no + # testvar useSameIpsecTunnel no + # testvar ikeNatTraversal no + # testvar ike_FQDN fqdn-test.cdrouter.com + # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com + + } + + SECTION "IPsec Tunnel Configurations" { + + SECTION "IPsec Tunnel Configuration 1" { + + # testvar ipsecTunnelKeyType1 manual + # testvar ipsecTunnelEndpoint1 5.0.0.1 + # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 + # testvar ipsecTunnelRemoteMask1 255.255.255.0 + # testvar ipsecTunnelHost1 5.0.0.2 + + SECTION "Manual IPsec Tunnel Configuration" { + + # testvar ipsecTunnelOutboundSpi1 1000 + # testvar ipsecTunnelOutEncrypt1 des + # testvar ipsecTunnelOutEncryptKey1 0102030405060708 + # testvar ipsecTunnelOutAuth1 md5-hmac + # testvar ipsecTunnelOutAuthKey1 6262626262626262 + # testvar ipsecTunnelInboundSpi1 1001 + # testvar ipsecTunnelInEncrypt1 des + # testvar ipsecTunnelInEncryptKey1 0102030405060708 + # testvar ipsecTunnelInAuth1 md5-hmac + # testvar ipsecTunnelInAuthKey1 6262626262626262 + + } + + SECTION "IKE IPsec Tunnel Configuration" { + + # testvar ipsecTunnelIkeEncrypt1 des + # testvar ipsecTunnelIkeAuth1 md5-hmac + # testvar ipsecTunnelIkeGroup1 1 + # testvar ipsecTunnelIkeLifetime1 300 + # testvar ipsecTunnelEncrypt1 3des + # testvar ipsecTunnelAuth1 sha1-hmac + # testvar ipsecTunnelPfsGroup1 1 + # testvar ipsecTunnelLifetime1 120 + # testvar ipsecTunnelPsk1 qacafe123 + # testvar ipsecTunnelIkeMode1 main + # testvar ipsecTunnelUsesNat1 no + + } + + } + + } + +} + +SECTION "CDRouter IPv6 Add-On" { + + testvar supportsIPv6 yes + + SECTION "IPv6 WAN" { + + testvar ipv6WanMode PPPoE + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001::1 + # testvar ipv6WanIspAssignIp 3001::2 + # testvar ipv6WanIspNextIp 3001::3 + # testvar ipv6WanIspPrefixLen 64 + # testvar ipv6WanDutDuid 00000000 + # testvar ipv6RelayServer 192.88.99.1 + # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 + # testvar ipv6rdPrefix 2001:1234:: + # testvar ipv6rdPrefixLen 32 + # testvar ipv6rdIPv4MaskLen 0 + # testvar ipv6rdDHCPv4Option yes + # testvar ipv6TunnelMtuType static + # testvar ipv6WanMtu 1500 + # testvar ipv6WanMtuOption no + # testvar ipv6RASendInterval 10 + # testvar ipv6ExpectRAonWan no + + SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { + + # testvar ipv6WanIspGateway 3001::9 + # testvar ipv6WanAssignPrefixLen 64 + # testvar IPv6HopCount 1 + # testvar dhcpv6RelayServer 3001::9 + + } + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + # testvar ipv6WanRDNSS no + # testvar ipv6WanDNSSL no + + } + + SECTION "DHCPv6 Server" { + + # testvar dhcpv6IAValidLifetime 300 + # testvar dhcpv6IAPreferredLifetime 300 + # testvar dhcpv6DuidType 1 + # testvar dhcpv6RestartLatency 10 + # testvar dhcpv6ServerRapidCommit yes + + # testvar dhcpv6ServerOptionCode1 69 + # testvar dhcpv6ServerOptionData1 04040404 + + # testvar wanDhcpv6ClientOptionCode1 60 + # testvar wanDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Authentication" { + + # testvar supportsDhcpv6Auth no + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: + # testvar dhcpv6WanAssignPrefixLen 48 + # testvar dhcpv6PDLatency 30 + + } + + SECTION "IPv6 NTP" { + + # testvar ipv6NtpServer1 4321::23 + # testvar ipv6NtpServerName1 time.nist.gov + + # testvar ipv6NtpServer2 4321::24 + # testvar ipv6NtpServerName2 time.foo.com + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + testvar ipv6LanIp 3001:dddd::1 + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanPrefixLen 64 + # testvar ipv6MaxLanClients 32 + # testvar ipv6RAInterval 300 + # testvar ipv6LanSubnetId 1 + + SECTION "DHCPv6 Client" { + + # testvar dhcpv6ClientTimeout 5 + # testvar ipv6DhcpClientStart ::2 + # testvar ipv6DhcpClientEnd ::1f + # testvar ipv6DhcpClientExclude "::3 ::7" + # testvar ipv6DhcpClientValidLifetime 86400 + # testvar dhcpv6RapidCommit yes + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + SECTION "IPv6 LAN DNS" { + + # testvar ipv6DNStoLAN yes + # testvar ipv6RdnssSupport yes + # testvar ipv6DnsslSupport yes + # testvar ipv6LanStaticDns no + + } + + SECTION "Unique Local Address (ULA) Options" { + + # testvar supportsULA no + # testvar ipv6LanULAPrefix fd00:: + # testvar ipv6LanULAIp ::%eui64% + # testvar ipv6LanULAMode autoconf + + } + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + } + + SECTION "IPv6 Firewall" { + + # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" + # testvar ipv6FirewallTcpClosedPorts "2323 80" + # testvar ipv6FirewallUdpOpenPorts 1234 + # testvar ipv6FirewallUdpClosedPorts 113 + # testvar ipv6FirewallOutBlockedTcpPorts 1234 + # testvar ipv6FirewallOutBlockedUdpPorts 1234 + # testvar ipv6FirewallOutBlockedIpProtos 0 + # testvar ipv6WanPingRespond no + + SECTION "IPv6 TCP MSS Clamping" { + + # testvar ipv6MssClampingValue default + # testvar ipv6MssClampingInValue default + # testvar ipv6MssClampingTestPort 8096 + + } + + } + + SECTION "IPv6 Advanced Protocols" { + + SECTION "RIPng" { + + # testvar supportsRIPng no + + } + + SECTION "MLD (IPv6 Multicast)" { + + # testvar supportsIPv6Multicast yes + # testvar supportsIPv6MulticastOut no + # testvar mldVersion 2 + # testvar mldMaxGroups 64 + # testvar mldFastLeave no + # testvar ipv6MulticastCacheTimeout 10 + # testvar ipv6MulticastJoinDelay 2 + # testvar ipv6MulticastScaleDelay 1 + + SECTION "MLD Timers" { + + # testvar mldQueryInterval 125 + # testvar mldRobustnessVariable 2 + # testvar mldQueryResponseInterval 10 + + } + + SECTION "IPv6 IPTV Options" { + + # testvar ipv6IptvChannelRange 200 + # testvar ipv6IptvChannelChangeDelay 200 + # testvar ipv6IptvMaxFailures 10 + + } + + } + + } + + SECTION "IPv6 Additional Features" { + + SECTION "IPv6 Free Network Range" { + + # testvar ipv6RemoteHost 3001:051a:cafe::1 + # testvar ipv6FreeNetworkStart 3001:cafe:1:: + # testvar ipv6FreeNetworkPrefixLen 64 + # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: + + } + + SECTION "IPv6 Multicast Pool Ranges" { + + # testvar ipv6MulticastPoolStart ff0e::1 + # testvar ipv6MulticastPoolStop ff0e:ffff:: + # testvar ipv6SSMulticastPoolStart ff3e::8000:1 + # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff + + } + + } + +} + +SECTION "CDRouter Multiport Add-On" { + + SECTION "Additional WAN Interface Setup" { + + # testvar wanFailoverTimeout 300 + + IGNORE testvar_group wan2 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.2.1 + # testvar wanIspAssignIp 202.254.2.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.2.2 + # testvar wanIspNextIp 202.254.2.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.202.1 + # testvar pptpClientIp 202.254.202.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.202.1 + # testvar l2tpClientIp 202.254.202.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.102.1 + # testvar wanBackupDnsServer 202.254.102.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:2::1 + # testvar ipv6WanIspAssignIp 3001:0:0:2::2 + # testvar ipv6WanIspNextIp 3001:0:0:2::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + IGNORE testvar_group wan3 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.3.1 + # testvar wanIspAssignIp 202.254.3.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.3.2 + # testvar wanIspNextIp 202.254.3.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.203.1 + # testvar pptpClientIp 202.254.203.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.203.1 + # testvar l2tpClientIp 202.254.203.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.103.1 + # testvar wanBackupDnsServer 202.254.103.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:3::1 + # testvar ipv6WanIspAssignIp 3001:0:0:3::2 + # testvar ipv6WanIspNextIp 3001:0:0:3::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + } + + SECTION "Additional LAN Interface Setup" { + + # testvar useSameLanInterface no + + IGNORE testvar_group lan2 { + + SECTION "IPv4 LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanGuestMode no + + SECTION "LAN Host IP" { + + # testvar hostIp 192.168.1.0 + # testvar hostMask 255.255.255.0 + # testvar hostGateway 192.168.1.1 + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "DHCP Client Configuration" { + + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + # testvar dhcpExtraClientParams "69 70" + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Configuration Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + } + + SECTION "IPv4 Firewall and NAT" { + + SECTION "Static NAT" { + + # testvar staticNatIp 202.254.1.2 + # testvar staticNatFirewall yes + # testvar natMode port-restricted + + } + + SECTION "Special Application Port Triggers" { + + # testvar portTriggers no + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "TCP and UDP Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanStaticDns no + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + + SECTION "LAN IPv6 DHCP Client" { + + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + + } + + } + +} + +SECTION "CDRouter Performance Add-On" { + + # testvar supportsPerformance no + + SECTION "Basic Configuration" { + + # testvar perfWanIp 202.254.1.4 + # testvar perfWanIpv6 3001::4 + # testvar perfPort 19750 + # testvar perfPort2 19751 + + } + + SECTION "Performance Settings" { + + # testvar perfDuration 10 + # testvar perfDownloadBandwidth 0.0 + # testvar perfInterval auto + # testvar perfIncrement 5 + # testvar perfStreams 1 + # testvar perfStreamIncr 0 + # testvar perfUdpLen auto + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + # testvar perfOmit 0 + # testvar perfDSCP 0 + # testvar perfFairness no + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresholds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + SECTION "Advanced Options" { + + # testvar perfPingEnable no + # testvar perfEnableCapture no + # testvar perfLatencyAttempts 25 + # testvar perfApplicationAttempts 4 + # testvar perfApplicationDelay 100 + + } + + SECTION "Wireless" { + + IGNORE testvar_group wireless-performance { + + SECTION "Performance Settings" { + + # testvar perfDownloadBandwidth 0.0 + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresolds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + } + + } + +} + +SECTION "CDRouter Security Add-On" { + + SECTION "Internet Connection Sharing (ICS)" { + + # testvar enableICS no + # testvar icsInterface eth0 + # testvar icsShareIPv4 yes + # testvar icsShareIPv6 yes + + } + + SECTION "Traffic Analysis" { + + # testvar enableSuricata no + + } + + SECTION "Nmap Scans" { + + # testvar enableNmap no + # testvar nmapPorts 0-65535 + # testvar nmapScanTimeout 600 + # testvar nmapTimingTemplate 5 + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleBase auto + # testvar internetScheduleTimeZone auto + # testvar internetScheduleBlockedText "This website is blocked" + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + +} + +SECTION "CDRouter SNMP Add-On" { + + # testvar supportsSnmp no + + # testvar snmpPort 161 + # testvar snmpDefaultUser auto + # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" + # testvar snmpUpdateDelay 15 + + SECTION "SNMP Options and Users" { + + # testvar snmpManagerIp 3.3.3.33 + # testvar snmpManagerIpv6 3001:051a:cafe::33 + + IGNORE testvar_group snmpuser1 { + + # testvar snmpVersion 2c + + # testvar snmpAccess read-only + # testvar snmpTransport udp + # testvar snmpRetries 5 + # testvar snmpTimeout 5 + + SECTION "SNMP v1/2c Configuration" { + + # testvar snmpCommunity public + + } + + SECTION "SNMP v3 Configuration" { + + # testvar snmpSecurityLevel noAuthNoPriv + + # testvar snmpAuthProtocol MD5 + # testvar snmpAuthUsername qacafe + # testvar snmpAuthPassword qacafe123 + + # testvar snmpPrivacyProtocol DES + # testvar snmpPrivacyPassword qacafe123 + + # testvar snmpContextName bridge1 + # testvar snmpSecurityEngineId 800000020109840301 + # testvar snmpContextEngineId 800000020109840301 + + } + + } + + } + + SECTION "SNMP Scenarios" { + + # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp + # testvar snmpScenarioSingleMode no + # testvar snmpScenarioInterface lan + # testvar snmpScenarioIpVersion IPv4 + + } + +} + +SECTION "CDRouter Storage Add-On" { + + # testvar supportsStorage no + + # testvar storageFileSize 10 + # testvar storageUserFilePath none + # testvar useMulticastDNS no + + SECTION "SMB Options and Users" { + + # testvar supportsStorageSmb yes + # testvar storageSmbMaxSessions 20 + # testvar storageSmbTimeout 120 + # testvar storageSmbPacing 0 + + IGNORE testvar_group smbuser1 { + + # testvar server MyNAS + # testvar share data + # testvar folder /home/qacafe + # testvar guest no + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + + SECTION "FTP Options and Users" { + + # testvar supportsStorageFtp yes + # testvar supportsStorageFtps yes + # testvar storageFtpMaxSessions 20 + # testvar storageFtpTimeout 120 + # testvar storageFtpPacing 0 + + IGNORE testvar_group ftpuser1 { + + # testvar server MyNAS + # testvar path /home/qacafe + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + +} + +SECTION "CDRouter TR-069 Add-On" { + + testvar supportsCWMP yes + + SECTION "Basic ACS Configuration" { + + # testvar acsIp 6.0.0.1 + # testvar acsPort 80 + testvar acsDomain acs-download.qacafe.com + # testvar acsTransport http + # testvar acsAuth digest + # testvar acsDigestQopAuth yes + # testvar acsInterface wan + testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ + # testvar acsWaitForInform 120 + # testvar acsSkipInitialInform no + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar cwmpProtocolVersion 1.0 + # testvar acsDeviceDiscovery no + # testvar acsConfigurePeriodicInform yes + # testvar tr69InitiateConnection yes + testvar acsDefaultUser cdrouter + testvar acsDefaultPassword cdrouter + testvar acsCpeDefaultUser acs + testvar acsCpeDefaultPassword acs + # testvar acsFileServerUser file_server_user + # testvar acsFileServerPassword file_server_password + + } + + SECTION "XMPP Connection Request Configuration" { + + # testvar acsSupportsXmppConnReq no + + # testvar acsXmppServerConnectAlgorithm DNS-SRV + # testvar acsXmppConnReqUsername qacafe + # testvar acsXmppConnReqResource cdrouter + # testvar acsXmppConnReqPassword qacafe123 + # testvar acsXmppConnReqUseTls no + + } + + SECTION "Advanced ACS Configuration" { + + # testvar acsCpeKeepAlive yes + # testvar acsChunkedEncoding no + # testvar acsChunkSize 64 + # testvar acsAuthOncePerSession no + # testvar acsCookieMode rfc6265 + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + # testvar acsNumberCpeAttempts 2 + # testvar acsDelayCpeAttempts 10 + # testvar acsWaitForConnectionRequest yes + # testvar acsUseTcpOffload yes + # testvar acsTargetDevice tr069_device2 + # testvar acsDualStackIp 6000::1 + # testvar acsStrictSyntaxChecking on + + } + + SECTION "SSL Configuration" { + + # testvar acsSslVersion tls + # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem + # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem + # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsCipherSuite auto + # testvar acsClientCaCertPath /path/to/client/ca/file + + } + + SECTION "Profiles" { + + # testvar cwmpSupportedDataModel auto + # testvar cwmpDataValidation yes + # testvar cwmpSkipParameters empty + # testvar cwmpModifyParameters empty + # testvar cwmpVendorSpecificParams none + + SECTION "Custom CWMP Profiles" { + + IGNORE testvar_group cwmp_profile1 { + + # testvar cwmpProfileName myVendorParameters + # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp + # testvar cwmpProfileObject InternetGatewayDevice:1 + + } + + } + + } + + SECTION "CWMP Scenarios" { + + # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp + # testvar cwmpScenarioSingleMode no + # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp + + } + + SECTION "Additional TR-069 Options" { + + # testvar tr69DeviceType IGD + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69InformTimeout 120 + # testvar tr69MinPeriodicInform 60 + # testvar tr69ScheduleInformRPC yes + # testvar tr69UploadRPC no + # testvar tr69UploadPath /tmp + # testvar tr69ConfigUploadFilename vendor_configuration_file + # testvar tr69LogUploadFilename vendor_log_file + # testvar tr69FactoryResetRPC no + # testvar tr69CpeGetRPCs no + # testvar tr69ForceBoolean no + # testvar tr69XMLCapturePath /tmp/tr69-xml + # testvar tr69DownloadTimeout 600 + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadImageVersion 1.0 + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69RebootTimeout 300 + # testvar tr69RpcTimeout 180 + # testvar tr69DownloadConfig /path/to/config + # testvar tr69MaxUserNameLen 256 + # testvar tr69MaxPasswordLen 256 + # testvar tr69MaxCpeUserNameLen 256 + # testvar tr69MaxCpePasswordLen 256 + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DUInstallImageVersion 1.0 + # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image + # testvar tr69DUInstallImageAlternateVersion 1.0 + # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb + # testvar tr69DUChangeExecEnvRef openwrt + # testvar tr69DUChangeTimeout 600 + # testvar tr69WildcardPortMappingOnly no + # testvar tr69PortMapDeletionDelay 15 + # testvar tr69PortMapCreationDelay 0 + # testvar tr69PortMapDisableDelay 15 + # testvar tr69TraceRouteTimeout 120 + + } + + SECTION "TR-111 Parts 1 and 2" { + + # testvar supportsTr111Part1 yes + # testvar supportsTr111Part2 no + # testvar STUNMaximumKeepAlivePeriod 60 + # testvar STUNMinimumKeepAlivePeriod 60 + # testvar STUNAuth no + # testvar STUNUsername qacafe + # testvar STUNPassword qacafe123 + # testvar acsUdpConnectionDelay 0 + + } + + SECTION "TR-143 Performance Tests" { + + # testvar tr143HttpDownloadSize 1000000 + # testvar tr143HttpUploadSize 1000000 + + # testvar tr143HttpDownloadHighThreshold 0.0 + # testvar tr143HttpDownloadLowThreshold 5.0 + # testvar tr143HttpDownloadResponseMax 60 + + # testvar tr143HttpUploadHighThreshold 0.0 + # testvar tr143HttpUploadLowThreshold 5.0 + # testvar tr143HttpUploadResponseMax 60 + + } + + SECTION "TR-069 LAN Side Devices" { + + IGNORE testvar_group tr069_device2 { + + # testvar acsDefaultUser qacafe + # testvar acsDefaultPassword qacafe123 + # testvar acsCpeDefaultUser qacafe + # testvar acsCpeDefaultPassword qacafe123 + # testvar acsCreatePortMapOnIGD no + # testvar acsPortMapPublicPort 20000 + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69DeviceType IGD + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DownloadConfig /path/to/config + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + + } + + } + +} + +SECTION "CDRouter USP Add-On" { + + # testvar supportsUSP no + + SECTION "Basic Controller Configuration" { + + # testvar uspControllerID proto::controller-id + # testvar uspControllerInterface wan + + # testvar uspControllerIpMode ipv4-only + # testvar uspControllerIpv4 6.0.0.2 + # testvar uspControllerIpv6 6000::2 + # testvar uspControllerPort auto + # testvar uspControllerPath /controller-path + + # testvar uspControllerUseNonPayloadProtection no + # testvar uspControllerUseSessionContext no + # testvar uspControllerMTP websocket + # testvar uspControllerMTPEncryption no + # testvar uspControllerUSPEncryption no + # testvar uspControllerDomain controller.cdroutertest.com + + # testvar uspSegmentationEnable no + # testvar uspSegmentationSize auto + + # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + + # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + + # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerVerifyRecordIntegrity no + + # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem + + # testvar uspControllerHost any + # testvar uspControllerUsername qacafe + # testvar uspControllerPassword qacafe123 + + } + + SECTION "Basic Agent Configuration" { + + # testvar uspAgentID proto::agent-id + + # testvar uspAgentIpv4 auto + # testvar uspAgentIpv6 auto + # testvar uspAgentPort auto + # testvar uspAgentPath /agent-path + + # testvar uspMessageTimeout 30 + # testvar uspNotificationTimeout 30 + # testvar uspRebootTimeout 120 + + } + + SECTION "USP Scenarios" { + + # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp + # testvar uspScenarioSingleMode no + # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp + + } + + SECTION "Data Model" { + + # testvar uspSkipParameters empty + # testvar uspModifyParameters empty + # testvar uspSupportedDataModel all + + SECTION "Custom USP Data Model" { + + IGNORE testvar_group usp_profile_1 { + + # testvar uspProfileName myVendorParameters + # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml + + } + + } + + } + + SECTION "USP Agent Data Model Configuration" { + + # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + + # testvar uspParameterPath1 Device.DeviceInfo.ModelName + # testvar uspParameterPath2 Device.IP.Interface.3.Enable + # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory + # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode + + # testvar uspNotificationParamNewValue myCustomParameterValue + + # testvar uspObject1 Device.IP.Interface. + # testvar uspObject2 Device.WiFi.AccessPoint. + + # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} + # testvar uspValidSearchPathResultParam PeriodicNotifInterval + # testvar uspValidSearchPathResultValue 5000 + + # testvar uspFirmwareImage /path/to/firmware.bin + # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin + # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 + + } + +} + +SECTION "CDRouter BBF.069 Add-On" { + + # testvar supportsBBF069 yes + + SECTION "General" { + + SECTION "ACS URL" { + + # testvar bbf069ACSURL http://acs1.broadband-forum.org + # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org + + } + + SECTION "Security Certificates" { + + # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem + # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem + # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem + # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem + # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem + # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem + + } + + SECTION "HTTP Verification" { + + # testvar bbf069HTTPVerification no + + } + + } + + SECTION "Device Specific" { + + SECTION "General" { + + # testvar bbf069RootDataModel InternetGatewayDevice + # testvar bbf069UnsupportedRPC ChangeDUState + # testvar bbf069UploadType "1 Vendor Configuration File" + # testvar bbf069ExpectedUpgradeTime 100 + + } + + SECTION "Data Model" { + + # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069ActiveParamType unsignedInt + # testvar bbf069ActiveParamValue 60 + + # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069CompletePath1Type unsignedInt + # testvar bbf069CompletePath1Value 73 + + # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable + # testvar bbf069CompletePath2Type boolean + # testvar bbf069CompletePath2Value true + + # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. + # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. + # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv + # testvar bbf069InvalidPathType unsignedInt + + # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer + # testvar bbf069UnwritableType string + # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 + + } + + } + +} diff --git a/.testbed/cdrouter/configurations/vlan b/.testbed/cdrouter/configurations/vlan new file mode 100644 index 0000000000..4591acf847 --- /dev/null +++ b/.testbed/cdrouter/configurations/vlan @@ -0,0 +1,2677 @@ +SECTION "About" { + + # Cable/DSL Router Test Suite + # + # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 + # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) + # + # Local.conf + # + # This is the main configuration file for CDRouter. This file defines the + # configuration of the router under test and controls various aspects of + # CDRouter's behavior. This file consists of a number of unique test variables + # called 'testvars' which are grouped by interface, protocol, or functionality. + # The basic syntax for all testvars is: + # + # testvar NAME VALUE + +} + +SECTION "Base Configuration" { + + SECTION "WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.1.1 + # testvar wanIspAssignIp 202.254.1.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.1.2 + # testvar wanIspNextIp 202.254.1.3 + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar wanIspAssignMask 255.255.255.0 + # testvar IPv4HopCount 1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + # testvar dhcpServerRapidCommit yes + # testvar dhcpServerClientIDBehavior rfc6842 + # testvar dhcpServerResponseDelay 4500 + # testvar dhcpConnectOnDemand no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar wanDhcpClientOptionCode1 60 + # testvar wanDhcpClientOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "DHCP Authentication" { + + # testvar supportsDhcpAuth no + + } + + SECTION "PPPoE Server" { + + # testvar pppoeConnectOnDemand no + # testvar pppoeIdleTimeout 60 + testvar pppoeUser softathome + testvar pppoePassword softathome + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + # testvar pppoeAcCookie auto + # testvar pppoeMaxPayload none + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpConnectOnDemand yes + # testvar pptpServerIp 202.254.201.1 + # testvar pptpClientIp 202.254.201.2 + # testvar pptpUseDHCP no + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpConnectOnDemand yes + # testvar l2tpServerIp 202.254.201.1 + # testvar l2tpClientIp 202.254.201.2 + # testvar l2tpUseDHCP no + + } + + SECTION "DS-Lite" { + + # testvar ipv6DsliteAftr 3001:aaaa::1 + # testvar dhcpv6WanAftrName aftr.qacafe.com + # testvar dsliteFirewallMode address-restricted + + } + + SECTION "MAP / LW4o6" { + + # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: + # testvar mapBmrRuleIpv6PrefixLen 48 + # testvar mapBmrRuleIpv4Prefix 5.0.0.0 + # testvar mapBmrRuleIpv4PrefixLen 24 + # testvar mapBmrRuleEABitLen 16 + + # testvar mapSharingRatio 256 + # testvar mapStartPort 4096 + # testvar mapPsid 255 + + # testvar mapEnableDhcpv6Options yes + + SECTION "MAP-E / LW4o6" { + + # testvar mapTunnelFlowLabel 0 + # testvar mapTunnelHopLimit 64 + # testvar mapTunnelTrafficClass 0 + + } + + SECTION "MAP-T" { + + # testvar mapDmrIpv6Prefix 5001:db8:: + # testvar mapDmrIpv6PrefixLen 48 + + # testvar mapTosTranslate yes + + } + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + # testvar pppConnectionDelay 10 + # testvar pppRestartTimeout 300000 + # testvar pppFailUsesICMP no + + } + + SECTION "WAN 802.1q VLAN" { + + testvar wanVlanId 101 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "Wireless Access Point (AP)" { + + # testvar wanApBand 2.4GHz + # testvar wanApSSID qa-net + # testvar wanApChannel auto + + SECTION "WPA Authenticator" { + + # testvar wanApWpaMode RSN + # testvar wanApWpaKeyMgmt PSK + # testvar wanApWpaCipher CCMP-128 + # testvar wanApWpaGroupCipher auto + # testvar wanApWpaPMF auto + # testvar wanApWpaPsk qacafe123 + # testvar wanApWpaSaePassword "sae secret" + + } + } + + SECTION "WAN 802.1X and RADIUS" { + + SECTION "WAN RADIUS" { + + # testvar wanRadiusEnable no + # testvar wanRadiusInterface wan + # testvar wanRadiusIp 3.3.3.44 + # testvar wanRadiusSecret qacafe123 + # testvar wanRadiusServerAttrType1 200 + # testvar wanRadiusServerAttrData1 04040404 + + } + + SECTION "WAN EAP Settings" { + + # testvar wanEapType eap-md5 + + SECTION "WAN Supplicant Credentials" { + + # testvar wanEapIdentity1 user1 + # testvar wanEapPassword1 qacafe123 + + } + + SECTION "WAN Authentication Options" { + + # testvar wanEapRootCert /usr/cdrouter/tests/root.pem + # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem + # testvar wanEapServerCertPassword qacafe123 + # testvar wanEapFragmentSize 1024 + + } + + } + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.101.1 + # testvar wanBackupDnsServer 202.254.101.2 + # testvar wanBackupDnsServer2 0.0.0.0 + # testvar wanBackupDnsServer3 0.0.0.0 + # testvar DNStoDHCP no + # testvar supportsDnsProxy yes + # testvar supportsDnsCaching yes + # testvar dnsCacheSize 150 + # testvar dnsLookupTimeout 5 + # testvar dnsFailoverAuth "2 4 5" + # testvar dnsFailoverNonAuth "2 4 5" + # testvar dnsFailoverDelay 10 + # testvar dnsFailoverAttempts 20 + # testvar dnsRelayFailover 120 + # testvar dnsForwardServerStatus no + # testvar dnsUsageProfile opportunistic-privacy + # testvar dnsCaptive no + + SECTION "User Configurable DNS Entries" { + + # testvar dnsHostname1 test.qacafe.com + # testvar dnsIp1 5.5.5.5 + + } + + } + + SECTION "HTTP" { + + # testvar supportsHttpProxy yes + # testvar httpProxyIdleTimeout 30 + # testvar httpMaxHeaderCount 200 + + } + + SECTION "NTP" { + + # testvar ntpServer1 3.3.3.6 + # testvar ntpServerName1 time.nist.gov + # testvar ntpServer2 3.3.3.7 + # testvar ntpServerName2 time.foo.com + # testvar ntpStartDate "6/2/2007 11:00 am UTC" + # testvar ntpOffset 0 + # testvar enableRFC868TimeProtocol no + + } + + SECTION "Dynamic DNS" { + + # testvar supportsDynDns no + # testvar dynDnsServerIp 66.37.215.49 + # testvar dynDnsTransport http + # testvar dynDnsHostname test.domain.com + # testvar dynDnsUsername qacafe + # testvar dynDnsPassword qacafe123 + # testvar dynDnsSystem dyndns + # testvar dynDnsMx mail.domain.com + # testvar dynDnsBackMx no + # testvar dynDnsWildcard off + # testvar dynDnsAgent RAS/1.1 + # testvar dynDnsWait 30 + # testvar testDynDnsErrorCode no + # testvar dynDnsServerReturn !yours + + } + + SECTION "WINS Servers" { + + # testvar winsServer1 3.3.3.4 + # testvar winsServer2 3.3.3.5 + + } + + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanDomainName qacafe.com + # testvar lanMtu default + testvar lanHostname prplOS + # testvar lanGuestMode no + + SECTION "ARP Settings" { + + # testvar arpMode strict + # testvar arpSupportGratuitous yes + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + # testvar supportsDnsHostnameCreate no + + } + + SECTION "DHCP Client" { + + # testvar dhcpClientTimeout 5 + # testvar dhcpInform no + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpRapidCommit no + # testvar ipv4MaxLanClients auto + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpCreateDelay 0 + # testvar dhcpReleaseDelay 300 + # testvar dhcpServerMac auto + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + # testvar dhcpClientTrackSeconds no + # testvar dhcpClientRequestNtp no + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + SECTION "DHCP Client Extra Parameters" { + + # testvar dhcpExtraClientParams "69 70" + + } + + SECTION "DHCP Client Extra Options" { + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Hotspot Router Settings" { + + # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% + # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% + + SECTION "Hotspot Clients" { + + # testvar clientLoginName1 client1 + # testvar clientLoginPassword1 admin1 + + } + + SECTION "Advanced Hotspot Settings" { + + # testvar browserLoginProc example_login + # testvar browserLogoutProc example_logout + # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl + + } + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconRsnCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X and RADIUS" { + + SECTION "LAN RADIUS" { + + # testvar enableRADIUSserver yes + # testvar radiusHost remoteHost + # testvar radiusSecret qacafe123 + # testvar radiusServerAttrType1 200 + # testvar radiusServerAttrData1 04040404 + + } + + SECTION "LAN EAP Settings" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + SECTION "LAN Authentication Options" { + + # testvar eapRootCert /usr/cdrouter/tests/root.pem + # testvar eapServerCertPath /usr/cdrouter/tests/server.pem + # testvar eapServerCertPassword qacafe123 + # testvar eapFragmentSize 1024 + # testvar eapTxWhen 60 + # testvar eapQuietPeriod 60 + # testvar eapReAuthMax 2 + # testvar eapSendLogoffFailure yes + # testvar eapReAuthPeriod 0 + + } + + } + + } + + SECTION "LAN 802.1q VLAN" { + + testvar lanVlanId 201 + # testvar lanVlanPriority 0 + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "Firewall and NAT" { + + SECTION "NAT Options" { + + # testvar natSimultaneousTcp no + # testvar natSrcPort0 yes + # testvar natSupportsP2P yes + # testvar natPortParity yes + # testvar natMode port-restricted + # testvar natVerifyIpId yes + # testvar defaultTcpEchoPort 50000 + # testvar defaultUdpEchoPort 50000 + # testvar natRefreshBehavior both + + SECTION "NAT Timers" { + + # testvar natFinTimeout disabled + # testvar natRstTimeout disabled + # testvar natTcpTimeout disabled + # testvar natSynTimeout disabled + # testvar natUdpTimeout disabled + # testvar natDnsTimeout disabled + # testvar natIcmpTimeout disabled + # testvar natRtspTimeout disabled + # testvar natLagTime 0 + + } + + } + + SECTION "Protocol Pass Through" { + + SECTION "IPSEC Pass Through" { + + # testvar supportsIPSECpass yes + # testvar ipsecMaxTunnels 20 + # testvar ipsecScaleSameServer no + # testvar alwaysUseIke no + # testvar ipsecPassRetransmit no + # testvar unknownPassthrough yes + + } + + SECTION "PPTP Pass Through" { + + # testvar supportsPPTPpass yes + # testvar pptpMaxTunnels 20 + + } + + SECTION "L2TP Pass Through" { + + # testvar supportsL2TPpass yes + # testvar l2tpMaxTunnels 20 + + } + + SECTION "PPPoE Pass Through" { + + # testvar supportsPPPoEpass no + + } + + } + + SECTION "Port Triggers" { + + # testvar portTriggers no + # testvar portTriggerTimeout 0 + # testvar portTriggerDelay 0 + # testvar portTriggerOpenDelay 0 + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "Application Layer Gateways (ALGs)" { + + SECTION "MSN Messenger" { + + # testvar supportsMsnAlg no + # testvar msnNotificationServerPort 1863 + # testvar msnSwitchBoardServerPort 1863 + + } + + SECTION "RTSP" { + + # testvar supportsRtspAlg no + # testvar rtspTeardownDelay 5 + # testvar rtspGetParameterInterval 5 + + } + + SECTION "SIP" { + + # testvar supportsSipAlg yes + # testvar sipInterface wan + # testvar sipServerIp 3.3.3.8 + # testvar ipv6SipServerIp 3001:051a:cafe::4 + # testvar sipCallTeardownDelay 5 + # testvar sipMaxOutboundCalls 10 + # testvar sipMaxInboundCalls 10 + # testvar sipCallPacing 0 + # testvar sipScaleRunTime 30 + # testvar sipScaleServerPort 5060 + # testvar sipScaleClientPort 5060 + # testvar sipMaxUserNames -1 + # testvar rtpSendInterval 5000 + + } + + SECTION "FTP" { + + # testvar ftpPortTimeout 120 + + } + + } + + SECTION "Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + SECTION "Port Scanning, Firewall and DoS Options" { + + # testvar portScanStart 0 + # testvar portScanStop 65535 + # testvar portScanDelay 1 + testvar firewallTcpOpenPorts "50805" + # testvar firewallTcpClosedPorts 2323 + # testvar firewallUdpOpenPorts 1234 + testvar firewallUdpClosedPorts 68 + # testvar firewallOutBlockedTcpPorts 1234 + # testvar firewallOutBlockedUdpPorts 1234 + # testvar firewallOutBlockedIpProtos 0 + # testvar wanPingRespond no + + SECTION "Denial of Service Options" { + + # testvar dosRecoveryTime 5 + # testvar dosAttackAttempts 100 + # testvar dutMgmtPort 80 + # testvar dutSecureMgmtPort disabled + # testvar dosSynAttackPort 80 + # testvar dosSynAttackAttempts 100 + + } + + SECTION "Deprecated SSL Protocols and Ciphers" { + + # testvar sslDeprecatedProtocols "sslv2 sslv3" + # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" + + } + + } + + SECTION "DMZ" { + + # testvar lanDmzHost 192.168.1.253 + # testvar lanDmzTcpPortExceptions 113 + # testvar lanDmzUdpPortExceptions 1234 + # testvar lanDmzIpProtoExceptions 2,47 + # testvar lanDmzSupportsIcmp no + + } + + SECTION "URL Filtering" { + + # testvar urlFilterSupported no + # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" + # testvar non-filtered-urls http://qacafe.com + # testvar urlFilterBlockedText "This website is blocked" + + } + + SECTION "XBox Live Options" { + + # testvar xboxNatMinType open + # testvar xboxPort 3074 + # testvar xboxMtu 1364 + + } + + } + + SECTION "Advanced Protocols" { + + SECTION "RIP v1/v2" { + + # testvar ripSupported no + # testvar ripVersion 1 + # testvar ripV2mode multicast + # testvar ripAuthMode none + # testvar ripPassword qacafe123 + # testvar ripMaxRoutes 96 + # testvar ripRouteTimeout 180 + # testvar ripGarbageTimeout 120 + # testvar ripRouteDelay 5000 + # testvar ripAcceptWanUpdate no + + } + + SECTION "UPnP" { + + # testvar upnpSupported yes + # testvar upnpVersion 1.1 + # testvar upnpDevice InternetGatewayDevice:2 + # testvar upnpWANPPPConnection no + # testvar upnpLANDevice no + # testvar upnpMaxTcpMappings 10 + # testvar upnpMaxSubClients 10 + # testvar upnpMinSubTimeout 40 + # testvar upnpMaxSubTimeout 3600 + # testvar upnpWANFailureTimeout 120 + # testvar upnpPortStart 40000 + # testvar upnpPortStop 50000 + + } + + SECTION "LLDP" { + + # testvar supportsLLDP no + # testvar lldpLanMac none + # testvar lldpLanChassisMac auto + # testvar lldpMsgFastTx 1 + # testvar lldpMsgTxInterval 30 + # testvar lldpTxFastInit 4 + + } + + SECTION "IGMP (Multicast)" { + + # testvar supportsMulticast yes + # testvar multicastType proxy + # testvar supportsMulticastOut no + # testvar igmpVersion 2 + # testvar igmpFastLeave no + # testvar igmpRouterOption yes + # testvar igmpMaxGroups 64 + # testvar multicastCacheTimeout 10 + # testvar multicastPoolStart 224.0.1.0 + # testvar multicastPoolStop 239.255.255.255 + # testvar SSMulticastPoolStart 232.0.1.1 + # testvar SSMulticastPoolStop 232.0.1.255 + # testvar multicastJoinDelay 2 + # testvar multicastScaleDelay 1 + # testvar multicastInterface wan + # testvar multicastBypassPPPoE no + + SECTION "IGMP Timers" { + + # testvar igmpQueryInterval 125 + # testvar igmpRobustnessVariable 2 + # testvar igmpQueryResponseInterval 10 + + } + + SECTION "IPTV Options" { + + # testvar iptvChannelRange 200 + # testvar iptvChannelChangeDelay 200 + # testvar iptvMaxFailures 10 + + } + + } + + SECTION "GRE Tunnels" { + + # testvar greDFflag on + + IGNORE testvar_group greTunnel1 { + + SECTION "Generic IPv4 GRE Tunnel Endpoints" { + + # testvar greType IPv4 + # testvar greEndpoint 5.5.5.5 + # testvar greLocalNet 192.168.1.0 + # testvar greLocalMask 255.255.255.0 + + } + + SECTION "L2GRE Options" { + + # testvar greWanGroup wan2 + + } + + SECTION "L3GRE Remote IPv4 Network" { + + # testvar greHost 3.0.0.1 + # testvar greRemoteNet 3.0.0.0 + # testvar greRemoteMask 255.0.0.0 + + } + + } + + } + + } + + SECTION "Additional Features" { + + # testvar supportsIPv4 yes + # testvar internalSmtpServer 5.5.5.5 + # testvar remoteHostIp 3.3.3.3 + # testvar startOtherLanFirst no + # testvar cdrouterOui B0750C + # testvar forwardingMaxFailures 20 + # testvar forwardingPort 5001 + # testvar jumboMtu disabled + # testvar tcpUdpPortStart 10000 + + SECTION "General Purpose HTTP Server" { + + # testvar httpServerIp 3.3.3.16 + # testvar httpServerPort 80 + # testvar httpServerRoot /tmp + + } + + SECTION "Free Network Range" { + + # testvar FreeNetworkStart 200.0.0.0 + # testvar FreeNetworkMask 255.255.255.0 + # testvar FreeNetworkStop 201.0.0.0 + + } + + SECTION "TCP MSS Clamping" { + + # testvar mssClampingValue default + # testvar mssClampingInValue default + + } + + SECTION "TCP/UDP Scaling Options" { + + # testvar scaleTcpConnsPerHost 5 + # testvar natMaxTcpConns 200 + # testvar natMaxUdpConns 100 + + } + + SECTION "Global Wireless Options" { + + # testvar wirelessRetry 3 + # testvar lanWirelessMaxClients auto + # testvar wifiCapture off + # testvar wifiCaptureFilter {} + + } + + } + + SECTION "Test Execution Options and Auto-Reboot" { + + # testvar startDelay 3 + # testvar lanStartDelay 3 + # testvar startTimeout 90 + # testvar wanCloseOnExit yes + # testvar RestartDut none + # testvar RestartDutDelay disabled + # testvar ShutdownDut "echo -n" + # testvar cpeRebootMode skip + # testvar healthCheckEnable no + + } + +} + +SECTION "CDRouter DOCSIS Add-On" { + + # testvar supportsDocsis no + + SECTION "Basic Configuration" { + + # testvar docsisIpProvisioningMode ipv4-only + # testvar docsisBootDelay 30 + + # testvar docsisClientMac auto + + } + + SECTION "IPv4 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIp 10.10.10.1 + # testvar docsisMask 255.255.255.0 + + } + + SECTION "DHCPv4 Server" { + + # testvar docsisDhcpServer 10.10.10.3 + # testvar docsisAssignIp 10.10.10.2 + # testvar docsisDomain docsis.qacafe.com + # testvar docsisDhcpLeaseTime 300 + # testvar docsisDhcpRapidCommit no + + # testvar docsisDhcpServerOptionCode1 69 + # testvar docsisDhcpServerOptionData1 04040404 + + # testvar docsisDhcpClientOptionCode1 60 + # testvar docsisDhcpClientOptionData1 04040404 + + SECTION "DHCPv4 Relay" { + + # testvar docsisGateway 6.6.6.7 + # testvar docsisAssignGateway 6.6.6.6 + # testvar docsisAssignMask 255.255.255.0 + # testvar docsisDhcpRelayServer 6.6.6.7 + + } + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogServer 10.10.10.5 + # testvar docsisTimeServer 10.10.10.6 + # testvar docsisTftpServer 10.10.10.4 + + } + + } + + SECTION "IPv6 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIpv6 8001::1 + # testvar docsisIpv6PrefixLen 64 + + } + + SECTION "DHCPv6 Server" { + + # testvar docsisDhcpIpv6Server 8001::3 + # testvar docsisAssignIpv6 8001::2 + # testvar docsisDHCPv6PreferredLifetime 300 + # testvar docsisDHCPv6ValidLifetime 300 + # testvar docsisDhcpv6RapidCommit no + + # testvar docsisDhcpv6ServerOptionCode1 69 + # testvar docsisDhcpv6ServerOptionData1 04040404 + + # testvar docsisDhcpv6ClientOptionCode1 60 + # testvar docsisDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Relay" { + + # testvar docsisIpv6Gateway 9001::1 + # testvar docsisAssignIpv6PrefixLen 64 + # testvar docsisDhcpv6RelayServer 9001::1 + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogIpv6Server 8001::5 + # testvar docsisTimeIpv6Server 8001::6 + # testvar docsisTftpIpv6Server 8001::4 + + } + + } + + SECTION "CM Config File" { + + SECTION "Global TFTP Settings" { + + # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp + # testvar docsisTftpBootFile auto-docsis.bin + + } + + SECTION "Embedded Config File" { + + # testvar docsisConfig { + # Main + # { + # NetworkAccess 1; + # BaselinePrivacy + # { + # AuthTimeout 10; + # ReAuthTimeout 10; + # AuthGraceTime 600; + # OperTimeout 1; + # ReKeyTimeout 1; + # TEKGraceTime 600; + # AuthRejectTimeout 60; + # SAMapWaitTimeout 1; + # SAMapMaxRetries 4; + # } + # MaxCPE 3; + # UsServiceFlow + # { + # UsServiceFlowRef 2; + # QosParamSetType 7; + # } + # DsServiceFlow + # { + # DsServiceFlowRef 1; + # QosParamSetType 7; + # } + # SNMPv1v2cCoexistenceConfig + # { + # SNMPv1v2cCommunityName "public"; + # SNMPv1v2cTransportAddressAccess + # { + # SNMPv1v2cTransportAddress 0.0.0.0/0; + # SNMPv1v2cTransportAddressMask 0.0.0.0/0; + # } + # SNMPv1v2cAccessViewType 2; + # SNMPv1v2cAccessViewName "docsisManagerView"; + # } + # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ + # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ + # /*EndOfDataMkr*/ + # } + # } + + } + + SECTION "Vendor Defined Config File" { + + # testvar docsisConfigFile none + + } + + } + + SECTION "CM Firewall Configuration" { + + SECTION "IPv4" { + + # testvar docsisTcpOpenPorts "22 443" + # testvar docsisTcpClosedPorts all + # testvar docsisUdpOpenPorts 1234 + # testvar docsisUdpClosedPorts all + + } + + SECTION "IPv6" { + + # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" + # testvar docsisIpv6TcpClosedPorts "2323 80" + # testvar docsisIpv6UdpOpenPorts 1234 + # testvar docsisIpv6UdpClosedPorts 113 + + } + + } + +} + +SECTION "CDRouter HomeKit Add-On" { + + # testvar supportsHomeKit no + + # testvar homeKitRouterName "HomeKit Router" + # testvar homeKitHATHostname hat.local + # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ + # testvar homeKitRouterSetupCode + + # testvar homeKitManualEnabled yes + +} + +SECTION "CDRouter IKE Add-On" { + + SECTION "Global IKE Options" { + + # testvar ikeMaxPhase2SA 20 + # testvar ikeDeadPeerDetection no + # testvar ikeNewQuickModeDelay 1000 + # testvar ikeKeepAlive 20 + # testvar ikeMinimumLifetime 20 + # testvar ipsecMinimumLifetime 20 + # testvar ikePhase2DeleteDelay 100 + # testvar ikeMaxTransforms 21 + # testvar ikeInitialContact yes + # testvar ikeBringUpTunnels yes + # testvar ikeAlwaysInitiate no + # testvar useSameIpsecTunnel no + # testvar ikeNatTraversal no + # testvar ike_FQDN fqdn-test.cdrouter.com + # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com + + } + + SECTION "IPsec Tunnel Configurations" { + + SECTION "IPsec Tunnel Configuration 1" { + + # testvar ipsecTunnelKeyType1 manual + # testvar ipsecTunnelEndpoint1 5.0.0.1 + # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 + # testvar ipsecTunnelRemoteMask1 255.255.255.0 + # testvar ipsecTunnelHost1 5.0.0.2 + + SECTION "Manual IPsec Tunnel Configuration" { + + # testvar ipsecTunnelOutboundSpi1 1000 + # testvar ipsecTunnelOutEncrypt1 des + # testvar ipsecTunnelOutEncryptKey1 0102030405060708 + # testvar ipsecTunnelOutAuth1 md5-hmac + # testvar ipsecTunnelOutAuthKey1 6262626262626262 + # testvar ipsecTunnelInboundSpi1 1001 + # testvar ipsecTunnelInEncrypt1 des + # testvar ipsecTunnelInEncryptKey1 0102030405060708 + # testvar ipsecTunnelInAuth1 md5-hmac + # testvar ipsecTunnelInAuthKey1 6262626262626262 + + } + + SECTION "IKE IPsec Tunnel Configuration" { + + # testvar ipsecTunnelIkeEncrypt1 des + # testvar ipsecTunnelIkeAuth1 md5-hmac + # testvar ipsecTunnelIkeGroup1 1 + # testvar ipsecTunnelIkeLifetime1 300 + # testvar ipsecTunnelEncrypt1 3des + # testvar ipsecTunnelAuth1 sha1-hmac + # testvar ipsecTunnelPfsGroup1 1 + # testvar ipsecTunnelLifetime1 120 + # testvar ipsecTunnelPsk1 qacafe123 + # testvar ipsecTunnelIkeMode1 main + # testvar ipsecTunnelUsesNat1 no + + } + + } + + } + +} + +SECTION "CDRouter IPv6 Add-On" { + + # testvar supportsIPv6 no + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001::1 + # testvar ipv6WanIspAssignIp 3001::2 + # testvar ipv6WanIspNextIp 3001::3 + # testvar ipv6WanIspPrefixLen 64 + # testvar ipv6WanDutDuid 00000000 + # testvar ipv6RelayServer 192.88.99.1 + # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 + # testvar ipv6rdPrefix 2001:1234:: + # testvar ipv6rdPrefixLen 32 + # testvar ipv6rdIPv4MaskLen 0 + # testvar ipv6rdDHCPv4Option yes + # testvar ipv6TunnelMtuType static + # testvar ipv6WanMtu 1500 + # testvar ipv6WanMtuOption no + # testvar ipv6RASendInterval 10 + # testvar ipv6ExpectRAonWan no + + SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { + + # testvar ipv6WanIspGateway 3001::9 + # testvar ipv6WanAssignPrefixLen 64 + # testvar IPv6HopCount 1 + # testvar dhcpv6RelayServer 3001::9 + + } + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + # testvar ipv6WanRDNSS no + # testvar ipv6WanDNSSL no + + } + + SECTION "DHCPv6 Server" { + + # testvar dhcpv6IAValidLifetime 300 + # testvar dhcpv6IAPreferredLifetime 300 + # testvar dhcpv6DuidType 1 + # testvar dhcpv6RestartLatency 10 + # testvar dhcpv6ServerRapidCommit yes + + # testvar dhcpv6ServerOptionCode1 69 + # testvar dhcpv6ServerOptionData1 04040404 + + # testvar wanDhcpv6ClientOptionCode1 60 + # testvar wanDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Authentication" { + + # testvar supportsDhcpv6Auth no + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: + # testvar dhcpv6WanAssignPrefixLen 48 + # testvar dhcpv6PDLatency 30 + + } + + SECTION "IPv6 NTP" { + + # testvar ipv6NtpServer1 4321::23 + # testvar ipv6NtpServerName1 time.nist.gov + + # testvar ipv6NtpServer2 4321::24 + # testvar ipv6NtpServerName2 time.foo.com + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + testvar ipv6LanIp 3001:dddd::1 + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanPrefixLen 64 + # testvar ipv6MaxLanClients 32 + # testvar ipv6RAInterval 300 + # testvar ipv6LanSubnetId 1 + + SECTION "DHCPv6 Client" { + + # testvar dhcpv6ClientTimeout 5 + # testvar ipv6DhcpClientStart ::2 + # testvar ipv6DhcpClientEnd ::1f + # testvar ipv6DhcpClientExclude "::3 ::7" + # testvar ipv6DhcpClientValidLifetime 86400 + # testvar dhcpv6RapidCommit yes + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + SECTION "IPv6 LAN DNS" { + + # testvar ipv6DNStoLAN yes + # testvar ipv6RdnssSupport yes + # testvar ipv6DnsslSupport yes + # testvar ipv6LanStaticDns no + + } + + SECTION "Unique Local Address (ULA) Options" { + + # testvar supportsULA no + # testvar ipv6LanULAPrefix fd00:: + # testvar ipv6LanULAIp ::%eui64% + # testvar ipv6LanULAMode autoconf + + } + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + } + + SECTION "IPv6 Firewall" { + + # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" + # testvar ipv6FirewallTcpClosedPorts "2323 80" + # testvar ipv6FirewallUdpOpenPorts 1234 + # testvar ipv6FirewallUdpClosedPorts 113 + # testvar ipv6FirewallOutBlockedTcpPorts 1234 + # testvar ipv6FirewallOutBlockedUdpPorts 1234 + # testvar ipv6FirewallOutBlockedIpProtos 0 + # testvar ipv6WanPingRespond no + + SECTION "IPv6 TCP MSS Clamping" { + + # testvar ipv6MssClampingValue default + # testvar ipv6MssClampingInValue default + # testvar ipv6MssClampingTestPort 8096 + + } + + } + + SECTION "IPv6 Advanced Protocols" { + + SECTION "RIPng" { + + # testvar supportsRIPng no + + } + + SECTION "MLD (IPv6 Multicast)" { + + # testvar supportsIPv6Multicast yes + # testvar supportsIPv6MulticastOut no + # testvar mldVersion 2 + # testvar mldMaxGroups 64 + # testvar mldFastLeave no + # testvar ipv6MulticastCacheTimeout 10 + # testvar ipv6MulticastJoinDelay 2 + # testvar ipv6MulticastScaleDelay 1 + + SECTION "MLD Timers" { + + # testvar mldQueryInterval 125 + # testvar mldRobustnessVariable 2 + # testvar mldQueryResponseInterval 10 + + } + + SECTION "IPv6 IPTV Options" { + + # testvar ipv6IptvChannelRange 200 + # testvar ipv6IptvChannelChangeDelay 200 + # testvar ipv6IptvMaxFailures 10 + + } + + } + + } + + SECTION "IPv6 Additional Features" { + + SECTION "IPv6 Free Network Range" { + + # testvar ipv6RemoteHost 3001:051a:cafe::1 + # testvar ipv6FreeNetworkStart 3001:cafe:1:: + # testvar ipv6FreeNetworkPrefixLen 64 + # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: + + } + + SECTION "IPv6 Multicast Pool Ranges" { + + # testvar ipv6MulticastPoolStart ff0e::1 + # testvar ipv6MulticastPoolStop ff0e:ffff:: + # testvar ipv6SSMulticastPoolStart ff3e::8000:1 + # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff + + } + + } + +} + +SECTION "CDRouter Multiport Add-On" { + + SECTION "Additional WAN Interface Setup" { + + # testvar wanFailoverTimeout 300 + + IGNORE testvar_group wan2 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.2.1 + # testvar wanIspAssignIp 202.254.2.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.2.2 + # testvar wanIspNextIp 202.254.2.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.202.1 + # testvar pptpClientIp 202.254.202.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.202.1 + # testvar l2tpClientIp 202.254.202.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.102.1 + # testvar wanBackupDnsServer 202.254.102.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:2::1 + # testvar ipv6WanIspAssignIp 3001:0:0:2::2 + # testvar ipv6WanIspNextIp 3001:0:0:2::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + IGNORE testvar_group wan3 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.3.1 + # testvar wanIspAssignIp 202.254.3.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.3.2 + # testvar wanIspNextIp 202.254.3.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.203.1 + # testvar pptpClientIp 202.254.203.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.203.1 + # testvar l2tpClientIp 202.254.203.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.103.1 + # testvar wanBackupDnsServer 202.254.103.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:3::1 + # testvar ipv6WanIspAssignIp 3001:0:0:3::2 + # testvar ipv6WanIspNextIp 3001:0:0:3::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + } + + SECTION "Additional LAN Interface Setup" { + + # testvar useSameLanInterface no + + IGNORE testvar_group lan2 { + + SECTION "IPv4 LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanGuestMode no + + SECTION "LAN Host IP" { + + # testvar hostIp 192.168.1.0 + # testvar hostMask 255.255.255.0 + # testvar hostGateway 192.168.1.1 + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "DHCP Client Configuration" { + + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + # testvar dhcpExtraClientParams "69 70" + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Configuration Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + } + + SECTION "IPv4 Firewall and NAT" { + + SECTION "Static NAT" { + + # testvar staticNatIp 202.254.1.2 + # testvar staticNatFirewall yes + # testvar natMode port-restricted + + } + + SECTION "Special Application Port Triggers" { + + # testvar portTriggers no + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "TCP and UDP Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanStaticDns no + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + + SECTION "LAN IPv6 DHCP Client" { + + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + + } + + } + +} + +SECTION "CDRouter Performance Add-On" { + + # testvar supportsPerformance no + + SECTION "Basic Configuration" { + + # testvar perfWanIp 202.254.1.4 + # testvar perfWanIpv6 3001::4 + # testvar perfPort 19750 + # testvar perfPort2 19751 + + } + + SECTION "Performance Settings" { + + # testvar perfDuration 10 + # testvar perfDownloadBandwidth 0.0 + # testvar perfInterval auto + # testvar perfIncrement 5 + # testvar perfStreams 1 + # testvar perfStreamIncr 0 + # testvar perfUdpLen auto + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + # testvar perfOmit 0 + # testvar perfDSCP 0 + # testvar perfFairness no + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresholds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + SECTION "Advanced Options" { + + # testvar perfPingEnable no + # testvar perfEnableCapture no + # testvar perfLatencyAttempts 25 + # testvar perfApplicationAttempts 4 + # testvar perfApplicationDelay 100 + + } + + SECTION "Wireless" { + + IGNORE testvar_group wireless-performance { + + SECTION "Performance Settings" { + + # testvar perfDownloadBandwidth 0.0 + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresolds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + } + + } + +} + +SECTION "CDRouter Security Add-On" { + + SECTION "Internet Connection Sharing (ICS)" { + + # testvar enableICS no + # testvar icsInterface eth0 + # testvar icsShareIPv4 yes + # testvar icsShareIPv6 yes + + } + + SECTION "Traffic Analysis" { + + # testvar enableSuricata no + + } + + SECTION "Nmap Scans" { + + # testvar enableNmap no + # testvar nmapPorts 0-65535 + # testvar nmapScanTimeout 600 + # testvar nmapTimingTemplate 5 + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleBase auto + # testvar internetScheduleTimeZone auto + # testvar internetScheduleBlockedText "This website is blocked" + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + +} + +SECTION "CDRouter SNMP Add-On" { + + # testvar supportsSnmp no + + # testvar snmpPort 161 + # testvar snmpDefaultUser auto + # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" + # testvar snmpUpdateDelay 15 + + SECTION "SNMP Options and Users" { + + # testvar snmpManagerIp 3.3.3.33 + # testvar snmpManagerIpv6 3001:051a:cafe::33 + + IGNORE testvar_group snmpuser1 { + + # testvar snmpVersion 2c + + # testvar snmpAccess read-only + # testvar snmpTransport udp + # testvar snmpRetries 5 + # testvar snmpTimeout 5 + + SECTION "SNMP v1/2c Configuration" { + + # testvar snmpCommunity public + + } + + SECTION "SNMP v3 Configuration" { + + # testvar snmpSecurityLevel noAuthNoPriv + + # testvar snmpAuthProtocol MD5 + # testvar snmpAuthUsername qacafe + # testvar snmpAuthPassword qacafe123 + + # testvar snmpPrivacyProtocol DES + # testvar snmpPrivacyPassword qacafe123 + + # testvar snmpContextName bridge1 + # testvar snmpSecurityEngineId 800000020109840301 + # testvar snmpContextEngineId 800000020109840301 + + } + + } + + } + + SECTION "SNMP Scenarios" { + + # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp + # testvar snmpScenarioSingleMode no + # testvar snmpScenarioInterface lan + # testvar snmpScenarioIpVersion IPv4 + + } + +} + +SECTION "CDRouter Storage Add-On" { + + # testvar supportsStorage no + + # testvar storageFileSize 10 + # testvar storageUserFilePath none + # testvar useMulticastDNS no + + SECTION "SMB Options and Users" { + + # testvar supportsStorageSmb yes + # testvar storageSmbMaxSessions 20 + # testvar storageSmbTimeout 120 + # testvar storageSmbPacing 0 + + IGNORE testvar_group smbuser1 { + + # testvar server MyNAS + # testvar share data + # testvar folder /home/qacafe + # testvar guest no + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + + SECTION "FTP Options and Users" { + + # testvar supportsStorageFtp yes + # testvar supportsStorageFtps yes + # testvar storageFtpMaxSessions 20 + # testvar storageFtpTimeout 120 + # testvar storageFtpPacing 0 + + IGNORE testvar_group ftpuser1 { + + # testvar server MyNAS + # testvar path /home/qacafe + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + +} + +SECTION "CDRouter TR-069 Add-On" { + + testvar supportsCWMP no + + SECTION "Basic ACS Configuration" { + + # testvar acsIp 6.0.0.1 + # testvar acsPort 80 + testvar acsDomain acs-download.qacafe.com + # testvar acsTransport http + # testvar acsAuth digest + # testvar acsDigestQopAuth yes + # testvar acsInterface wan + testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ + # testvar acsWaitForInform 120 + # testvar acsSkipInitialInform no + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar cwmpProtocolVersion 1.0 + # testvar acsDeviceDiscovery no + # testvar acsConfigurePeriodicInform yes + # testvar tr69InitiateConnection yes + testvar acsDefaultUser cdrouter + testvar acsDefaultPassword cdrouter + testvar acsCpeDefaultUser acs + testvar acsCpeDefaultPassword acs + # testvar acsFileServerUser file_server_user + # testvar acsFileServerPassword file_server_password + + } + + SECTION "XMPP Connection Request Configuration" { + + # testvar acsSupportsXmppConnReq no + + # testvar acsXmppServerConnectAlgorithm DNS-SRV + # testvar acsXmppConnReqUsername qacafe + # testvar acsXmppConnReqResource cdrouter + # testvar acsXmppConnReqPassword qacafe123 + # testvar acsXmppConnReqUseTls no + + } + + SECTION "Advanced ACS Configuration" { + + # testvar acsCpeKeepAlive yes + # testvar acsChunkedEncoding no + # testvar acsChunkSize 64 + # testvar acsAuthOncePerSession no + # testvar acsCookieMode rfc6265 + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + # testvar acsNumberCpeAttempts 2 + # testvar acsDelayCpeAttempts 10 + # testvar acsWaitForConnectionRequest yes + # testvar acsUseTcpOffload yes + # testvar acsTargetDevice tr069_device2 + # testvar acsDualStackIp 6000::1 + # testvar acsStrictSyntaxChecking on + + } + + SECTION "SSL Configuration" { + + # testvar acsSslVersion tls + # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem + # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem + # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsCipherSuite auto + # testvar acsClientCaCertPath /path/to/client/ca/file + + } + + SECTION "Profiles" { + + # testvar cwmpSupportedDataModel auto + # testvar cwmpDataValidation yes + # testvar cwmpSkipParameters empty + # testvar cwmpModifyParameters empty + # testvar cwmpVendorSpecificParams none + + SECTION "Custom CWMP Profiles" { + + IGNORE testvar_group cwmp_profile1 { + + # testvar cwmpProfileName myVendorParameters + # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp + # testvar cwmpProfileObject InternetGatewayDevice:1 + + } + + } + + } + + SECTION "CWMP Scenarios" { + + # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp + # testvar cwmpScenarioSingleMode no + # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp + + } + + SECTION "Additional TR-069 Options" { + + # testvar tr69DeviceType IGD + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69InformTimeout 120 + # testvar tr69MinPeriodicInform 60 + # testvar tr69ScheduleInformRPC yes + # testvar tr69UploadRPC no + # testvar tr69UploadPath /tmp + # testvar tr69ConfigUploadFilename vendor_configuration_file + # testvar tr69LogUploadFilename vendor_log_file + # testvar tr69FactoryResetRPC no + # testvar tr69CpeGetRPCs no + # testvar tr69ForceBoolean no + # testvar tr69XMLCapturePath /tmp/tr69-xml + # testvar tr69DownloadTimeout 600 + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadImageVersion 1.0 + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69RebootTimeout 300 + # testvar tr69RpcTimeout 180 + # testvar tr69DownloadConfig /path/to/config + # testvar tr69MaxUserNameLen 256 + # testvar tr69MaxPasswordLen 256 + # testvar tr69MaxCpeUserNameLen 256 + # testvar tr69MaxCpePasswordLen 256 + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DUInstallImageVersion 1.0 + # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image + # testvar tr69DUInstallImageAlternateVersion 1.0 + # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb + # testvar tr69DUChangeExecEnvRef openwrt + # testvar tr69DUChangeTimeout 600 + # testvar tr69WildcardPortMappingOnly no + # testvar tr69PortMapDeletionDelay 15 + # testvar tr69PortMapCreationDelay 0 + # testvar tr69PortMapDisableDelay 15 + # testvar tr69TraceRouteTimeout 120 + + } + + SECTION "TR-111 Parts 1 and 2" { + + # testvar supportsTr111Part1 yes + # testvar supportsTr111Part2 no + # testvar STUNMaximumKeepAlivePeriod 60 + # testvar STUNMinimumKeepAlivePeriod 60 + # testvar STUNAuth no + # testvar STUNUsername qacafe + # testvar STUNPassword qacafe123 + # testvar acsUdpConnectionDelay 0 + + } + + SECTION "TR-143 Performance Tests" { + + # testvar tr143HttpDownloadSize 1000000 + # testvar tr143HttpUploadSize 1000000 + + # testvar tr143HttpDownloadHighThreshold 0.0 + # testvar tr143HttpDownloadLowThreshold 5.0 + # testvar tr143HttpDownloadResponseMax 60 + + # testvar tr143HttpUploadHighThreshold 0.0 + # testvar tr143HttpUploadLowThreshold 5.0 + # testvar tr143HttpUploadResponseMax 60 + + } + + SECTION "TR-069 LAN Side Devices" { + + IGNORE testvar_group tr069_device2 { + + # testvar acsDefaultUser qacafe + # testvar acsDefaultPassword qacafe123 + # testvar acsCpeDefaultUser qacafe + # testvar acsCpeDefaultPassword qacafe123 + # testvar acsCreatePortMapOnIGD no + # testvar acsPortMapPublicPort 20000 + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69DeviceType IGD + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DownloadConfig /path/to/config + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + + } + + } + +} + +SECTION "CDRouter USP Add-On" { + + # testvar supportsUSP no + + SECTION "Basic Controller Configuration" { + + # testvar uspControllerID proto::controller-id + # testvar uspControllerInterface wan + + # testvar uspControllerIpMode ipv4-only + # testvar uspControllerIpv4 6.0.0.2 + # testvar uspControllerIpv6 6000::2 + # testvar uspControllerPort auto + # testvar uspControllerPath /controller-path + + # testvar uspControllerUseNonPayloadProtection no + # testvar uspControllerUseSessionContext no + # testvar uspControllerMTP websocket + # testvar uspControllerMTPEncryption no + # testvar uspControllerUSPEncryption no + # testvar uspControllerDomain controller.cdroutertest.com + + # testvar uspSegmentationEnable no + # testvar uspSegmentationSize auto + + # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + + # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + + # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerVerifyRecordIntegrity no + + # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem + + # testvar uspControllerHost any + # testvar uspControllerUsername qacafe + # testvar uspControllerPassword qacafe123 + + } + + SECTION "Basic Agent Configuration" { + + # testvar uspAgentID proto::agent-id + + # testvar uspAgentIpv4 auto + # testvar uspAgentIpv6 auto + # testvar uspAgentPort auto + # testvar uspAgentPath /agent-path + + # testvar uspMessageTimeout 30 + # testvar uspNotificationTimeout 30 + # testvar uspRebootTimeout 120 + + } + + SECTION "USP Scenarios" { + + # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp + # testvar uspScenarioSingleMode no + # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp + + } + + SECTION "Data Model" { + + # testvar uspSkipParameters empty + # testvar uspModifyParameters empty + # testvar uspSupportedDataModel all + + SECTION "Custom USP Data Model" { + + IGNORE testvar_group usp_profile_1 { + + # testvar uspProfileName myVendorParameters + # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml + + } + + } + + } + + SECTION "USP Agent Data Model Configuration" { + + # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + + # testvar uspParameterPath1 Device.DeviceInfo.ModelName + # testvar uspParameterPath2 Device.IP.Interface.3.Enable + # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory + # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode + + # testvar uspNotificationParamNewValue myCustomParameterValue + + # testvar uspObject1 Device.IP.Interface. + # testvar uspObject2 Device.WiFi.AccessPoint. + + # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} + # testvar uspValidSearchPathResultParam PeriodicNotifInterval + # testvar uspValidSearchPathResultValue 5000 + + # testvar uspFirmwareImage /path/to/firmware.bin + # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin + # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 + + } + +} + +SECTION "CDRouter BBF.069 Add-On" { + + # testvar supportsBBF069 yes + + SECTION "General" { + + SECTION "ACS URL" { + + # testvar bbf069ACSURL http://acs1.broadband-forum.org + # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org + + } + + SECTION "Security Certificates" { + + # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem + # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem + # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem + # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem + # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem + # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem + + } + + SECTION "HTTP Verification" { + + # testvar bbf069HTTPVerification no + + } + + } + + SECTION "Device Specific" { + + SECTION "General" { + + # testvar bbf069RootDataModel InternetGatewayDevice + # testvar bbf069UnsupportedRPC ChangeDUState + # testvar bbf069UploadType "1 Vendor Configuration File" + # testvar bbf069ExpectedUpgradeTime 100 + + } + + SECTION "Data Model" { + + # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069ActiveParamType unsignedInt + # testvar bbf069ActiveParamValue 60 + + # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069CompletePath1Type unsignedInt + # testvar bbf069CompletePath1Value 73 + + # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable + # testvar bbf069CompletePath2Type boolean + # testvar bbf069CompletePath2Value true + + # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. + # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. + # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv + # testvar bbf069InvalidPathType unsignedInt + + # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer + # testvar bbf069UnwritableType string + # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 + + } + + } + +} diff --git a/.testbed/cdrouter/configurations/vlan-ipv6 b/.testbed/cdrouter/configurations/vlan-ipv6 new file mode 100644 index 0000000000..3ac1ac1bb2 --- /dev/null +++ b/.testbed/cdrouter/configurations/vlan-ipv6 @@ -0,0 +1,2677 @@ +SECTION "About" { + + # Cable/DSL Router Test Suite + # + # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 + # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) + # + # Local.conf + # + # This is the main configuration file for CDRouter. This file defines the + # configuration of the router under test and controls various aspects of + # CDRouter's behavior. This file consists of a number of unique test variables + # called 'testvars' which are grouped by interface, protocol, or functionality. + # The basic syntax for all testvars is: + # + # testvar NAME VALUE + +} + +SECTION "Base Configuration" { + + SECTION "WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.1.1 + # testvar wanIspAssignIp 202.254.1.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.1.2 + # testvar wanIspNextIp 202.254.1.3 + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar wanIspAssignMask 255.255.255.0 + # testvar IPv4HopCount 1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + # testvar dhcpServerRapidCommit yes + # testvar dhcpServerClientIDBehavior rfc6842 + # testvar dhcpServerResponseDelay 4500 + # testvar dhcpConnectOnDemand no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar wanDhcpClientOptionCode1 60 + # testvar wanDhcpClientOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "DHCP Authentication" { + + # testvar supportsDhcpAuth no + + } + + SECTION "PPPoE Server" { + + # testvar pppoeConnectOnDemand no + # testvar pppoeIdleTimeout 60 + testvar pppoeUser softathome + testvar pppoePassword softathome + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + # testvar pppoeAcCookie auto + # testvar pppoeMaxPayload none + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpConnectOnDemand yes + # testvar pptpServerIp 202.254.201.1 + # testvar pptpClientIp 202.254.201.2 + # testvar pptpUseDHCP no + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpConnectOnDemand yes + # testvar l2tpServerIp 202.254.201.1 + # testvar l2tpClientIp 202.254.201.2 + # testvar l2tpUseDHCP no + + } + + SECTION "DS-Lite" { + + # testvar ipv6DsliteAftr 3001:aaaa::1 + # testvar dhcpv6WanAftrName aftr.qacafe.com + # testvar dsliteFirewallMode address-restricted + + } + + SECTION "MAP / LW4o6" { + + # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: + # testvar mapBmrRuleIpv6PrefixLen 48 + # testvar mapBmrRuleIpv4Prefix 5.0.0.0 + # testvar mapBmrRuleIpv4PrefixLen 24 + # testvar mapBmrRuleEABitLen 16 + + # testvar mapSharingRatio 256 + # testvar mapStartPort 4096 + # testvar mapPsid 255 + + # testvar mapEnableDhcpv6Options yes + + SECTION "MAP-E / LW4o6" { + + # testvar mapTunnelFlowLabel 0 + # testvar mapTunnelHopLimit 64 + # testvar mapTunnelTrafficClass 0 + + } + + SECTION "MAP-T" { + + # testvar mapDmrIpv6Prefix 5001:db8:: + # testvar mapDmrIpv6PrefixLen 48 + + # testvar mapTosTranslate yes + + } + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + # testvar pppConnectionDelay 10 + # testvar pppRestartTimeout 300000 + # testvar pppFailUsesICMP no + + } + + SECTION "WAN 802.1q VLAN" { + + testvar wanVlanId 101 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "Wireless Access Point (AP)" { + + # testvar wanApBand 2.4GHz + # testvar wanApSSID qa-net + # testvar wanApChannel auto + + SECTION "WPA Authenticator" { + + # testvar wanApWpaMode RSN + # testvar wanApWpaKeyMgmt PSK + # testvar wanApWpaCipher CCMP-128 + # testvar wanApWpaGroupCipher auto + # testvar wanApWpaPMF auto + # testvar wanApWpaPsk qacafe123 + # testvar wanApWpaSaePassword "sae secret" + + } + } + + SECTION "WAN 802.1X and RADIUS" { + + SECTION "WAN RADIUS" { + + # testvar wanRadiusEnable no + # testvar wanRadiusInterface wan + # testvar wanRadiusIp 3.3.3.44 + # testvar wanRadiusSecret qacafe123 + # testvar wanRadiusServerAttrType1 200 + # testvar wanRadiusServerAttrData1 04040404 + + } + + SECTION "WAN EAP Settings" { + + # testvar wanEapType eap-md5 + + SECTION "WAN Supplicant Credentials" { + + # testvar wanEapIdentity1 user1 + # testvar wanEapPassword1 qacafe123 + + } + + SECTION "WAN Authentication Options" { + + # testvar wanEapRootCert /usr/cdrouter/tests/root.pem + # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem + # testvar wanEapServerCertPassword qacafe123 + # testvar wanEapFragmentSize 1024 + + } + + } + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.101.1 + # testvar wanBackupDnsServer 202.254.101.2 + # testvar wanBackupDnsServer2 0.0.0.0 + # testvar wanBackupDnsServer3 0.0.0.0 + # testvar DNStoDHCP no + # testvar supportsDnsProxy yes + # testvar supportsDnsCaching yes + # testvar dnsCacheSize 150 + # testvar dnsLookupTimeout 5 + # testvar dnsFailoverAuth "2 4 5" + # testvar dnsFailoverNonAuth "2 4 5" + # testvar dnsFailoverDelay 10 + # testvar dnsFailoverAttempts 20 + # testvar dnsRelayFailover 120 + # testvar dnsForwardServerStatus no + # testvar dnsUsageProfile opportunistic-privacy + # testvar dnsCaptive no + + SECTION "User Configurable DNS Entries" { + + # testvar dnsHostname1 test.qacafe.com + # testvar dnsIp1 5.5.5.5 + + } + + } + + SECTION "HTTP" { + + # testvar supportsHttpProxy yes + # testvar httpProxyIdleTimeout 30 + # testvar httpMaxHeaderCount 200 + + } + + SECTION "NTP" { + + # testvar ntpServer1 3.3.3.6 + # testvar ntpServerName1 time.nist.gov + # testvar ntpServer2 3.3.3.7 + # testvar ntpServerName2 time.foo.com + # testvar ntpStartDate "6/2/2007 11:00 am UTC" + # testvar ntpOffset 0 + # testvar enableRFC868TimeProtocol no + + } + + SECTION "Dynamic DNS" { + + # testvar supportsDynDns no + # testvar dynDnsServerIp 66.37.215.49 + # testvar dynDnsTransport http + # testvar dynDnsHostname test.domain.com + # testvar dynDnsUsername qacafe + # testvar dynDnsPassword qacafe123 + # testvar dynDnsSystem dyndns + # testvar dynDnsMx mail.domain.com + # testvar dynDnsBackMx no + # testvar dynDnsWildcard off + # testvar dynDnsAgent RAS/1.1 + # testvar dynDnsWait 30 + # testvar testDynDnsErrorCode no + # testvar dynDnsServerReturn !yours + + } + + SECTION "WINS Servers" { + + # testvar winsServer1 3.3.3.4 + # testvar winsServer2 3.3.3.5 + + } + + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanDomainName qacafe.com + # testvar lanMtu default + testvar lanHostname prplOS + # testvar lanGuestMode no + + SECTION "ARP Settings" { + + # testvar arpMode strict + # testvar arpSupportGratuitous yes + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + # testvar supportsDnsHostnameCreate no + + } + + SECTION "DHCP Client" { + + # testvar dhcpClientTimeout 5 + # testvar dhcpInform no + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpRapidCommit no + # testvar ipv4MaxLanClients auto + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpCreateDelay 0 + # testvar dhcpReleaseDelay 300 + # testvar dhcpServerMac auto + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + # testvar dhcpClientTrackSeconds no + # testvar dhcpClientRequestNtp no + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + SECTION "DHCP Client Extra Parameters" { + + # testvar dhcpExtraClientParams "69 70" + + } + + SECTION "DHCP Client Extra Options" { + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Hotspot Router Settings" { + + # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% + # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% + + SECTION "Hotspot Clients" { + + # testvar clientLoginName1 client1 + # testvar clientLoginPassword1 admin1 + + } + + SECTION "Advanced Hotspot Settings" { + + # testvar browserLoginProc example_login + # testvar browserLogoutProc example_logout + # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl + + } + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconRsnCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X and RADIUS" { + + SECTION "LAN RADIUS" { + + # testvar enableRADIUSserver yes + # testvar radiusHost remoteHost + # testvar radiusSecret qacafe123 + # testvar radiusServerAttrType1 200 + # testvar radiusServerAttrData1 04040404 + + } + + SECTION "LAN EAP Settings" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + SECTION "LAN Authentication Options" { + + # testvar eapRootCert /usr/cdrouter/tests/root.pem + # testvar eapServerCertPath /usr/cdrouter/tests/server.pem + # testvar eapServerCertPassword qacafe123 + # testvar eapFragmentSize 1024 + # testvar eapTxWhen 60 + # testvar eapQuietPeriod 60 + # testvar eapReAuthMax 2 + # testvar eapSendLogoffFailure yes + # testvar eapReAuthPeriod 0 + + } + + } + + } + + SECTION "LAN 802.1q VLAN" { + + testvar lanVlanId 201 + # testvar lanVlanPriority 0 + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "Firewall and NAT" { + + SECTION "NAT Options" { + + testvar natSimultaneousTcp yes + # testvar natSrcPort0 yes + # testvar natSupportsP2P yes + # testvar natPortParity yes + # testvar natMode port-restricted + # testvar natVerifyIpId yes + # testvar defaultTcpEchoPort 50000 + # testvar defaultUdpEchoPort 50000 + # testvar natRefreshBehavior both + + SECTION "NAT Timers" { + + # testvar natFinTimeout disabled + # testvar natRstTimeout disabled + # testvar natTcpTimeout disabled + # testvar natSynTimeout disabled + # testvar natUdpTimeout disabled + # testvar natDnsTimeout disabled + # testvar natIcmpTimeout disabled + # testvar natRtspTimeout disabled + # testvar natLagTime 0 + + } + + } + + SECTION "Protocol Pass Through" { + + SECTION "IPSEC Pass Through" { + + # testvar supportsIPSECpass yes + # testvar ipsecMaxTunnels 20 + # testvar ipsecScaleSameServer no + # testvar alwaysUseIke no + # testvar ipsecPassRetransmit no + # testvar unknownPassthrough yes + + } + + SECTION "PPTP Pass Through" { + + # testvar supportsPPTPpass yes + # testvar pptpMaxTunnels 20 + + } + + SECTION "L2TP Pass Through" { + + # testvar supportsL2TPpass yes + # testvar l2tpMaxTunnels 20 + + } + + SECTION "PPPoE Pass Through" { + + # testvar supportsPPPoEpass no + + } + + } + + SECTION "Port Triggers" { + + # testvar portTriggers no + # testvar portTriggerTimeout 0 + # testvar portTriggerDelay 0 + # testvar portTriggerOpenDelay 0 + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "Application Layer Gateways (ALGs)" { + + SECTION "MSN Messenger" { + + # testvar supportsMsnAlg no + # testvar msnNotificationServerPort 1863 + # testvar msnSwitchBoardServerPort 1863 + + } + + SECTION "RTSP" { + + # testvar supportsRtspAlg no + # testvar rtspTeardownDelay 5 + # testvar rtspGetParameterInterval 5 + + } + + SECTION "SIP" { + + # testvar supportsSipAlg yes + # testvar sipInterface wan + # testvar sipServerIp 3.3.3.8 + # testvar ipv6SipServerIp 3001:051a:cafe::4 + # testvar sipCallTeardownDelay 5 + # testvar sipMaxOutboundCalls 10 + # testvar sipMaxInboundCalls 10 + # testvar sipCallPacing 0 + # testvar sipScaleRunTime 30 + # testvar sipScaleServerPort 5060 + # testvar sipScaleClientPort 5060 + # testvar sipMaxUserNames -1 + # testvar rtpSendInterval 5000 + + } + + SECTION "FTP" { + + # testvar ftpPortTimeout 120 + + } + + } + + SECTION "Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + SECTION "Port Scanning, Firewall and DoS Options" { + + # testvar portScanStart 0 + # testvar portScanStop 65535 + # testvar portScanDelay 1 + testvar firewallTcpOpenPorts "50805" + # testvar firewallTcpClosedPorts 2323 + # testvar firewallUdpOpenPorts 1234 + testvar firewallUdpClosedPorts 68 + # testvar firewallOutBlockedTcpPorts 1234 + # testvar firewallOutBlockedUdpPorts 1234 + # testvar firewallOutBlockedIpProtos 0 + # testvar wanPingRespond no + + SECTION "Denial of Service Options" { + + # testvar dosRecoveryTime 5 + # testvar dosAttackAttempts 100 + # testvar dutMgmtPort 80 + # testvar dutSecureMgmtPort disabled + # testvar dosSynAttackPort 80 + # testvar dosSynAttackAttempts 100 + + } + + SECTION "Deprecated SSL Protocols and Ciphers" { + + # testvar sslDeprecatedProtocols "sslv2 sslv3" + # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" + + } + + } + + SECTION "DMZ" { + + # testvar lanDmzHost 192.168.1.253 + # testvar lanDmzTcpPortExceptions 113 + # testvar lanDmzUdpPortExceptions 1234 + # testvar lanDmzIpProtoExceptions 2,47 + # testvar lanDmzSupportsIcmp no + + } + + SECTION "URL Filtering" { + + # testvar urlFilterSupported no + # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" + # testvar non-filtered-urls http://qacafe.com + # testvar urlFilterBlockedText "This website is blocked" + + } + + SECTION "XBox Live Options" { + + # testvar xboxNatMinType open + # testvar xboxPort 3074 + # testvar xboxMtu 1364 + + } + + } + + SECTION "Advanced Protocols" { + + SECTION "RIP v1/v2" { + + # testvar ripSupported no + # testvar ripVersion 1 + # testvar ripV2mode multicast + # testvar ripAuthMode none + # testvar ripPassword qacafe123 + # testvar ripMaxRoutes 96 + # testvar ripRouteTimeout 180 + # testvar ripGarbageTimeout 120 + # testvar ripRouteDelay 5000 + # testvar ripAcceptWanUpdate no + + } + + SECTION "UPnP" { + + # testvar upnpSupported yes + # testvar upnpVersion 1.1 + # testvar upnpDevice InternetGatewayDevice:2 + # testvar upnpWANPPPConnection no + # testvar upnpLANDevice no + # testvar upnpMaxTcpMappings 10 + # testvar upnpMaxSubClients 10 + # testvar upnpMinSubTimeout 40 + # testvar upnpMaxSubTimeout 3600 + # testvar upnpWANFailureTimeout 120 + # testvar upnpPortStart 40000 + # testvar upnpPortStop 50000 + + } + + SECTION "LLDP" { + + # testvar supportsLLDP no + # testvar lldpLanMac none + # testvar lldpLanChassisMac auto + # testvar lldpMsgFastTx 1 + # testvar lldpMsgTxInterval 30 + # testvar lldpTxFastInit 4 + + } + + SECTION "IGMP (Multicast)" { + + # testvar supportsMulticast yes + # testvar multicastType proxy + # testvar supportsMulticastOut no + # testvar igmpVersion 2 + # testvar igmpFastLeave no + # testvar igmpRouterOption yes + # testvar igmpMaxGroups 64 + # testvar multicastCacheTimeout 10 + # testvar multicastPoolStart 224.0.1.0 + # testvar multicastPoolStop 239.255.255.255 + # testvar SSMulticastPoolStart 232.0.1.1 + # testvar SSMulticastPoolStop 232.0.1.255 + # testvar multicastJoinDelay 2 + # testvar multicastScaleDelay 1 + # testvar multicastInterface wan + # testvar multicastBypassPPPoE no + + SECTION "IGMP Timers" { + + # testvar igmpQueryInterval 125 + # testvar igmpRobustnessVariable 2 + # testvar igmpQueryResponseInterval 10 + + } + + SECTION "IPTV Options" { + + # testvar iptvChannelRange 200 + # testvar iptvChannelChangeDelay 200 + # testvar iptvMaxFailures 10 + + } + + } + + SECTION "GRE Tunnels" { + + # testvar greDFflag on + + IGNORE testvar_group greTunnel1 { + + SECTION "Generic IPv4 GRE Tunnel Endpoints" { + + # testvar greType IPv4 + # testvar greEndpoint 5.5.5.5 + # testvar greLocalNet 192.168.1.0 + # testvar greLocalMask 255.255.255.0 + + } + + SECTION "L2GRE Options" { + + # testvar greWanGroup wan2 + + } + + SECTION "L3GRE Remote IPv4 Network" { + + # testvar greHost 3.0.0.1 + # testvar greRemoteNet 3.0.0.0 + # testvar greRemoteMask 255.0.0.0 + + } + + } + + } + + } + + SECTION "Additional Features" { + + # testvar supportsIPv4 yes + # testvar internalSmtpServer 5.5.5.5 + # testvar remoteHostIp 3.3.3.3 + # testvar startOtherLanFirst no + # testvar cdrouterOui B0750C + # testvar forwardingMaxFailures 20 + # testvar forwardingPort 5001 + # testvar jumboMtu disabled + # testvar tcpUdpPortStart 10000 + + SECTION "General Purpose HTTP Server" { + + # testvar httpServerIp 3.3.3.16 + # testvar httpServerPort 80 + # testvar httpServerRoot /tmp + + } + + SECTION "Free Network Range" { + + # testvar FreeNetworkStart 200.0.0.0 + # testvar FreeNetworkMask 255.255.255.0 + # testvar FreeNetworkStop 201.0.0.0 + + } + + SECTION "TCP MSS Clamping" { + + # testvar mssClampingValue default + # testvar mssClampingInValue default + + } + + SECTION "TCP/UDP Scaling Options" { + + # testvar scaleTcpConnsPerHost 5 + # testvar natMaxTcpConns 200 + # testvar natMaxUdpConns 100 + + } + + SECTION "Global Wireless Options" { + + # testvar wirelessRetry 3 + # testvar lanWirelessMaxClients auto + # testvar wifiCapture off + # testvar wifiCaptureFilter {} + + } + + } + + SECTION "Test Execution Options and Auto-Reboot" { + + # testvar startDelay 3 + # testvar lanStartDelay 3 + # testvar startTimeout 90 + # testvar wanCloseOnExit yes + # testvar RestartDut none + # testvar RestartDutDelay disabled + # testvar ShutdownDut "echo -n" + # testvar cpeRebootMode skip + # testvar healthCheckEnable no + + } + +} + +SECTION "CDRouter DOCSIS Add-On" { + + # testvar supportsDocsis no + + SECTION "Basic Configuration" { + + # testvar docsisIpProvisioningMode ipv4-only + # testvar docsisBootDelay 30 + + # testvar docsisClientMac auto + + } + + SECTION "IPv4 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIp 10.10.10.1 + # testvar docsisMask 255.255.255.0 + + } + + SECTION "DHCPv4 Server" { + + # testvar docsisDhcpServer 10.10.10.3 + # testvar docsisAssignIp 10.10.10.2 + # testvar docsisDomain docsis.qacafe.com + # testvar docsisDhcpLeaseTime 300 + # testvar docsisDhcpRapidCommit no + + # testvar docsisDhcpServerOptionCode1 69 + # testvar docsisDhcpServerOptionData1 04040404 + + # testvar docsisDhcpClientOptionCode1 60 + # testvar docsisDhcpClientOptionData1 04040404 + + SECTION "DHCPv4 Relay" { + + # testvar docsisGateway 6.6.6.7 + # testvar docsisAssignGateway 6.6.6.6 + # testvar docsisAssignMask 255.255.255.0 + # testvar docsisDhcpRelayServer 6.6.6.7 + + } + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogServer 10.10.10.5 + # testvar docsisTimeServer 10.10.10.6 + # testvar docsisTftpServer 10.10.10.4 + + } + + } + + SECTION "IPv6 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIpv6 8001::1 + # testvar docsisIpv6PrefixLen 64 + + } + + SECTION "DHCPv6 Server" { + + # testvar docsisDhcpIpv6Server 8001::3 + # testvar docsisAssignIpv6 8001::2 + # testvar docsisDHCPv6PreferredLifetime 300 + # testvar docsisDHCPv6ValidLifetime 300 + # testvar docsisDhcpv6RapidCommit no + + # testvar docsisDhcpv6ServerOptionCode1 69 + # testvar docsisDhcpv6ServerOptionData1 04040404 + + # testvar docsisDhcpv6ClientOptionCode1 60 + # testvar docsisDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Relay" { + + # testvar docsisIpv6Gateway 9001::1 + # testvar docsisAssignIpv6PrefixLen 64 + # testvar docsisDhcpv6RelayServer 9001::1 + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogIpv6Server 8001::5 + # testvar docsisTimeIpv6Server 8001::6 + # testvar docsisTftpIpv6Server 8001::4 + + } + + } + + SECTION "CM Config File" { + + SECTION "Global TFTP Settings" { + + # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp + # testvar docsisTftpBootFile auto-docsis.bin + + } + + SECTION "Embedded Config File" { + + # testvar docsisConfig { + # Main + # { + # NetworkAccess 1; + # BaselinePrivacy + # { + # AuthTimeout 10; + # ReAuthTimeout 10; + # AuthGraceTime 600; + # OperTimeout 1; + # ReKeyTimeout 1; + # TEKGraceTime 600; + # AuthRejectTimeout 60; + # SAMapWaitTimeout 1; + # SAMapMaxRetries 4; + # } + # MaxCPE 3; + # UsServiceFlow + # { + # UsServiceFlowRef 2; + # QosParamSetType 7; + # } + # DsServiceFlow + # { + # DsServiceFlowRef 1; + # QosParamSetType 7; + # } + # SNMPv1v2cCoexistenceConfig + # { + # SNMPv1v2cCommunityName "public"; + # SNMPv1v2cTransportAddressAccess + # { + # SNMPv1v2cTransportAddress 0.0.0.0/0; + # SNMPv1v2cTransportAddressMask 0.0.0.0/0; + # } + # SNMPv1v2cAccessViewType 2; + # SNMPv1v2cAccessViewName "docsisManagerView"; + # } + # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ + # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ + # /*EndOfDataMkr*/ + # } + # } + + } + + SECTION "Vendor Defined Config File" { + + # testvar docsisConfigFile none + + } + + } + + SECTION "CM Firewall Configuration" { + + SECTION "IPv4" { + + # testvar docsisTcpOpenPorts "22 443" + # testvar docsisTcpClosedPorts all + # testvar docsisUdpOpenPorts 1234 + # testvar docsisUdpClosedPorts all + + } + + SECTION "IPv6" { + + # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" + # testvar docsisIpv6TcpClosedPorts "2323 80" + # testvar docsisIpv6UdpOpenPorts 1234 + # testvar docsisIpv6UdpClosedPorts 113 + + } + + } + +} + +SECTION "CDRouter HomeKit Add-On" { + + # testvar supportsHomeKit no + + # testvar homeKitRouterName "HomeKit Router" + # testvar homeKitHATHostname hat.local + # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ + # testvar homeKitRouterSetupCode + + # testvar homeKitManualEnabled yes + +} + +SECTION "CDRouter IKE Add-On" { + + SECTION "Global IKE Options" { + + # testvar ikeMaxPhase2SA 20 + # testvar ikeDeadPeerDetection no + # testvar ikeNewQuickModeDelay 1000 + # testvar ikeKeepAlive 20 + # testvar ikeMinimumLifetime 20 + # testvar ipsecMinimumLifetime 20 + # testvar ikePhase2DeleteDelay 100 + # testvar ikeMaxTransforms 21 + # testvar ikeInitialContact yes + # testvar ikeBringUpTunnels yes + # testvar ikeAlwaysInitiate no + # testvar useSameIpsecTunnel no + # testvar ikeNatTraversal no + # testvar ike_FQDN fqdn-test.cdrouter.com + # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com + + } + + SECTION "IPsec Tunnel Configurations" { + + SECTION "IPsec Tunnel Configuration 1" { + + # testvar ipsecTunnelKeyType1 manual + # testvar ipsecTunnelEndpoint1 5.0.0.1 + # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 + # testvar ipsecTunnelRemoteMask1 255.255.255.0 + # testvar ipsecTunnelHost1 5.0.0.2 + + SECTION "Manual IPsec Tunnel Configuration" { + + # testvar ipsecTunnelOutboundSpi1 1000 + # testvar ipsecTunnelOutEncrypt1 des + # testvar ipsecTunnelOutEncryptKey1 0102030405060708 + # testvar ipsecTunnelOutAuth1 md5-hmac + # testvar ipsecTunnelOutAuthKey1 6262626262626262 + # testvar ipsecTunnelInboundSpi1 1001 + # testvar ipsecTunnelInEncrypt1 des + # testvar ipsecTunnelInEncryptKey1 0102030405060708 + # testvar ipsecTunnelInAuth1 md5-hmac + # testvar ipsecTunnelInAuthKey1 6262626262626262 + + } + + SECTION "IKE IPsec Tunnel Configuration" { + + # testvar ipsecTunnelIkeEncrypt1 des + # testvar ipsecTunnelIkeAuth1 md5-hmac + # testvar ipsecTunnelIkeGroup1 1 + # testvar ipsecTunnelIkeLifetime1 300 + # testvar ipsecTunnelEncrypt1 3des + # testvar ipsecTunnelAuth1 sha1-hmac + # testvar ipsecTunnelPfsGroup1 1 + # testvar ipsecTunnelLifetime1 120 + # testvar ipsecTunnelPsk1 qacafe123 + # testvar ipsecTunnelIkeMode1 main + # testvar ipsecTunnelUsesNat1 no + + } + + } + + } + +} + +SECTION "CDRouter IPv6 Add-On" { + + testvar supportsIPv6 yes + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001::1 + # testvar ipv6WanIspAssignIp 3001::2 + # testvar ipv6WanIspNextIp 3001::3 + # testvar ipv6WanIspPrefixLen 64 + # testvar ipv6WanDutDuid 00000000 + # testvar ipv6RelayServer 192.88.99.1 + # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 + # testvar ipv6rdPrefix 2001:1234:: + # testvar ipv6rdPrefixLen 32 + # testvar ipv6rdIPv4MaskLen 0 + # testvar ipv6rdDHCPv4Option yes + # testvar ipv6TunnelMtuType static + # testvar ipv6WanMtu 1500 + # testvar ipv6WanMtuOption no + # testvar ipv6RASendInterval 10 + # testvar ipv6ExpectRAonWan no + + SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { + + # testvar ipv6WanIspGateway 3001::9 + # testvar ipv6WanAssignPrefixLen 64 + # testvar IPv6HopCount 1 + # testvar dhcpv6RelayServer 3001::9 + + } + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + # testvar ipv6WanRDNSS no + # testvar ipv6WanDNSSL no + + } + + SECTION "DHCPv6 Server" { + + # testvar dhcpv6IAValidLifetime 300 + # testvar dhcpv6IAPreferredLifetime 300 + # testvar dhcpv6DuidType 1 + # testvar dhcpv6RestartLatency 10 + # testvar dhcpv6ServerRapidCommit yes + + # testvar dhcpv6ServerOptionCode1 69 + # testvar dhcpv6ServerOptionData1 04040404 + + # testvar wanDhcpv6ClientOptionCode1 60 + # testvar wanDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Authentication" { + + # testvar supportsDhcpv6Auth no + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: + # testvar dhcpv6WanAssignPrefixLen 48 + # testvar dhcpv6PDLatency 30 + + } + + SECTION "IPv6 NTP" { + + # testvar ipv6NtpServer1 4321::23 + # testvar ipv6NtpServerName1 time.nist.gov + + # testvar ipv6NtpServer2 4321::24 + # testvar ipv6NtpServerName2 time.foo.com + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + testvar ipv6LanIp 3001:dddd::1 + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanPrefixLen 64 + # testvar ipv6MaxLanClients 32 + # testvar ipv6RAInterval 300 + # testvar ipv6LanSubnetId 1 + + SECTION "DHCPv6 Client" { + + # testvar dhcpv6ClientTimeout 5 + # testvar ipv6DhcpClientStart ::2 + # testvar ipv6DhcpClientEnd ::1f + # testvar ipv6DhcpClientExclude "::3 ::7" + # testvar ipv6DhcpClientValidLifetime 86400 + # testvar dhcpv6RapidCommit yes + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + SECTION "IPv6 LAN DNS" { + + # testvar ipv6DNStoLAN yes + # testvar ipv6RdnssSupport yes + # testvar ipv6DnsslSupport yes + # testvar ipv6LanStaticDns no + + } + + SECTION "Unique Local Address (ULA) Options" { + + # testvar supportsULA no + # testvar ipv6LanULAPrefix fd00:: + # testvar ipv6LanULAIp ::%eui64% + # testvar ipv6LanULAMode autoconf + + } + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + } + + SECTION "IPv6 Firewall" { + + # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" + # testvar ipv6FirewallTcpClosedPorts "2323 80" + # testvar ipv6FirewallUdpOpenPorts 1234 + # testvar ipv6FirewallUdpClosedPorts 113 + # testvar ipv6FirewallOutBlockedTcpPorts 1234 + # testvar ipv6FirewallOutBlockedUdpPorts 1234 + # testvar ipv6FirewallOutBlockedIpProtos 0 + # testvar ipv6WanPingRespond no + + SECTION "IPv6 TCP MSS Clamping" { + + # testvar ipv6MssClampingValue default + # testvar ipv6MssClampingInValue default + # testvar ipv6MssClampingTestPort 8096 + + } + + } + + SECTION "IPv6 Advanced Protocols" { + + SECTION "RIPng" { + + # testvar supportsRIPng no + + } + + SECTION "MLD (IPv6 Multicast)" { + + # testvar supportsIPv6Multicast yes + # testvar supportsIPv6MulticastOut no + # testvar mldVersion 2 + # testvar mldMaxGroups 64 + # testvar mldFastLeave no + # testvar ipv6MulticastCacheTimeout 10 + # testvar ipv6MulticastJoinDelay 2 + # testvar ipv6MulticastScaleDelay 1 + + SECTION "MLD Timers" { + + # testvar mldQueryInterval 125 + # testvar mldRobustnessVariable 2 + # testvar mldQueryResponseInterval 10 + + } + + SECTION "IPv6 IPTV Options" { + + # testvar ipv6IptvChannelRange 200 + # testvar ipv6IptvChannelChangeDelay 200 + # testvar ipv6IptvMaxFailures 10 + + } + + } + + } + + SECTION "IPv6 Additional Features" { + + SECTION "IPv6 Free Network Range" { + + # testvar ipv6RemoteHost 3001:051a:cafe::1 + # testvar ipv6FreeNetworkStart 3001:cafe:1:: + # testvar ipv6FreeNetworkPrefixLen 64 + # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: + + } + + SECTION "IPv6 Multicast Pool Ranges" { + + # testvar ipv6MulticastPoolStart ff0e::1 + # testvar ipv6MulticastPoolStop ff0e:ffff:: + # testvar ipv6SSMulticastPoolStart ff3e::8000:1 + # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff + + } + + } + +} + +SECTION "CDRouter Multiport Add-On" { + + SECTION "Additional WAN Interface Setup" { + + # testvar wanFailoverTimeout 300 + + IGNORE testvar_group wan2 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.2.1 + # testvar wanIspAssignIp 202.254.2.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.2.2 + # testvar wanIspNextIp 202.254.2.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.202.1 + # testvar pptpClientIp 202.254.202.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.202.1 + # testvar l2tpClientIp 202.254.202.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.102.1 + # testvar wanBackupDnsServer 202.254.102.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:2::1 + # testvar ipv6WanIspAssignIp 3001:0:0:2::2 + # testvar ipv6WanIspNextIp 3001:0:0:2::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + IGNORE testvar_group wan3 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.3.1 + # testvar wanIspAssignIp 202.254.3.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.3.2 + # testvar wanIspNextIp 202.254.3.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.203.1 + # testvar pptpClientIp 202.254.203.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.203.1 + # testvar l2tpClientIp 202.254.203.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.103.1 + # testvar wanBackupDnsServer 202.254.103.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:3::1 + # testvar ipv6WanIspAssignIp 3001:0:0:3::2 + # testvar ipv6WanIspNextIp 3001:0:0:3::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + } + + SECTION "Additional LAN Interface Setup" { + + # testvar useSameLanInterface no + + IGNORE testvar_group lan2 { + + SECTION "IPv4 LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanGuestMode no + + SECTION "LAN Host IP" { + + # testvar hostIp 192.168.1.0 + # testvar hostMask 255.255.255.0 + # testvar hostGateway 192.168.1.1 + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "DHCP Client Configuration" { + + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + # testvar dhcpExtraClientParams "69 70" + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Configuration Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + } + + SECTION "IPv4 Firewall and NAT" { + + SECTION "Static NAT" { + + # testvar staticNatIp 202.254.1.2 + # testvar staticNatFirewall yes + # testvar natMode port-restricted + + } + + SECTION "Special Application Port Triggers" { + + # testvar portTriggers no + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "TCP and UDP Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanStaticDns no + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + + SECTION "LAN IPv6 DHCP Client" { + + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + + } + + } + +} + +SECTION "CDRouter Performance Add-On" { + + # testvar supportsPerformance no + + SECTION "Basic Configuration" { + + # testvar perfWanIp 202.254.1.4 + # testvar perfWanIpv6 3001::4 + # testvar perfPort 19750 + # testvar perfPort2 19751 + + } + + SECTION "Performance Settings" { + + # testvar perfDuration 10 + # testvar perfDownloadBandwidth 0.0 + # testvar perfInterval auto + # testvar perfIncrement 5 + # testvar perfStreams 1 + # testvar perfStreamIncr 0 + # testvar perfUdpLen auto + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + # testvar perfOmit 0 + # testvar perfDSCP 0 + # testvar perfFairness no + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresholds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + SECTION "Advanced Options" { + + # testvar perfPingEnable no + # testvar perfEnableCapture no + # testvar perfLatencyAttempts 25 + # testvar perfApplicationAttempts 4 + # testvar perfApplicationDelay 100 + + } + + SECTION "Wireless" { + + IGNORE testvar_group wireless-performance { + + SECTION "Performance Settings" { + + # testvar perfDownloadBandwidth 0.0 + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresolds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + } + + } + +} + +SECTION "CDRouter Security Add-On" { + + SECTION "Internet Connection Sharing (ICS)" { + + # testvar enableICS no + # testvar icsInterface eth0 + # testvar icsShareIPv4 yes + # testvar icsShareIPv6 yes + + } + + SECTION "Traffic Analysis" { + + # testvar enableSuricata no + + } + + SECTION "Nmap Scans" { + + # testvar enableNmap no + # testvar nmapPorts 0-65535 + # testvar nmapScanTimeout 600 + # testvar nmapTimingTemplate 5 + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleBase auto + # testvar internetScheduleTimeZone auto + # testvar internetScheduleBlockedText "This website is blocked" + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + +} + +SECTION "CDRouter SNMP Add-On" { + + # testvar supportsSnmp no + + # testvar snmpPort 161 + # testvar snmpDefaultUser auto + # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" + # testvar snmpUpdateDelay 15 + + SECTION "SNMP Options and Users" { + + # testvar snmpManagerIp 3.3.3.33 + # testvar snmpManagerIpv6 3001:051a:cafe::33 + + IGNORE testvar_group snmpuser1 { + + # testvar snmpVersion 2c + + # testvar snmpAccess read-only + # testvar snmpTransport udp + # testvar snmpRetries 5 + # testvar snmpTimeout 5 + + SECTION "SNMP v1/2c Configuration" { + + # testvar snmpCommunity public + + } + + SECTION "SNMP v3 Configuration" { + + # testvar snmpSecurityLevel noAuthNoPriv + + # testvar snmpAuthProtocol MD5 + # testvar snmpAuthUsername qacafe + # testvar snmpAuthPassword qacafe123 + + # testvar snmpPrivacyProtocol DES + # testvar snmpPrivacyPassword qacafe123 + + # testvar snmpContextName bridge1 + # testvar snmpSecurityEngineId 800000020109840301 + # testvar snmpContextEngineId 800000020109840301 + + } + + } + + } + + SECTION "SNMP Scenarios" { + + # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp + # testvar snmpScenarioSingleMode no + # testvar snmpScenarioInterface lan + # testvar snmpScenarioIpVersion IPv4 + + } + +} + +SECTION "CDRouter Storage Add-On" { + + # testvar supportsStorage no + + # testvar storageFileSize 10 + # testvar storageUserFilePath none + # testvar useMulticastDNS no + + SECTION "SMB Options and Users" { + + # testvar supportsStorageSmb yes + # testvar storageSmbMaxSessions 20 + # testvar storageSmbTimeout 120 + # testvar storageSmbPacing 0 + + IGNORE testvar_group smbuser1 { + + # testvar server MyNAS + # testvar share data + # testvar folder /home/qacafe + # testvar guest no + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + + SECTION "FTP Options and Users" { + + # testvar supportsStorageFtp yes + # testvar supportsStorageFtps yes + # testvar storageFtpMaxSessions 20 + # testvar storageFtpTimeout 120 + # testvar storageFtpPacing 0 + + IGNORE testvar_group ftpuser1 { + + # testvar server MyNAS + # testvar path /home/qacafe + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + +} + +SECTION "CDRouter TR-069 Add-On" { + + testvar supportsCWMP no + + SECTION "Basic ACS Configuration" { + + # testvar acsIp 6.0.0.1 + # testvar acsPort 80 + testvar acsDomain acs-download.qacafe.com + # testvar acsTransport http + # testvar acsAuth digest + # testvar acsDigestQopAuth yes + # testvar acsInterface wan + testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ + # testvar acsWaitForInform 120 + # testvar acsSkipInitialInform no + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar cwmpProtocolVersion 1.0 + # testvar acsDeviceDiscovery no + # testvar acsConfigurePeriodicInform yes + # testvar tr69InitiateConnection yes + testvar acsDefaultUser cdrouter + testvar acsDefaultPassword cdrouter + testvar acsCpeDefaultUser acs + testvar acsCpeDefaultPassword acs + # testvar acsFileServerUser file_server_user + # testvar acsFileServerPassword file_server_password + + } + + SECTION "XMPP Connection Request Configuration" { + + # testvar acsSupportsXmppConnReq no + + # testvar acsXmppServerConnectAlgorithm DNS-SRV + # testvar acsXmppConnReqUsername qacafe + # testvar acsXmppConnReqResource cdrouter + # testvar acsXmppConnReqPassword qacafe123 + # testvar acsXmppConnReqUseTls no + + } + + SECTION "Advanced ACS Configuration" { + + # testvar acsCpeKeepAlive yes + # testvar acsChunkedEncoding no + # testvar acsChunkSize 64 + # testvar acsAuthOncePerSession no + # testvar acsCookieMode rfc6265 + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + # testvar acsNumberCpeAttempts 2 + # testvar acsDelayCpeAttempts 10 + # testvar acsWaitForConnectionRequest yes + # testvar acsUseTcpOffload yes + # testvar acsTargetDevice tr069_device2 + # testvar acsDualStackIp 6000::1 + # testvar acsStrictSyntaxChecking on + + } + + SECTION "SSL Configuration" { + + # testvar acsSslVersion tls + # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem + # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem + # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsCipherSuite auto + # testvar acsClientCaCertPath /path/to/client/ca/file + + } + + SECTION "Profiles" { + + # testvar cwmpSupportedDataModel auto + # testvar cwmpDataValidation yes + # testvar cwmpSkipParameters empty + # testvar cwmpModifyParameters empty + # testvar cwmpVendorSpecificParams none + + SECTION "Custom CWMP Profiles" { + + IGNORE testvar_group cwmp_profile1 { + + # testvar cwmpProfileName myVendorParameters + # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp + # testvar cwmpProfileObject InternetGatewayDevice:1 + + } + + } + + } + + SECTION "CWMP Scenarios" { + + # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp + # testvar cwmpScenarioSingleMode no + # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp + + } + + SECTION "Additional TR-069 Options" { + + # testvar tr69DeviceType IGD + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69InformTimeout 120 + # testvar tr69MinPeriodicInform 60 + # testvar tr69ScheduleInformRPC yes + # testvar tr69UploadRPC no + # testvar tr69UploadPath /tmp + # testvar tr69ConfigUploadFilename vendor_configuration_file + # testvar tr69LogUploadFilename vendor_log_file + # testvar tr69FactoryResetRPC no + # testvar tr69CpeGetRPCs no + # testvar tr69ForceBoolean no + # testvar tr69XMLCapturePath /tmp/tr69-xml + # testvar tr69DownloadTimeout 600 + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadImageVersion 1.0 + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69RebootTimeout 300 + # testvar tr69RpcTimeout 180 + # testvar tr69DownloadConfig /path/to/config + # testvar tr69MaxUserNameLen 256 + # testvar tr69MaxPasswordLen 256 + # testvar tr69MaxCpeUserNameLen 256 + # testvar tr69MaxCpePasswordLen 256 + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DUInstallImageVersion 1.0 + # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image + # testvar tr69DUInstallImageAlternateVersion 1.0 + # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb + # testvar tr69DUChangeExecEnvRef openwrt + # testvar tr69DUChangeTimeout 600 + # testvar tr69WildcardPortMappingOnly no + # testvar tr69PortMapDeletionDelay 15 + # testvar tr69PortMapCreationDelay 0 + # testvar tr69PortMapDisableDelay 15 + # testvar tr69TraceRouteTimeout 120 + + } + + SECTION "TR-111 Parts 1 and 2" { + + # testvar supportsTr111Part1 yes + # testvar supportsTr111Part2 no + # testvar STUNMaximumKeepAlivePeriod 60 + # testvar STUNMinimumKeepAlivePeriod 60 + # testvar STUNAuth no + # testvar STUNUsername qacafe + # testvar STUNPassword qacafe123 + # testvar acsUdpConnectionDelay 0 + + } + + SECTION "TR-143 Performance Tests" { + + # testvar tr143HttpDownloadSize 1000000 + # testvar tr143HttpUploadSize 1000000 + + # testvar tr143HttpDownloadHighThreshold 0.0 + # testvar tr143HttpDownloadLowThreshold 5.0 + # testvar tr143HttpDownloadResponseMax 60 + + # testvar tr143HttpUploadHighThreshold 0.0 + # testvar tr143HttpUploadLowThreshold 5.0 + # testvar tr143HttpUploadResponseMax 60 + + } + + SECTION "TR-069 LAN Side Devices" { + + IGNORE testvar_group tr069_device2 { + + # testvar acsDefaultUser qacafe + # testvar acsDefaultPassword qacafe123 + # testvar acsCpeDefaultUser qacafe + # testvar acsCpeDefaultPassword qacafe123 + # testvar acsCreatePortMapOnIGD no + # testvar acsPortMapPublicPort 20000 + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69DeviceType IGD + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DownloadConfig /path/to/config + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + + } + + } + +} + +SECTION "CDRouter USP Add-On" { + + # testvar supportsUSP no + + SECTION "Basic Controller Configuration" { + + # testvar uspControllerID proto::controller-id + # testvar uspControllerInterface wan + + # testvar uspControllerIpMode ipv4-only + # testvar uspControllerIpv4 6.0.0.2 + # testvar uspControllerIpv6 6000::2 + # testvar uspControllerPort auto + # testvar uspControllerPath /controller-path + + # testvar uspControllerUseNonPayloadProtection no + # testvar uspControllerUseSessionContext no + # testvar uspControllerMTP websocket + # testvar uspControllerMTPEncryption no + # testvar uspControllerUSPEncryption no + # testvar uspControllerDomain controller.cdroutertest.com + + # testvar uspSegmentationEnable no + # testvar uspSegmentationSize auto + + # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + + # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + + # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerVerifyRecordIntegrity no + + # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem + + # testvar uspControllerHost any + # testvar uspControllerUsername qacafe + # testvar uspControllerPassword qacafe123 + + } + + SECTION "Basic Agent Configuration" { + + # testvar uspAgentID proto::agent-id + + # testvar uspAgentIpv4 auto + # testvar uspAgentIpv6 auto + # testvar uspAgentPort auto + # testvar uspAgentPath /agent-path + + # testvar uspMessageTimeout 30 + # testvar uspNotificationTimeout 30 + # testvar uspRebootTimeout 120 + + } + + SECTION "USP Scenarios" { + + # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp + # testvar uspScenarioSingleMode no + # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp + + } + + SECTION "Data Model" { + + # testvar uspSkipParameters empty + # testvar uspModifyParameters empty + # testvar uspSupportedDataModel all + + SECTION "Custom USP Data Model" { + + IGNORE testvar_group usp_profile_1 { + + # testvar uspProfileName myVendorParameters + # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml + + } + + } + + } + + SECTION "USP Agent Data Model Configuration" { + + # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + + # testvar uspParameterPath1 Device.DeviceInfo.ModelName + # testvar uspParameterPath2 Device.IP.Interface.3.Enable + # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory + # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode + + # testvar uspNotificationParamNewValue myCustomParameterValue + + # testvar uspObject1 Device.IP.Interface. + # testvar uspObject2 Device.WiFi.AccessPoint. + + # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} + # testvar uspValidSearchPathResultParam PeriodicNotifInterval + # testvar uspValidSearchPathResultValue 5000 + + # testvar uspFirmwareImage /path/to/firmware.bin + # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin + # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 + + } + +} + +SECTION "CDRouter BBF.069 Add-On" { + + # testvar supportsBBF069 yes + + SECTION "General" { + + SECTION "ACS URL" { + + # testvar bbf069ACSURL http://acs1.broadband-forum.org + # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org + + } + + SECTION "Security Certificates" { + + # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem + # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem + # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem + # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem + # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem + # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem + + } + + SECTION "HTTP Verification" { + + # testvar bbf069HTTPVerification no + + } + + } + + SECTION "Device Specific" { + + SECTION "General" { + + # testvar bbf069RootDataModel InternetGatewayDevice + # testvar bbf069UnsupportedRPC ChangeDUState + # testvar bbf069UploadType "1 Vendor Configuration File" + # testvar bbf069ExpectedUpgradeTime 100 + + } + + SECTION "Data Model" { + + # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069ActiveParamType unsignedInt + # testvar bbf069ActiveParamValue 60 + + # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069CompletePath1Type unsignedInt + # testvar bbf069CompletePath1Value 73 + + # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable + # testvar bbf069CompletePath2Type boolean + # testvar bbf069CompletePath2Value true + + # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. + # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. + # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv + # testvar bbf069InvalidPathType unsignedInt + + # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer + # testvar bbf069UnwritableType string + # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 + + } + + } + +} diff --git a/.testbed/cdrouter/configurations/vlan-ppp b/.testbed/cdrouter/configurations/vlan-ppp new file mode 100644 index 0000000000..29760ec464 --- /dev/null +++ b/.testbed/cdrouter/configurations/vlan-ppp @@ -0,0 +1,2677 @@ +SECTION "About" { + + # Cable/DSL Router Test Suite + # + # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 + # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) + # + # Local.conf + # + # This is the main configuration file for CDRouter. This file defines the + # configuration of the router under test and controls various aspects of + # CDRouter's behavior. This file consists of a number of unique test variables + # called 'testvars' which are grouped by interface, protocol, or functionality. + # The basic syntax for all testvars is: + # + # testvar NAME VALUE + +} + +SECTION "Base Configuration" { + + SECTION "WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + testvar wanMode PPPoE + # testvar wanIspIp 202.254.1.1 + # testvar wanIspAssignIp 202.254.1.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.1.2 + # testvar wanIspNextIp 202.254.1.3 + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar wanIspAssignMask 255.255.255.0 + # testvar IPv4HopCount 1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + # testvar dhcpServerRapidCommit yes + # testvar dhcpServerClientIDBehavior rfc6842 + # testvar dhcpServerResponseDelay 4500 + # testvar dhcpConnectOnDemand no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar wanDhcpClientOptionCode1 60 + # testvar wanDhcpClientOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "DHCP Authentication" { + + # testvar supportsDhcpAuth no + + } + + SECTION "PPPoE Server" { + + # testvar pppoeConnectOnDemand no + # testvar pppoeIdleTimeout 60 + testvar pppoeUser softathome + testvar pppoePassword softathome + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + # testvar pppoeAcCookie auto + # testvar pppoeMaxPayload none + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpConnectOnDemand yes + # testvar pptpServerIp 202.254.201.1 + # testvar pptpClientIp 202.254.201.2 + # testvar pptpUseDHCP no + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpConnectOnDemand yes + # testvar l2tpServerIp 202.254.201.1 + # testvar l2tpClientIp 202.254.201.2 + # testvar l2tpUseDHCP no + + } + + SECTION "DS-Lite" { + + # testvar ipv6DsliteAftr 3001:aaaa::1 + # testvar dhcpv6WanAftrName aftr.qacafe.com + # testvar dsliteFirewallMode address-restricted + + } + + SECTION "MAP / LW4o6" { + + # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: + # testvar mapBmrRuleIpv6PrefixLen 48 + # testvar mapBmrRuleIpv4Prefix 5.0.0.0 + # testvar mapBmrRuleIpv4PrefixLen 24 + # testvar mapBmrRuleEABitLen 16 + + # testvar mapSharingRatio 256 + # testvar mapStartPort 4096 + # testvar mapPsid 255 + + # testvar mapEnableDhcpv6Options yes + + SECTION "MAP-E / LW4o6" { + + # testvar mapTunnelFlowLabel 0 + # testvar mapTunnelHopLimit 64 + # testvar mapTunnelTrafficClass 0 + + } + + SECTION "MAP-T" { + + # testvar mapDmrIpv6Prefix 5001:db8:: + # testvar mapDmrIpv6PrefixLen 48 + + # testvar mapTosTranslate yes + + } + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + # testvar pppConnectionDelay 10 + # testvar pppRestartTimeout 300000 + # testvar pppFailUsesICMP no + + } + + SECTION "WAN 802.1q VLAN" { + + testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "Wireless Access Point (AP)" { + + # testvar wanApBand 2.4GHz + # testvar wanApSSID qa-net + # testvar wanApChannel auto + + SECTION "WPA Authenticator" { + + # testvar wanApWpaMode RSN + # testvar wanApWpaKeyMgmt PSK + # testvar wanApWpaCipher CCMP-128 + # testvar wanApWpaGroupCipher auto + # testvar wanApWpaPMF auto + # testvar wanApWpaPsk qacafe123 + # testvar wanApWpaSaePassword "sae secret" + + } + } + + SECTION "WAN 802.1X and RADIUS" { + + SECTION "WAN RADIUS" { + + # testvar wanRadiusEnable no + # testvar wanRadiusInterface wan + # testvar wanRadiusIp 3.3.3.44 + # testvar wanRadiusSecret qacafe123 + # testvar wanRadiusServerAttrType1 200 + # testvar wanRadiusServerAttrData1 04040404 + + } + + SECTION "WAN EAP Settings" { + + # testvar wanEapType eap-md5 + + SECTION "WAN Supplicant Credentials" { + + # testvar wanEapIdentity1 user1 + # testvar wanEapPassword1 qacafe123 + + } + + SECTION "WAN Authentication Options" { + + # testvar wanEapRootCert /usr/cdrouter/tests/root.pem + # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem + # testvar wanEapServerCertPassword qacafe123 + # testvar wanEapFragmentSize 1024 + + } + + } + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.101.1 + # testvar wanBackupDnsServer 202.254.101.2 + # testvar wanBackupDnsServer2 0.0.0.0 + # testvar wanBackupDnsServer3 0.0.0.0 + # testvar DNStoDHCP no + # testvar supportsDnsProxy yes + # testvar supportsDnsCaching yes + # testvar dnsCacheSize 150 + # testvar dnsLookupTimeout 5 + # testvar dnsFailoverAuth "2 4 5" + # testvar dnsFailoverNonAuth "2 4 5" + # testvar dnsFailoverDelay 10 + # testvar dnsFailoverAttempts 20 + # testvar dnsRelayFailover 120 + # testvar dnsForwardServerStatus no + # testvar dnsUsageProfile opportunistic-privacy + # testvar dnsCaptive no + + SECTION "User Configurable DNS Entries" { + + # testvar dnsHostname1 test.qacafe.com + # testvar dnsIp1 5.5.5.5 + + } + + } + + SECTION "HTTP" { + + # testvar supportsHttpProxy yes + # testvar httpProxyIdleTimeout 30 + # testvar httpMaxHeaderCount 200 + + } + + SECTION "NTP" { + + # testvar ntpServer1 3.3.3.6 + # testvar ntpServerName1 time.nist.gov + # testvar ntpServer2 3.3.3.7 + # testvar ntpServerName2 time.foo.com + # testvar ntpStartDate "6/2/2007 11:00 am UTC" + # testvar ntpOffset 0 + # testvar enableRFC868TimeProtocol no + + } + + SECTION "Dynamic DNS" { + + # testvar supportsDynDns no + # testvar dynDnsServerIp 66.37.215.49 + # testvar dynDnsTransport http + # testvar dynDnsHostname test.domain.com + # testvar dynDnsUsername qacafe + # testvar dynDnsPassword qacafe123 + # testvar dynDnsSystem dyndns + # testvar dynDnsMx mail.domain.com + # testvar dynDnsBackMx no + # testvar dynDnsWildcard off + # testvar dynDnsAgent RAS/1.1 + # testvar dynDnsWait 30 + # testvar testDynDnsErrorCode no + # testvar dynDnsServerReturn !yours + + } + + SECTION "WINS Servers" { + + # testvar winsServer1 3.3.3.4 + # testvar winsServer2 3.3.3.5 + + } + + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanDomainName qacafe.com + # testvar lanMtu default + testvar lanHostname prplOS + # testvar lanGuestMode no + + SECTION "ARP Settings" { + + # testvar arpMode strict + # testvar arpSupportGratuitous yes + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + # testvar supportsDnsHostnameCreate no + + } + + SECTION "DHCP Client" { + + # testvar dhcpClientTimeout 5 + # testvar dhcpInform no + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpRapidCommit no + # testvar ipv4MaxLanClients auto + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpCreateDelay 0 + # testvar dhcpReleaseDelay 300 + # testvar dhcpServerMac auto + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + # testvar dhcpClientTrackSeconds no + # testvar dhcpClientRequestNtp no + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + SECTION "DHCP Client Extra Parameters" { + + # testvar dhcpExtraClientParams "69 70" + + } + + SECTION "DHCP Client Extra Options" { + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Hotspot Router Settings" { + + # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% + # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% + + SECTION "Hotspot Clients" { + + # testvar clientLoginName1 client1 + # testvar clientLoginPassword1 admin1 + + } + + SECTION "Advanced Hotspot Settings" { + + # testvar browserLoginProc example_login + # testvar browserLogoutProc example_logout + # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl + + } + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconRsnCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X and RADIUS" { + + SECTION "LAN RADIUS" { + + # testvar enableRADIUSserver yes + # testvar radiusHost remoteHost + # testvar radiusSecret qacafe123 + # testvar radiusServerAttrType1 200 + # testvar radiusServerAttrData1 04040404 + + } + + SECTION "LAN EAP Settings" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + SECTION "LAN Authentication Options" { + + # testvar eapRootCert /usr/cdrouter/tests/root.pem + # testvar eapServerCertPath /usr/cdrouter/tests/server.pem + # testvar eapServerCertPassword qacafe123 + # testvar eapFragmentSize 1024 + # testvar eapTxWhen 60 + # testvar eapQuietPeriod 60 + # testvar eapReAuthMax 2 + # testvar eapSendLogoffFailure yes + # testvar eapReAuthPeriod 0 + + } + + } + + } + + SECTION "LAN 802.1q VLAN" { + + testvar lanVlanId 200 + # testvar lanVlanPriority 0 + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "Firewall and NAT" { + + SECTION "NAT Options" { + + # testvar natSimultaneousTcp no + # testvar natSrcPort0 yes + # testvar natSupportsP2P yes + # testvar natPortParity yes + # testvar natMode port-restricted + # testvar natVerifyIpId yes + # testvar defaultTcpEchoPort 50000 + # testvar defaultUdpEchoPort 50000 + # testvar natRefreshBehavior both + + SECTION "NAT Timers" { + + # testvar natFinTimeout disabled + # testvar natRstTimeout disabled + # testvar natTcpTimeout disabled + # testvar natSynTimeout disabled + # testvar natUdpTimeout disabled + # testvar natDnsTimeout disabled + # testvar natIcmpTimeout disabled + # testvar natRtspTimeout disabled + # testvar natLagTime 0 + + } + + } + + SECTION "Protocol Pass Through" { + + SECTION "IPSEC Pass Through" { + + # testvar supportsIPSECpass yes + # testvar ipsecMaxTunnels 20 + # testvar ipsecScaleSameServer no + # testvar alwaysUseIke no + # testvar ipsecPassRetransmit no + # testvar unknownPassthrough yes + + } + + SECTION "PPTP Pass Through" { + + # testvar supportsPPTPpass yes + # testvar pptpMaxTunnels 20 + + } + + SECTION "L2TP Pass Through" { + + # testvar supportsL2TPpass yes + # testvar l2tpMaxTunnels 20 + + } + + SECTION "PPPoE Pass Through" { + + # testvar supportsPPPoEpass no + + } + + } + + SECTION "Port Triggers" { + + # testvar portTriggers no + # testvar portTriggerTimeout 0 + # testvar portTriggerDelay 0 + # testvar portTriggerOpenDelay 0 + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "Application Layer Gateways (ALGs)" { + + SECTION "MSN Messenger" { + + # testvar supportsMsnAlg no + # testvar msnNotificationServerPort 1863 + # testvar msnSwitchBoardServerPort 1863 + + } + + SECTION "RTSP" { + + # testvar supportsRtspAlg no + # testvar rtspTeardownDelay 5 + # testvar rtspGetParameterInterval 5 + + } + + SECTION "SIP" { + + # testvar supportsSipAlg yes + # testvar sipInterface wan + # testvar sipServerIp 3.3.3.8 + # testvar ipv6SipServerIp 3001:051a:cafe::4 + # testvar sipCallTeardownDelay 5 + # testvar sipMaxOutboundCalls 10 + # testvar sipMaxInboundCalls 10 + # testvar sipCallPacing 0 + # testvar sipScaleRunTime 30 + # testvar sipScaleServerPort 5060 + # testvar sipScaleClientPort 5060 + # testvar sipMaxUserNames -1 + # testvar rtpSendInterval 5000 + + } + + SECTION "FTP" { + + # testvar ftpPortTimeout 120 + + } + + } + + SECTION "Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + SECTION "Port Scanning, Firewall and DoS Options" { + + # testvar portScanStart 0 + # testvar portScanStop 65535 + # testvar portScanDelay 1 + testvar firewallTcpOpenPorts "50805" + # testvar firewallTcpClosedPorts 2323 + # testvar firewallUdpOpenPorts 1234 + testvar firewallUdpClosedPorts 68 + # testvar firewallOutBlockedTcpPorts 1234 + # testvar firewallOutBlockedUdpPorts 1234 + # testvar firewallOutBlockedIpProtos 0 + # testvar wanPingRespond no + + SECTION "Denial of Service Options" { + + # testvar dosRecoveryTime 5 + # testvar dosAttackAttempts 100 + # testvar dutMgmtPort 80 + # testvar dutSecureMgmtPort disabled + # testvar dosSynAttackPort 80 + # testvar dosSynAttackAttempts 100 + + } + + SECTION "Deprecated SSL Protocols and Ciphers" { + + # testvar sslDeprecatedProtocols "sslv2 sslv3" + # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" + + } + + } + + SECTION "DMZ" { + + # testvar lanDmzHost 192.168.1.253 + # testvar lanDmzTcpPortExceptions 113 + # testvar lanDmzUdpPortExceptions 1234 + # testvar lanDmzIpProtoExceptions 2,47 + # testvar lanDmzSupportsIcmp no + + } + + SECTION "URL Filtering" { + + # testvar urlFilterSupported no + # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" + # testvar non-filtered-urls http://qacafe.com + # testvar urlFilterBlockedText "This website is blocked" + + } + + SECTION "XBox Live Options" { + + # testvar xboxNatMinType open + # testvar xboxPort 3074 + # testvar xboxMtu 1364 + + } + + } + + SECTION "Advanced Protocols" { + + SECTION "RIP v1/v2" { + + # testvar ripSupported no + # testvar ripVersion 1 + # testvar ripV2mode multicast + # testvar ripAuthMode none + # testvar ripPassword qacafe123 + # testvar ripMaxRoutes 96 + # testvar ripRouteTimeout 180 + # testvar ripGarbageTimeout 120 + # testvar ripRouteDelay 5000 + # testvar ripAcceptWanUpdate no + + } + + SECTION "UPnP" { + + # testvar upnpSupported yes + # testvar upnpVersion 1.1 + # testvar upnpDevice InternetGatewayDevice:2 + # testvar upnpWANPPPConnection no + # testvar upnpLANDevice no + # testvar upnpMaxTcpMappings 10 + # testvar upnpMaxSubClients 10 + # testvar upnpMinSubTimeout 40 + # testvar upnpMaxSubTimeout 3600 + # testvar upnpWANFailureTimeout 120 + # testvar upnpPortStart 40000 + # testvar upnpPortStop 50000 + + } + + SECTION "LLDP" { + + # testvar supportsLLDP no + # testvar lldpLanMac none + # testvar lldpLanChassisMac auto + # testvar lldpMsgFastTx 1 + # testvar lldpMsgTxInterval 30 + # testvar lldpTxFastInit 4 + + } + + SECTION "IGMP (Multicast)" { + + # testvar supportsMulticast yes + # testvar multicastType proxy + # testvar supportsMulticastOut no + # testvar igmpVersion 2 + # testvar igmpFastLeave no + # testvar igmpRouterOption yes + # testvar igmpMaxGroups 64 + # testvar multicastCacheTimeout 10 + # testvar multicastPoolStart 224.0.1.0 + # testvar multicastPoolStop 239.255.255.255 + # testvar SSMulticastPoolStart 232.0.1.1 + # testvar SSMulticastPoolStop 232.0.1.255 + # testvar multicastJoinDelay 2 + # testvar multicastScaleDelay 1 + # testvar multicastInterface wan + # testvar multicastBypassPPPoE no + + SECTION "IGMP Timers" { + + # testvar igmpQueryInterval 125 + # testvar igmpRobustnessVariable 2 + # testvar igmpQueryResponseInterval 10 + + } + + SECTION "IPTV Options" { + + # testvar iptvChannelRange 200 + # testvar iptvChannelChangeDelay 200 + # testvar iptvMaxFailures 10 + + } + + } + + SECTION "GRE Tunnels" { + + # testvar greDFflag on + + IGNORE testvar_group greTunnel1 { + + SECTION "Generic IPv4 GRE Tunnel Endpoints" { + + # testvar greType IPv4 + # testvar greEndpoint 5.5.5.5 + # testvar greLocalNet 192.168.1.0 + # testvar greLocalMask 255.255.255.0 + + } + + SECTION "L2GRE Options" { + + # testvar greWanGroup wan2 + + } + + SECTION "L3GRE Remote IPv4 Network" { + + # testvar greHost 3.0.0.1 + # testvar greRemoteNet 3.0.0.0 + # testvar greRemoteMask 255.0.0.0 + + } + + } + + } + + } + + SECTION "Additional Features" { + + # testvar supportsIPv4 yes + # testvar internalSmtpServer 5.5.5.5 + # testvar remoteHostIp 3.3.3.3 + # testvar startOtherLanFirst no + # testvar cdrouterOui B0750C + # testvar forwardingMaxFailures 20 + # testvar forwardingPort 5001 + # testvar jumboMtu disabled + # testvar tcpUdpPortStart 10000 + + SECTION "General Purpose HTTP Server" { + + # testvar httpServerIp 3.3.3.16 + # testvar httpServerPort 80 + # testvar httpServerRoot /tmp + + } + + SECTION "Free Network Range" { + + # testvar FreeNetworkStart 200.0.0.0 + # testvar FreeNetworkMask 255.255.255.0 + # testvar FreeNetworkStop 201.0.0.0 + + } + + SECTION "TCP MSS Clamping" { + + # testvar mssClampingValue default + # testvar mssClampingInValue default + + } + + SECTION "TCP/UDP Scaling Options" { + + # testvar scaleTcpConnsPerHost 5 + # testvar natMaxTcpConns 200 + # testvar natMaxUdpConns 100 + + } + + SECTION "Global Wireless Options" { + + # testvar wirelessRetry 3 + # testvar lanWirelessMaxClients auto + # testvar wifiCapture off + # testvar wifiCaptureFilter {} + + } + + } + + SECTION "Test Execution Options and Auto-Reboot" { + + # testvar startDelay 3 + # testvar lanStartDelay 3 + # testvar startTimeout 90 + # testvar wanCloseOnExit yes + # testvar RestartDut none + # testvar RestartDutDelay disabled + # testvar ShutdownDut "echo -n" + # testvar cpeRebootMode skip + # testvar healthCheckEnable no + + } + +} + +SECTION "CDRouter DOCSIS Add-On" { + + # testvar supportsDocsis no + + SECTION "Basic Configuration" { + + # testvar docsisIpProvisioningMode ipv4-only + # testvar docsisBootDelay 30 + + # testvar docsisClientMac auto + + } + + SECTION "IPv4 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIp 10.10.10.1 + # testvar docsisMask 255.255.255.0 + + } + + SECTION "DHCPv4 Server" { + + # testvar docsisDhcpServer 10.10.10.3 + # testvar docsisAssignIp 10.10.10.2 + # testvar docsisDomain docsis.qacafe.com + # testvar docsisDhcpLeaseTime 300 + # testvar docsisDhcpRapidCommit no + + # testvar docsisDhcpServerOptionCode1 69 + # testvar docsisDhcpServerOptionData1 04040404 + + # testvar docsisDhcpClientOptionCode1 60 + # testvar docsisDhcpClientOptionData1 04040404 + + SECTION "DHCPv4 Relay" { + + # testvar docsisGateway 6.6.6.7 + # testvar docsisAssignGateway 6.6.6.6 + # testvar docsisAssignMask 255.255.255.0 + # testvar docsisDhcpRelayServer 6.6.6.7 + + } + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogServer 10.10.10.5 + # testvar docsisTimeServer 10.10.10.6 + # testvar docsisTftpServer 10.10.10.4 + + } + + } + + SECTION "IPv6 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIpv6 8001::1 + # testvar docsisIpv6PrefixLen 64 + + } + + SECTION "DHCPv6 Server" { + + # testvar docsisDhcpIpv6Server 8001::3 + # testvar docsisAssignIpv6 8001::2 + # testvar docsisDHCPv6PreferredLifetime 300 + # testvar docsisDHCPv6ValidLifetime 300 + # testvar docsisDhcpv6RapidCommit no + + # testvar docsisDhcpv6ServerOptionCode1 69 + # testvar docsisDhcpv6ServerOptionData1 04040404 + + # testvar docsisDhcpv6ClientOptionCode1 60 + # testvar docsisDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Relay" { + + # testvar docsisIpv6Gateway 9001::1 + # testvar docsisAssignIpv6PrefixLen 64 + # testvar docsisDhcpv6RelayServer 9001::1 + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogIpv6Server 8001::5 + # testvar docsisTimeIpv6Server 8001::6 + # testvar docsisTftpIpv6Server 8001::4 + + } + + } + + SECTION "CM Config File" { + + SECTION "Global TFTP Settings" { + + # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp + # testvar docsisTftpBootFile auto-docsis.bin + + } + + SECTION "Embedded Config File" { + + # testvar docsisConfig { + # Main + # { + # NetworkAccess 1; + # BaselinePrivacy + # { + # AuthTimeout 10; + # ReAuthTimeout 10; + # AuthGraceTime 600; + # OperTimeout 1; + # ReKeyTimeout 1; + # TEKGraceTime 600; + # AuthRejectTimeout 60; + # SAMapWaitTimeout 1; + # SAMapMaxRetries 4; + # } + # MaxCPE 3; + # UsServiceFlow + # { + # UsServiceFlowRef 2; + # QosParamSetType 7; + # } + # DsServiceFlow + # { + # DsServiceFlowRef 1; + # QosParamSetType 7; + # } + # SNMPv1v2cCoexistenceConfig + # { + # SNMPv1v2cCommunityName "public"; + # SNMPv1v2cTransportAddressAccess + # { + # SNMPv1v2cTransportAddress 0.0.0.0/0; + # SNMPv1v2cTransportAddressMask 0.0.0.0/0; + # } + # SNMPv1v2cAccessViewType 2; + # SNMPv1v2cAccessViewName "docsisManagerView"; + # } + # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ + # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ + # /*EndOfDataMkr*/ + # } + # } + + } + + SECTION "Vendor Defined Config File" { + + # testvar docsisConfigFile none + + } + + } + + SECTION "CM Firewall Configuration" { + + SECTION "IPv4" { + + # testvar docsisTcpOpenPorts "22 443" + # testvar docsisTcpClosedPorts all + # testvar docsisUdpOpenPorts 1234 + # testvar docsisUdpClosedPorts all + + } + + SECTION "IPv6" { + + # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" + # testvar docsisIpv6TcpClosedPorts "2323 80" + # testvar docsisIpv6UdpOpenPorts 1234 + # testvar docsisIpv6UdpClosedPorts 113 + + } + + } + +} + +SECTION "CDRouter HomeKit Add-On" { + + # testvar supportsHomeKit no + + # testvar homeKitRouterName "HomeKit Router" + # testvar homeKitHATHostname hat.local + # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ + # testvar homeKitRouterSetupCode + + # testvar homeKitManualEnabled yes + +} + +SECTION "CDRouter IKE Add-On" { + + SECTION "Global IKE Options" { + + # testvar ikeMaxPhase2SA 20 + # testvar ikeDeadPeerDetection no + # testvar ikeNewQuickModeDelay 1000 + # testvar ikeKeepAlive 20 + # testvar ikeMinimumLifetime 20 + # testvar ipsecMinimumLifetime 20 + # testvar ikePhase2DeleteDelay 100 + # testvar ikeMaxTransforms 21 + # testvar ikeInitialContact yes + # testvar ikeBringUpTunnels yes + # testvar ikeAlwaysInitiate no + # testvar useSameIpsecTunnel no + # testvar ikeNatTraversal no + # testvar ike_FQDN fqdn-test.cdrouter.com + # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com + + } + + SECTION "IPsec Tunnel Configurations" { + + SECTION "IPsec Tunnel Configuration 1" { + + # testvar ipsecTunnelKeyType1 manual + # testvar ipsecTunnelEndpoint1 5.0.0.1 + # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 + # testvar ipsecTunnelRemoteMask1 255.255.255.0 + # testvar ipsecTunnelHost1 5.0.0.2 + + SECTION "Manual IPsec Tunnel Configuration" { + + # testvar ipsecTunnelOutboundSpi1 1000 + # testvar ipsecTunnelOutEncrypt1 des + # testvar ipsecTunnelOutEncryptKey1 0102030405060708 + # testvar ipsecTunnelOutAuth1 md5-hmac + # testvar ipsecTunnelOutAuthKey1 6262626262626262 + # testvar ipsecTunnelInboundSpi1 1001 + # testvar ipsecTunnelInEncrypt1 des + # testvar ipsecTunnelInEncryptKey1 0102030405060708 + # testvar ipsecTunnelInAuth1 md5-hmac + # testvar ipsecTunnelInAuthKey1 6262626262626262 + + } + + SECTION "IKE IPsec Tunnel Configuration" { + + # testvar ipsecTunnelIkeEncrypt1 des + # testvar ipsecTunnelIkeAuth1 md5-hmac + # testvar ipsecTunnelIkeGroup1 1 + # testvar ipsecTunnelIkeLifetime1 300 + # testvar ipsecTunnelEncrypt1 3des + # testvar ipsecTunnelAuth1 sha1-hmac + # testvar ipsecTunnelPfsGroup1 1 + # testvar ipsecTunnelLifetime1 120 + # testvar ipsecTunnelPsk1 qacafe123 + # testvar ipsecTunnelIkeMode1 main + # testvar ipsecTunnelUsesNat1 no + + } + + } + + } + +} + +SECTION "CDRouter IPv6 Add-On" { + + # testvar supportsIPv6 no + + SECTION "IPv6 WAN" { + + testvar ipv6WanMode PPPoE + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001::1 + # testvar ipv6WanIspAssignIp 3001::2 + # testvar ipv6WanIspNextIp 3001::3 + # testvar ipv6WanIspPrefixLen 64 + # testvar ipv6WanDutDuid 00000000 + # testvar ipv6RelayServer 192.88.99.1 + # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 + # testvar ipv6rdPrefix 2001:1234:: + # testvar ipv6rdPrefixLen 32 + # testvar ipv6rdIPv4MaskLen 0 + # testvar ipv6rdDHCPv4Option yes + # testvar ipv6TunnelMtuType static + # testvar ipv6WanMtu 1500 + # testvar ipv6WanMtuOption no + # testvar ipv6RASendInterval 10 + # testvar ipv6ExpectRAonWan no + + SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { + + # testvar ipv6WanIspGateway 3001::9 + # testvar ipv6WanAssignPrefixLen 64 + # testvar IPv6HopCount 1 + # testvar dhcpv6RelayServer 3001::9 + + } + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + # testvar ipv6WanRDNSS no + # testvar ipv6WanDNSSL no + + } + + SECTION "DHCPv6 Server" { + + # testvar dhcpv6IAValidLifetime 300 + # testvar dhcpv6IAPreferredLifetime 300 + # testvar dhcpv6DuidType 1 + # testvar dhcpv6RestartLatency 10 + # testvar dhcpv6ServerRapidCommit yes + + # testvar dhcpv6ServerOptionCode1 69 + # testvar dhcpv6ServerOptionData1 04040404 + + # testvar wanDhcpv6ClientOptionCode1 60 + # testvar wanDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Authentication" { + + # testvar supportsDhcpv6Auth no + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: + # testvar dhcpv6WanAssignPrefixLen 48 + # testvar dhcpv6PDLatency 30 + + } + + SECTION "IPv6 NTP" { + + # testvar ipv6NtpServer1 4321::23 + # testvar ipv6NtpServerName1 time.nist.gov + + # testvar ipv6NtpServer2 4321::24 + # testvar ipv6NtpServerName2 time.foo.com + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + testvar ipv6LanIp 3001:dddd::1 + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanPrefixLen 64 + # testvar ipv6MaxLanClients 32 + # testvar ipv6RAInterval 300 + # testvar ipv6LanSubnetId 1 + + SECTION "DHCPv6 Client" { + + # testvar dhcpv6ClientTimeout 5 + # testvar ipv6DhcpClientStart ::2 + # testvar ipv6DhcpClientEnd ::1f + # testvar ipv6DhcpClientExclude "::3 ::7" + # testvar ipv6DhcpClientValidLifetime 86400 + # testvar dhcpv6RapidCommit yes + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + SECTION "IPv6 LAN DNS" { + + # testvar ipv6DNStoLAN yes + # testvar ipv6RdnssSupport yes + # testvar ipv6DnsslSupport yes + # testvar ipv6LanStaticDns no + + } + + SECTION "Unique Local Address (ULA) Options" { + + # testvar supportsULA no + # testvar ipv6LanULAPrefix fd00:: + # testvar ipv6LanULAIp ::%eui64% + # testvar ipv6LanULAMode autoconf + + } + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + } + + SECTION "IPv6 Firewall" { + + # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" + # testvar ipv6FirewallTcpClosedPorts "2323 80" + # testvar ipv6FirewallUdpOpenPorts 1234 + # testvar ipv6FirewallUdpClosedPorts 113 + # testvar ipv6FirewallOutBlockedTcpPorts 1234 + # testvar ipv6FirewallOutBlockedUdpPorts 1234 + # testvar ipv6FirewallOutBlockedIpProtos 0 + # testvar ipv6WanPingRespond no + + SECTION "IPv6 TCP MSS Clamping" { + + # testvar ipv6MssClampingValue default + # testvar ipv6MssClampingInValue default + # testvar ipv6MssClampingTestPort 8096 + + } + + } + + SECTION "IPv6 Advanced Protocols" { + + SECTION "RIPng" { + + # testvar supportsRIPng no + + } + + SECTION "MLD (IPv6 Multicast)" { + + # testvar supportsIPv6Multicast yes + # testvar supportsIPv6MulticastOut no + # testvar mldVersion 2 + # testvar mldMaxGroups 64 + # testvar mldFastLeave no + # testvar ipv6MulticastCacheTimeout 10 + # testvar ipv6MulticastJoinDelay 2 + # testvar ipv6MulticastScaleDelay 1 + + SECTION "MLD Timers" { + + # testvar mldQueryInterval 125 + # testvar mldRobustnessVariable 2 + # testvar mldQueryResponseInterval 10 + + } + + SECTION "IPv6 IPTV Options" { + + # testvar ipv6IptvChannelRange 200 + # testvar ipv6IptvChannelChangeDelay 200 + # testvar ipv6IptvMaxFailures 10 + + } + + } + + } + + SECTION "IPv6 Additional Features" { + + SECTION "IPv6 Free Network Range" { + + # testvar ipv6RemoteHost 3001:051a:cafe::1 + # testvar ipv6FreeNetworkStart 3001:cafe:1:: + # testvar ipv6FreeNetworkPrefixLen 64 + # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: + + } + + SECTION "IPv6 Multicast Pool Ranges" { + + # testvar ipv6MulticastPoolStart ff0e::1 + # testvar ipv6MulticastPoolStop ff0e:ffff:: + # testvar ipv6SSMulticastPoolStart ff3e::8000:1 + # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff + + } + + } + +} + +SECTION "CDRouter Multiport Add-On" { + + SECTION "Additional WAN Interface Setup" { + + # testvar wanFailoverTimeout 300 + + IGNORE testvar_group wan2 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.2.1 + # testvar wanIspAssignIp 202.254.2.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.2.2 + # testvar wanIspNextIp 202.254.2.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.202.1 + # testvar pptpClientIp 202.254.202.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.202.1 + # testvar l2tpClientIp 202.254.202.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.102.1 + # testvar wanBackupDnsServer 202.254.102.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:2::1 + # testvar ipv6WanIspAssignIp 3001:0:0:2::2 + # testvar ipv6WanIspNextIp 3001:0:0:2::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + IGNORE testvar_group wan3 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.3.1 + # testvar wanIspAssignIp 202.254.3.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.3.2 + # testvar wanIspNextIp 202.254.3.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.203.1 + # testvar pptpClientIp 202.254.203.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.203.1 + # testvar l2tpClientIp 202.254.203.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.103.1 + # testvar wanBackupDnsServer 202.254.103.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:3::1 + # testvar ipv6WanIspAssignIp 3001:0:0:3::2 + # testvar ipv6WanIspNextIp 3001:0:0:3::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + } + + SECTION "Additional LAN Interface Setup" { + + # testvar useSameLanInterface no + + IGNORE testvar_group lan2 { + + SECTION "IPv4 LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanGuestMode no + + SECTION "LAN Host IP" { + + # testvar hostIp 192.168.1.0 + # testvar hostMask 255.255.255.0 + # testvar hostGateway 192.168.1.1 + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "DHCP Client Configuration" { + + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + # testvar dhcpExtraClientParams "69 70" + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Configuration Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + } + + SECTION "IPv4 Firewall and NAT" { + + SECTION "Static NAT" { + + # testvar staticNatIp 202.254.1.2 + # testvar staticNatFirewall yes + # testvar natMode port-restricted + + } + + SECTION "Special Application Port Triggers" { + + # testvar portTriggers no + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "TCP and UDP Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanStaticDns no + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + + SECTION "LAN IPv6 DHCP Client" { + + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + + } + + } + +} + +SECTION "CDRouter Performance Add-On" { + + # testvar supportsPerformance no + + SECTION "Basic Configuration" { + + # testvar perfWanIp 202.254.1.4 + # testvar perfWanIpv6 3001::4 + # testvar perfPort 19750 + # testvar perfPort2 19751 + + } + + SECTION "Performance Settings" { + + # testvar perfDuration 10 + # testvar perfDownloadBandwidth 0.0 + # testvar perfInterval auto + # testvar perfIncrement 5 + # testvar perfStreams 1 + # testvar perfStreamIncr 0 + # testvar perfUdpLen auto + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + # testvar perfOmit 0 + # testvar perfDSCP 0 + # testvar perfFairness no + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresholds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + SECTION "Advanced Options" { + + # testvar perfPingEnable no + # testvar perfEnableCapture no + # testvar perfLatencyAttempts 25 + # testvar perfApplicationAttempts 4 + # testvar perfApplicationDelay 100 + + } + + SECTION "Wireless" { + + IGNORE testvar_group wireless-performance { + + SECTION "Performance Settings" { + + # testvar perfDownloadBandwidth 0.0 + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresolds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + } + + } + +} + +SECTION "CDRouter Security Add-On" { + + SECTION "Internet Connection Sharing (ICS)" { + + # testvar enableICS no + # testvar icsInterface eth0 + # testvar icsShareIPv4 yes + # testvar icsShareIPv6 yes + + } + + SECTION "Traffic Analysis" { + + # testvar enableSuricata no + + } + + SECTION "Nmap Scans" { + + # testvar enableNmap no + # testvar nmapPorts 0-65535 + # testvar nmapScanTimeout 600 + # testvar nmapTimingTemplate 5 + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleBase auto + # testvar internetScheduleTimeZone auto + # testvar internetScheduleBlockedText "This website is blocked" + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + +} + +SECTION "CDRouter SNMP Add-On" { + + # testvar supportsSnmp no + + # testvar snmpPort 161 + # testvar snmpDefaultUser auto + # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" + # testvar snmpUpdateDelay 15 + + SECTION "SNMP Options and Users" { + + # testvar snmpManagerIp 3.3.3.33 + # testvar snmpManagerIpv6 3001:051a:cafe::33 + + IGNORE testvar_group snmpuser1 { + + # testvar snmpVersion 2c + + # testvar snmpAccess read-only + # testvar snmpTransport udp + # testvar snmpRetries 5 + # testvar snmpTimeout 5 + + SECTION "SNMP v1/2c Configuration" { + + # testvar snmpCommunity public + + } + + SECTION "SNMP v3 Configuration" { + + # testvar snmpSecurityLevel noAuthNoPriv + + # testvar snmpAuthProtocol MD5 + # testvar snmpAuthUsername qacafe + # testvar snmpAuthPassword qacafe123 + + # testvar snmpPrivacyProtocol DES + # testvar snmpPrivacyPassword qacafe123 + + # testvar snmpContextName bridge1 + # testvar snmpSecurityEngineId 800000020109840301 + # testvar snmpContextEngineId 800000020109840301 + + } + + } + + } + + SECTION "SNMP Scenarios" { + + # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp + # testvar snmpScenarioSingleMode no + # testvar snmpScenarioInterface lan + # testvar snmpScenarioIpVersion IPv4 + + } + +} + +SECTION "CDRouter Storage Add-On" { + + # testvar supportsStorage no + + # testvar storageFileSize 10 + # testvar storageUserFilePath none + # testvar useMulticastDNS no + + SECTION "SMB Options and Users" { + + # testvar supportsStorageSmb yes + # testvar storageSmbMaxSessions 20 + # testvar storageSmbTimeout 120 + # testvar storageSmbPacing 0 + + IGNORE testvar_group smbuser1 { + + # testvar server MyNAS + # testvar share data + # testvar folder /home/qacafe + # testvar guest no + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + + SECTION "FTP Options and Users" { + + # testvar supportsStorageFtp yes + # testvar supportsStorageFtps yes + # testvar storageFtpMaxSessions 20 + # testvar storageFtpTimeout 120 + # testvar storageFtpPacing 0 + + IGNORE testvar_group ftpuser1 { + + # testvar server MyNAS + # testvar path /home/qacafe + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + +} + +SECTION "CDRouter TR-069 Add-On" { + + testvar supportsCWMP yes + + SECTION "Basic ACS Configuration" { + + # testvar acsIp 6.0.0.1 + # testvar acsPort 80 + testvar acsDomain acs-download.qacafe.com + # testvar acsTransport http + # testvar acsAuth digest + # testvar acsDigestQopAuth yes + # testvar acsInterface wan + testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ + # testvar acsWaitForInform 120 + # testvar acsSkipInitialInform no + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar cwmpProtocolVersion 1.0 + # testvar acsDeviceDiscovery no + # testvar acsConfigurePeriodicInform yes + # testvar tr69InitiateConnection yes + testvar acsDefaultUser cdrouter + testvar acsDefaultPassword cdrouter + testvar acsCpeDefaultUser acs + testvar acsCpeDefaultPassword acs + # testvar acsFileServerUser file_server_user + # testvar acsFileServerPassword file_server_password + + } + + SECTION "XMPP Connection Request Configuration" { + + # testvar acsSupportsXmppConnReq no + + # testvar acsXmppServerConnectAlgorithm DNS-SRV + # testvar acsXmppConnReqUsername qacafe + # testvar acsXmppConnReqResource cdrouter + # testvar acsXmppConnReqPassword qacafe123 + # testvar acsXmppConnReqUseTls no + + } + + SECTION "Advanced ACS Configuration" { + + # testvar acsCpeKeepAlive yes + # testvar acsChunkedEncoding no + # testvar acsChunkSize 64 + # testvar acsAuthOncePerSession no + # testvar acsCookieMode rfc6265 + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + # testvar acsNumberCpeAttempts 2 + # testvar acsDelayCpeAttempts 10 + # testvar acsWaitForConnectionRequest yes + # testvar acsUseTcpOffload yes + # testvar acsTargetDevice tr069_device2 + # testvar acsDualStackIp 6000::1 + # testvar acsStrictSyntaxChecking on + + } + + SECTION "SSL Configuration" { + + # testvar acsSslVersion tls + # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem + # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem + # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsCipherSuite auto + # testvar acsClientCaCertPath /path/to/client/ca/file + + } + + SECTION "Profiles" { + + # testvar cwmpSupportedDataModel auto + # testvar cwmpDataValidation yes + # testvar cwmpSkipParameters empty + # testvar cwmpModifyParameters empty + # testvar cwmpVendorSpecificParams none + + SECTION "Custom CWMP Profiles" { + + IGNORE testvar_group cwmp_profile1 { + + # testvar cwmpProfileName myVendorParameters + # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp + # testvar cwmpProfileObject InternetGatewayDevice:1 + + } + + } + + } + + SECTION "CWMP Scenarios" { + + # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp + # testvar cwmpScenarioSingleMode no + # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp + + } + + SECTION "Additional TR-069 Options" { + + # testvar tr69DeviceType IGD + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69InformTimeout 120 + # testvar tr69MinPeriodicInform 60 + # testvar tr69ScheduleInformRPC yes + # testvar tr69UploadRPC no + # testvar tr69UploadPath /tmp + # testvar tr69ConfigUploadFilename vendor_configuration_file + # testvar tr69LogUploadFilename vendor_log_file + # testvar tr69FactoryResetRPC no + # testvar tr69CpeGetRPCs no + # testvar tr69ForceBoolean no + # testvar tr69XMLCapturePath /tmp/tr69-xml + # testvar tr69DownloadTimeout 600 + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadImageVersion 1.0 + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69RebootTimeout 300 + # testvar tr69RpcTimeout 180 + # testvar tr69DownloadConfig /path/to/config + # testvar tr69MaxUserNameLen 256 + # testvar tr69MaxPasswordLen 256 + # testvar tr69MaxCpeUserNameLen 256 + # testvar tr69MaxCpePasswordLen 256 + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DUInstallImageVersion 1.0 + # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image + # testvar tr69DUInstallImageAlternateVersion 1.0 + # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb + # testvar tr69DUChangeExecEnvRef openwrt + # testvar tr69DUChangeTimeout 600 + # testvar tr69WildcardPortMappingOnly no + # testvar tr69PortMapDeletionDelay 15 + # testvar tr69PortMapCreationDelay 0 + # testvar tr69PortMapDisableDelay 15 + # testvar tr69TraceRouteTimeout 120 + + } + + SECTION "TR-111 Parts 1 and 2" { + + # testvar supportsTr111Part1 yes + # testvar supportsTr111Part2 no + # testvar STUNMaximumKeepAlivePeriod 60 + # testvar STUNMinimumKeepAlivePeriod 60 + # testvar STUNAuth no + # testvar STUNUsername qacafe + # testvar STUNPassword qacafe123 + # testvar acsUdpConnectionDelay 0 + + } + + SECTION "TR-143 Performance Tests" { + + # testvar tr143HttpDownloadSize 1000000 + # testvar tr143HttpUploadSize 1000000 + + # testvar tr143HttpDownloadHighThreshold 0.0 + # testvar tr143HttpDownloadLowThreshold 5.0 + # testvar tr143HttpDownloadResponseMax 60 + + # testvar tr143HttpUploadHighThreshold 0.0 + # testvar tr143HttpUploadLowThreshold 5.0 + # testvar tr143HttpUploadResponseMax 60 + + } + + SECTION "TR-069 LAN Side Devices" { + + IGNORE testvar_group tr069_device2 { + + # testvar acsDefaultUser qacafe + # testvar acsDefaultPassword qacafe123 + # testvar acsCpeDefaultUser qacafe + # testvar acsCpeDefaultPassword qacafe123 + # testvar acsCreatePortMapOnIGD no + # testvar acsPortMapPublicPort 20000 + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69DeviceType IGD + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DownloadConfig /path/to/config + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + + } + + } + +} + +SECTION "CDRouter USP Add-On" { + + # testvar supportsUSP no + + SECTION "Basic Controller Configuration" { + + # testvar uspControllerID proto::controller-id + # testvar uspControllerInterface wan + + # testvar uspControllerIpMode ipv4-only + # testvar uspControllerIpv4 6.0.0.2 + # testvar uspControllerIpv6 6000::2 + # testvar uspControllerPort auto + # testvar uspControllerPath /controller-path + + # testvar uspControllerUseNonPayloadProtection no + # testvar uspControllerUseSessionContext no + # testvar uspControllerMTP websocket + # testvar uspControllerMTPEncryption no + # testvar uspControllerUSPEncryption no + # testvar uspControllerDomain controller.cdroutertest.com + + # testvar uspSegmentationEnable no + # testvar uspSegmentationSize auto + + # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + + # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + + # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerVerifyRecordIntegrity no + + # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem + + # testvar uspControllerHost any + # testvar uspControllerUsername qacafe + # testvar uspControllerPassword qacafe123 + + } + + SECTION "Basic Agent Configuration" { + + # testvar uspAgentID proto::agent-id + + # testvar uspAgentIpv4 auto + # testvar uspAgentIpv6 auto + # testvar uspAgentPort auto + # testvar uspAgentPath /agent-path + + # testvar uspMessageTimeout 30 + # testvar uspNotificationTimeout 30 + # testvar uspRebootTimeout 120 + + } + + SECTION "USP Scenarios" { + + # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp + # testvar uspScenarioSingleMode no + # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp + + } + + SECTION "Data Model" { + + # testvar uspSkipParameters empty + # testvar uspModifyParameters empty + # testvar uspSupportedDataModel all + + SECTION "Custom USP Data Model" { + + IGNORE testvar_group usp_profile_1 { + + # testvar uspProfileName myVendorParameters + # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml + + } + + } + + } + + SECTION "USP Agent Data Model Configuration" { + + # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + + # testvar uspParameterPath1 Device.DeviceInfo.ModelName + # testvar uspParameterPath2 Device.IP.Interface.3.Enable + # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory + # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode + + # testvar uspNotificationParamNewValue myCustomParameterValue + + # testvar uspObject1 Device.IP.Interface. + # testvar uspObject2 Device.WiFi.AccessPoint. + + # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} + # testvar uspValidSearchPathResultParam PeriodicNotifInterval + # testvar uspValidSearchPathResultValue 5000 + + # testvar uspFirmwareImage /path/to/firmware.bin + # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin + # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 + + } + +} + +SECTION "CDRouter BBF.069 Add-On" { + + # testvar supportsBBF069 yes + + SECTION "General" { + + SECTION "ACS URL" { + + # testvar bbf069ACSURL http://acs1.broadband-forum.org + # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org + + } + + SECTION "Security Certificates" { + + # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem + # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem + # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem + # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem + # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem + # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem + + } + + SECTION "HTTP Verification" { + + # testvar bbf069HTTPVerification no + + } + + } + + SECTION "Device Specific" { + + SECTION "General" { + + # testvar bbf069RootDataModel InternetGatewayDevice + # testvar bbf069UnsupportedRPC ChangeDUState + # testvar bbf069UploadType "1 Vendor Configuration File" + # testvar bbf069ExpectedUpgradeTime 100 + + } + + SECTION "Data Model" { + + # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069ActiveParamType unsignedInt + # testvar bbf069ActiveParamValue 60 + + # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069CompletePath1Type unsignedInt + # testvar bbf069CompletePath1Value 73 + + # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable + # testvar bbf069CompletePath2Type boolean + # testvar bbf069CompletePath2Value true + + # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. + # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. + # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv + # testvar bbf069InvalidPathType unsignedInt + + # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer + # testvar bbf069UnwritableType string + # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 + + } + + } + +} diff --git a/.testbed/cdrouter/configurations/vlan-ppp-ipv6 b/.testbed/cdrouter/configurations/vlan-ppp-ipv6 new file mode 100644 index 0000000000..fc5f5c5bd0 --- /dev/null +++ b/.testbed/cdrouter/configurations/vlan-ppp-ipv6 @@ -0,0 +1,2677 @@ +SECTION "About" { + + # Cable/DSL Router Test Suite + # + # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 + # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) + # + # Local.conf + # + # This is the main configuration file for CDRouter. This file defines the + # configuration of the router under test and controls various aspects of + # CDRouter's behavior. This file consists of a number of unique test variables + # called 'testvars' which are grouped by interface, protocol, or functionality. + # The basic syntax for all testvars is: + # + # testvar NAME VALUE + +} + +SECTION "Base Configuration" { + + SECTION "WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + testvar wanMode PPPoE + # testvar wanIspIp 202.254.1.1 + # testvar wanIspAssignIp 202.254.1.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.1.2 + # testvar wanIspNextIp 202.254.1.3 + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar wanIspAssignMask 255.255.255.0 + # testvar IPv4HopCount 1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + # testvar dhcpServerRapidCommit yes + # testvar dhcpServerClientIDBehavior rfc6842 + # testvar dhcpServerResponseDelay 4500 + # testvar dhcpConnectOnDemand no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar wanDhcpClientOptionCode1 60 + # testvar wanDhcpClientOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "DHCP Authentication" { + + # testvar supportsDhcpAuth no + + } + + SECTION "PPPoE Server" { + + # testvar pppoeConnectOnDemand no + # testvar pppoeIdleTimeout 60 + testvar pppoeUser softathome + testvar pppoePassword softathome + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + # testvar pppoeAcCookie auto + # testvar pppoeMaxPayload none + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpConnectOnDemand yes + # testvar pptpServerIp 202.254.201.1 + # testvar pptpClientIp 202.254.201.2 + # testvar pptpUseDHCP no + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpConnectOnDemand yes + # testvar l2tpServerIp 202.254.201.1 + # testvar l2tpClientIp 202.254.201.2 + # testvar l2tpUseDHCP no + + } + + SECTION "DS-Lite" { + + # testvar ipv6DsliteAftr 3001:aaaa::1 + # testvar dhcpv6WanAftrName aftr.qacafe.com + # testvar dsliteFirewallMode address-restricted + + } + + SECTION "MAP / LW4o6" { + + # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: + # testvar mapBmrRuleIpv6PrefixLen 48 + # testvar mapBmrRuleIpv4Prefix 5.0.0.0 + # testvar mapBmrRuleIpv4PrefixLen 24 + # testvar mapBmrRuleEABitLen 16 + + # testvar mapSharingRatio 256 + # testvar mapStartPort 4096 + # testvar mapPsid 255 + + # testvar mapEnableDhcpv6Options yes + + SECTION "MAP-E / LW4o6" { + + # testvar mapTunnelFlowLabel 0 + # testvar mapTunnelHopLimit 64 + # testvar mapTunnelTrafficClass 0 + + } + + SECTION "MAP-T" { + + # testvar mapDmrIpv6Prefix 5001:db8:: + # testvar mapDmrIpv6PrefixLen 48 + + # testvar mapTosTranslate yes + + } + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + # testvar pppConnectionDelay 10 + # testvar pppRestartTimeout 300000 + # testvar pppFailUsesICMP no + + } + + SECTION "WAN 802.1q VLAN" { + + testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "Wireless Access Point (AP)" { + + # testvar wanApBand 2.4GHz + # testvar wanApSSID qa-net + # testvar wanApChannel auto + + SECTION "WPA Authenticator" { + + # testvar wanApWpaMode RSN + # testvar wanApWpaKeyMgmt PSK + # testvar wanApWpaCipher CCMP-128 + # testvar wanApWpaGroupCipher auto + # testvar wanApWpaPMF auto + # testvar wanApWpaPsk qacafe123 + # testvar wanApWpaSaePassword "sae secret" + + } + } + + SECTION "WAN 802.1X and RADIUS" { + + SECTION "WAN RADIUS" { + + # testvar wanRadiusEnable no + # testvar wanRadiusInterface wan + # testvar wanRadiusIp 3.3.3.44 + # testvar wanRadiusSecret qacafe123 + # testvar wanRadiusServerAttrType1 200 + # testvar wanRadiusServerAttrData1 04040404 + + } + + SECTION "WAN EAP Settings" { + + # testvar wanEapType eap-md5 + + SECTION "WAN Supplicant Credentials" { + + # testvar wanEapIdentity1 user1 + # testvar wanEapPassword1 qacafe123 + + } + + SECTION "WAN Authentication Options" { + + # testvar wanEapRootCert /usr/cdrouter/tests/root.pem + # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem + # testvar wanEapServerCertPassword qacafe123 + # testvar wanEapFragmentSize 1024 + + } + + } + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.101.1 + # testvar wanBackupDnsServer 202.254.101.2 + # testvar wanBackupDnsServer2 0.0.0.0 + # testvar wanBackupDnsServer3 0.0.0.0 + # testvar DNStoDHCP no + # testvar supportsDnsProxy yes + # testvar supportsDnsCaching yes + # testvar dnsCacheSize 150 + # testvar dnsLookupTimeout 5 + # testvar dnsFailoverAuth "2 4 5" + # testvar dnsFailoverNonAuth "2 4 5" + # testvar dnsFailoverDelay 10 + # testvar dnsFailoverAttempts 20 + # testvar dnsRelayFailover 120 + # testvar dnsForwardServerStatus no + # testvar dnsUsageProfile opportunistic-privacy + # testvar dnsCaptive no + + SECTION "User Configurable DNS Entries" { + + # testvar dnsHostname1 test.qacafe.com + # testvar dnsIp1 5.5.5.5 + + } + + } + + SECTION "HTTP" { + + # testvar supportsHttpProxy yes + # testvar httpProxyIdleTimeout 30 + # testvar httpMaxHeaderCount 200 + + } + + SECTION "NTP" { + + # testvar ntpServer1 3.3.3.6 + # testvar ntpServerName1 time.nist.gov + # testvar ntpServer2 3.3.3.7 + # testvar ntpServerName2 time.foo.com + # testvar ntpStartDate "6/2/2007 11:00 am UTC" + # testvar ntpOffset 0 + # testvar enableRFC868TimeProtocol no + + } + + SECTION "Dynamic DNS" { + + # testvar supportsDynDns no + # testvar dynDnsServerIp 66.37.215.49 + # testvar dynDnsTransport http + # testvar dynDnsHostname test.domain.com + # testvar dynDnsUsername qacafe + # testvar dynDnsPassword qacafe123 + # testvar dynDnsSystem dyndns + # testvar dynDnsMx mail.domain.com + # testvar dynDnsBackMx no + # testvar dynDnsWildcard off + # testvar dynDnsAgent RAS/1.1 + # testvar dynDnsWait 30 + # testvar testDynDnsErrorCode no + # testvar dynDnsServerReturn !yours + + } + + SECTION "WINS Servers" { + + # testvar winsServer1 3.3.3.4 + # testvar winsServer2 3.3.3.5 + + } + + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanDomainName qacafe.com + # testvar lanMtu default + testvar lanHostname prplOS + # testvar lanGuestMode no + + SECTION "ARP Settings" { + + # testvar arpMode strict + # testvar arpSupportGratuitous yes + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + # testvar supportsDnsHostnameCreate no + + } + + SECTION "DHCP Client" { + + # testvar dhcpClientTimeout 5 + # testvar dhcpInform no + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpRapidCommit no + # testvar ipv4MaxLanClients auto + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpCreateDelay 0 + # testvar dhcpReleaseDelay 300 + # testvar dhcpServerMac auto + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + # testvar dhcpClientTrackSeconds no + # testvar dhcpClientRequestNtp no + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + SECTION "DHCP Client Extra Parameters" { + + # testvar dhcpExtraClientParams "69 70" + + } + + SECTION "DHCP Client Extra Options" { + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Hotspot Router Settings" { + + # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% + # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% + + SECTION "Hotspot Clients" { + + # testvar clientLoginName1 client1 + # testvar clientLoginPassword1 admin1 + + } + + SECTION "Advanced Hotspot Settings" { + + # testvar browserLoginProc example_login + # testvar browserLogoutProc example_logout + # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl + + } + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconRsnCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X and RADIUS" { + + SECTION "LAN RADIUS" { + + # testvar enableRADIUSserver yes + # testvar radiusHost remoteHost + # testvar radiusSecret qacafe123 + # testvar radiusServerAttrType1 200 + # testvar radiusServerAttrData1 04040404 + + } + + SECTION "LAN EAP Settings" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + SECTION "LAN Authentication Options" { + + # testvar eapRootCert /usr/cdrouter/tests/root.pem + # testvar eapServerCertPath /usr/cdrouter/tests/server.pem + # testvar eapServerCertPassword qacafe123 + # testvar eapFragmentSize 1024 + # testvar eapTxWhen 60 + # testvar eapQuietPeriod 60 + # testvar eapReAuthMax 2 + # testvar eapSendLogoffFailure yes + # testvar eapReAuthPeriod 0 + + } + + } + + } + + SECTION "LAN 802.1q VLAN" { + + testvar lanVlanId 200 + # testvar lanVlanPriority 0 + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "Firewall and NAT" { + + SECTION "NAT Options" { + + testvar natSimultaneousTcp yes + # testvar natSrcPort0 yes + # testvar natSupportsP2P yes + # testvar natPortParity yes + # testvar natMode port-restricted + # testvar natVerifyIpId yes + # testvar defaultTcpEchoPort 50000 + # testvar defaultUdpEchoPort 50000 + # testvar natRefreshBehavior both + + SECTION "NAT Timers" { + + # testvar natFinTimeout disabled + # testvar natRstTimeout disabled + # testvar natTcpTimeout disabled + # testvar natSynTimeout disabled + # testvar natUdpTimeout disabled + # testvar natDnsTimeout disabled + # testvar natIcmpTimeout disabled + # testvar natRtspTimeout disabled + # testvar natLagTime 0 + + } + + } + + SECTION "Protocol Pass Through" { + + SECTION "IPSEC Pass Through" { + + # testvar supportsIPSECpass yes + # testvar ipsecMaxTunnels 20 + # testvar ipsecScaleSameServer no + # testvar alwaysUseIke no + # testvar ipsecPassRetransmit no + # testvar unknownPassthrough yes + + } + + SECTION "PPTP Pass Through" { + + # testvar supportsPPTPpass yes + # testvar pptpMaxTunnels 20 + + } + + SECTION "L2TP Pass Through" { + + # testvar supportsL2TPpass yes + # testvar l2tpMaxTunnels 20 + + } + + SECTION "PPPoE Pass Through" { + + # testvar supportsPPPoEpass no + + } + + } + + SECTION "Port Triggers" { + + # testvar portTriggers no + # testvar portTriggerTimeout 0 + # testvar portTriggerDelay 0 + # testvar portTriggerOpenDelay 0 + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "Application Layer Gateways (ALGs)" { + + SECTION "MSN Messenger" { + + # testvar supportsMsnAlg no + # testvar msnNotificationServerPort 1863 + # testvar msnSwitchBoardServerPort 1863 + + } + + SECTION "RTSP" { + + # testvar supportsRtspAlg no + # testvar rtspTeardownDelay 5 + # testvar rtspGetParameterInterval 5 + + } + + SECTION "SIP" { + + # testvar supportsSipAlg yes + # testvar sipInterface wan + # testvar sipServerIp 3.3.3.8 + # testvar ipv6SipServerIp 3001:051a:cafe::4 + # testvar sipCallTeardownDelay 5 + # testvar sipMaxOutboundCalls 10 + # testvar sipMaxInboundCalls 10 + # testvar sipCallPacing 0 + # testvar sipScaleRunTime 30 + # testvar sipScaleServerPort 5060 + # testvar sipScaleClientPort 5060 + # testvar sipMaxUserNames -1 + # testvar rtpSendInterval 5000 + + } + + SECTION "FTP" { + + # testvar ftpPortTimeout 120 + + } + + } + + SECTION "Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + SECTION "Port Scanning, Firewall and DoS Options" { + + # testvar portScanStart 0 + # testvar portScanStop 65535 + # testvar portScanDelay 1 + testvar firewallTcpOpenPorts "50805" + # testvar firewallTcpClosedPorts 2323 + # testvar firewallUdpOpenPorts 1234 + testvar firewallUdpClosedPorts 68 + # testvar firewallOutBlockedTcpPorts 1234 + # testvar firewallOutBlockedUdpPorts 1234 + # testvar firewallOutBlockedIpProtos 0 + # testvar wanPingRespond no + + SECTION "Denial of Service Options" { + + # testvar dosRecoveryTime 5 + # testvar dosAttackAttempts 100 + # testvar dutMgmtPort 80 + # testvar dutSecureMgmtPort disabled + # testvar dosSynAttackPort 80 + # testvar dosSynAttackAttempts 100 + + } + + SECTION "Deprecated SSL Protocols and Ciphers" { + + # testvar sslDeprecatedProtocols "sslv2 sslv3" + # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" + + } + + } + + SECTION "DMZ" { + + # testvar lanDmzHost 192.168.1.253 + # testvar lanDmzTcpPortExceptions 113 + # testvar lanDmzUdpPortExceptions 1234 + # testvar lanDmzIpProtoExceptions 2,47 + # testvar lanDmzSupportsIcmp no + + } + + SECTION "URL Filtering" { + + # testvar urlFilterSupported no + # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" + # testvar non-filtered-urls http://qacafe.com + # testvar urlFilterBlockedText "This website is blocked" + + } + + SECTION "XBox Live Options" { + + # testvar xboxNatMinType open + # testvar xboxPort 3074 + # testvar xboxMtu 1364 + + } + + } + + SECTION "Advanced Protocols" { + + SECTION "RIP v1/v2" { + + # testvar ripSupported no + # testvar ripVersion 1 + # testvar ripV2mode multicast + # testvar ripAuthMode none + # testvar ripPassword qacafe123 + # testvar ripMaxRoutes 96 + # testvar ripRouteTimeout 180 + # testvar ripGarbageTimeout 120 + # testvar ripRouteDelay 5000 + # testvar ripAcceptWanUpdate no + + } + + SECTION "UPnP" { + + # testvar upnpSupported yes + # testvar upnpVersion 1.1 + # testvar upnpDevice InternetGatewayDevice:2 + # testvar upnpWANPPPConnection no + # testvar upnpLANDevice no + # testvar upnpMaxTcpMappings 10 + # testvar upnpMaxSubClients 10 + # testvar upnpMinSubTimeout 40 + # testvar upnpMaxSubTimeout 3600 + # testvar upnpWANFailureTimeout 120 + # testvar upnpPortStart 40000 + # testvar upnpPortStop 50000 + + } + + SECTION "LLDP" { + + # testvar supportsLLDP no + # testvar lldpLanMac none + # testvar lldpLanChassisMac auto + # testvar lldpMsgFastTx 1 + # testvar lldpMsgTxInterval 30 + # testvar lldpTxFastInit 4 + + } + + SECTION "IGMP (Multicast)" { + + # testvar supportsMulticast yes + # testvar multicastType proxy + # testvar supportsMulticastOut no + # testvar igmpVersion 2 + # testvar igmpFastLeave no + # testvar igmpRouterOption yes + # testvar igmpMaxGroups 64 + # testvar multicastCacheTimeout 10 + # testvar multicastPoolStart 224.0.1.0 + # testvar multicastPoolStop 239.255.255.255 + # testvar SSMulticastPoolStart 232.0.1.1 + # testvar SSMulticastPoolStop 232.0.1.255 + # testvar multicastJoinDelay 2 + # testvar multicastScaleDelay 1 + # testvar multicastInterface wan + # testvar multicastBypassPPPoE no + + SECTION "IGMP Timers" { + + # testvar igmpQueryInterval 125 + # testvar igmpRobustnessVariable 2 + # testvar igmpQueryResponseInterval 10 + + } + + SECTION "IPTV Options" { + + # testvar iptvChannelRange 200 + # testvar iptvChannelChangeDelay 200 + # testvar iptvMaxFailures 10 + + } + + } + + SECTION "GRE Tunnels" { + + # testvar greDFflag on + + IGNORE testvar_group greTunnel1 { + + SECTION "Generic IPv4 GRE Tunnel Endpoints" { + + # testvar greType IPv4 + # testvar greEndpoint 5.5.5.5 + # testvar greLocalNet 192.168.1.0 + # testvar greLocalMask 255.255.255.0 + + } + + SECTION "L2GRE Options" { + + # testvar greWanGroup wan2 + + } + + SECTION "L3GRE Remote IPv4 Network" { + + # testvar greHost 3.0.0.1 + # testvar greRemoteNet 3.0.0.0 + # testvar greRemoteMask 255.0.0.0 + + } + + } + + } + + } + + SECTION "Additional Features" { + + # testvar supportsIPv4 yes + # testvar internalSmtpServer 5.5.5.5 + # testvar remoteHostIp 3.3.3.3 + # testvar startOtherLanFirst no + # testvar cdrouterOui B0750C + # testvar forwardingMaxFailures 20 + # testvar forwardingPort 5001 + # testvar jumboMtu disabled + # testvar tcpUdpPortStart 10000 + + SECTION "General Purpose HTTP Server" { + + # testvar httpServerIp 3.3.3.16 + # testvar httpServerPort 80 + # testvar httpServerRoot /tmp + + } + + SECTION "Free Network Range" { + + # testvar FreeNetworkStart 200.0.0.0 + # testvar FreeNetworkMask 255.255.255.0 + # testvar FreeNetworkStop 201.0.0.0 + + } + + SECTION "TCP MSS Clamping" { + + # testvar mssClampingValue default + # testvar mssClampingInValue default + + } + + SECTION "TCP/UDP Scaling Options" { + + # testvar scaleTcpConnsPerHost 5 + # testvar natMaxTcpConns 200 + # testvar natMaxUdpConns 100 + + } + + SECTION "Global Wireless Options" { + + # testvar wirelessRetry 3 + # testvar lanWirelessMaxClients auto + # testvar wifiCapture off + # testvar wifiCaptureFilter {} + + } + + } + + SECTION "Test Execution Options and Auto-Reboot" { + + # testvar startDelay 3 + # testvar lanStartDelay 3 + # testvar startTimeout 90 + # testvar wanCloseOnExit yes + # testvar RestartDut none + # testvar RestartDutDelay disabled + # testvar ShutdownDut "echo -n" + # testvar cpeRebootMode skip + # testvar healthCheckEnable no + + } + +} + +SECTION "CDRouter DOCSIS Add-On" { + + # testvar supportsDocsis no + + SECTION "Basic Configuration" { + + # testvar docsisIpProvisioningMode ipv4-only + # testvar docsisBootDelay 30 + + # testvar docsisClientMac auto + + } + + SECTION "IPv4 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIp 10.10.10.1 + # testvar docsisMask 255.255.255.0 + + } + + SECTION "DHCPv4 Server" { + + # testvar docsisDhcpServer 10.10.10.3 + # testvar docsisAssignIp 10.10.10.2 + # testvar docsisDomain docsis.qacafe.com + # testvar docsisDhcpLeaseTime 300 + # testvar docsisDhcpRapidCommit no + + # testvar docsisDhcpServerOptionCode1 69 + # testvar docsisDhcpServerOptionData1 04040404 + + # testvar docsisDhcpClientOptionCode1 60 + # testvar docsisDhcpClientOptionData1 04040404 + + SECTION "DHCPv4 Relay" { + + # testvar docsisGateway 6.6.6.7 + # testvar docsisAssignGateway 6.6.6.6 + # testvar docsisAssignMask 255.255.255.0 + # testvar docsisDhcpRelayServer 6.6.6.7 + + } + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogServer 10.10.10.5 + # testvar docsisTimeServer 10.10.10.6 + # testvar docsisTftpServer 10.10.10.4 + + } + + } + + SECTION "IPv6 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIpv6 8001::1 + # testvar docsisIpv6PrefixLen 64 + + } + + SECTION "DHCPv6 Server" { + + # testvar docsisDhcpIpv6Server 8001::3 + # testvar docsisAssignIpv6 8001::2 + # testvar docsisDHCPv6PreferredLifetime 300 + # testvar docsisDHCPv6ValidLifetime 300 + # testvar docsisDhcpv6RapidCommit no + + # testvar docsisDhcpv6ServerOptionCode1 69 + # testvar docsisDhcpv6ServerOptionData1 04040404 + + # testvar docsisDhcpv6ClientOptionCode1 60 + # testvar docsisDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Relay" { + + # testvar docsisIpv6Gateway 9001::1 + # testvar docsisAssignIpv6PrefixLen 64 + # testvar docsisDhcpv6RelayServer 9001::1 + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogIpv6Server 8001::5 + # testvar docsisTimeIpv6Server 8001::6 + # testvar docsisTftpIpv6Server 8001::4 + + } + + } + + SECTION "CM Config File" { + + SECTION "Global TFTP Settings" { + + # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp + # testvar docsisTftpBootFile auto-docsis.bin + + } + + SECTION "Embedded Config File" { + + # testvar docsisConfig { + # Main + # { + # NetworkAccess 1; + # BaselinePrivacy + # { + # AuthTimeout 10; + # ReAuthTimeout 10; + # AuthGraceTime 600; + # OperTimeout 1; + # ReKeyTimeout 1; + # TEKGraceTime 600; + # AuthRejectTimeout 60; + # SAMapWaitTimeout 1; + # SAMapMaxRetries 4; + # } + # MaxCPE 3; + # UsServiceFlow + # { + # UsServiceFlowRef 2; + # QosParamSetType 7; + # } + # DsServiceFlow + # { + # DsServiceFlowRef 1; + # QosParamSetType 7; + # } + # SNMPv1v2cCoexistenceConfig + # { + # SNMPv1v2cCommunityName "public"; + # SNMPv1v2cTransportAddressAccess + # { + # SNMPv1v2cTransportAddress 0.0.0.0/0; + # SNMPv1v2cTransportAddressMask 0.0.0.0/0; + # } + # SNMPv1v2cAccessViewType 2; + # SNMPv1v2cAccessViewName "docsisManagerView"; + # } + # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ + # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ + # /*EndOfDataMkr*/ + # } + # } + + } + + SECTION "Vendor Defined Config File" { + + # testvar docsisConfigFile none + + } + + } + + SECTION "CM Firewall Configuration" { + + SECTION "IPv4" { + + # testvar docsisTcpOpenPorts "22 443" + # testvar docsisTcpClosedPorts all + # testvar docsisUdpOpenPorts 1234 + # testvar docsisUdpClosedPorts all + + } + + SECTION "IPv6" { + + # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" + # testvar docsisIpv6TcpClosedPorts "2323 80" + # testvar docsisIpv6UdpOpenPorts 1234 + # testvar docsisIpv6UdpClosedPorts 113 + + } + + } + +} + +SECTION "CDRouter HomeKit Add-On" { + + # testvar supportsHomeKit no + + # testvar homeKitRouterName "HomeKit Router" + # testvar homeKitHATHostname hat.local + # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ + # testvar homeKitRouterSetupCode + + # testvar homeKitManualEnabled yes + +} + +SECTION "CDRouter IKE Add-On" { + + SECTION "Global IKE Options" { + + # testvar ikeMaxPhase2SA 20 + # testvar ikeDeadPeerDetection no + # testvar ikeNewQuickModeDelay 1000 + # testvar ikeKeepAlive 20 + # testvar ikeMinimumLifetime 20 + # testvar ipsecMinimumLifetime 20 + # testvar ikePhase2DeleteDelay 100 + # testvar ikeMaxTransforms 21 + # testvar ikeInitialContact yes + # testvar ikeBringUpTunnels yes + # testvar ikeAlwaysInitiate no + # testvar useSameIpsecTunnel no + # testvar ikeNatTraversal no + # testvar ike_FQDN fqdn-test.cdrouter.com + # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com + + } + + SECTION "IPsec Tunnel Configurations" { + + SECTION "IPsec Tunnel Configuration 1" { + + # testvar ipsecTunnelKeyType1 manual + # testvar ipsecTunnelEndpoint1 5.0.0.1 + # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 + # testvar ipsecTunnelRemoteMask1 255.255.255.0 + # testvar ipsecTunnelHost1 5.0.0.2 + + SECTION "Manual IPsec Tunnel Configuration" { + + # testvar ipsecTunnelOutboundSpi1 1000 + # testvar ipsecTunnelOutEncrypt1 des + # testvar ipsecTunnelOutEncryptKey1 0102030405060708 + # testvar ipsecTunnelOutAuth1 md5-hmac + # testvar ipsecTunnelOutAuthKey1 6262626262626262 + # testvar ipsecTunnelInboundSpi1 1001 + # testvar ipsecTunnelInEncrypt1 des + # testvar ipsecTunnelInEncryptKey1 0102030405060708 + # testvar ipsecTunnelInAuth1 md5-hmac + # testvar ipsecTunnelInAuthKey1 6262626262626262 + + } + + SECTION "IKE IPsec Tunnel Configuration" { + + # testvar ipsecTunnelIkeEncrypt1 des + # testvar ipsecTunnelIkeAuth1 md5-hmac + # testvar ipsecTunnelIkeGroup1 1 + # testvar ipsecTunnelIkeLifetime1 300 + # testvar ipsecTunnelEncrypt1 3des + # testvar ipsecTunnelAuth1 sha1-hmac + # testvar ipsecTunnelPfsGroup1 1 + # testvar ipsecTunnelLifetime1 120 + # testvar ipsecTunnelPsk1 qacafe123 + # testvar ipsecTunnelIkeMode1 main + # testvar ipsecTunnelUsesNat1 no + + } + + } + + } + +} + +SECTION "CDRouter IPv6 Add-On" { + + testvar supportsIPv6 yes + + SECTION "IPv6 WAN" { + + testvar ipv6WanMode PPPoE + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001::1 + # testvar ipv6WanIspAssignIp 3001::2 + # testvar ipv6WanIspNextIp 3001::3 + # testvar ipv6WanIspPrefixLen 64 + # testvar ipv6WanDutDuid 00000000 + # testvar ipv6RelayServer 192.88.99.1 + # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 + # testvar ipv6rdPrefix 2001:1234:: + # testvar ipv6rdPrefixLen 32 + # testvar ipv6rdIPv4MaskLen 0 + # testvar ipv6rdDHCPv4Option yes + # testvar ipv6TunnelMtuType static + # testvar ipv6WanMtu 1500 + # testvar ipv6WanMtuOption no + # testvar ipv6RASendInterval 10 + # testvar ipv6ExpectRAonWan no + + SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { + + # testvar ipv6WanIspGateway 3001::9 + # testvar ipv6WanAssignPrefixLen 64 + # testvar IPv6HopCount 1 + # testvar dhcpv6RelayServer 3001::9 + + } + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + # testvar ipv6WanRDNSS no + # testvar ipv6WanDNSSL no + + } + + SECTION "DHCPv6 Server" { + + # testvar dhcpv6IAValidLifetime 300 + # testvar dhcpv6IAPreferredLifetime 300 + # testvar dhcpv6DuidType 1 + # testvar dhcpv6RestartLatency 10 + # testvar dhcpv6ServerRapidCommit yes + + # testvar dhcpv6ServerOptionCode1 69 + # testvar dhcpv6ServerOptionData1 04040404 + + # testvar wanDhcpv6ClientOptionCode1 60 + # testvar wanDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Authentication" { + + # testvar supportsDhcpv6Auth no + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: + # testvar dhcpv6WanAssignPrefixLen 48 + # testvar dhcpv6PDLatency 30 + + } + + SECTION "IPv6 NTP" { + + # testvar ipv6NtpServer1 4321::23 + # testvar ipv6NtpServerName1 time.nist.gov + + # testvar ipv6NtpServer2 4321::24 + # testvar ipv6NtpServerName2 time.foo.com + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + testvar ipv6LanIp 3001:dddd::1 + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanPrefixLen 64 + # testvar ipv6MaxLanClients 32 + # testvar ipv6RAInterval 300 + # testvar ipv6LanSubnetId 1 + + SECTION "DHCPv6 Client" { + + # testvar dhcpv6ClientTimeout 5 + # testvar ipv6DhcpClientStart ::2 + # testvar ipv6DhcpClientEnd ::1f + # testvar ipv6DhcpClientExclude "::3 ::7" + # testvar ipv6DhcpClientValidLifetime 86400 + # testvar dhcpv6RapidCommit yes + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + SECTION "IPv6 LAN DNS" { + + # testvar ipv6DNStoLAN yes + # testvar ipv6RdnssSupport yes + # testvar ipv6DnsslSupport yes + # testvar ipv6LanStaticDns no + + } + + SECTION "Unique Local Address (ULA) Options" { + + # testvar supportsULA no + # testvar ipv6LanULAPrefix fd00:: + # testvar ipv6LanULAIp ::%eui64% + # testvar ipv6LanULAMode autoconf + + } + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + } + + SECTION "IPv6 Firewall" { + + # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" + # testvar ipv6FirewallTcpClosedPorts "2323 80" + # testvar ipv6FirewallUdpOpenPorts 1234 + # testvar ipv6FirewallUdpClosedPorts 113 + # testvar ipv6FirewallOutBlockedTcpPorts 1234 + # testvar ipv6FirewallOutBlockedUdpPorts 1234 + # testvar ipv6FirewallOutBlockedIpProtos 0 + # testvar ipv6WanPingRespond no + + SECTION "IPv6 TCP MSS Clamping" { + + # testvar ipv6MssClampingValue default + # testvar ipv6MssClampingInValue default + # testvar ipv6MssClampingTestPort 8096 + + } + + } + + SECTION "IPv6 Advanced Protocols" { + + SECTION "RIPng" { + + # testvar supportsRIPng no + + } + + SECTION "MLD (IPv6 Multicast)" { + + # testvar supportsIPv6Multicast yes + # testvar supportsIPv6MulticastOut no + # testvar mldVersion 2 + # testvar mldMaxGroups 64 + # testvar mldFastLeave no + # testvar ipv6MulticastCacheTimeout 10 + # testvar ipv6MulticastJoinDelay 2 + # testvar ipv6MulticastScaleDelay 1 + + SECTION "MLD Timers" { + + # testvar mldQueryInterval 125 + # testvar mldRobustnessVariable 2 + # testvar mldQueryResponseInterval 10 + + } + + SECTION "IPv6 IPTV Options" { + + # testvar ipv6IptvChannelRange 200 + # testvar ipv6IptvChannelChangeDelay 200 + # testvar ipv6IptvMaxFailures 10 + + } + + } + + } + + SECTION "IPv6 Additional Features" { + + SECTION "IPv6 Free Network Range" { + + # testvar ipv6RemoteHost 3001:051a:cafe::1 + # testvar ipv6FreeNetworkStart 3001:cafe:1:: + # testvar ipv6FreeNetworkPrefixLen 64 + # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: + + } + + SECTION "IPv6 Multicast Pool Ranges" { + + # testvar ipv6MulticastPoolStart ff0e::1 + # testvar ipv6MulticastPoolStop ff0e:ffff:: + # testvar ipv6SSMulticastPoolStart ff3e::8000:1 + # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff + + } + + } + +} + +SECTION "CDRouter Multiport Add-On" { + + SECTION "Additional WAN Interface Setup" { + + # testvar wanFailoverTimeout 300 + + IGNORE testvar_group wan2 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.2.1 + # testvar wanIspAssignIp 202.254.2.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.2.2 + # testvar wanIspNextIp 202.254.2.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.202.1 + # testvar pptpClientIp 202.254.202.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.202.1 + # testvar l2tpClientIp 202.254.202.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.102.1 + # testvar wanBackupDnsServer 202.254.102.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:2::1 + # testvar ipv6WanIspAssignIp 3001:0:0:2::2 + # testvar ipv6WanIspNextIp 3001:0:0:2::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + IGNORE testvar_group wan3 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.3.1 + # testvar wanIspAssignIp 202.254.3.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.3.2 + # testvar wanIspNextIp 202.254.3.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.203.1 + # testvar pptpClientIp 202.254.203.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.203.1 + # testvar l2tpClientIp 202.254.203.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.103.1 + # testvar wanBackupDnsServer 202.254.103.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:3::1 + # testvar ipv6WanIspAssignIp 3001:0:0:3::2 + # testvar ipv6WanIspNextIp 3001:0:0:3::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + } + + SECTION "Additional LAN Interface Setup" { + + # testvar useSameLanInterface no + + IGNORE testvar_group lan2 { + + SECTION "IPv4 LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanGuestMode no + + SECTION "LAN Host IP" { + + # testvar hostIp 192.168.1.0 + # testvar hostMask 255.255.255.0 + # testvar hostGateway 192.168.1.1 + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "DHCP Client Configuration" { + + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + # testvar dhcpExtraClientParams "69 70" + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Configuration Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + } + + SECTION "IPv4 Firewall and NAT" { + + SECTION "Static NAT" { + + # testvar staticNatIp 202.254.1.2 + # testvar staticNatFirewall yes + # testvar natMode port-restricted + + } + + SECTION "Special Application Port Triggers" { + + # testvar portTriggers no + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "TCP and UDP Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanStaticDns no + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + + SECTION "LAN IPv6 DHCP Client" { + + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + + } + + } + +} + +SECTION "CDRouter Performance Add-On" { + + # testvar supportsPerformance no + + SECTION "Basic Configuration" { + + # testvar perfWanIp 202.254.1.4 + # testvar perfWanIpv6 3001::4 + # testvar perfPort 19750 + # testvar perfPort2 19751 + + } + + SECTION "Performance Settings" { + + # testvar perfDuration 10 + # testvar perfDownloadBandwidth 0.0 + # testvar perfInterval auto + # testvar perfIncrement 5 + # testvar perfStreams 1 + # testvar perfStreamIncr 0 + # testvar perfUdpLen auto + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + # testvar perfOmit 0 + # testvar perfDSCP 0 + # testvar perfFairness no + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresholds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + SECTION "Advanced Options" { + + # testvar perfPingEnable no + # testvar perfEnableCapture no + # testvar perfLatencyAttempts 25 + # testvar perfApplicationAttempts 4 + # testvar perfApplicationDelay 100 + + } + + SECTION "Wireless" { + + IGNORE testvar_group wireless-performance { + + SECTION "Performance Settings" { + + # testvar perfDownloadBandwidth 0.0 + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresolds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + } + + } + +} + +SECTION "CDRouter Security Add-On" { + + SECTION "Internet Connection Sharing (ICS)" { + + # testvar enableICS no + # testvar icsInterface eth0 + # testvar icsShareIPv4 yes + # testvar icsShareIPv6 yes + + } + + SECTION "Traffic Analysis" { + + # testvar enableSuricata no + + } + + SECTION "Nmap Scans" { + + # testvar enableNmap no + # testvar nmapPorts 0-65535 + # testvar nmapScanTimeout 600 + # testvar nmapTimingTemplate 5 + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleBase auto + # testvar internetScheduleTimeZone auto + # testvar internetScheduleBlockedText "This website is blocked" + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + +} + +SECTION "CDRouter SNMP Add-On" { + + # testvar supportsSnmp no + + # testvar snmpPort 161 + # testvar snmpDefaultUser auto + # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" + # testvar snmpUpdateDelay 15 + + SECTION "SNMP Options and Users" { + + # testvar snmpManagerIp 3.3.3.33 + # testvar snmpManagerIpv6 3001:051a:cafe::33 + + IGNORE testvar_group snmpuser1 { + + # testvar snmpVersion 2c + + # testvar snmpAccess read-only + # testvar snmpTransport udp + # testvar snmpRetries 5 + # testvar snmpTimeout 5 + + SECTION "SNMP v1/2c Configuration" { + + # testvar snmpCommunity public + + } + + SECTION "SNMP v3 Configuration" { + + # testvar snmpSecurityLevel noAuthNoPriv + + # testvar snmpAuthProtocol MD5 + # testvar snmpAuthUsername qacafe + # testvar snmpAuthPassword qacafe123 + + # testvar snmpPrivacyProtocol DES + # testvar snmpPrivacyPassword qacafe123 + + # testvar snmpContextName bridge1 + # testvar snmpSecurityEngineId 800000020109840301 + # testvar snmpContextEngineId 800000020109840301 + + } + + } + + } + + SECTION "SNMP Scenarios" { + + # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp + # testvar snmpScenarioSingleMode no + # testvar snmpScenarioInterface lan + # testvar snmpScenarioIpVersion IPv4 + + } + +} + +SECTION "CDRouter Storage Add-On" { + + # testvar supportsStorage no + + # testvar storageFileSize 10 + # testvar storageUserFilePath none + # testvar useMulticastDNS no + + SECTION "SMB Options and Users" { + + # testvar supportsStorageSmb yes + # testvar storageSmbMaxSessions 20 + # testvar storageSmbTimeout 120 + # testvar storageSmbPacing 0 + + IGNORE testvar_group smbuser1 { + + # testvar server MyNAS + # testvar share data + # testvar folder /home/qacafe + # testvar guest no + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + + SECTION "FTP Options and Users" { + + # testvar supportsStorageFtp yes + # testvar supportsStorageFtps yes + # testvar storageFtpMaxSessions 20 + # testvar storageFtpTimeout 120 + # testvar storageFtpPacing 0 + + IGNORE testvar_group ftpuser1 { + + # testvar server MyNAS + # testvar path /home/qacafe + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + +} + +SECTION "CDRouter TR-069 Add-On" { + + testvar supportsCWMP yes + + SECTION "Basic ACS Configuration" { + + # testvar acsIp 6.0.0.1 + # testvar acsPort 80 + testvar acsDomain acs-download.qacafe.com + # testvar acsTransport http + # testvar acsAuth digest + # testvar acsDigestQopAuth yes + # testvar acsInterface wan + testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ + # testvar acsWaitForInform 120 + # testvar acsSkipInitialInform no + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar cwmpProtocolVersion 1.0 + # testvar acsDeviceDiscovery no + # testvar acsConfigurePeriodicInform yes + # testvar tr69InitiateConnection yes + testvar acsDefaultUser cdrouter + testvar acsDefaultPassword cdrouter + testvar acsCpeDefaultUser acs + testvar acsCpeDefaultPassword acs + # testvar acsFileServerUser file_server_user + # testvar acsFileServerPassword file_server_password + + } + + SECTION "XMPP Connection Request Configuration" { + + # testvar acsSupportsXmppConnReq no + + # testvar acsXmppServerConnectAlgorithm DNS-SRV + # testvar acsXmppConnReqUsername qacafe + # testvar acsXmppConnReqResource cdrouter + # testvar acsXmppConnReqPassword qacafe123 + # testvar acsXmppConnReqUseTls no + + } + + SECTION "Advanced ACS Configuration" { + + # testvar acsCpeKeepAlive yes + # testvar acsChunkedEncoding no + # testvar acsChunkSize 64 + # testvar acsAuthOncePerSession no + # testvar acsCookieMode rfc6265 + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + # testvar acsNumberCpeAttempts 2 + # testvar acsDelayCpeAttempts 10 + # testvar acsWaitForConnectionRequest yes + # testvar acsUseTcpOffload yes + # testvar acsTargetDevice tr069_device2 + # testvar acsDualStackIp 6000::1 + # testvar acsStrictSyntaxChecking on + + } + + SECTION "SSL Configuration" { + + # testvar acsSslVersion tls + # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem + # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem + # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsCipherSuite auto + # testvar acsClientCaCertPath /path/to/client/ca/file + + } + + SECTION "Profiles" { + + # testvar cwmpSupportedDataModel auto + # testvar cwmpDataValidation yes + # testvar cwmpSkipParameters empty + # testvar cwmpModifyParameters empty + # testvar cwmpVendorSpecificParams none + + SECTION "Custom CWMP Profiles" { + + IGNORE testvar_group cwmp_profile1 { + + # testvar cwmpProfileName myVendorParameters + # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp + # testvar cwmpProfileObject InternetGatewayDevice:1 + + } + + } + + } + + SECTION "CWMP Scenarios" { + + # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp + # testvar cwmpScenarioSingleMode no + # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp + + } + + SECTION "Additional TR-069 Options" { + + # testvar tr69DeviceType IGD + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69InformTimeout 120 + # testvar tr69MinPeriodicInform 60 + # testvar tr69ScheduleInformRPC yes + # testvar tr69UploadRPC no + # testvar tr69UploadPath /tmp + # testvar tr69ConfigUploadFilename vendor_configuration_file + # testvar tr69LogUploadFilename vendor_log_file + # testvar tr69FactoryResetRPC no + # testvar tr69CpeGetRPCs no + # testvar tr69ForceBoolean no + # testvar tr69XMLCapturePath /tmp/tr69-xml + # testvar tr69DownloadTimeout 600 + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadImageVersion 1.0 + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69RebootTimeout 300 + # testvar tr69RpcTimeout 180 + # testvar tr69DownloadConfig /path/to/config + # testvar tr69MaxUserNameLen 256 + # testvar tr69MaxPasswordLen 256 + # testvar tr69MaxCpeUserNameLen 256 + # testvar tr69MaxCpePasswordLen 256 + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DUInstallImageVersion 1.0 + # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image + # testvar tr69DUInstallImageAlternateVersion 1.0 + # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb + # testvar tr69DUChangeExecEnvRef openwrt + # testvar tr69DUChangeTimeout 600 + # testvar tr69WildcardPortMappingOnly no + # testvar tr69PortMapDeletionDelay 15 + # testvar tr69PortMapCreationDelay 0 + # testvar tr69PortMapDisableDelay 15 + # testvar tr69TraceRouteTimeout 120 + + } + + SECTION "TR-111 Parts 1 and 2" { + + # testvar supportsTr111Part1 yes + # testvar supportsTr111Part2 no + # testvar STUNMaximumKeepAlivePeriod 60 + # testvar STUNMinimumKeepAlivePeriod 60 + # testvar STUNAuth no + # testvar STUNUsername qacafe + # testvar STUNPassword qacafe123 + # testvar acsUdpConnectionDelay 0 + + } + + SECTION "TR-143 Performance Tests" { + + # testvar tr143HttpDownloadSize 1000000 + # testvar tr143HttpUploadSize 1000000 + + # testvar tr143HttpDownloadHighThreshold 0.0 + # testvar tr143HttpDownloadLowThreshold 5.0 + # testvar tr143HttpDownloadResponseMax 60 + + # testvar tr143HttpUploadHighThreshold 0.0 + # testvar tr143HttpUploadLowThreshold 5.0 + # testvar tr143HttpUploadResponseMax 60 + + } + + SECTION "TR-069 LAN Side Devices" { + + IGNORE testvar_group tr069_device2 { + + # testvar acsDefaultUser qacafe + # testvar acsDefaultPassword qacafe123 + # testvar acsCpeDefaultUser qacafe + # testvar acsCpeDefaultPassword qacafe123 + # testvar acsCreatePortMapOnIGD no + # testvar acsPortMapPublicPort 20000 + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69DeviceType IGD + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DownloadConfig /path/to/config + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + + } + + } + +} + +SECTION "CDRouter USP Add-On" { + + # testvar supportsUSP no + + SECTION "Basic Controller Configuration" { + + # testvar uspControllerID proto::controller-id + # testvar uspControllerInterface wan + + # testvar uspControllerIpMode ipv4-only + # testvar uspControllerIpv4 6.0.0.2 + # testvar uspControllerIpv6 6000::2 + # testvar uspControllerPort auto + # testvar uspControllerPath /controller-path + + # testvar uspControllerUseNonPayloadProtection no + # testvar uspControllerUseSessionContext no + # testvar uspControllerMTP websocket + # testvar uspControllerMTPEncryption no + # testvar uspControllerUSPEncryption no + # testvar uspControllerDomain controller.cdroutertest.com + + # testvar uspSegmentationEnable no + # testvar uspSegmentationSize auto + + # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + + # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + + # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerVerifyRecordIntegrity no + + # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem + + # testvar uspControllerHost any + # testvar uspControllerUsername qacafe + # testvar uspControllerPassword qacafe123 + + } + + SECTION "Basic Agent Configuration" { + + # testvar uspAgentID proto::agent-id + + # testvar uspAgentIpv4 auto + # testvar uspAgentIpv6 auto + # testvar uspAgentPort auto + # testvar uspAgentPath /agent-path + + # testvar uspMessageTimeout 30 + # testvar uspNotificationTimeout 30 + # testvar uspRebootTimeout 120 + + } + + SECTION "USP Scenarios" { + + # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp + # testvar uspScenarioSingleMode no + # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp + + } + + SECTION "Data Model" { + + # testvar uspSkipParameters empty + # testvar uspModifyParameters empty + # testvar uspSupportedDataModel all + + SECTION "Custom USP Data Model" { + + IGNORE testvar_group usp_profile_1 { + + # testvar uspProfileName myVendorParameters + # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml + + } + + } + + } + + SECTION "USP Agent Data Model Configuration" { + + # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + + # testvar uspParameterPath1 Device.DeviceInfo.ModelName + # testvar uspParameterPath2 Device.IP.Interface.3.Enable + # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory + # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode + + # testvar uspNotificationParamNewValue myCustomParameterValue + + # testvar uspObject1 Device.IP.Interface. + # testvar uspObject2 Device.WiFi.AccessPoint. + + # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} + # testvar uspValidSearchPathResultParam PeriodicNotifInterval + # testvar uspValidSearchPathResultValue 5000 + + # testvar uspFirmwareImage /path/to/firmware.bin + # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin + # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 + + } + +} + +SECTION "CDRouter BBF.069 Add-On" { + + # testvar supportsBBF069 yes + + SECTION "General" { + + SECTION "ACS URL" { + + # testvar bbf069ACSURL http://acs1.broadband-forum.org + # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org + + } + + SECTION "Security Certificates" { + + # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem + # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem + # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem + # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem + # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem + # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem + + } + + SECTION "HTTP Verification" { + + # testvar bbf069HTTPVerification no + + } + + } + + SECTION "Device Specific" { + + SECTION "General" { + + # testvar bbf069RootDataModel InternetGatewayDevice + # testvar bbf069UnsupportedRPC ChangeDUState + # testvar bbf069UploadType "1 Vendor Configuration File" + # testvar bbf069ExpectedUpgradeTime 100 + + } + + SECTION "Data Model" { + + # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069ActiveParamType unsignedInt + # testvar bbf069ActiveParamValue 60 + + # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069CompletePath1Type unsignedInt + # testvar bbf069CompletePath1Value 73 + + # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable + # testvar bbf069CompletePath2Type boolean + # testvar bbf069CompletePath2Value true + + # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. + # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. + # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv + # testvar bbf069InvalidPathType unsignedInt + + # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer + # testvar bbf069UnwritableType string + # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 + + } + + } + +} diff --git a/.testbed/cdrouter/packages/CDRouter-IPv6-Top-100+mDNS.gz b/.testbed/cdrouter/packages/CDRouter-IPv6-Top-100+mDNS.gz new file mode 100644 index 0000000000..f1773553d4 Binary files /dev/null and b/.testbed/cdrouter/packages/CDRouter-IPv6-Top-100+mDNS.gz differ diff --git a/.testbed/cdrouter/packages/CDRouter-Top-100+mDNS.gz b/.testbed/cdrouter/packages/CDRouter-Top-100+mDNS.gz new file mode 100644 index 0000000000..5acd36cc05 Binary files /dev/null and b/.testbed/cdrouter/packages/CDRouter-Top-100+mDNS.gz differ diff --git a/.testbed/labgrid/testbed-02.yaml b/.testbed/labgrid/testbed-02.yaml new file mode 100644 index 0000000000..283cf0ca55 --- /dev/null +++ b/.testbed/labgrid/testbed-02.yaml @@ -0,0 +1,63 @@ +targets: + + glinet-b1300-initramfs: + resources: + ModbusTCPCoil: + host: quido.testbed-02.vpn.true.cz + coil: 7 + write_multiple_coils: True + RawSerialPort: + port: "/dev/glinet-b1300" + drivers: + ModbusCoilDriver: {} + DigitalOutputPowerDriver: {} + SerialDriver: {} + ShellDriver: + console_ready: Please press Enter to activate this console. + prompt: 'root@[\w()]+:[^ ]+ ' + login_prompt: built-in shell (ash) + await_login_timeout: 15 + username: kingbanik + UBootDriver: + prompt: '\(IPQ40xx\) # ' + password: 'gl' + password_prompt: 'Hit "gl" key to stop booting' + init_commands: + - setenv bootdelay 0 + - setenv serverip 192.168.1.2 + - setenv ipaddr 192.168.1.1 + boot_command_delay: 5 + boot_timeout: 90 + boot_command: tftpboot 0x88000000 openwrt-ipq40xx-generic-glinet_gl-b1300-initramfs-fit-zImage.itb && bootm 0x88000000 + UBootStrategy: {} + + glinet-b1300-nor: + resources: + ModbusTCPCoil: + host: quido.testbed-02.vpn.true.cz + coil: 7 + write_multiple_coils: True + RawSerialPort: + port: "/dev/glinet-b1300" + drivers: + ModbusCoilDriver: {} + DigitalOutputPowerDriver: {} + SerialDriver: {} + ShellDriver: + console_ready: Please press Enter to activate this console. + prompt: 'root@[\w()]+:[^ ]+ ' + login_prompt: built-in shell (ash) + await_login_timeout: 15 + username: kingbanik + UBootDriver: + prompt: '\(IPQ40xx\) # ' + password: 'gl' + password_prompt: 'Hit "gl" key to stop booting' + init_commands: + - setenv bootdelay 0 + - setenv serverip 192.168.1.2 + - setenv ipaddr 192.168.1.1 + boot_command_delay: 5 + boot_timeout: 180 + boot_command: tftpboot 0x84000000 openwrt-ipq40xx-generic-glinet_gl-b1300-squashfs-sysupgrade.bin && sf probe && sf erase 0x180000 0x1e80000 && sf write 0x84000000 0x180000 $filesize && bootipq + UBootStrategy: {}