From c6daa92b26a53036efac84124ca8804763b3e115 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0tetiar?= Date: Wed, 30 Nov 2022 09:33:24 +0100 Subject: [PATCH] ci: sync with current prplos branch state MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Sync CI bits with the current state in prplos branch on commit 9af7fff65169 ("ci: fix build Docker image sdk-x86-64 job"). Signed-off-by: Petr Štetiar --- .gitlab-ci.yml | 86 +- .gitlab/cdrouter.yml | 85 +- .gitlab/cdrouter/glinet-b1300.yml | 63 + .gitlab/cdrouter/turris-omnia.yml | 64 + .gitlab/docker/sdk/gitlab.yml | 26 +- .gitlab/docker/testbed/Dockerfile | 5 +- .gitlab/mockups/tr181-mockups.tar.gz | Bin 732 -> 560 bytes .../dut-init/cdrouter-dut-enable-pppoe.sh | 9 + .../dut-init/cdrouter-dut-enable-vlans.sh | 4 + .../dut-init/cdrouter-tr181-mockups.sh | 4 + .gitlab/scripts/prpl-jira.py | 42 +- .gitlab/scripts/testbed-device.py | 232 ++ .gitlab/sdk.yml | 26 +- .gitlab/testbed.yml | 57 +- .gitlab/testbed/glinet-b1300.yml | 7 +- .gitlab/testbed/nec-wx3000hp.yml | 6 +- .gitlab/testbed/turris-omnia.yml | 6 +- .testbed/cdrouter/configurations/generic | 6 +- .testbed/cdrouter/configurations/generic-ipv6 | 2677 +++++++++++++++++ .testbed/cdrouter/configurations/ppp | 2677 +++++++++++++++++ .testbed/cdrouter/configurations/ppp-ipv6 | 2677 +++++++++++++++++ .testbed/cdrouter/configurations/vlan | 2677 +++++++++++++++++ .testbed/cdrouter/configurations/vlan-ipv6 | 2677 +++++++++++++++++ .testbed/cdrouter/configurations/vlan-ppp | 2677 +++++++++++++++++ .../cdrouter/configurations/vlan-ppp-ipv6 | 2677 +++++++++++++++++ .../packages/CDRouter-IPv6-Top-100+mDNS.gz | Bin 0 -> 20310 bytes .../packages/CDRouter-Top-100+mDNS.gz | Bin 0 -> 20449 bytes .testbed/labgrid/testbed-02.yaml | 63 + 28 files changed, 19371 insertions(+), 159 deletions(-) create mode 100644 .gitlab/cdrouter/glinet-b1300.yml create mode 100644 .gitlab/cdrouter/turris-omnia.yml create mode 100644 .gitlab/scripts/dut-init/cdrouter-dut-enable-pppoe.sh create mode 100644 .gitlab/scripts/dut-init/cdrouter-dut-enable-vlans.sh create mode 100644 .gitlab/scripts/dut-init/cdrouter-tr181-mockups.sh create mode 100644 .testbed/cdrouter/configurations/generic-ipv6 create mode 100644 .testbed/cdrouter/configurations/ppp create mode 100644 .testbed/cdrouter/configurations/ppp-ipv6 create mode 100644 .testbed/cdrouter/configurations/vlan create mode 100644 .testbed/cdrouter/configurations/vlan-ipv6 create mode 100644 .testbed/cdrouter/configurations/vlan-ppp create mode 100644 .testbed/cdrouter/configurations/vlan-ppp-ipv6 create mode 100644 .testbed/cdrouter/packages/CDRouter-IPv6-Top-100+mDNS.gz create mode 100644 .testbed/cdrouter/packages/CDRouter-Top-100+mDNS.gz create mode 100644 .testbed/labgrid/testbed-02.yaml diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index f4bb07b7e5..167f5d5619 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -4,6 +4,8 @@ variables: include: - local: .gitlab/build.yml - local: .gitlab/cdrouter.yml + - local: .gitlab/cdrouter/glinet-b1300.yml + - local: .gitlab/cdrouter/turris-omnia.yml - local: .gitlab/coverity.yml - local: .gitlab/docker.yml - local: .gitlab/docker/builder/gitlab.yml @@ -26,87 +28,35 @@ stages: - cdrouter - coverity -.build test intel_mips prpl: +.build test intel_mips prpl webui: extends: .build test config -build test ipq40xx prpl: +build test ipq40xx prpl webui: extends: .build test config -build test mvebu prpl: +build test mvebu prpl webui: extends: .build test config -coverity scan ipq40xx prpl: - extends: .coverity scan config +build test x86_64 prpl webui: + extends: .build test config variables: - CI_COVERITY_COMPILER_TEMPLATE_LIST: > - arm-openwrt-linux-gcc - arm-openwrt-linux-muslgnueabi-gcc + CI_BUILD_CONFIG: > + +DEVEL +BUILD_LOG +SDK +IB +IB_STANDALONE -.run test NEC WX3000HP with system on NAND: +.run test NEC WX3000HP NAND: needs: - - build test intel_mips prpl + - job: build test intel_mips prpl webui + optional: true extends: .nec-wx3000hp testbed -run test Gl.iNet B1300 with system on initramfs: +run test Gl.iNet B1300 initramfs: needs: - - build test ipq40xx prpl + - job: build test ipq40xx prpl webui + optional: true extends: .glinet-b1300 testbed -run test Turris Omnia with system on initramfs: +run test Turris Omnia initramfs: needs: - - build test mvebu prpl + - job: build test mvebu prpl webui + optional: true extends: .turris-omnia testbed - -.CDRouter CDRouter-Top-100 package on NEC WX3000HP with system on NAND: - needs: - - build test intel_mips prpl - extends: - - .nec-wx3000hp testbed - - .cdrouter - variables: - LABGRID_TARGET: "$DUT_BOARD-firstboot" - -CDRouter CDRouter-Top-100 package on Gl.iNet B1300 with system on initramfs: - needs: - - build test ipq40xx prpl - extends: - - .glinet-b1300 testbed - - .cdrouter - -CDRouter CDRouter-Top-100 package on Turris Omnia with system on initramfs: - needs: - - build test mvebu prpl - extends: - - .turris-omnia testbed - - .cdrouter - -.CDRouter CDRouter-TR-069 package on NEC WX3000HP with system on NAND: - allow_failure: true - needs: - - build test intel_mips prpl - extends: - - .nec-wx3000hp testbed - - .cdrouter - -CDRouter CDRouter-TR-069 package on Gl.iNet B1300 with system on NOR: - allow_failure: true - needs: - - build test ipq40xx prpl - extends: - - .glinet-b1300 testbed - - .cdrouter - variables: - LABGRID_TARGET: glinet-b1300-nor - TFTP_IMAGE_FILENAME: openwrt-ipq40xx-generic-glinet_gl-b1300-squashfs-sysupgrade.bin - -CDRouter CDRouter-TR-069 package on Turris Omnia with system on eMMC: - allow_failure: true - needs: - - build test mvebu prpl - extends: - - .turris-omnia testbed - - .cdrouter - variables: - LABGRID_TARGET: turris-omnia-emmc - TFTP_IMAGE_FILENAME: openwrt-mvebu-cortexa9-cznic_turris-omnia-sysupgrade.img.gz - TFTP_IMAGE_UNPACK_COMMAND: "gunzip --force $TESTBED_TFTP_PATH/$TFTP_IMAGE_FILENAME || true" diff --git a/.gitlab/cdrouter.yml b/.gitlab/cdrouter.yml index c91840faaf..2f19608d95 100644 --- a/.gitlab/cdrouter.yml +++ b/.gitlab/cdrouter.yml @@ -7,23 +7,32 @@ - if: '$CI_COMMIT_BRANCH == $CI_DESIGNATED_BRANCH' - when: manual variables: - TEST_CONFIG: generic + CDROUTER_TEST_CONFIG: generic DUT_SLEEP_AFTER_BOOT: 20 CDROUTER_LAN_INTERFACE: eth1 CDROUTER_WAN_INTERFACE: eth2 CDROUTER_ETH0_MAC_ADDRESS: 00:03:2d:49:2e:d8 + CDROUTER_ETH0_MAC_ADDRESS_TESTBED_02: 00:03:2d:49:2e:c8 before_script: - - sudo etherwake -i $TESTBED_MNG_INTERFACE $CDROUTER_ETH0_MAC_ADDRESS 2> /dev/null + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-01; then + sudo etherwake -i $TESTBED_MNG_INTERFACE $CDROUTER_ETH0_MAC_ADDRESS 2> /dev/null + else + sudo etherwake -i $TESTBED_MNG_INTERFACE $CDROUTER_ETH0_MAC_ADDRESS_TESTBED_02 2> /dev/null + fi - sudo ip link set $TESTBED_LAN_INTERFACE up 2> /dev/null - sudo ip link set $TESTBED_WAN_INTERFACE up 2> /dev/null - sleep 10 - - eval $(ssh-agent -s) - - echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - - mkdir -p ~/.ssh; chmod 700 ~/.ssh - - ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null - - chmod 644 ~/.ssh/known_hosts + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-01; then + eval $(ssh-agent -s) + echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - + ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null + chmod 644 ~/.ssh/known_hosts + fi - > if [ -n "$TFTP_IMAGE_DOWNLOAD_URL" ]; then @@ -38,6 +47,12 @@ echo "Running $TFTP_IMAGE_UNPACK_COMMAND" eval "$TFTP_IMAGE_UNPACK_COMMAND" fi + + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-02; then + export TB_CONFIG=".testbed/labgrid/testbed-02.yaml" + fi + - .gitlab/scripts/testbed-device.py --target $LABGRID_TARGET boot_into shell - sudo ip link set $TESTBED_WAN_INTERFACE down 2> /dev/null - > @@ -46,21 +61,22 @@ --network lan --remote-host $TARGET_LAN_TEST_HOST - - > - retry_count=3; - while [ $retry_count -gt 0 ]; do - echo "Waiting for SSH availability on $TARGET_LAN_IP" - ssh-keyscan "$TARGET_LAN_IP" 2>&1 | grep -q "$TARGET_LAN_IP" && break - retry_count="$(( retry_count - 1 ))" - sleep 5 - done + - echo "Waiting for SSH connection availability with ${DUT_SSH_CONNECT_TIMEOUT}sec timeout, with $DUT_SSH_CONNECT_ATTEMPTS attempts..." + - time ssh -o BatchMode=yes -o StrictHostKeyChecking=no -o ConnectionAttempts=$DUT_SSH_CONNECT_ATTEMPTS -o ConnectTimeout=$DUT_SSH_CONNECT_TIMEOUT root@$TARGET_LAN_IP 'exit 0' - ssh-keyscan $TARGET_LAN_IP >> ~/.ssh/known_hosts 2> /dev/null - ssh root@$TARGET_LAN_IP "cat /var/log/messages" > syslog-$LABGRID_TARGET.txt 2> /dev/null || true - ssh root@$TARGET_LAN_IP "ubus call system board" | tee system-$LABGRID_TARGET.json - - scp .gitlab/mockups/tr181-mockups.tar.gz root@${TARGET_LAN_IP}:/tmp/ - - ssh root@$TARGET_LAN_IP "tar xzf /tmp/tr181-mockups.tar.gz -C / && /etc/init.d/tr181-mockups start" + - > + for dut_init_script in $DUT_INIT_SCRIPTS; + do echo "Running $dut_init_script"; /bin/sh "$dut_init_script"; + done + + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-02; then + export CDROUTER_API_TOKEN="$CDROUTER_API_TOKEN_TESTBED_02" + fi - .gitlab/scripts/testbed-cdrouter.py package_stop - .gitlab/scripts/testbed-cdrouter.py wait_for_netif $CDROUTER_LAN_INTERFACE @@ -71,14 +87,19 @@ script: - sleep $DUT_SLEEP_AFTER_BOOT - - export TEST_PACKAGE="$(echo $CI_JOB_NAME | sed 's/CDRouter \(.*\) package on .*/\1/')" - - .gitlab/scripts/testbed-cdrouter.py config_import $TEST_CONFIG + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-02; then + export CDROUTER_API_TOKEN="$CDROUTER_API_TOKEN_TESTBED_02" + fi + + - export TEST_PACKAGE="$(echo $CI_JOB_NAME | sed 's/\(\w\) .*/\1/')" + - .gitlab/scripts/testbed-cdrouter.py config_import $CDROUTER_TEST_CONFIG - .gitlab/scripts/testbed-cdrouter.py package_import $TEST_PACKAGE.gz - > .gitlab/scripts/testbed-cdrouter.py package_run $TEST_PACKAGE --device generic - --configuration $TEST_CONFIG + --configuration $CDROUTER_TEST_CONFIG --system-info system-$LABGRID_TARGET.json after_script: @@ -89,16 +110,30 @@ cat cdrouter-results/final.txt && .gitlab/scripts/cdrouter-pretty-failures.awk cdrouter-results/*.txt - - eval $(ssh-agent -s) - - echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - - mkdir -p ~/.ssh; chmod 700 ~/.ssh - - ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null - - chmod 644 ~/.ssh/known_hosts + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-01; then + eval $(ssh-agent -s) + echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - + ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null + chmod 644 ~/.ssh/known_hosts + fi - sudo ip link set $TESTBED_LAN_INTERFACE up 2> /dev/null - sudo ip link set $TESTBED_WAN_INTERFACE up 2> /dev/null - sleep 5 + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-02; then + export TB_CONFIG=".testbed/labgrid/testbed-02.yaml" + fi + + - > + ssh -o BatchMode=yes -o StrictHostKeyChecking=no -o ConnectTimeout=15 root@$TARGET_LAN_IP 'exit 0' || { + .gitlab/scripts/testbed-device.py --target $LABGRID_TARGET console_dump_system_state + .gitlab/scripts/testbed-device.py --target $LABGRID_TARGET console_recover_ssh_access + } || true + - ssh-keyscan $TARGET_LAN_IP >> ~/.ssh/known_hosts 2> /dev/null - > ssh root@$TARGET_LAN_IP exit && { @@ -113,6 +148,10 @@ - .gitlab/scripts/testbed-device.py --target $LABGRID_TARGET power off - mv console_$LABGRID_TARGET console_$LABGRID_TARGET.txt || true + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-02; then + export CDROUTER_API_TOKEN="$CDROUTER_API_TOKEN_TESTBED_02" + fi - .gitlab/scripts/testbed-cdrouter.py package_stop artifacts: diff --git a/.gitlab/cdrouter/glinet-b1300.yml b/.gitlab/cdrouter/glinet-b1300.yml new file mode 100644 index 0000000000..e3498a94e2 --- /dev/null +++ b/.gitlab/cdrouter/glinet-b1300.yml @@ -0,0 +1,63 @@ +.glinet-cdrouter: &glinet_cdrouter + needs: + - job: build test ipq40xx prpl webui + optional: true + extends: + - .glinet-b1300 testbed + - .cdrouter + +CDRouter-Top-100+mDNS Gl.iNet initramfs: + <<: *glinet_cdrouter + +CDRouter-Top-100+mDNS Gl.iNet VLAN WAN/LAN initramfs: + <<: *glinet_cdrouter + variables: + CDROUTER_TEST_CONFIG: vlan + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-vlans.sh + +CDRouter-Top-100+mDNS Gl.iNet PPPoE WAN initramfs: + <<: *glinet_cdrouter + variables: + CDROUTER_TEST_CONFIG: ppp + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-pppoe.sh + + +.glinet-cdrouter-ipv6: &glinet_cdrouter_ipv6 + <<: *glinet_cdrouter + allow_failure: true + rules: + - if: '$TFTP_IMAGE_DOWNLOAD_URL =~ $TFTP_IMAGE_FILENAME_PATTERN' + when: always + - if: '$TFTP_IMAGE_DOWNLOAD_URL' + when: never + - when: manual + +CDRouter-IPv6-Top-100+mDNS Gl.iNet initramfs: + <<: *glinet_cdrouter_ipv6 + variables: + CDROUTER_TEST_CONFIG: generic-ipv6 + +CDRouter-IPv6-Top-100+mDNS Gl.iNet VLAN WAN/LAN initramfs: + <<: *glinet_cdrouter_ipv6 + variables: + CDROUTER_TEST_CONFIG: vlan-ipv6 + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-vlans.sh + +CDRouter-TR-069 Gl.iNet NOR: + <<: *glinet_cdrouter + variables: + LABGRID_TARGET: glinet-b1300-nor + TFTP_IMAGE_FILENAME: openwrt-ipq40xx-generic-glinet_gl-b1300-squashfs-sysupgrade.bin + TFTP_IMAGE_FILENAME_PATTERN: /.*openwrt-ipq40xx-generic-glinet_gl-b1300-squashfs-sysupgrade.bin/ + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-tr181-mockups.sh + +CDRouter-IPv6-Top-100+mDNS Gl.iNet PPPoE WAN initramfs: + <<: *glinet_cdrouter_ipv6 + variables: + CDROUTER_TEST_CONFIG: ppp-ipv6 + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-pppoe.sh diff --git a/.gitlab/cdrouter/turris-omnia.yml b/.gitlab/cdrouter/turris-omnia.yml new file mode 100644 index 0000000000..26151d1b2f --- /dev/null +++ b/.gitlab/cdrouter/turris-omnia.yml @@ -0,0 +1,64 @@ +.turris-cdrouter: &turris_cdrouter + needs: + - job: build test mvebu prpl webui + optional: true + extends: + - .turris-omnia testbed + - .cdrouter + +CDRouter-Top-100+mDNS Turris initramfs: + <<: *turris_cdrouter + +CDRouter-Top-100+mDNS Turris VLAN WAN/LAN initramfs: + <<: *turris_cdrouter + variables: + CDROUTER_TEST_CONFIG: vlan + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-vlans.sh + +CDRouter-Top-100+mDNS Turris PPPoE WAN initramfs: + <<: *turris_cdrouter + variables: + CDROUTER_TEST_CONFIG: ppp + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-pppoe.sh + + +.turris-cdrouter-ipv6: &turris_cdrouter_ipv6 + <<: *turris_cdrouter + allow_failure: true + rules: + - if: '$TFTP_IMAGE_DOWNLOAD_URL =~ $TFTP_IMAGE_FILENAME_PATTERN' + when: always + - if: '$TFTP_IMAGE_DOWNLOAD_URL' + when: never + - when: manual + +CDRouter-IPv6-Top-100+mDNS Turris initramfs: + <<: *turris_cdrouter_ipv6 + variables: + CDROUTER_TEST_CONFIG: generic-ipv6 + +CDRouter-IPv6-Top-100+mDNS Turris VLAN WAN/LAN initramfs: + <<: *turris_cdrouter_ipv6 + variables: + CDROUTER_TEST_CONFIG: vlan-ipv6 + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-vlans.sh + +CDRouter-IPv6-Top-100+mDNS Turris PPPoE WAN initramfs: + <<: *turris_cdrouter_ipv6 + variables: + CDROUTER_TEST_CONFIG: ppp-ipv6 + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-dut-enable-pppoe.sh + +CDRouter-TR-069 Turris eMMC: + <<: *turris_cdrouter + variables: + LABGRID_TARGET: turris-omnia-emmc + TFTP_IMAGE_FILENAME: openwrt-mvebu-cortexa9-cznic_turris-omnia-sysupgrade.img.gz + TFTP_IMAGE_FILENAME_PATTERN: /.*openwrt-mvebu-cortexa9-cznic_turris-omnia-sysupgrade.img.gz/ + TFTP_IMAGE_UNPACK_COMMAND: "gunzip --force $TESTBED_TFTP_PATH/$TFTP_IMAGE_FILENAME || true" + DUT_INIT_SCRIPTS: | + .gitlab/scripts/dut-init/cdrouter-tr181-mockups.sh diff --git a/.gitlab/docker/sdk/gitlab.yml b/.gitlab/docker/sdk/gitlab.yml index 770fbec2ae..87f425cdcc 100644 --- a/.gitlab/docker/sdk/gitlab.yml +++ b/.gitlab/docker/sdk/gitlab.yml @@ -1,6 +1,6 @@ .build Docker image sdk-intel_mips-xrx500: stage: docker SDK - needs: ["build test intel_mips prpl"] + needs: ["build test intel_mips prpl webui"] variables: DOCKER_DOCKERFILE_PATH: .gitlab/docker/sdk DOCKER_BUILD_EXTRA_ARGS: --build-arg DESIGNATED_BRANCH=$CI_DESIGNATED_BRANCH @@ -20,7 +20,7 @@ build Docker image sdk-ipq40xx-generic: stage: docker SDK - needs: ["build test ipq40xx prpl"] + needs: ["build test ipq40xx prpl webui"] variables: DOCKER_DOCKERFILE_PATH: .gitlab/docker/sdk DOCKER_BUILD_EXTRA_ARGS: --build-arg DESIGNATED_BRANCH=$CI_DESIGNATED_BRANCH @@ -40,7 +40,7 @@ deploy Docker image sdk-ipq40xx-generic: build Docker image sdk-mvebu-cortexa9: stage: docker SDK - needs: ["build test mvebu prpl"] + needs: ["build test mvebu prpl webui"] variables: DOCKER_DOCKERFILE_PATH: .gitlab/docker/sdk DOCKER_BUILD_EXTRA_ARGS: --build-arg DESIGNATED_BRANCH=$CI_DESIGNATED_BRANCH @@ -56,3 +56,23 @@ deploy Docker image sdk-mvebu-cortexa9: stage: docker SDK deploy extends: .deploy Docker image needs: ["test Docker image sdk-mvebu-cortexa9"] + + +build Docker image sdk-x86-64: + stage: docker SDK + needs: ["build test x86_64 prpl webui"] + variables: + DOCKER_DOCKERFILE_PATH: .gitlab/docker/sdk + DOCKER_BUILD_EXTRA_ARGS: --build-arg DESIGNATED_BRANCH=$CI_DESIGNATED_BRANCH + extends: .build Docker image + before_script: + - tar xf bin/targets/x86/64/openwrt-sdk-x86-64_gcc*.Linux-x86_64.tar.xz --strip=1 -C .gitlab/docker/sdk + +test Docker image sdk-x86-64: + extends: .test Docker SDK image + needs: ["build Docker image sdk-x86-64"] + +deploy Docker image sdk-x86-64: + stage: docker SDK deploy + extends: .deploy Docker image + needs: ["test Docker image sdk-x86-64"] diff --git a/.gitlab/docker/testbed/Dockerfile b/.gitlab/docker/testbed/Dockerfile index e93a33cecb..141477df82 100644 --- a/.gitlab/docker/testbed/Dockerfile +++ b/.gitlab/docker/testbed/Dockerfile @@ -28,14 +28,15 @@ RUN \ RUN localedef -i en_US -c -f UTF-8 -A /usr/share/locale/locale.alias en_US.UTF-8 ENV LANG=en_US.utf8 -ENV LABGRID_COMMIT=e1da2a319314 -RUN git clone --branch wip/testbed-next https://gitlab.com/prpl-foundation/prplOS/labgrid +ENV LABGRID_COMMIT=0e1ef80ca803 +RUN git clone --branch wip/testbed https://gitlab.com/prpl-foundation/prplOS/labgrid WORKDIR labgrid RUN git reset --hard $LABGRID_COMMIT RUN \ pip3 install -U pip && \ pip3 install -r requirements.txt && \ + pip3 install -r modbus-requirements.txt && \ python3 setup.py install && \ rm -fr /labgrid diff --git a/.gitlab/mockups/tr181-mockups.tar.gz b/.gitlab/mockups/tr181-mockups.tar.gz index 858d142ac8811c22c84e37cf2456d1232f6afe99..a6c7844423032d67f48363206e00273a74382790 100644 GIT binary patch literal 560 zcmV-00?+*)iwFRTCgoxP1MQbvZ__Xo$Mc*|aTdA>klMt#G(fcn1dj+IO*~C~$P%|T zYn{q=7+c%#j@?VrlxgjtDMFmzOXB3*oWGr%P?fq?!+4rFj?9t7k+*%^V3E*|LNAU8 z@hy+&lhA^w>B0rY4!5UoFn0w4811sna9 zAa6)}lBc)DR33RX9H@Uxd_N$O(O8AAJGd7;-^r_HBxIVx0^-|;Fl8|dUF_4h=$ zqA25arYwVg57dbATB~}?#$#x`OcV8}PZfE9W#O;2!bF8f*=TjAP9mWzsXNTGmY{9C;$L{MILAX literal 732 zcmV<20wet&iwFS4{IOyH1MQbhbJ{QvhB^CJY$#;fP5{do+?L6KNpk2+C(VSkmkb9X z%R!BisU#;Q3IDw^-#CPj38vFl&jpNk-(C5Y&6+Aw$z_bK@w{5{iM*P<_&FtqT&L#R zUJW59XCwW^%|R{e#u8$wumH#nIK8`D6ZhQtzZ9zd$Gu;f?t#tyN2ppw+J985I>!H9 zF!f&v^Z}K65xI{0a?876WB;pO-Kpz1uV5T^ zhNZlXgb#<1&o^eV!?f`6Y3pgJR^0DLLQ(&m60LPH=u?>pHV>MbgVy=?gR_hC1^JZt zQOGD)EA*#yq9}wDjyoaMy7ptCbVCZOc+|o%lS!7pqIjx_78N&CT(;M=F@;1i*QFUG2q7dd<>Oxrs4JW}?B!=6Txu@hUgY_^hvw2r!|kef1Q@ zn6sZTh2k|GOf{Mz!)q?&@X?v!!uB0nfBJUaI?3~2kg}iU0QjQ$fAsuEb!6thoiOvi z_0eAX*WY4|vH#xY{yVngR&(H#%N53%(%og%n(<%zKe@)4)p*hSpMLSTk%Ow9x&L>; zg8!M_W6$|tcb$~~u0AsJ|1Nm5SLrZbkzLE;xJM83OS>R%Sp-W81q6&+<53I?^`PfW z^=>v8UBVue0;t4NjKm7}iPR9hmxG1)9;!>Jqn#k6_P_J9nXGfG$v)E{)6ns z%8zdOyfO=P@uc((78McC^vZqaL%RX0OZn17cg?~O3U3KkD|6<`0ZX?a=xFWpkb*sG zYx!75q!ZuIQz+?1kpCv}6@^bp!sYyWJ|tr8{9-nhnEZPqr@>$_7z_r3!C){L3 0: + logging.info("result:\n" + "\n".join(result) + "\n" + "-" * 80) + + return result + + def ubus_call(self, cmd): + result = None + + cmd = f"ubus call {cmd}" + try: + logging.info(f"executing: {cmd}") + result = self.shell.run_check(cmd) + except ExecutionError as e: + stdout = " ".join(e.stdout).replace("\t", "") + stderr = " ".join(e.stderr) + logging.error(f"failed: {e.msg} stdout='{stdout}' stderr='{stderr}'") + return None, e.stdout[-1], (e.msg, e.stdout, e.stderr) + + result = json.loads(" ".join(result)) + logging.info(f"result: {result}") + return result + + +class UbusTR181: + def __init__(self, args, shell): + self.args = args + self.shell = shell + + def api_call(self, method, path, parameters=None): + cmd = f"{path} {method}" + if parameters: + p = json.dumps({"parameters": parameters}) + cmd += f" '{p}'" + + return self.shell.ubus_call(cmd) + + def get(self, path, parameters=None): + return self.api_call("_get", path, parameters) + + def set(self, path, parameters): + return self.api_call("_set", path, parameters) + + def add(self, path, parameters): + return self.api_call("_add", path, parameters) + + def remove(self, path, parameters=None): + return self.api_call("_del", path, parameters) + + def call(self, path, method, parameters): + cmd = f"{path} {method}" + if parameters: + p = json.dumps(parameters) + cmd += f" '{p}'" + + return self.shell.ubus_call(cmd) + + class TestbedDevice: def __init__(self, args): self.args = args + self.shell = None self.env = Environment(config_file=self.args.config) ConsoleLoggingReporter.start(args.console_logpath) self.target = self.env.get_target(args.target) + def init_shell(self): + if self.shell: + return + + self.shell_driver = self.target.get_driver("ShellDriver") + self.shell = OpenWrtConsoleShell(self.args, self.shell_driver) + + def init_swconfig_glinet(self): + self.shell.run("swconfig dev switch0 vlan 1 set vid 201") + self.shell.run("swconfig dev switch0 vlan 1 set ports '0t 3t 4t'") + + self.shell.run("swconfig dev switch0 vlan 2 set vid 101") + self.shell.run("swconfig dev switch0 vlan 2 set ports '0t 5t'") + + self.shell.run("swconfig dev switch0 vlan 1 show") + self.shell.run("swconfig dev switch0 vlan 2 show") + + self.shell.run( + """ + uci add network switch_vlan && + uci set network.@switch_vlan[-1]=switch_vlan && + uci set network.@switch_vlan[-1].device='switch0' && + uci set network.@switch_vlan[-1].vlan='2' && + uci set network.@switch_vlan[-1].vid='101' && + uci set network.@switch_vlan[-1].ports='0t 5t' && + uci set network.@switch_vlan[0].vid='201' && + uci set network.@switch_vlan[0].ports='3t 4t 0t' && + uci commit network + """ + ) + + def _init_swconfig(self): + if self.board_name.startswith("glinet"): + self.init_swconfig_glinet() + + def _init_wan_vlan(self): + self.shell.run("ubus -t 60 wait_for X_PRPL-COM_WANManager.WAN") + self.ubus_tr181.set("X_PRPL-COM_WANManager.WAN.2.Intf.1", {"VlanID": 101}) + self.ubus_tr181.call( + "X_PRPL-COM_WANManager", "setWANMode", {"WANMode": "demo_vlanmode"} + ) + + def _init_lan_vlan(self): + bridge_lan_ports = { + "cznic,turris-omnia": "Bridging.Bridge.1.Port.5", + "EASY350 ANYWAN (GRX350) Axepoint Asurada model": "Bridging.Bridge.1.Port.5", + } + bridge_vlan_port = bridge_lan_ports.get( + self.board_name, "Bridging.Bridge.1.Port.2" + ) + + self.ubus_tr181.set("Bridging.Bridge.1", {"Standard": "802.1Q-2005"}) + self.ubus_tr181.add( + "Bridging.Bridge.1.VLAN", + {"Alias": "vlan201", "Name": "vlan201", "VLANID": 201, "Enable": 1}, + ) + self.ubus_tr181.set( + f"{bridge_vlan_port}", + { + "AcceptableFrameTypes": "AdmitOnlyVLANTagged", + "PVID": "201", + "Type": "CustomerVLANPort", + "Enable": 1, + }, + ) + self.ubus_tr181.add( + "Bridging.Bridge.1.VLANPort", + { + "Alias": "LAN", + "Name": "vlan201", + "Port": f"Device.{bridge_vlan_port}.", + "VLAN": "Device.Bridging.Bridge.1.VLAN.1.", + "Enable": 1, + }, + ) + + def init_vlans(self): + self.init_shell() + + system_info = self.shell.ubus_call("system board") + if not system_info: + logging.error("Unable to determine running DUT board!") + return + + self.board_name = system_info["board_name"] + logging.info(f"Running on {self.board_name} board") + + self.ubus_tr181 = UbusTR181(self.args, self.shell) + self._init_wan_vlan() + self._init_lan_vlan() + self._init_swconfig() + + logging.info( + "Let the system apply the new configuration, waiting 15 seconds..." + ) + time.sleep(15) + + self.ubus_tr181.get("Ethernet.VLANTermination") + self.shell.run("(cat /proc/vlan101 || cat /proc/net/vlan/vlan101) 2> /dev/null") + self.shell.run("(cat /proc/vlan201 || cat /proc/net/vlan/vlan201) 2> /dev/null") + self.shell.run("ip address show vlan101") + self.shell.run("ip address show vlan201") + self.shell.run("brctl show") + self.shell.run("ip route show") + + def console_dump_system_state(self): + self.init_shell() + + self.shell.ubus_call("system board") + + self.shell.run("df -h || df") + self.shell.run("free -h || free") + self.shell.run("ps auxfw || ps w") + self.shell.run("cat /etc/config/network") + self.shell.run("brctl show") + self.shell.run("ip route show") + self.shell.run("ip address show") + self.shell.run("ip link show") + self.shell.run("iptables-save") + self.shell.run("ip6tables-save") + self.shell.run("cat /var/log/messages || logread") + + self.ubus_tr181 = UbusTR181(self.args, self.shell) + self.ubus_tr181.call("IP", "_get", {"depth": 100}) + self.ubus_tr181.call("NetDev", "_get", {"depth": 100}) + self.ubus_tr181.call("NetModel", "_get", {"depth": 100}) + self.ubus_tr181.call("Bridging", "_get", {"depth": 100}) + self.ubus_tr181.call("Firewall", "_get", {"depth": 100}) + + def console_recover_ssh_access(self): + self.init_shell() + self.shell.run("iptables -P INPUT ACCEPT") + self.shell.run("iptables -L INPUT") + self.shell.run("/etc/init.d/dropbear restart; sleep 5") + self.shell.run("logread | grep dropbear | tail -10") + self.shell.run("netstat -nlp | grep :22") + self.shell.run("ping -c1 192.168.1.1; ping -c1 192.168.1.2") + def boot_into(self): strategy = self.target.get_driver("UBootStrategy") dest = self.args.destination @@ -117,6 +333,22 @@ def main(): ) subparser.set_defaults(func=TestbedDevice.check_network) + subparser = subparsers.add_parser( + "init_vlans", help="initialize VLAN configuration" + ) + subparser.set_defaults(func=TestbedDevice.init_vlans) + + subparser = subparsers.add_parser( + "console_dump_system_state", help="dump system state using serial console" + ) + subparser.set_defaults(func=TestbedDevice.console_dump_system_state) + + subparser = subparsers.add_parser( + "console_recover_ssh_access", + help="try to recover SSH access using serial console", + ) + subparser.set_defaults(func=TestbedDevice.console_recover_ssh_access) + args = parser.parse_args() if args.verbose >= 1: StepReporter.start() diff --git a/.gitlab/sdk.yml b/.gitlab/sdk.yml index 4525d4f26d..823ec098be 100644 --- a/.gitlab/sdk.yml +++ b/.gitlab/sdk.yml @@ -6,6 +6,8 @@ stages: - build .build feed with SDK: + tags: + - package-builder stage: build image: $CI_SDK_IMAGE variables: @@ -26,10 +28,6 @@ stages: - > for feed in $CI_SDK_INSTALL_FEEDS ci; do - sleep_interval="$(( (RANDOM % 60) + 1 ))" - echo "Waiting for $sleep_interval seconds..." - sleep "${sleep_interval}s" - ./scripts/feeds update "$feed" ; ./scripts/feeds install -a -p "$feed" ; done 2>&1 | tee logs/build.log @@ -104,6 +102,11 @@ stages: CI_SDK_BUILD_PACKAGES: | please-provide CI_SDK_PACKAGE_JOBS_TEMPLATE: | + {% if env['CI_SDK_PIPELINE_SOURCE'] %} + workflow: + rules: + - if: $$CI_PIPELINE_SOURCE == "{{ env['CI_SDK_PIPELINE_SOURCE'] }}" + {% endif %} include: - remote: https://gitlab.com/prpl-foundation/prplos/prplos/-/raw/$CI_DESIGNATED_BRANCH/.gitlab/sdk.yml {% for sdk in env['CI_SDK_TARGETS'].rstrip().split("\n") %} @@ -168,7 +171,18 @@ stages: variables: CI_SDK_IMAGE: registry.gitlab.com/prpl-foundation/prplos/prplos/$CI_DESIGNATED_BRANCH/sdk-mvebu-cortexa9:latest -.build feed with ath79-generic-22.03-SNAPSHOT SDK: +.build feed with x86-64 SDK: + extends: .build feed with SDK + variables: + CI_SDK_IMAGE: registry.gitlab.com/prpl-foundation/prplos/prplos/$CI_DESIGNATED_BRANCH/sdk-x86-64:latest + +.build feed with ath79-generic-19.07.7 SDK: extends: .build feed with OpenWrt SDK variables: - CI_SDK_IMAGE: openwrt/sdk:ath79-generic-22.03-SNAPSHOT + CI_SDK_IMAGE: openwrtorg/sdk:ath79-generic-19.07.7 + +.build feed with x86-64-22.03.2 SDK: + extends: .build feed with OpenWrt SDK + variables: + CI_SDK_BEFORE_COMPILE_COMMAND: sudo apt-get update; sudo apt-get install -y python3-yaml + CI_SDK_IMAGE: openwrt/sdk:x86-64-22.03.2 diff --git a/.gitlab/testbed.yml b/.gitlab/testbed.yml index 543a303ef6..7f89b9ee11 100644 --- a/.gitlab/testbed.yml +++ b/.gitlab/testbed.yml @@ -11,10 +11,16 @@ TESTBED_LAN_INTERFACE: enp2s0 TESTBED_WAN_INTERFACE: enp3s0 TESTBED_TFTP_PATH: /var/lib/tftpboot - TFTP_IMAGE_PATH: bin/targets/$DUT_ARCH/$DUT_SUBTARGET + TFTP_IMAGE_PATH: bin/targets/$DUT_TARGET/$DUT_SUBTARGET + PACKAGE_DIR: bin/packages + DUT_ARCH_PACKAGES_PATH: $PACKAGE_DIR/${DUT_ARCH}_${DUT_CPU_TYPE}_${DUT_CPU_SUBTYPE} TARGET_LAN_IP: 192.168.1.1 TARGET_LAN_TEST_HOST: 192.168.1.2 DUT_SLEEP_AFTER_BOOT: 90 + DUT_SSH_CONNECT_TIMEOUT: 30 + DUT_SSH_CONNECT_ATTEMPTS: 3 + DUT_TR181_WAN_INTERFACE: Device.Ethernet.Link.2. + DUT_TR181_LAN_INTERFACE: Device.Ethernet.Link.3. CRAM_REMOTE_COMMAND: ssh root@$TARGET_LAN_IP CRAM_TEST_SUITE: | .gitlab/tests/cram/generic/acceleration-plan-components @@ -29,11 +35,14 @@ - sudo ip link set $TESTBED_WAN_INTERFACE up 2> /dev/null - sleep 10 - - eval $(ssh-agent -s) - - echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - - mkdir -p ~/.ssh; chmod 700 ~/.ssh - - ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null - - chmod 644 ~/.ssh/known_hosts + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-01; then + eval $(ssh-agent -s) + echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - + ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null + chmod 644 ~/.ssh/known_hosts + fi - > if [ -n "$TFTP_IMAGE_DOWNLOAD_URL" ]; then @@ -48,6 +57,12 @@ echo "Running $TFTP_IMAGE_UNPACK_COMMAND" eval "$TFTP_IMAGE_UNPACK_COMMAND" fi + + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-02; then + export TB_CONFIG=".testbed/labgrid/testbed-02.yaml" + fi + - .gitlab/scripts/testbed-device.py --target $LABGRID_TARGET boot_into shell - > .gitlab/scripts/testbed-device.py @@ -55,14 +70,8 @@ --network lan --remote-host $TARGET_LAN_TEST_HOST - - > - retry_count=3; - while [ $retry_count -gt 0 ]; do - echo "Waiting for SSH availability on $TARGET_LAN_IP" - ssh-keyscan "$TARGET_LAN_IP" 2>&1 | grep -q "$TARGET_LAN_IP" && break - retry_count="$(( retry_count - 1 ))" - sleep 5 - done + - echo "Waiting for SSH connection availability with ${DUT_SSH_CONNECT_TIMEOUT}sec timeout, with $DUT_SSH_CONNECT_ATTEMPTS attempts..." + - time ssh -o BatchMode=yes -o StrictHostKeyChecking=no -o ConnectionAttempts=$DUT_SSH_CONNECT_ATTEMPTS -o ConnectTimeout=$DUT_SSH_CONNECT_TIMEOUT root@$TARGET_LAN_IP 'exit 0' - ssh-keyscan $TARGET_LAN_IP >> ~/.ssh/known_hosts 2> /dev/null - ssh root@$TARGET_LAN_IP "cat /var/log/messages" > syslog-$LABGRID_TARGET.txt 2> /dev/null || true @@ -82,11 +91,25 @@ true } - - eval $(ssh-agent -s) - - echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - - mkdir -p ~/.ssh; chmod 700 ~/.ssh - - ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null - - chmod 644 ~/.ssh/known_hosts + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-01; then + eval $(ssh-agent -s) + echo "$TESTBED_SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - + ssh-keyscan $TESTBED_UART_RELAY_HOST > ~/.ssh/known_hosts 2> /dev/null + chmod 644 ~/.ssh/known_hosts + fi + + - > + if echo "$CI_RUNNER_DESCRIPTION" | grep -q testbed-02; then + export TB_CONFIG=".testbed/labgrid/testbed-02.yaml" + fi + + - > + ssh -o BatchMode=yes -o StrictHostKeyChecking=no -o ConnectTimeout=15 root@$TARGET_LAN_IP 'exit 0' || { + .gitlab/scripts/testbed-device.py --target $LABGRID_TARGET console_dump_system_state + .gitlab/scripts/testbed-device.py --target $LABGRID_TARGET console_recover_ssh_access + } || true - ssh-keyscan $TARGET_LAN_IP >> ~/.ssh/known_hosts 2> /dev/null - > diff --git a/.gitlab/testbed/glinet-b1300.yml b/.gitlab/testbed/glinet-b1300.yml index 185ed1297a..ec181fa0ce 100644 --- a/.gitlab/testbed/glinet-b1300.yml +++ b/.gitlab/testbed/glinet-b1300.yml @@ -1,11 +1,14 @@ .glinet-b1300 testbed: extends: .testbed true.cz variables: - DUT_ARCH: ipq40xx + DUT_ARCH: arm + DUT_TARGET: ipq40xx DUT_SUBTARGET: generic DUT_BOARD: glinet-b1300 - DUT_WAN_INTERFACE: wan + DUT_CPU_TYPE: cortex-a7 + DUT_CPU_SUBTYPE: neon-vfpv4 LABGRID_TARGET: glinet-b1300-initramfs TFTP_IMAGE_FILENAME: openwrt-ipq40xx-generic-glinet_gl-b1300-initramfs-fit-zImage.itb + TFTP_IMAGE_FILENAME_PATTERN: /.*openwrt-ipq40xx-generic-glinet_gl-b1300-initramfs-fit-zImage.itb/ tags: - dut-glinet-b1300 diff --git a/.gitlab/testbed/nec-wx3000hp.yml b/.gitlab/testbed/nec-wx3000hp.yml index a3e06f25ba..d022e82bd3 100644 --- a/.gitlab/testbed/nec-wx3000hp.yml +++ b/.gitlab/testbed/nec-wx3000hp.yml @@ -1,10 +1,14 @@ .nec-wx3000hp testbed: extends: .testbed true.cz variables: - DUT_ARCH: intel_mips + DUT_ARCH: mips + DUT_TARGET: intel_mips DUT_SUBTARGET: xrx500 DUT_BOARD: nec-wx3000hp + DUT_CPU_TYPE: 24kc + DUT_CPU_SUBTYPE: nomips16 LABGRID_TARGET: nec-wx3000hp-nand TFTP_IMAGE_FILENAME: AX3000_1600_ETH_11AXUCI_ASURADA-squashfs-fullimage.img + TFTP_IMAGE_FILENAME_PATTERN: /.*AX3000_1600_ETH_11AXUCI_ASURADA-squashfs-fullimage.img/ tags: - dut-nec-wx3000hp diff --git a/.gitlab/testbed/turris-omnia.yml b/.gitlab/testbed/turris-omnia.yml index db092fb29c..f78c73a3cd 100644 --- a/.gitlab/testbed/turris-omnia.yml +++ b/.gitlab/testbed/turris-omnia.yml @@ -1,11 +1,15 @@ .turris-omnia testbed: extends: .testbed true.cz variables: - DUT_ARCH: mvebu + DUT_ARCH: arm + DUT_TARGET: mvebu DUT_SUBTARGET: cortexa9 DUT_BOARD: turris-omnia + DUT_CPU_TYPE: cortex-a9 + DUT_CPU_SUBTYPE: vfpv3-d16 DUT_WAN_INTERFACE: eth2 LABGRID_TARGET: turris-omnia-initramfs TFTP_IMAGE_FILENAME: openwrt-mvebu-cortexa9-cznic_turris-omnia-initramfs-kernel.bin + TFTP_IMAGE_FILENAME_PATTERN: /.*openwrt-mvebu-cortexa9-cznic_turris-omnia-initramfs-kernel.bin/ tags: - dut-turris-omnia diff --git a/.testbed/cdrouter/configurations/generic b/.testbed/cdrouter/configurations/generic index 2298816e47..ee070ccf95 100644 --- a/.testbed/cdrouter/configurations/generic +++ b/.testbed/cdrouter/configurations/generic @@ -332,7 +332,7 @@ SECTION "Base Configuration" { # testvar lanMask 255.255.255.0 # testvar lanDomainName qacafe.com # testvar lanMtu default - # testvar lanHostname mydut + testvar lanHostname prplOS # testvar lanGuestMode no SECTION "ARP Settings" { @@ -679,7 +679,7 @@ SECTION "Base Configuration" { testvar firewallTcpOpenPorts "50805" # testvar firewallTcpClosedPorts 2323 # testvar firewallUdpOpenPorts 1234 - # testvar firewallUdpClosedPorts 113 + testvar firewallUdpClosedPorts 68 # testvar firewallOutBlockedTcpPorts 1234 # testvar firewallOutBlockedUdpPorts 1234 # testvar firewallOutBlockedIpProtos 0 @@ -1292,7 +1292,7 @@ SECTION "CDRouter IPv6 Add-On" { SECTION "IPv6 LAN" { # testvar ipv6LanMode autoconf - # testvar ipv6LanIp 3001:dddd::%eui64% + testvar ipv6LanIp 3001:dddd::1 # testvar ipv6LanPrivacyAddresses no # testvar ipv6LanPrefixLen 64 # testvar ipv6MaxLanClients 32 diff --git a/.testbed/cdrouter/configurations/generic-ipv6 b/.testbed/cdrouter/configurations/generic-ipv6 new file mode 100644 index 0000000000..da373aacb7 --- /dev/null +++ b/.testbed/cdrouter/configurations/generic-ipv6 @@ -0,0 +1,2677 @@ +SECTION "About" { + + # Cable/DSL Router Test Suite + # + # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 + # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) + # + # Local.conf + # + # This is the main configuration file for CDRouter. This file defines the + # configuration of the router under test and controls various aspects of + # CDRouter's behavior. This file consists of a number of unique test variables + # called 'testvars' which are grouped by interface, protocol, or functionality. + # The basic syntax for all testvars is: + # + # testvar NAME VALUE + +} + +SECTION "Base Configuration" { + + SECTION "WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.1.1 + # testvar wanIspAssignIp 202.254.1.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.1.2 + # testvar wanIspNextIp 202.254.1.3 + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar wanIspAssignMask 255.255.255.0 + # testvar IPv4HopCount 1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + # testvar dhcpServerRapidCommit yes + # testvar dhcpServerClientIDBehavior rfc6842 + # testvar dhcpServerResponseDelay 4500 + # testvar dhcpConnectOnDemand no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar wanDhcpClientOptionCode1 60 + # testvar wanDhcpClientOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "DHCP Authentication" { + + # testvar supportsDhcpAuth no + + } + + SECTION "PPPoE Server" { + + # testvar pppoeConnectOnDemand no + # testvar pppoeIdleTimeout 60 + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + # testvar pppoeAcCookie auto + # testvar pppoeMaxPayload none + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpConnectOnDemand yes + # testvar pptpServerIp 202.254.201.1 + # testvar pptpClientIp 202.254.201.2 + # testvar pptpUseDHCP no + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpConnectOnDemand yes + # testvar l2tpServerIp 202.254.201.1 + # testvar l2tpClientIp 202.254.201.2 + # testvar l2tpUseDHCP no + + } + + SECTION "DS-Lite" { + + # testvar ipv6DsliteAftr 3001:aaaa::1 + # testvar dhcpv6WanAftrName aftr.qacafe.com + # testvar dsliteFirewallMode address-restricted + + } + + SECTION "MAP / LW4o6" { + + # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: + # testvar mapBmrRuleIpv6PrefixLen 48 + # testvar mapBmrRuleIpv4Prefix 5.0.0.0 + # testvar mapBmrRuleIpv4PrefixLen 24 + # testvar mapBmrRuleEABitLen 16 + + # testvar mapSharingRatio 256 + # testvar mapStartPort 4096 + # testvar mapPsid 255 + + # testvar mapEnableDhcpv6Options yes + + SECTION "MAP-E / LW4o6" { + + # testvar mapTunnelFlowLabel 0 + # testvar mapTunnelHopLimit 64 + # testvar mapTunnelTrafficClass 0 + + } + + SECTION "MAP-T" { + + # testvar mapDmrIpv6Prefix 5001:db8:: + # testvar mapDmrIpv6PrefixLen 48 + + # testvar mapTosTranslate yes + + } + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + # testvar pppConnectionDelay 10 + # testvar pppRestartTimeout 300000 + # testvar pppFailUsesICMP no + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "Wireless Access Point (AP)" { + + # testvar wanApBand 2.4GHz + # testvar wanApSSID qa-net + # testvar wanApChannel auto + + SECTION "WPA Authenticator" { + + # testvar wanApWpaMode RSN + # testvar wanApWpaKeyMgmt PSK + # testvar wanApWpaCipher CCMP-128 + # testvar wanApWpaGroupCipher auto + # testvar wanApWpaPMF auto + # testvar wanApWpaPsk qacafe123 + # testvar wanApWpaSaePassword "sae secret" + + } + } + + SECTION "WAN 802.1X and RADIUS" { + + SECTION "WAN RADIUS" { + + # testvar wanRadiusEnable no + # testvar wanRadiusInterface wan + # testvar wanRadiusIp 3.3.3.44 + # testvar wanRadiusSecret qacafe123 + # testvar wanRadiusServerAttrType1 200 + # testvar wanRadiusServerAttrData1 04040404 + + } + + SECTION "WAN EAP Settings" { + + # testvar wanEapType eap-md5 + + SECTION "WAN Supplicant Credentials" { + + # testvar wanEapIdentity1 user1 + # testvar wanEapPassword1 qacafe123 + + } + + SECTION "WAN Authentication Options" { + + # testvar wanEapRootCert /usr/cdrouter/tests/root.pem + # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem + # testvar wanEapServerCertPassword qacafe123 + # testvar wanEapFragmentSize 1024 + + } + + } + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.101.1 + # testvar wanBackupDnsServer 202.254.101.2 + # testvar wanBackupDnsServer2 0.0.0.0 + # testvar wanBackupDnsServer3 0.0.0.0 + # testvar DNStoDHCP no + # testvar supportsDnsProxy yes + # testvar supportsDnsCaching yes + # testvar dnsCacheSize 150 + # testvar dnsLookupTimeout 5 + # testvar dnsFailoverAuth "2 4 5" + # testvar dnsFailoverNonAuth "2 4 5" + # testvar dnsFailoverDelay 10 + # testvar dnsFailoverAttempts 20 + # testvar dnsRelayFailover 120 + # testvar dnsForwardServerStatus no + # testvar dnsUsageProfile opportunistic-privacy + # testvar dnsCaptive no + + SECTION "User Configurable DNS Entries" { + + # testvar dnsHostname1 test.qacafe.com + # testvar dnsIp1 5.5.5.5 + + } + + } + + SECTION "HTTP" { + + # testvar supportsHttpProxy yes + # testvar httpProxyIdleTimeout 30 + # testvar httpMaxHeaderCount 200 + + } + + SECTION "NTP" { + + # testvar ntpServer1 3.3.3.6 + # testvar ntpServerName1 time.nist.gov + # testvar ntpServer2 3.3.3.7 + # testvar ntpServerName2 time.foo.com + # testvar ntpStartDate "6/2/2007 11:00 am UTC" + # testvar ntpOffset 0 + # testvar enableRFC868TimeProtocol no + + } + + SECTION "Dynamic DNS" { + + # testvar supportsDynDns no + # testvar dynDnsServerIp 66.37.215.49 + # testvar dynDnsTransport http + # testvar dynDnsHostname test.domain.com + # testvar dynDnsUsername qacafe + # testvar dynDnsPassword qacafe123 + # testvar dynDnsSystem dyndns + # testvar dynDnsMx mail.domain.com + # testvar dynDnsBackMx no + # testvar dynDnsWildcard off + # testvar dynDnsAgent RAS/1.1 + # testvar dynDnsWait 30 + # testvar testDynDnsErrorCode no + # testvar dynDnsServerReturn !yours + + } + + SECTION "WINS Servers" { + + # testvar winsServer1 3.3.3.4 + # testvar winsServer2 3.3.3.5 + + } + + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanDomainName qacafe.com + # testvar lanMtu default + testvar lanHostname prplOS + # testvar lanGuestMode no + + SECTION "ARP Settings" { + + # testvar arpMode strict + # testvar arpSupportGratuitous yes + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + # testvar supportsDnsHostnameCreate no + + } + + SECTION "DHCP Client" { + + # testvar dhcpClientTimeout 5 + # testvar dhcpInform no + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpRapidCommit no + # testvar ipv4MaxLanClients auto + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpCreateDelay 0 + # testvar dhcpReleaseDelay 300 + # testvar dhcpServerMac auto + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + # testvar dhcpClientTrackSeconds no + # testvar dhcpClientRequestNtp no + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + SECTION "DHCP Client Extra Parameters" { + + # testvar dhcpExtraClientParams "69 70" + + } + + SECTION "DHCP Client Extra Options" { + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Hotspot Router Settings" { + + # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% + # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% + + SECTION "Hotspot Clients" { + + # testvar clientLoginName1 client1 + # testvar clientLoginPassword1 admin1 + + } + + SECTION "Advanced Hotspot Settings" { + + # testvar browserLoginProc example_login + # testvar browserLogoutProc example_logout + # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl + + } + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconRsnCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X and RADIUS" { + + SECTION "LAN RADIUS" { + + # testvar enableRADIUSserver yes + # testvar radiusHost remoteHost + # testvar radiusSecret qacafe123 + # testvar radiusServerAttrType1 200 + # testvar radiusServerAttrData1 04040404 + + } + + SECTION "LAN EAP Settings" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + SECTION "LAN Authentication Options" { + + # testvar eapRootCert /usr/cdrouter/tests/root.pem + # testvar eapServerCertPath /usr/cdrouter/tests/server.pem + # testvar eapServerCertPassword qacafe123 + # testvar eapFragmentSize 1024 + # testvar eapTxWhen 60 + # testvar eapQuietPeriod 60 + # testvar eapReAuthMax 2 + # testvar eapSendLogoffFailure yes + # testvar eapReAuthPeriod 0 + + } + + } + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "Firewall and NAT" { + + SECTION "NAT Options" { + + testvar natSimultaneousTcp yes + # testvar natSrcPort0 yes + # testvar natSupportsP2P yes + # testvar natPortParity yes + # testvar natMode port-restricted + # testvar natVerifyIpId yes + # testvar defaultTcpEchoPort 50000 + # testvar defaultUdpEchoPort 50000 + # testvar natRefreshBehavior both + + SECTION "NAT Timers" { + + # testvar natFinTimeout disabled + # testvar natRstTimeout disabled + # testvar natTcpTimeout disabled + # testvar natSynTimeout disabled + # testvar natUdpTimeout disabled + # testvar natDnsTimeout disabled + # testvar natIcmpTimeout disabled + # testvar natRtspTimeout disabled + # testvar natLagTime 0 + + } + + } + + SECTION "Protocol Pass Through" { + + SECTION "IPSEC Pass Through" { + + # testvar supportsIPSECpass yes + # testvar ipsecMaxTunnels 20 + # testvar ipsecScaleSameServer no + # testvar alwaysUseIke no + # testvar ipsecPassRetransmit no + # testvar unknownPassthrough yes + + } + + SECTION "PPTP Pass Through" { + + # testvar supportsPPTPpass yes + # testvar pptpMaxTunnels 20 + + } + + SECTION "L2TP Pass Through" { + + # testvar supportsL2TPpass yes + # testvar l2tpMaxTunnels 20 + + } + + SECTION "PPPoE Pass Through" { + + # testvar supportsPPPoEpass no + + } + + } + + SECTION "Port Triggers" { + + # testvar portTriggers no + # testvar portTriggerTimeout 0 + # testvar portTriggerDelay 0 + # testvar portTriggerOpenDelay 0 + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "Application Layer Gateways (ALGs)" { + + SECTION "MSN Messenger" { + + # testvar supportsMsnAlg no + # testvar msnNotificationServerPort 1863 + # testvar msnSwitchBoardServerPort 1863 + + } + + SECTION "RTSP" { + + # testvar supportsRtspAlg no + # testvar rtspTeardownDelay 5 + # testvar rtspGetParameterInterval 5 + + } + + SECTION "SIP" { + + # testvar supportsSipAlg yes + # testvar sipInterface wan + # testvar sipServerIp 3.3.3.8 + # testvar ipv6SipServerIp 3001:051a:cafe::4 + # testvar sipCallTeardownDelay 5 + # testvar sipMaxOutboundCalls 10 + # testvar sipMaxInboundCalls 10 + # testvar sipCallPacing 0 + # testvar sipScaleRunTime 30 + # testvar sipScaleServerPort 5060 + # testvar sipScaleClientPort 5060 + # testvar sipMaxUserNames -1 + # testvar rtpSendInterval 5000 + + } + + SECTION "FTP" { + + # testvar ftpPortTimeout 120 + + } + + } + + SECTION "Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + SECTION "Port Scanning, Firewall and DoS Options" { + + # testvar portScanStart 0 + # testvar portScanStop 65535 + # testvar portScanDelay 1 + testvar firewallTcpOpenPorts "50805" + # testvar firewallTcpClosedPorts 2323 + # testvar firewallUdpOpenPorts 1234 + testvar firewallUdpClosedPorts 68 + # testvar firewallOutBlockedTcpPorts 1234 + # testvar firewallOutBlockedUdpPorts 1234 + # testvar firewallOutBlockedIpProtos 0 + # testvar wanPingRespond no + + SECTION "Denial of Service Options" { + + # testvar dosRecoveryTime 5 + # testvar dosAttackAttempts 100 + # testvar dutMgmtPort 80 + # testvar dutSecureMgmtPort disabled + # testvar dosSynAttackPort 80 + # testvar dosSynAttackAttempts 100 + + } + + SECTION "Deprecated SSL Protocols and Ciphers" { + + # testvar sslDeprecatedProtocols "sslv2 sslv3" + # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" + + } + + } + + SECTION "DMZ" { + + # testvar lanDmzHost 192.168.1.253 + # testvar lanDmzTcpPortExceptions 113 + # testvar lanDmzUdpPortExceptions 1234 + # testvar lanDmzIpProtoExceptions 2,47 + # testvar lanDmzSupportsIcmp no + + } + + SECTION "URL Filtering" { + + # testvar urlFilterSupported no + # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" + # testvar non-filtered-urls http://qacafe.com + # testvar urlFilterBlockedText "This website is blocked" + + } + + SECTION "XBox Live Options" { + + # testvar xboxNatMinType open + # testvar xboxPort 3074 + # testvar xboxMtu 1364 + + } + + } + + SECTION "Advanced Protocols" { + + SECTION "RIP v1/v2" { + + # testvar ripSupported no + # testvar ripVersion 1 + # testvar ripV2mode multicast + # testvar ripAuthMode none + # testvar ripPassword qacafe123 + # testvar ripMaxRoutes 96 + # testvar ripRouteTimeout 180 + # testvar ripGarbageTimeout 120 + # testvar ripRouteDelay 5000 + # testvar ripAcceptWanUpdate no + + } + + SECTION "UPnP" { + + # testvar upnpSupported yes + # testvar upnpVersion 1.1 + # testvar upnpDevice InternetGatewayDevice:2 + # testvar upnpWANPPPConnection no + # testvar upnpLANDevice no + # testvar upnpMaxTcpMappings 10 + # testvar upnpMaxSubClients 10 + # testvar upnpMinSubTimeout 40 + # testvar upnpMaxSubTimeout 3600 + # testvar upnpWANFailureTimeout 120 + # testvar upnpPortStart 40000 + # testvar upnpPortStop 50000 + + } + + SECTION "LLDP" { + + # testvar supportsLLDP no + # testvar lldpLanMac none + # testvar lldpLanChassisMac auto + # testvar lldpMsgFastTx 1 + # testvar lldpMsgTxInterval 30 + # testvar lldpTxFastInit 4 + + } + + SECTION "IGMP (Multicast)" { + + # testvar supportsMulticast yes + # testvar multicastType proxy + # testvar supportsMulticastOut no + # testvar igmpVersion 2 + # testvar igmpFastLeave no + # testvar igmpRouterOption yes + # testvar igmpMaxGroups 64 + # testvar multicastCacheTimeout 10 + # testvar multicastPoolStart 224.0.1.0 + # testvar multicastPoolStop 239.255.255.255 + # testvar SSMulticastPoolStart 232.0.1.1 + # testvar SSMulticastPoolStop 232.0.1.255 + # testvar multicastJoinDelay 2 + # testvar multicastScaleDelay 1 + # testvar multicastInterface wan + # testvar multicastBypassPPPoE no + + SECTION "IGMP Timers" { + + # testvar igmpQueryInterval 125 + # testvar igmpRobustnessVariable 2 + # testvar igmpQueryResponseInterval 10 + + } + + SECTION "IPTV Options" { + + # testvar iptvChannelRange 200 + # testvar iptvChannelChangeDelay 200 + # testvar iptvMaxFailures 10 + + } + + } + + SECTION "GRE Tunnels" { + + # testvar greDFflag on + + IGNORE testvar_group greTunnel1 { + + SECTION "Generic IPv4 GRE Tunnel Endpoints" { + + # testvar greType IPv4 + # testvar greEndpoint 5.5.5.5 + # testvar greLocalNet 192.168.1.0 + # testvar greLocalMask 255.255.255.0 + + } + + SECTION "L2GRE Options" { + + # testvar greWanGroup wan2 + + } + + SECTION "L3GRE Remote IPv4 Network" { + + # testvar greHost 3.0.0.1 + # testvar greRemoteNet 3.0.0.0 + # testvar greRemoteMask 255.0.0.0 + + } + + } + + } + + } + + SECTION "Additional Features" { + + # testvar supportsIPv4 yes + # testvar internalSmtpServer 5.5.5.5 + # testvar remoteHostIp 3.3.3.3 + # testvar startOtherLanFirst no + # testvar cdrouterOui B0750C + # testvar forwardingMaxFailures 20 + # testvar forwardingPort 5001 + # testvar jumboMtu disabled + # testvar tcpUdpPortStart 10000 + + SECTION "General Purpose HTTP Server" { + + # testvar httpServerIp 3.3.3.16 + # testvar httpServerPort 80 + # testvar httpServerRoot /tmp + + } + + SECTION "Free Network Range" { + + # testvar FreeNetworkStart 200.0.0.0 + # testvar FreeNetworkMask 255.255.255.0 + # testvar FreeNetworkStop 201.0.0.0 + + } + + SECTION "TCP MSS Clamping" { + + # testvar mssClampingValue default + # testvar mssClampingInValue default + + } + + SECTION "TCP/UDP Scaling Options" { + + # testvar scaleTcpConnsPerHost 5 + # testvar natMaxTcpConns 200 + # testvar natMaxUdpConns 100 + + } + + SECTION "Global Wireless Options" { + + # testvar wirelessRetry 3 + # testvar lanWirelessMaxClients auto + # testvar wifiCapture off + # testvar wifiCaptureFilter {} + + } + + } + + SECTION "Test Execution Options and Auto-Reboot" { + + # testvar startDelay 3 + # testvar lanStartDelay 3 + # testvar startTimeout 90 + # testvar wanCloseOnExit yes + # testvar RestartDut none + # testvar RestartDutDelay disabled + # testvar ShutdownDut "echo -n" + # testvar cpeRebootMode skip + # testvar healthCheckEnable no + + } + +} + +SECTION "CDRouter DOCSIS Add-On" { + + # testvar supportsDocsis no + + SECTION "Basic Configuration" { + + # testvar docsisIpProvisioningMode ipv4-only + # testvar docsisBootDelay 30 + + # testvar docsisClientMac auto + + } + + SECTION "IPv4 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIp 10.10.10.1 + # testvar docsisMask 255.255.255.0 + + } + + SECTION "DHCPv4 Server" { + + # testvar docsisDhcpServer 10.10.10.3 + # testvar docsisAssignIp 10.10.10.2 + # testvar docsisDomain docsis.qacafe.com + # testvar docsisDhcpLeaseTime 300 + # testvar docsisDhcpRapidCommit no + + # testvar docsisDhcpServerOptionCode1 69 + # testvar docsisDhcpServerOptionData1 04040404 + + # testvar docsisDhcpClientOptionCode1 60 + # testvar docsisDhcpClientOptionData1 04040404 + + SECTION "DHCPv4 Relay" { + + # testvar docsisGateway 6.6.6.7 + # testvar docsisAssignGateway 6.6.6.6 + # testvar docsisAssignMask 255.255.255.0 + # testvar docsisDhcpRelayServer 6.6.6.7 + + } + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogServer 10.10.10.5 + # testvar docsisTimeServer 10.10.10.6 + # testvar docsisTftpServer 10.10.10.4 + + } + + } + + SECTION "IPv6 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIpv6 8001::1 + # testvar docsisIpv6PrefixLen 64 + + } + + SECTION "DHCPv6 Server" { + + # testvar docsisDhcpIpv6Server 8001::3 + # testvar docsisAssignIpv6 8001::2 + # testvar docsisDHCPv6PreferredLifetime 300 + # testvar docsisDHCPv6ValidLifetime 300 + # testvar docsisDhcpv6RapidCommit no + + # testvar docsisDhcpv6ServerOptionCode1 69 + # testvar docsisDhcpv6ServerOptionData1 04040404 + + # testvar docsisDhcpv6ClientOptionCode1 60 + # testvar docsisDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Relay" { + + # testvar docsisIpv6Gateway 9001::1 + # testvar docsisAssignIpv6PrefixLen 64 + # testvar docsisDhcpv6RelayServer 9001::1 + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogIpv6Server 8001::5 + # testvar docsisTimeIpv6Server 8001::6 + # testvar docsisTftpIpv6Server 8001::4 + + } + + } + + SECTION "CM Config File" { + + SECTION "Global TFTP Settings" { + + # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp + # testvar docsisTftpBootFile auto-docsis.bin + + } + + SECTION "Embedded Config File" { + + # testvar docsisConfig { + # Main + # { + # NetworkAccess 1; + # BaselinePrivacy + # { + # AuthTimeout 10; + # ReAuthTimeout 10; + # AuthGraceTime 600; + # OperTimeout 1; + # ReKeyTimeout 1; + # TEKGraceTime 600; + # AuthRejectTimeout 60; + # SAMapWaitTimeout 1; + # SAMapMaxRetries 4; + # } + # MaxCPE 3; + # UsServiceFlow + # { + # UsServiceFlowRef 2; + # QosParamSetType 7; + # } + # DsServiceFlow + # { + # DsServiceFlowRef 1; + # QosParamSetType 7; + # } + # SNMPv1v2cCoexistenceConfig + # { + # SNMPv1v2cCommunityName "public"; + # SNMPv1v2cTransportAddressAccess + # { + # SNMPv1v2cTransportAddress 0.0.0.0/0; + # SNMPv1v2cTransportAddressMask 0.0.0.0/0; + # } + # SNMPv1v2cAccessViewType 2; + # SNMPv1v2cAccessViewName "docsisManagerView"; + # } + # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ + # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ + # /*EndOfDataMkr*/ + # } + # } + + } + + SECTION "Vendor Defined Config File" { + + # testvar docsisConfigFile none + + } + + } + + SECTION "CM Firewall Configuration" { + + SECTION "IPv4" { + + # testvar docsisTcpOpenPorts "22 443" + # testvar docsisTcpClosedPorts all + # testvar docsisUdpOpenPorts 1234 + # testvar docsisUdpClosedPorts all + + } + + SECTION "IPv6" { + + # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" + # testvar docsisIpv6TcpClosedPorts "2323 80" + # testvar docsisIpv6UdpOpenPorts 1234 + # testvar docsisIpv6UdpClosedPorts 113 + + } + + } + +} + +SECTION "CDRouter HomeKit Add-On" { + + # testvar supportsHomeKit no + + # testvar homeKitRouterName "HomeKit Router" + # testvar homeKitHATHostname hat.local + # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ + # testvar homeKitRouterSetupCode + + # testvar homeKitManualEnabled yes + +} + +SECTION "CDRouter IKE Add-On" { + + SECTION "Global IKE Options" { + + # testvar ikeMaxPhase2SA 20 + # testvar ikeDeadPeerDetection no + # testvar ikeNewQuickModeDelay 1000 + # testvar ikeKeepAlive 20 + # testvar ikeMinimumLifetime 20 + # testvar ipsecMinimumLifetime 20 + # testvar ikePhase2DeleteDelay 100 + # testvar ikeMaxTransforms 21 + # testvar ikeInitialContact yes + # testvar ikeBringUpTunnels yes + # testvar ikeAlwaysInitiate no + # testvar useSameIpsecTunnel no + # testvar ikeNatTraversal no + # testvar ike_FQDN fqdn-test.cdrouter.com + # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com + + } + + SECTION "IPsec Tunnel Configurations" { + + SECTION "IPsec Tunnel Configuration 1" { + + # testvar ipsecTunnelKeyType1 manual + # testvar ipsecTunnelEndpoint1 5.0.0.1 + # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 + # testvar ipsecTunnelRemoteMask1 255.255.255.0 + # testvar ipsecTunnelHost1 5.0.0.2 + + SECTION "Manual IPsec Tunnel Configuration" { + + # testvar ipsecTunnelOutboundSpi1 1000 + # testvar ipsecTunnelOutEncrypt1 des + # testvar ipsecTunnelOutEncryptKey1 0102030405060708 + # testvar ipsecTunnelOutAuth1 md5-hmac + # testvar ipsecTunnelOutAuthKey1 6262626262626262 + # testvar ipsecTunnelInboundSpi1 1001 + # testvar ipsecTunnelInEncrypt1 des + # testvar ipsecTunnelInEncryptKey1 0102030405060708 + # testvar ipsecTunnelInAuth1 md5-hmac + # testvar ipsecTunnelInAuthKey1 6262626262626262 + + } + + SECTION "IKE IPsec Tunnel Configuration" { + + # testvar ipsecTunnelIkeEncrypt1 des + # testvar ipsecTunnelIkeAuth1 md5-hmac + # testvar ipsecTunnelIkeGroup1 1 + # testvar ipsecTunnelIkeLifetime1 300 + # testvar ipsecTunnelEncrypt1 3des + # testvar ipsecTunnelAuth1 sha1-hmac + # testvar ipsecTunnelPfsGroup1 1 + # testvar ipsecTunnelLifetime1 120 + # testvar ipsecTunnelPsk1 qacafe123 + # testvar ipsecTunnelIkeMode1 main + # testvar ipsecTunnelUsesNat1 no + + } + + } + + } + +} + +SECTION "CDRouter IPv6 Add-On" { + + testvar supportsIPv6 yes + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001::1 + # testvar ipv6WanIspAssignIp 3001::2 + # testvar ipv6WanIspNextIp 3001::3 + # testvar ipv6WanIspPrefixLen 64 + # testvar ipv6WanDutDuid 00000000 + # testvar ipv6RelayServer 192.88.99.1 + # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 + # testvar ipv6rdPrefix 2001:1234:: + # testvar ipv6rdPrefixLen 32 + # testvar ipv6rdIPv4MaskLen 0 + # testvar ipv6rdDHCPv4Option yes + # testvar ipv6TunnelMtuType static + # testvar ipv6WanMtu 1500 + # testvar ipv6WanMtuOption no + # testvar ipv6RASendInterval 10 + # testvar ipv6ExpectRAonWan no + + SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { + + # testvar ipv6WanIspGateway 3001::9 + # testvar ipv6WanAssignPrefixLen 64 + # testvar IPv6HopCount 1 + # testvar dhcpv6RelayServer 3001::9 + + } + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + # testvar ipv6WanRDNSS no + # testvar ipv6WanDNSSL no + + } + + SECTION "DHCPv6 Server" { + + # testvar dhcpv6IAValidLifetime 300 + # testvar dhcpv6IAPreferredLifetime 300 + # testvar dhcpv6DuidType 1 + # testvar dhcpv6RestartLatency 10 + # testvar dhcpv6ServerRapidCommit yes + + # testvar dhcpv6ServerOptionCode1 69 + # testvar dhcpv6ServerOptionData1 04040404 + + # testvar wanDhcpv6ClientOptionCode1 60 + # testvar wanDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Authentication" { + + # testvar supportsDhcpv6Auth no + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: + # testvar dhcpv6WanAssignPrefixLen 48 + # testvar dhcpv6PDLatency 30 + + } + + SECTION "IPv6 NTP" { + + # testvar ipv6NtpServer1 4321::23 + # testvar ipv6NtpServerName1 time.nist.gov + + # testvar ipv6NtpServer2 4321::24 + # testvar ipv6NtpServerName2 time.foo.com + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + testvar ipv6LanIp 3001:dddd::1 + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanPrefixLen 64 + # testvar ipv6MaxLanClients 32 + # testvar ipv6RAInterval 300 + # testvar ipv6LanSubnetId 1 + + SECTION "DHCPv6 Client" { + + # testvar dhcpv6ClientTimeout 5 + # testvar ipv6DhcpClientStart ::2 + # testvar ipv6DhcpClientEnd ::1f + # testvar ipv6DhcpClientExclude "::3 ::7" + # testvar ipv6DhcpClientValidLifetime 86400 + # testvar dhcpv6RapidCommit yes + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + SECTION "IPv6 LAN DNS" { + + # testvar ipv6DNStoLAN yes + # testvar ipv6RdnssSupport yes + # testvar ipv6DnsslSupport yes + # testvar ipv6LanStaticDns no + + } + + SECTION "Unique Local Address (ULA) Options" { + + # testvar supportsULA no + # testvar ipv6LanULAPrefix fd00:: + # testvar ipv6LanULAIp ::%eui64% + # testvar ipv6LanULAMode autoconf + + } + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + } + + SECTION "IPv6 Firewall" { + + # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" + # testvar ipv6FirewallTcpClosedPorts "2323 80" + # testvar ipv6FirewallUdpOpenPorts 1234 + # testvar ipv6FirewallUdpClosedPorts 113 + # testvar ipv6FirewallOutBlockedTcpPorts 1234 + # testvar ipv6FirewallOutBlockedUdpPorts 1234 + # testvar ipv6FirewallOutBlockedIpProtos 0 + # testvar ipv6WanPingRespond no + + SECTION "IPv6 TCP MSS Clamping" { + + # testvar ipv6MssClampingValue default + # testvar ipv6MssClampingInValue default + # testvar ipv6MssClampingTestPort 8096 + + } + + } + + SECTION "IPv6 Advanced Protocols" { + + SECTION "RIPng" { + + # testvar supportsRIPng no + + } + + SECTION "MLD (IPv6 Multicast)" { + + # testvar supportsIPv6Multicast yes + # testvar supportsIPv6MulticastOut no + # testvar mldVersion 2 + # testvar mldMaxGroups 64 + # testvar mldFastLeave no + # testvar ipv6MulticastCacheTimeout 10 + # testvar ipv6MulticastJoinDelay 2 + # testvar ipv6MulticastScaleDelay 1 + + SECTION "MLD Timers" { + + # testvar mldQueryInterval 125 + # testvar mldRobustnessVariable 2 + # testvar mldQueryResponseInterval 10 + + } + + SECTION "IPv6 IPTV Options" { + + # testvar ipv6IptvChannelRange 200 + # testvar ipv6IptvChannelChangeDelay 200 + # testvar ipv6IptvMaxFailures 10 + + } + + } + + } + + SECTION "IPv6 Additional Features" { + + SECTION "IPv6 Free Network Range" { + + # testvar ipv6RemoteHost 3001:051a:cafe::1 + # testvar ipv6FreeNetworkStart 3001:cafe:1:: + # testvar ipv6FreeNetworkPrefixLen 64 + # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: + + } + + SECTION "IPv6 Multicast Pool Ranges" { + + # testvar ipv6MulticastPoolStart ff0e::1 + # testvar ipv6MulticastPoolStop ff0e:ffff:: + # testvar ipv6SSMulticastPoolStart ff3e::8000:1 + # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff + + } + + } + +} + +SECTION "CDRouter Multiport Add-On" { + + SECTION "Additional WAN Interface Setup" { + + # testvar wanFailoverTimeout 300 + + IGNORE testvar_group wan2 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.2.1 + # testvar wanIspAssignIp 202.254.2.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.2.2 + # testvar wanIspNextIp 202.254.2.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.202.1 + # testvar pptpClientIp 202.254.202.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.202.1 + # testvar l2tpClientIp 202.254.202.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.102.1 + # testvar wanBackupDnsServer 202.254.102.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:2::1 + # testvar ipv6WanIspAssignIp 3001:0:0:2::2 + # testvar ipv6WanIspNextIp 3001:0:0:2::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + IGNORE testvar_group wan3 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.3.1 + # testvar wanIspAssignIp 202.254.3.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.3.2 + # testvar wanIspNextIp 202.254.3.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.203.1 + # testvar pptpClientIp 202.254.203.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.203.1 + # testvar l2tpClientIp 202.254.203.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.103.1 + # testvar wanBackupDnsServer 202.254.103.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:3::1 + # testvar ipv6WanIspAssignIp 3001:0:0:3::2 + # testvar ipv6WanIspNextIp 3001:0:0:3::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + } + + SECTION "Additional LAN Interface Setup" { + + # testvar useSameLanInterface no + + IGNORE testvar_group lan2 { + + SECTION "IPv4 LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanGuestMode no + + SECTION "LAN Host IP" { + + # testvar hostIp 192.168.1.0 + # testvar hostMask 255.255.255.0 + # testvar hostGateway 192.168.1.1 + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "DHCP Client Configuration" { + + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + # testvar dhcpExtraClientParams "69 70" + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Configuration Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + } + + SECTION "IPv4 Firewall and NAT" { + + SECTION "Static NAT" { + + # testvar staticNatIp 202.254.1.2 + # testvar staticNatFirewall yes + # testvar natMode port-restricted + + } + + SECTION "Special Application Port Triggers" { + + # testvar portTriggers no + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "TCP and UDP Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanStaticDns no + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + + SECTION "LAN IPv6 DHCP Client" { + + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + + } + + } + +} + +SECTION "CDRouter Performance Add-On" { + + # testvar supportsPerformance no + + SECTION "Basic Configuration" { + + # testvar perfWanIp 202.254.1.4 + # testvar perfWanIpv6 3001::4 + # testvar perfPort 19750 + # testvar perfPort2 19751 + + } + + SECTION "Performance Settings" { + + # testvar perfDuration 10 + # testvar perfDownloadBandwidth 0.0 + # testvar perfInterval auto + # testvar perfIncrement 5 + # testvar perfStreams 1 + # testvar perfStreamIncr 0 + # testvar perfUdpLen auto + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + # testvar perfOmit 0 + # testvar perfDSCP 0 + # testvar perfFairness no + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresholds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + SECTION "Advanced Options" { + + # testvar perfPingEnable no + # testvar perfEnableCapture no + # testvar perfLatencyAttempts 25 + # testvar perfApplicationAttempts 4 + # testvar perfApplicationDelay 100 + + } + + SECTION "Wireless" { + + IGNORE testvar_group wireless-performance { + + SECTION "Performance Settings" { + + # testvar perfDownloadBandwidth 0.0 + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresolds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + } + + } + +} + +SECTION "CDRouter Security Add-On" { + + SECTION "Internet Connection Sharing (ICS)" { + + # testvar enableICS no + # testvar icsInterface eth0 + # testvar icsShareIPv4 yes + # testvar icsShareIPv6 yes + + } + + SECTION "Traffic Analysis" { + + # testvar enableSuricata no + + } + + SECTION "Nmap Scans" { + + # testvar enableNmap no + # testvar nmapPorts 0-65535 + # testvar nmapScanTimeout 600 + # testvar nmapTimingTemplate 5 + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleBase auto + # testvar internetScheduleTimeZone auto + # testvar internetScheduleBlockedText "This website is blocked" + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + +} + +SECTION "CDRouter SNMP Add-On" { + + # testvar supportsSnmp no + + # testvar snmpPort 161 + # testvar snmpDefaultUser auto + # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" + # testvar snmpUpdateDelay 15 + + SECTION "SNMP Options and Users" { + + # testvar snmpManagerIp 3.3.3.33 + # testvar snmpManagerIpv6 3001:051a:cafe::33 + + IGNORE testvar_group snmpuser1 { + + # testvar snmpVersion 2c + + # testvar snmpAccess read-only + # testvar snmpTransport udp + # testvar snmpRetries 5 + # testvar snmpTimeout 5 + + SECTION "SNMP v1/2c Configuration" { + + # testvar snmpCommunity public + + } + + SECTION "SNMP v3 Configuration" { + + # testvar snmpSecurityLevel noAuthNoPriv + + # testvar snmpAuthProtocol MD5 + # testvar snmpAuthUsername qacafe + # testvar snmpAuthPassword qacafe123 + + # testvar snmpPrivacyProtocol DES + # testvar snmpPrivacyPassword qacafe123 + + # testvar snmpContextName bridge1 + # testvar snmpSecurityEngineId 800000020109840301 + # testvar snmpContextEngineId 800000020109840301 + + } + + } + + } + + SECTION "SNMP Scenarios" { + + # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp + # testvar snmpScenarioSingleMode no + # testvar snmpScenarioInterface lan + # testvar snmpScenarioIpVersion IPv4 + + } + +} + +SECTION "CDRouter Storage Add-On" { + + # testvar supportsStorage no + + # testvar storageFileSize 10 + # testvar storageUserFilePath none + # testvar useMulticastDNS no + + SECTION "SMB Options and Users" { + + # testvar supportsStorageSmb yes + # testvar storageSmbMaxSessions 20 + # testvar storageSmbTimeout 120 + # testvar storageSmbPacing 0 + + IGNORE testvar_group smbuser1 { + + # testvar server MyNAS + # testvar share data + # testvar folder /home/qacafe + # testvar guest no + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + + SECTION "FTP Options and Users" { + + # testvar supportsStorageFtp yes + # testvar supportsStorageFtps yes + # testvar storageFtpMaxSessions 20 + # testvar storageFtpTimeout 120 + # testvar storageFtpPacing 0 + + IGNORE testvar_group ftpuser1 { + + # testvar server MyNAS + # testvar path /home/qacafe + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + +} + +SECTION "CDRouter TR-069 Add-On" { + + testvar supportsCWMP yes + + SECTION "Basic ACS Configuration" { + + # testvar acsIp 6.0.0.1 + # testvar acsPort 80 + testvar acsDomain acs-download.qacafe.com + # testvar acsTransport http + # testvar acsAuth digest + # testvar acsDigestQopAuth yes + # testvar acsInterface wan + testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ + # testvar acsWaitForInform 120 + # testvar acsSkipInitialInform no + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar cwmpProtocolVersion 1.0 + # testvar acsDeviceDiscovery no + # testvar acsConfigurePeriodicInform yes + # testvar tr69InitiateConnection yes + testvar acsDefaultUser cdrouter + testvar acsDefaultPassword cdrouter + testvar acsCpeDefaultUser acs + testvar acsCpeDefaultPassword acs + # testvar acsFileServerUser file_server_user + # testvar acsFileServerPassword file_server_password + + } + + SECTION "XMPP Connection Request Configuration" { + + # testvar acsSupportsXmppConnReq no + + # testvar acsXmppServerConnectAlgorithm DNS-SRV + # testvar acsXmppConnReqUsername qacafe + # testvar acsXmppConnReqResource cdrouter + # testvar acsXmppConnReqPassword qacafe123 + # testvar acsXmppConnReqUseTls no + + } + + SECTION "Advanced ACS Configuration" { + + # testvar acsCpeKeepAlive yes + # testvar acsChunkedEncoding no + # testvar acsChunkSize 64 + # testvar acsAuthOncePerSession no + # testvar acsCookieMode rfc6265 + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + # testvar acsNumberCpeAttempts 2 + # testvar acsDelayCpeAttempts 10 + # testvar acsWaitForConnectionRequest yes + # testvar acsUseTcpOffload yes + # testvar acsTargetDevice tr069_device2 + # testvar acsDualStackIp 6000::1 + # testvar acsStrictSyntaxChecking on + + } + + SECTION "SSL Configuration" { + + # testvar acsSslVersion tls + # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem + # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem + # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsCipherSuite auto + # testvar acsClientCaCertPath /path/to/client/ca/file + + } + + SECTION "Profiles" { + + # testvar cwmpSupportedDataModel auto + # testvar cwmpDataValidation yes + # testvar cwmpSkipParameters empty + # testvar cwmpModifyParameters empty + # testvar cwmpVendorSpecificParams none + + SECTION "Custom CWMP Profiles" { + + IGNORE testvar_group cwmp_profile1 { + + # testvar cwmpProfileName myVendorParameters + # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp + # testvar cwmpProfileObject InternetGatewayDevice:1 + + } + + } + + } + + SECTION "CWMP Scenarios" { + + # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp + # testvar cwmpScenarioSingleMode no + # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp + + } + + SECTION "Additional TR-069 Options" { + + # testvar tr69DeviceType IGD + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69InformTimeout 120 + # testvar tr69MinPeriodicInform 60 + # testvar tr69ScheduleInformRPC yes + # testvar tr69UploadRPC no + # testvar tr69UploadPath /tmp + # testvar tr69ConfigUploadFilename vendor_configuration_file + # testvar tr69LogUploadFilename vendor_log_file + # testvar tr69FactoryResetRPC no + # testvar tr69CpeGetRPCs no + # testvar tr69ForceBoolean no + # testvar tr69XMLCapturePath /tmp/tr69-xml + # testvar tr69DownloadTimeout 600 + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadImageVersion 1.0 + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69RebootTimeout 300 + # testvar tr69RpcTimeout 180 + # testvar tr69DownloadConfig /path/to/config + # testvar tr69MaxUserNameLen 256 + # testvar tr69MaxPasswordLen 256 + # testvar tr69MaxCpeUserNameLen 256 + # testvar tr69MaxCpePasswordLen 256 + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DUInstallImageVersion 1.0 + # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image + # testvar tr69DUInstallImageAlternateVersion 1.0 + # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb + # testvar tr69DUChangeExecEnvRef openwrt + # testvar tr69DUChangeTimeout 600 + # testvar tr69WildcardPortMappingOnly no + # testvar tr69PortMapDeletionDelay 15 + # testvar tr69PortMapCreationDelay 0 + # testvar tr69PortMapDisableDelay 15 + # testvar tr69TraceRouteTimeout 120 + + } + + SECTION "TR-111 Parts 1 and 2" { + + # testvar supportsTr111Part1 yes + # testvar supportsTr111Part2 no + # testvar STUNMaximumKeepAlivePeriod 60 + # testvar STUNMinimumKeepAlivePeriod 60 + # testvar STUNAuth no + # testvar STUNUsername qacafe + # testvar STUNPassword qacafe123 + # testvar acsUdpConnectionDelay 0 + + } + + SECTION "TR-143 Performance Tests" { + + # testvar tr143HttpDownloadSize 1000000 + # testvar tr143HttpUploadSize 1000000 + + # testvar tr143HttpDownloadHighThreshold 0.0 + # testvar tr143HttpDownloadLowThreshold 5.0 + # testvar tr143HttpDownloadResponseMax 60 + + # testvar tr143HttpUploadHighThreshold 0.0 + # testvar tr143HttpUploadLowThreshold 5.0 + # testvar tr143HttpUploadResponseMax 60 + + } + + SECTION "TR-069 LAN Side Devices" { + + IGNORE testvar_group tr069_device2 { + + # testvar acsDefaultUser qacafe + # testvar acsDefaultPassword qacafe123 + # testvar acsCpeDefaultUser qacafe + # testvar acsCpeDefaultPassword qacafe123 + # testvar acsCreatePortMapOnIGD no + # testvar acsPortMapPublicPort 20000 + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69DeviceType IGD + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DownloadConfig /path/to/config + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + + } + + } + +} + +SECTION "CDRouter USP Add-On" { + + # testvar supportsUSP no + + SECTION "Basic Controller Configuration" { + + # testvar uspControllerID proto::controller-id + # testvar uspControllerInterface wan + + # testvar uspControllerIpMode ipv4-only + # testvar uspControllerIpv4 6.0.0.2 + # testvar uspControllerIpv6 6000::2 + # testvar uspControllerPort auto + # testvar uspControllerPath /controller-path + + # testvar uspControllerUseNonPayloadProtection no + # testvar uspControllerUseSessionContext no + # testvar uspControllerMTP websocket + # testvar uspControllerMTPEncryption no + # testvar uspControllerUSPEncryption no + # testvar uspControllerDomain controller.cdroutertest.com + + # testvar uspSegmentationEnable no + # testvar uspSegmentationSize auto + + # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + + # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + + # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerVerifyRecordIntegrity no + + # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem + + # testvar uspControllerHost any + # testvar uspControllerUsername qacafe + # testvar uspControllerPassword qacafe123 + + } + + SECTION "Basic Agent Configuration" { + + # testvar uspAgentID proto::agent-id + + # testvar uspAgentIpv4 auto + # testvar uspAgentIpv6 auto + # testvar uspAgentPort auto + # testvar uspAgentPath /agent-path + + # testvar uspMessageTimeout 30 + # testvar uspNotificationTimeout 30 + # testvar uspRebootTimeout 120 + + } + + SECTION "USP Scenarios" { + + # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp + # testvar uspScenarioSingleMode no + # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp + + } + + SECTION "Data Model" { + + # testvar uspSkipParameters empty + # testvar uspModifyParameters empty + # testvar uspSupportedDataModel all + + SECTION "Custom USP Data Model" { + + IGNORE testvar_group usp_profile_1 { + + # testvar uspProfileName myVendorParameters + # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml + + } + + } + + } + + SECTION "USP Agent Data Model Configuration" { + + # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + + # testvar uspParameterPath1 Device.DeviceInfo.ModelName + # testvar uspParameterPath2 Device.IP.Interface.3.Enable + # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory + # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode + + # testvar uspNotificationParamNewValue myCustomParameterValue + + # testvar uspObject1 Device.IP.Interface. + # testvar uspObject2 Device.WiFi.AccessPoint. + + # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} + # testvar uspValidSearchPathResultParam PeriodicNotifInterval + # testvar uspValidSearchPathResultValue 5000 + + # testvar uspFirmwareImage /path/to/firmware.bin + # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin + # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 + + } + +} + +SECTION "CDRouter BBF.069 Add-On" { + + # testvar supportsBBF069 yes + + SECTION "General" { + + SECTION "ACS URL" { + + # testvar bbf069ACSURL http://acs1.broadband-forum.org + # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org + + } + + SECTION "Security Certificates" { + + # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem + # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem + # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem + # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem + # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem + # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem + + } + + SECTION "HTTP Verification" { + + # testvar bbf069HTTPVerification no + + } + + } + + SECTION "Device Specific" { + + SECTION "General" { + + # testvar bbf069RootDataModel InternetGatewayDevice + # testvar bbf069UnsupportedRPC ChangeDUState + # testvar bbf069UploadType "1 Vendor Configuration File" + # testvar bbf069ExpectedUpgradeTime 100 + + } + + SECTION "Data Model" { + + # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069ActiveParamType unsignedInt + # testvar bbf069ActiveParamValue 60 + + # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069CompletePath1Type unsignedInt + # testvar bbf069CompletePath1Value 73 + + # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable + # testvar bbf069CompletePath2Type boolean + # testvar bbf069CompletePath2Value true + + # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. + # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. + # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv + # testvar bbf069InvalidPathType unsignedInt + + # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer + # testvar bbf069UnwritableType string + # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 + + } + + } + +} diff --git a/.testbed/cdrouter/configurations/ppp b/.testbed/cdrouter/configurations/ppp new file mode 100644 index 0000000000..fc348a6d6e --- /dev/null +++ b/.testbed/cdrouter/configurations/ppp @@ -0,0 +1,2677 @@ +SECTION "About" { + + # Cable/DSL Router Test Suite + # + # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 + # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) + # + # Local.conf + # + # This is the main configuration file for CDRouter. This file defines the + # configuration of the router under test and controls various aspects of + # CDRouter's behavior. This file consists of a number of unique test variables + # called 'testvars' which are grouped by interface, protocol, or functionality. + # The basic syntax for all testvars is: + # + # testvar NAME VALUE + +} + +SECTION "Base Configuration" { + + SECTION "WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + testvar wanMode PPPoE + # testvar wanIspIp 202.254.1.1 + # testvar wanIspAssignIp 202.254.1.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.1.2 + # testvar wanIspNextIp 202.254.1.3 + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar wanIspAssignMask 255.255.255.0 + # testvar IPv4HopCount 1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + # testvar dhcpServerRapidCommit yes + # testvar dhcpServerClientIDBehavior rfc6842 + # testvar dhcpServerResponseDelay 4500 + # testvar dhcpConnectOnDemand no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar wanDhcpClientOptionCode1 60 + # testvar wanDhcpClientOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "DHCP Authentication" { + + # testvar supportsDhcpAuth no + + } + + SECTION "PPPoE Server" { + + # testvar pppoeConnectOnDemand no + # testvar pppoeIdleTimeout 60 + testvar pppoeUser softathome + testvar pppoePassword softathome + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + # testvar pppoeAcCookie auto + # testvar pppoeMaxPayload none + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpConnectOnDemand yes + # testvar pptpServerIp 202.254.201.1 + # testvar pptpClientIp 202.254.201.2 + # testvar pptpUseDHCP no + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpConnectOnDemand yes + # testvar l2tpServerIp 202.254.201.1 + # testvar l2tpClientIp 202.254.201.2 + # testvar l2tpUseDHCP no + + } + + SECTION "DS-Lite" { + + # testvar ipv6DsliteAftr 3001:aaaa::1 + # testvar dhcpv6WanAftrName aftr.qacafe.com + # testvar dsliteFirewallMode address-restricted + + } + + SECTION "MAP / LW4o6" { + + # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: + # testvar mapBmrRuleIpv6PrefixLen 48 + # testvar mapBmrRuleIpv4Prefix 5.0.0.0 + # testvar mapBmrRuleIpv4PrefixLen 24 + # testvar mapBmrRuleEABitLen 16 + + # testvar mapSharingRatio 256 + # testvar mapStartPort 4096 + # testvar mapPsid 255 + + # testvar mapEnableDhcpv6Options yes + + SECTION "MAP-E / LW4o6" { + + # testvar mapTunnelFlowLabel 0 + # testvar mapTunnelHopLimit 64 + # testvar mapTunnelTrafficClass 0 + + } + + SECTION "MAP-T" { + + # testvar mapDmrIpv6Prefix 5001:db8:: + # testvar mapDmrIpv6PrefixLen 48 + + # testvar mapTosTranslate yes + + } + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + # testvar pppConnectionDelay 10 + # testvar pppRestartTimeout 300000 + # testvar pppFailUsesICMP no + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "Wireless Access Point (AP)" { + + # testvar wanApBand 2.4GHz + # testvar wanApSSID qa-net + # testvar wanApChannel auto + + SECTION "WPA Authenticator" { + + # testvar wanApWpaMode RSN + # testvar wanApWpaKeyMgmt PSK + # testvar wanApWpaCipher CCMP-128 + # testvar wanApWpaGroupCipher auto + # testvar wanApWpaPMF auto + # testvar wanApWpaPsk qacafe123 + # testvar wanApWpaSaePassword "sae secret" + + } + } + + SECTION "WAN 802.1X and RADIUS" { + + SECTION "WAN RADIUS" { + + # testvar wanRadiusEnable no + # testvar wanRadiusInterface wan + # testvar wanRadiusIp 3.3.3.44 + # testvar wanRadiusSecret qacafe123 + # testvar wanRadiusServerAttrType1 200 + # testvar wanRadiusServerAttrData1 04040404 + + } + + SECTION "WAN EAP Settings" { + + # testvar wanEapType eap-md5 + + SECTION "WAN Supplicant Credentials" { + + # testvar wanEapIdentity1 user1 + # testvar wanEapPassword1 qacafe123 + + } + + SECTION "WAN Authentication Options" { + + # testvar wanEapRootCert /usr/cdrouter/tests/root.pem + # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem + # testvar wanEapServerCertPassword qacafe123 + # testvar wanEapFragmentSize 1024 + + } + + } + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.101.1 + # testvar wanBackupDnsServer 202.254.101.2 + # testvar wanBackupDnsServer2 0.0.0.0 + # testvar wanBackupDnsServer3 0.0.0.0 + # testvar DNStoDHCP no + # testvar supportsDnsProxy yes + # testvar supportsDnsCaching yes + # testvar dnsCacheSize 150 + # testvar dnsLookupTimeout 5 + # testvar dnsFailoverAuth "2 4 5" + # testvar dnsFailoverNonAuth "2 4 5" + # testvar dnsFailoverDelay 10 + # testvar dnsFailoverAttempts 20 + # testvar dnsRelayFailover 120 + # testvar dnsForwardServerStatus no + # testvar dnsUsageProfile opportunistic-privacy + # testvar dnsCaptive no + + SECTION "User Configurable DNS Entries" { + + # testvar dnsHostname1 test.qacafe.com + # testvar dnsIp1 5.5.5.5 + + } + + } + + SECTION "HTTP" { + + # testvar supportsHttpProxy yes + # testvar httpProxyIdleTimeout 30 + # testvar httpMaxHeaderCount 200 + + } + + SECTION "NTP" { + + # testvar ntpServer1 3.3.3.6 + # testvar ntpServerName1 time.nist.gov + # testvar ntpServer2 3.3.3.7 + # testvar ntpServerName2 time.foo.com + # testvar ntpStartDate "6/2/2007 11:00 am UTC" + # testvar ntpOffset 0 + # testvar enableRFC868TimeProtocol no + + } + + SECTION "Dynamic DNS" { + + # testvar supportsDynDns no + # testvar dynDnsServerIp 66.37.215.49 + # testvar dynDnsTransport http + # testvar dynDnsHostname test.domain.com + # testvar dynDnsUsername qacafe + # testvar dynDnsPassword qacafe123 + # testvar dynDnsSystem dyndns + # testvar dynDnsMx mail.domain.com + # testvar dynDnsBackMx no + # testvar dynDnsWildcard off + # testvar dynDnsAgent RAS/1.1 + # testvar dynDnsWait 30 + # testvar testDynDnsErrorCode no + # testvar dynDnsServerReturn !yours + + } + + SECTION "WINS Servers" { + + # testvar winsServer1 3.3.3.4 + # testvar winsServer2 3.3.3.5 + + } + + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanDomainName qacafe.com + # testvar lanMtu default + testvar lanHostname prplOS + # testvar lanGuestMode no + + SECTION "ARP Settings" { + + # testvar arpMode strict + # testvar arpSupportGratuitous yes + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + # testvar supportsDnsHostnameCreate no + + } + + SECTION "DHCP Client" { + + # testvar dhcpClientTimeout 5 + # testvar dhcpInform no + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpRapidCommit no + # testvar ipv4MaxLanClients auto + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpCreateDelay 0 + # testvar dhcpReleaseDelay 300 + # testvar dhcpServerMac auto + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + # testvar dhcpClientTrackSeconds no + # testvar dhcpClientRequestNtp no + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + SECTION "DHCP Client Extra Parameters" { + + # testvar dhcpExtraClientParams "69 70" + + } + + SECTION "DHCP Client Extra Options" { + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Hotspot Router Settings" { + + # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% + # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% + + SECTION "Hotspot Clients" { + + # testvar clientLoginName1 client1 + # testvar clientLoginPassword1 admin1 + + } + + SECTION "Advanced Hotspot Settings" { + + # testvar browserLoginProc example_login + # testvar browserLogoutProc example_logout + # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl + + } + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconRsnCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X and RADIUS" { + + SECTION "LAN RADIUS" { + + # testvar enableRADIUSserver yes + # testvar radiusHost remoteHost + # testvar radiusSecret qacafe123 + # testvar radiusServerAttrType1 200 + # testvar radiusServerAttrData1 04040404 + + } + + SECTION "LAN EAP Settings" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + SECTION "LAN Authentication Options" { + + # testvar eapRootCert /usr/cdrouter/tests/root.pem + # testvar eapServerCertPath /usr/cdrouter/tests/server.pem + # testvar eapServerCertPassword qacafe123 + # testvar eapFragmentSize 1024 + # testvar eapTxWhen 60 + # testvar eapQuietPeriod 60 + # testvar eapReAuthMax 2 + # testvar eapSendLogoffFailure yes + # testvar eapReAuthPeriod 0 + + } + + } + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "Firewall and NAT" { + + SECTION "NAT Options" { + + # testvar natSimultaneousTcp no + # testvar natSrcPort0 yes + # testvar natSupportsP2P yes + # testvar natPortParity yes + # testvar natMode port-restricted + # testvar natVerifyIpId yes + # testvar defaultTcpEchoPort 50000 + # testvar defaultUdpEchoPort 50000 + # testvar natRefreshBehavior both + + SECTION "NAT Timers" { + + # testvar natFinTimeout disabled + # testvar natRstTimeout disabled + # testvar natTcpTimeout disabled + # testvar natSynTimeout disabled + # testvar natUdpTimeout disabled + # testvar natDnsTimeout disabled + # testvar natIcmpTimeout disabled + # testvar natRtspTimeout disabled + # testvar natLagTime 0 + + } + + } + + SECTION "Protocol Pass Through" { + + SECTION "IPSEC Pass Through" { + + # testvar supportsIPSECpass yes + # testvar ipsecMaxTunnels 20 + # testvar ipsecScaleSameServer no + # testvar alwaysUseIke no + # testvar ipsecPassRetransmit no + # testvar unknownPassthrough yes + + } + + SECTION "PPTP Pass Through" { + + # testvar supportsPPTPpass yes + # testvar pptpMaxTunnels 20 + + } + + SECTION "L2TP Pass Through" { + + # testvar supportsL2TPpass yes + # testvar l2tpMaxTunnels 20 + + } + + SECTION "PPPoE Pass Through" { + + # testvar supportsPPPoEpass no + + } + + } + + SECTION "Port Triggers" { + + # testvar portTriggers no + # testvar portTriggerTimeout 0 + # testvar portTriggerDelay 0 + # testvar portTriggerOpenDelay 0 + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "Application Layer Gateways (ALGs)" { + + SECTION "MSN Messenger" { + + # testvar supportsMsnAlg no + # testvar msnNotificationServerPort 1863 + # testvar msnSwitchBoardServerPort 1863 + + } + + SECTION "RTSP" { + + # testvar supportsRtspAlg no + # testvar rtspTeardownDelay 5 + # testvar rtspGetParameterInterval 5 + + } + + SECTION "SIP" { + + # testvar supportsSipAlg yes + # testvar sipInterface wan + # testvar sipServerIp 3.3.3.8 + # testvar ipv6SipServerIp 3001:051a:cafe::4 + # testvar sipCallTeardownDelay 5 + # testvar sipMaxOutboundCalls 10 + # testvar sipMaxInboundCalls 10 + # testvar sipCallPacing 0 + # testvar sipScaleRunTime 30 + # testvar sipScaleServerPort 5060 + # testvar sipScaleClientPort 5060 + # testvar sipMaxUserNames -1 + # testvar rtpSendInterval 5000 + + } + + SECTION "FTP" { + + # testvar ftpPortTimeout 120 + + } + + } + + SECTION "Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + SECTION "Port Scanning, Firewall and DoS Options" { + + # testvar portScanStart 0 + # testvar portScanStop 65535 + # testvar portScanDelay 1 + testvar firewallTcpOpenPorts "50805" + # testvar firewallTcpClosedPorts 2323 + # testvar firewallUdpOpenPorts 1234 + testvar firewallUdpClosedPorts 68 + # testvar firewallOutBlockedTcpPorts 1234 + # testvar firewallOutBlockedUdpPorts 1234 + # testvar firewallOutBlockedIpProtos 0 + # testvar wanPingRespond no + + SECTION "Denial of Service Options" { + + # testvar dosRecoveryTime 5 + # testvar dosAttackAttempts 100 + # testvar dutMgmtPort 80 + # testvar dutSecureMgmtPort disabled + # testvar dosSynAttackPort 80 + # testvar dosSynAttackAttempts 100 + + } + + SECTION "Deprecated SSL Protocols and Ciphers" { + + # testvar sslDeprecatedProtocols "sslv2 sslv3" + # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" + + } + + } + + SECTION "DMZ" { + + # testvar lanDmzHost 192.168.1.253 + # testvar lanDmzTcpPortExceptions 113 + # testvar lanDmzUdpPortExceptions 1234 + # testvar lanDmzIpProtoExceptions 2,47 + # testvar lanDmzSupportsIcmp no + + } + + SECTION "URL Filtering" { + + # testvar urlFilterSupported no + # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" + # testvar non-filtered-urls http://qacafe.com + # testvar urlFilterBlockedText "This website is blocked" + + } + + SECTION "XBox Live Options" { + + # testvar xboxNatMinType open + # testvar xboxPort 3074 + # testvar xboxMtu 1364 + + } + + } + + SECTION "Advanced Protocols" { + + SECTION "RIP v1/v2" { + + # testvar ripSupported no + # testvar ripVersion 1 + # testvar ripV2mode multicast + # testvar ripAuthMode none + # testvar ripPassword qacafe123 + # testvar ripMaxRoutes 96 + # testvar ripRouteTimeout 180 + # testvar ripGarbageTimeout 120 + # testvar ripRouteDelay 5000 + # testvar ripAcceptWanUpdate no + + } + + SECTION "UPnP" { + + # testvar upnpSupported yes + # testvar upnpVersion 1.1 + # testvar upnpDevice InternetGatewayDevice:2 + # testvar upnpWANPPPConnection no + # testvar upnpLANDevice no + # testvar upnpMaxTcpMappings 10 + # testvar upnpMaxSubClients 10 + # testvar upnpMinSubTimeout 40 + # testvar upnpMaxSubTimeout 3600 + # testvar upnpWANFailureTimeout 120 + # testvar upnpPortStart 40000 + # testvar upnpPortStop 50000 + + } + + SECTION "LLDP" { + + # testvar supportsLLDP no + # testvar lldpLanMac none + # testvar lldpLanChassisMac auto + # testvar lldpMsgFastTx 1 + # testvar lldpMsgTxInterval 30 + # testvar lldpTxFastInit 4 + + } + + SECTION "IGMP (Multicast)" { + + # testvar supportsMulticast yes + # testvar multicastType proxy + # testvar supportsMulticastOut no + # testvar igmpVersion 2 + # testvar igmpFastLeave no + # testvar igmpRouterOption yes + # testvar igmpMaxGroups 64 + # testvar multicastCacheTimeout 10 + # testvar multicastPoolStart 224.0.1.0 + # testvar multicastPoolStop 239.255.255.255 + # testvar SSMulticastPoolStart 232.0.1.1 + # testvar SSMulticastPoolStop 232.0.1.255 + # testvar multicastJoinDelay 2 + # testvar multicastScaleDelay 1 + # testvar multicastInterface wan + # testvar multicastBypassPPPoE no + + SECTION "IGMP Timers" { + + # testvar igmpQueryInterval 125 + # testvar igmpRobustnessVariable 2 + # testvar igmpQueryResponseInterval 10 + + } + + SECTION "IPTV Options" { + + # testvar iptvChannelRange 200 + # testvar iptvChannelChangeDelay 200 + # testvar iptvMaxFailures 10 + + } + + } + + SECTION "GRE Tunnels" { + + # testvar greDFflag on + + IGNORE testvar_group greTunnel1 { + + SECTION "Generic IPv4 GRE Tunnel Endpoints" { + + # testvar greType IPv4 + # testvar greEndpoint 5.5.5.5 + # testvar greLocalNet 192.168.1.0 + # testvar greLocalMask 255.255.255.0 + + } + + SECTION "L2GRE Options" { + + # testvar greWanGroup wan2 + + } + + SECTION "L3GRE Remote IPv4 Network" { + + # testvar greHost 3.0.0.1 + # testvar greRemoteNet 3.0.0.0 + # testvar greRemoteMask 255.0.0.0 + + } + + } + + } + + } + + SECTION "Additional Features" { + + # testvar supportsIPv4 yes + # testvar internalSmtpServer 5.5.5.5 + # testvar remoteHostIp 3.3.3.3 + # testvar startOtherLanFirst no + # testvar cdrouterOui B0750C + # testvar forwardingMaxFailures 20 + # testvar forwardingPort 5001 + # testvar jumboMtu disabled + # testvar tcpUdpPortStart 10000 + + SECTION "General Purpose HTTP Server" { + + # testvar httpServerIp 3.3.3.16 + # testvar httpServerPort 80 + # testvar httpServerRoot /tmp + + } + + SECTION "Free Network Range" { + + # testvar FreeNetworkStart 200.0.0.0 + # testvar FreeNetworkMask 255.255.255.0 + # testvar FreeNetworkStop 201.0.0.0 + + } + + SECTION "TCP MSS Clamping" { + + # testvar mssClampingValue default + # testvar mssClampingInValue default + + } + + SECTION "TCP/UDP Scaling Options" { + + # testvar scaleTcpConnsPerHost 5 + # testvar natMaxTcpConns 200 + # testvar natMaxUdpConns 100 + + } + + SECTION "Global Wireless Options" { + + # testvar wirelessRetry 3 + # testvar lanWirelessMaxClients auto + # testvar wifiCapture off + # testvar wifiCaptureFilter {} + + } + + } + + SECTION "Test Execution Options and Auto-Reboot" { + + # testvar startDelay 3 + # testvar lanStartDelay 3 + # testvar startTimeout 90 + # testvar wanCloseOnExit yes + # testvar RestartDut none + # testvar RestartDutDelay disabled + # testvar ShutdownDut "echo -n" + # testvar cpeRebootMode skip + # testvar healthCheckEnable no + + } + +} + +SECTION "CDRouter DOCSIS Add-On" { + + # testvar supportsDocsis no + + SECTION "Basic Configuration" { + + # testvar docsisIpProvisioningMode ipv4-only + # testvar docsisBootDelay 30 + + # testvar docsisClientMac auto + + } + + SECTION "IPv4 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIp 10.10.10.1 + # testvar docsisMask 255.255.255.0 + + } + + SECTION "DHCPv4 Server" { + + # testvar docsisDhcpServer 10.10.10.3 + # testvar docsisAssignIp 10.10.10.2 + # testvar docsisDomain docsis.qacafe.com + # testvar docsisDhcpLeaseTime 300 + # testvar docsisDhcpRapidCommit no + + # testvar docsisDhcpServerOptionCode1 69 + # testvar docsisDhcpServerOptionData1 04040404 + + # testvar docsisDhcpClientOptionCode1 60 + # testvar docsisDhcpClientOptionData1 04040404 + + SECTION "DHCPv4 Relay" { + + # testvar docsisGateway 6.6.6.7 + # testvar docsisAssignGateway 6.6.6.6 + # testvar docsisAssignMask 255.255.255.0 + # testvar docsisDhcpRelayServer 6.6.6.7 + + } + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogServer 10.10.10.5 + # testvar docsisTimeServer 10.10.10.6 + # testvar docsisTftpServer 10.10.10.4 + + } + + } + + SECTION "IPv6 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIpv6 8001::1 + # testvar docsisIpv6PrefixLen 64 + + } + + SECTION "DHCPv6 Server" { + + # testvar docsisDhcpIpv6Server 8001::3 + # testvar docsisAssignIpv6 8001::2 + # testvar docsisDHCPv6PreferredLifetime 300 + # testvar docsisDHCPv6ValidLifetime 300 + # testvar docsisDhcpv6RapidCommit no + + # testvar docsisDhcpv6ServerOptionCode1 69 + # testvar docsisDhcpv6ServerOptionData1 04040404 + + # testvar docsisDhcpv6ClientOptionCode1 60 + # testvar docsisDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Relay" { + + # testvar docsisIpv6Gateway 9001::1 + # testvar docsisAssignIpv6PrefixLen 64 + # testvar docsisDhcpv6RelayServer 9001::1 + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogIpv6Server 8001::5 + # testvar docsisTimeIpv6Server 8001::6 + # testvar docsisTftpIpv6Server 8001::4 + + } + + } + + SECTION "CM Config File" { + + SECTION "Global TFTP Settings" { + + # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp + # testvar docsisTftpBootFile auto-docsis.bin + + } + + SECTION "Embedded Config File" { + + # testvar docsisConfig { + # Main + # { + # NetworkAccess 1; + # BaselinePrivacy + # { + # AuthTimeout 10; + # ReAuthTimeout 10; + # AuthGraceTime 600; + # OperTimeout 1; + # ReKeyTimeout 1; + # TEKGraceTime 600; + # AuthRejectTimeout 60; + # SAMapWaitTimeout 1; + # SAMapMaxRetries 4; + # } + # MaxCPE 3; + # UsServiceFlow + # { + # UsServiceFlowRef 2; + # QosParamSetType 7; + # } + # DsServiceFlow + # { + # DsServiceFlowRef 1; + # QosParamSetType 7; + # } + # SNMPv1v2cCoexistenceConfig + # { + # SNMPv1v2cCommunityName "public"; + # SNMPv1v2cTransportAddressAccess + # { + # SNMPv1v2cTransportAddress 0.0.0.0/0; + # SNMPv1v2cTransportAddressMask 0.0.0.0/0; + # } + # SNMPv1v2cAccessViewType 2; + # SNMPv1v2cAccessViewName "docsisManagerView"; + # } + # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ + # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ + # /*EndOfDataMkr*/ + # } + # } + + } + + SECTION "Vendor Defined Config File" { + + # testvar docsisConfigFile none + + } + + } + + SECTION "CM Firewall Configuration" { + + SECTION "IPv4" { + + # testvar docsisTcpOpenPorts "22 443" + # testvar docsisTcpClosedPorts all + # testvar docsisUdpOpenPorts 1234 + # testvar docsisUdpClosedPorts all + + } + + SECTION "IPv6" { + + # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" + # testvar docsisIpv6TcpClosedPorts "2323 80" + # testvar docsisIpv6UdpOpenPorts 1234 + # testvar docsisIpv6UdpClosedPorts 113 + + } + + } + +} + +SECTION "CDRouter HomeKit Add-On" { + + # testvar supportsHomeKit no + + # testvar homeKitRouterName "HomeKit Router" + # testvar homeKitHATHostname hat.local + # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ + # testvar homeKitRouterSetupCode + + # testvar homeKitManualEnabled yes + +} + +SECTION "CDRouter IKE Add-On" { + + SECTION "Global IKE Options" { + + # testvar ikeMaxPhase2SA 20 + # testvar ikeDeadPeerDetection no + # testvar ikeNewQuickModeDelay 1000 + # testvar ikeKeepAlive 20 + # testvar ikeMinimumLifetime 20 + # testvar ipsecMinimumLifetime 20 + # testvar ikePhase2DeleteDelay 100 + # testvar ikeMaxTransforms 21 + # testvar ikeInitialContact yes + # testvar ikeBringUpTunnels yes + # testvar ikeAlwaysInitiate no + # testvar useSameIpsecTunnel no + # testvar ikeNatTraversal no + # testvar ike_FQDN fqdn-test.cdrouter.com + # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com + + } + + SECTION "IPsec Tunnel Configurations" { + + SECTION "IPsec Tunnel Configuration 1" { + + # testvar ipsecTunnelKeyType1 manual + # testvar ipsecTunnelEndpoint1 5.0.0.1 + # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 + # testvar ipsecTunnelRemoteMask1 255.255.255.0 + # testvar ipsecTunnelHost1 5.0.0.2 + + SECTION "Manual IPsec Tunnel Configuration" { + + # testvar ipsecTunnelOutboundSpi1 1000 + # testvar ipsecTunnelOutEncrypt1 des + # testvar ipsecTunnelOutEncryptKey1 0102030405060708 + # testvar ipsecTunnelOutAuth1 md5-hmac + # testvar ipsecTunnelOutAuthKey1 6262626262626262 + # testvar ipsecTunnelInboundSpi1 1001 + # testvar ipsecTunnelInEncrypt1 des + # testvar ipsecTunnelInEncryptKey1 0102030405060708 + # testvar ipsecTunnelInAuth1 md5-hmac + # testvar ipsecTunnelInAuthKey1 6262626262626262 + + } + + SECTION "IKE IPsec Tunnel Configuration" { + + # testvar ipsecTunnelIkeEncrypt1 des + # testvar ipsecTunnelIkeAuth1 md5-hmac + # testvar ipsecTunnelIkeGroup1 1 + # testvar ipsecTunnelIkeLifetime1 300 + # testvar ipsecTunnelEncrypt1 3des + # testvar ipsecTunnelAuth1 sha1-hmac + # testvar ipsecTunnelPfsGroup1 1 + # testvar ipsecTunnelLifetime1 120 + # testvar ipsecTunnelPsk1 qacafe123 + # testvar ipsecTunnelIkeMode1 main + # testvar ipsecTunnelUsesNat1 no + + } + + } + + } + +} + +SECTION "CDRouter IPv6 Add-On" { + + # testvar supportsIPv6 no + + SECTION "IPv6 WAN" { + + testvar ipv6WanMode PPPoE + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001::1 + # testvar ipv6WanIspAssignIp 3001::2 + # testvar ipv6WanIspNextIp 3001::3 + # testvar ipv6WanIspPrefixLen 64 + # testvar ipv6WanDutDuid 00000000 + # testvar ipv6RelayServer 192.88.99.1 + # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 + # testvar ipv6rdPrefix 2001:1234:: + # testvar ipv6rdPrefixLen 32 + # testvar ipv6rdIPv4MaskLen 0 + # testvar ipv6rdDHCPv4Option yes + # testvar ipv6TunnelMtuType static + # testvar ipv6WanMtu 1500 + # testvar ipv6WanMtuOption no + # testvar ipv6RASendInterval 10 + # testvar ipv6ExpectRAonWan no + + SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { + + # testvar ipv6WanIspGateway 3001::9 + # testvar ipv6WanAssignPrefixLen 64 + # testvar IPv6HopCount 1 + # testvar dhcpv6RelayServer 3001::9 + + } + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + # testvar ipv6WanRDNSS no + # testvar ipv6WanDNSSL no + + } + + SECTION "DHCPv6 Server" { + + # testvar dhcpv6IAValidLifetime 300 + # testvar dhcpv6IAPreferredLifetime 300 + # testvar dhcpv6DuidType 1 + # testvar dhcpv6RestartLatency 10 + # testvar dhcpv6ServerRapidCommit yes + + # testvar dhcpv6ServerOptionCode1 69 + # testvar dhcpv6ServerOptionData1 04040404 + + # testvar wanDhcpv6ClientOptionCode1 60 + # testvar wanDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Authentication" { + + # testvar supportsDhcpv6Auth no + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: + # testvar dhcpv6WanAssignPrefixLen 48 + # testvar dhcpv6PDLatency 30 + + } + + SECTION "IPv6 NTP" { + + # testvar ipv6NtpServer1 4321::23 + # testvar ipv6NtpServerName1 time.nist.gov + + # testvar ipv6NtpServer2 4321::24 + # testvar ipv6NtpServerName2 time.foo.com + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + testvar ipv6LanIp 3001:dddd::1 + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanPrefixLen 64 + # testvar ipv6MaxLanClients 32 + # testvar ipv6RAInterval 300 + # testvar ipv6LanSubnetId 1 + + SECTION "DHCPv6 Client" { + + # testvar dhcpv6ClientTimeout 5 + # testvar ipv6DhcpClientStart ::2 + # testvar ipv6DhcpClientEnd ::1f + # testvar ipv6DhcpClientExclude "::3 ::7" + # testvar ipv6DhcpClientValidLifetime 86400 + # testvar dhcpv6RapidCommit yes + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + SECTION "IPv6 LAN DNS" { + + # testvar ipv6DNStoLAN yes + # testvar ipv6RdnssSupport yes + # testvar ipv6DnsslSupport yes + # testvar ipv6LanStaticDns no + + } + + SECTION "Unique Local Address (ULA) Options" { + + # testvar supportsULA no + # testvar ipv6LanULAPrefix fd00:: + # testvar ipv6LanULAIp ::%eui64% + # testvar ipv6LanULAMode autoconf + + } + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + } + + SECTION "IPv6 Firewall" { + + # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" + # testvar ipv6FirewallTcpClosedPorts "2323 80" + # testvar ipv6FirewallUdpOpenPorts 1234 + # testvar ipv6FirewallUdpClosedPorts 113 + # testvar ipv6FirewallOutBlockedTcpPorts 1234 + # testvar ipv6FirewallOutBlockedUdpPorts 1234 + # testvar ipv6FirewallOutBlockedIpProtos 0 + # testvar ipv6WanPingRespond no + + SECTION "IPv6 TCP MSS Clamping" { + + # testvar ipv6MssClampingValue default + # testvar ipv6MssClampingInValue default + # testvar ipv6MssClampingTestPort 8096 + + } + + } + + SECTION "IPv6 Advanced Protocols" { + + SECTION "RIPng" { + + # testvar supportsRIPng no + + } + + SECTION "MLD (IPv6 Multicast)" { + + # testvar supportsIPv6Multicast yes + # testvar supportsIPv6MulticastOut no + # testvar mldVersion 2 + # testvar mldMaxGroups 64 + # testvar mldFastLeave no + # testvar ipv6MulticastCacheTimeout 10 + # testvar ipv6MulticastJoinDelay 2 + # testvar ipv6MulticastScaleDelay 1 + + SECTION "MLD Timers" { + + # testvar mldQueryInterval 125 + # testvar mldRobustnessVariable 2 + # testvar mldQueryResponseInterval 10 + + } + + SECTION "IPv6 IPTV Options" { + + # testvar ipv6IptvChannelRange 200 + # testvar ipv6IptvChannelChangeDelay 200 + # testvar ipv6IptvMaxFailures 10 + + } + + } + + } + + SECTION "IPv6 Additional Features" { + + SECTION "IPv6 Free Network Range" { + + # testvar ipv6RemoteHost 3001:051a:cafe::1 + # testvar ipv6FreeNetworkStart 3001:cafe:1:: + # testvar ipv6FreeNetworkPrefixLen 64 + # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: + + } + + SECTION "IPv6 Multicast Pool Ranges" { + + # testvar ipv6MulticastPoolStart ff0e::1 + # testvar ipv6MulticastPoolStop ff0e:ffff:: + # testvar ipv6SSMulticastPoolStart ff3e::8000:1 + # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff + + } + + } + +} + +SECTION "CDRouter Multiport Add-On" { + + SECTION "Additional WAN Interface Setup" { + + # testvar wanFailoverTimeout 300 + + IGNORE testvar_group wan2 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.2.1 + # testvar wanIspAssignIp 202.254.2.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.2.2 + # testvar wanIspNextIp 202.254.2.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.202.1 + # testvar pptpClientIp 202.254.202.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.202.1 + # testvar l2tpClientIp 202.254.202.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.102.1 + # testvar wanBackupDnsServer 202.254.102.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:2::1 + # testvar ipv6WanIspAssignIp 3001:0:0:2::2 + # testvar ipv6WanIspNextIp 3001:0:0:2::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + IGNORE testvar_group wan3 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.3.1 + # testvar wanIspAssignIp 202.254.3.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.3.2 + # testvar wanIspNextIp 202.254.3.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.203.1 + # testvar pptpClientIp 202.254.203.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.203.1 + # testvar l2tpClientIp 202.254.203.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.103.1 + # testvar wanBackupDnsServer 202.254.103.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:3::1 + # testvar ipv6WanIspAssignIp 3001:0:0:3::2 + # testvar ipv6WanIspNextIp 3001:0:0:3::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + } + + SECTION "Additional LAN Interface Setup" { + + # testvar useSameLanInterface no + + IGNORE testvar_group lan2 { + + SECTION "IPv4 LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanGuestMode no + + SECTION "LAN Host IP" { + + # testvar hostIp 192.168.1.0 + # testvar hostMask 255.255.255.0 + # testvar hostGateway 192.168.1.1 + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "DHCP Client Configuration" { + + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + # testvar dhcpExtraClientParams "69 70" + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Configuration Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + } + + SECTION "IPv4 Firewall and NAT" { + + SECTION "Static NAT" { + + # testvar staticNatIp 202.254.1.2 + # testvar staticNatFirewall yes + # testvar natMode port-restricted + + } + + SECTION "Special Application Port Triggers" { + + # testvar portTriggers no + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "TCP and UDP Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanStaticDns no + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + + SECTION "LAN IPv6 DHCP Client" { + + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + + } + + } + +} + +SECTION "CDRouter Performance Add-On" { + + # testvar supportsPerformance no + + SECTION "Basic Configuration" { + + # testvar perfWanIp 202.254.1.4 + # testvar perfWanIpv6 3001::4 + # testvar perfPort 19750 + # testvar perfPort2 19751 + + } + + SECTION "Performance Settings" { + + # testvar perfDuration 10 + # testvar perfDownloadBandwidth 0.0 + # testvar perfInterval auto + # testvar perfIncrement 5 + # testvar perfStreams 1 + # testvar perfStreamIncr 0 + # testvar perfUdpLen auto + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + # testvar perfOmit 0 + # testvar perfDSCP 0 + # testvar perfFairness no + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresholds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + SECTION "Advanced Options" { + + # testvar perfPingEnable no + # testvar perfEnableCapture no + # testvar perfLatencyAttempts 25 + # testvar perfApplicationAttempts 4 + # testvar perfApplicationDelay 100 + + } + + SECTION "Wireless" { + + IGNORE testvar_group wireless-performance { + + SECTION "Performance Settings" { + + # testvar perfDownloadBandwidth 0.0 + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresolds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + } + + } + +} + +SECTION "CDRouter Security Add-On" { + + SECTION "Internet Connection Sharing (ICS)" { + + # testvar enableICS no + # testvar icsInterface eth0 + # testvar icsShareIPv4 yes + # testvar icsShareIPv6 yes + + } + + SECTION "Traffic Analysis" { + + # testvar enableSuricata no + + } + + SECTION "Nmap Scans" { + + # testvar enableNmap no + # testvar nmapPorts 0-65535 + # testvar nmapScanTimeout 600 + # testvar nmapTimingTemplate 5 + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleBase auto + # testvar internetScheduleTimeZone auto + # testvar internetScheduleBlockedText "This website is blocked" + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + +} + +SECTION "CDRouter SNMP Add-On" { + + # testvar supportsSnmp no + + # testvar snmpPort 161 + # testvar snmpDefaultUser auto + # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" + # testvar snmpUpdateDelay 15 + + SECTION "SNMP Options and Users" { + + # testvar snmpManagerIp 3.3.3.33 + # testvar snmpManagerIpv6 3001:051a:cafe::33 + + IGNORE testvar_group snmpuser1 { + + # testvar snmpVersion 2c + + # testvar snmpAccess read-only + # testvar snmpTransport udp + # testvar snmpRetries 5 + # testvar snmpTimeout 5 + + SECTION "SNMP v1/2c Configuration" { + + # testvar snmpCommunity public + + } + + SECTION "SNMP v3 Configuration" { + + # testvar snmpSecurityLevel noAuthNoPriv + + # testvar snmpAuthProtocol MD5 + # testvar snmpAuthUsername qacafe + # testvar snmpAuthPassword qacafe123 + + # testvar snmpPrivacyProtocol DES + # testvar snmpPrivacyPassword qacafe123 + + # testvar snmpContextName bridge1 + # testvar snmpSecurityEngineId 800000020109840301 + # testvar snmpContextEngineId 800000020109840301 + + } + + } + + } + + SECTION "SNMP Scenarios" { + + # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp + # testvar snmpScenarioSingleMode no + # testvar snmpScenarioInterface lan + # testvar snmpScenarioIpVersion IPv4 + + } + +} + +SECTION "CDRouter Storage Add-On" { + + # testvar supportsStorage no + + # testvar storageFileSize 10 + # testvar storageUserFilePath none + # testvar useMulticastDNS no + + SECTION "SMB Options and Users" { + + # testvar supportsStorageSmb yes + # testvar storageSmbMaxSessions 20 + # testvar storageSmbTimeout 120 + # testvar storageSmbPacing 0 + + IGNORE testvar_group smbuser1 { + + # testvar server MyNAS + # testvar share data + # testvar folder /home/qacafe + # testvar guest no + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + + SECTION "FTP Options and Users" { + + # testvar supportsStorageFtp yes + # testvar supportsStorageFtps yes + # testvar storageFtpMaxSessions 20 + # testvar storageFtpTimeout 120 + # testvar storageFtpPacing 0 + + IGNORE testvar_group ftpuser1 { + + # testvar server MyNAS + # testvar path /home/qacafe + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + +} + +SECTION "CDRouter TR-069 Add-On" { + + testvar supportsCWMP yes + + SECTION "Basic ACS Configuration" { + + # testvar acsIp 6.0.0.1 + # testvar acsPort 80 + testvar acsDomain acs-download.qacafe.com + # testvar acsTransport http + # testvar acsAuth digest + # testvar acsDigestQopAuth yes + # testvar acsInterface wan + testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ + # testvar acsWaitForInform 120 + # testvar acsSkipInitialInform no + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar cwmpProtocolVersion 1.0 + # testvar acsDeviceDiscovery no + # testvar acsConfigurePeriodicInform yes + # testvar tr69InitiateConnection yes + testvar acsDefaultUser cdrouter + testvar acsDefaultPassword cdrouter + testvar acsCpeDefaultUser acs + testvar acsCpeDefaultPassword acs + # testvar acsFileServerUser file_server_user + # testvar acsFileServerPassword file_server_password + + } + + SECTION "XMPP Connection Request Configuration" { + + # testvar acsSupportsXmppConnReq no + + # testvar acsXmppServerConnectAlgorithm DNS-SRV + # testvar acsXmppConnReqUsername qacafe + # testvar acsXmppConnReqResource cdrouter + # testvar acsXmppConnReqPassword qacafe123 + # testvar acsXmppConnReqUseTls no + + } + + SECTION "Advanced ACS Configuration" { + + # testvar acsCpeKeepAlive yes + # testvar acsChunkedEncoding no + # testvar acsChunkSize 64 + # testvar acsAuthOncePerSession no + # testvar acsCookieMode rfc6265 + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + # testvar acsNumberCpeAttempts 2 + # testvar acsDelayCpeAttempts 10 + # testvar acsWaitForConnectionRequest yes + # testvar acsUseTcpOffload yes + # testvar acsTargetDevice tr069_device2 + # testvar acsDualStackIp 6000::1 + # testvar acsStrictSyntaxChecking on + + } + + SECTION "SSL Configuration" { + + # testvar acsSslVersion tls + # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem + # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem + # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsCipherSuite auto + # testvar acsClientCaCertPath /path/to/client/ca/file + + } + + SECTION "Profiles" { + + # testvar cwmpSupportedDataModel auto + # testvar cwmpDataValidation yes + # testvar cwmpSkipParameters empty + # testvar cwmpModifyParameters empty + # testvar cwmpVendorSpecificParams none + + SECTION "Custom CWMP Profiles" { + + IGNORE testvar_group cwmp_profile1 { + + # testvar cwmpProfileName myVendorParameters + # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp + # testvar cwmpProfileObject InternetGatewayDevice:1 + + } + + } + + } + + SECTION "CWMP Scenarios" { + + # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp + # testvar cwmpScenarioSingleMode no + # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp + + } + + SECTION "Additional TR-069 Options" { + + # testvar tr69DeviceType IGD + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69InformTimeout 120 + # testvar tr69MinPeriodicInform 60 + # testvar tr69ScheduleInformRPC yes + # testvar tr69UploadRPC no + # testvar tr69UploadPath /tmp + # testvar tr69ConfigUploadFilename vendor_configuration_file + # testvar tr69LogUploadFilename vendor_log_file + # testvar tr69FactoryResetRPC no + # testvar tr69CpeGetRPCs no + # testvar tr69ForceBoolean no + # testvar tr69XMLCapturePath /tmp/tr69-xml + # testvar tr69DownloadTimeout 600 + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadImageVersion 1.0 + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69RebootTimeout 300 + # testvar tr69RpcTimeout 180 + # testvar tr69DownloadConfig /path/to/config + # testvar tr69MaxUserNameLen 256 + # testvar tr69MaxPasswordLen 256 + # testvar tr69MaxCpeUserNameLen 256 + # testvar tr69MaxCpePasswordLen 256 + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DUInstallImageVersion 1.0 + # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image + # testvar tr69DUInstallImageAlternateVersion 1.0 + # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb + # testvar tr69DUChangeExecEnvRef openwrt + # testvar tr69DUChangeTimeout 600 + # testvar tr69WildcardPortMappingOnly no + # testvar tr69PortMapDeletionDelay 15 + # testvar tr69PortMapCreationDelay 0 + # testvar tr69PortMapDisableDelay 15 + # testvar tr69TraceRouteTimeout 120 + + } + + SECTION "TR-111 Parts 1 and 2" { + + # testvar supportsTr111Part1 yes + # testvar supportsTr111Part2 no + # testvar STUNMaximumKeepAlivePeriod 60 + # testvar STUNMinimumKeepAlivePeriod 60 + # testvar STUNAuth no + # testvar STUNUsername qacafe + # testvar STUNPassword qacafe123 + # testvar acsUdpConnectionDelay 0 + + } + + SECTION "TR-143 Performance Tests" { + + # testvar tr143HttpDownloadSize 1000000 + # testvar tr143HttpUploadSize 1000000 + + # testvar tr143HttpDownloadHighThreshold 0.0 + # testvar tr143HttpDownloadLowThreshold 5.0 + # testvar tr143HttpDownloadResponseMax 60 + + # testvar tr143HttpUploadHighThreshold 0.0 + # testvar tr143HttpUploadLowThreshold 5.0 + # testvar tr143HttpUploadResponseMax 60 + + } + + SECTION "TR-069 LAN Side Devices" { + + IGNORE testvar_group tr069_device2 { + + # testvar acsDefaultUser qacafe + # testvar acsDefaultPassword qacafe123 + # testvar acsCpeDefaultUser qacafe + # testvar acsCpeDefaultPassword qacafe123 + # testvar acsCreatePortMapOnIGD no + # testvar acsPortMapPublicPort 20000 + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69DeviceType IGD + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DownloadConfig /path/to/config + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + + } + + } + +} + +SECTION "CDRouter USP Add-On" { + + # testvar supportsUSP no + + SECTION "Basic Controller Configuration" { + + # testvar uspControllerID proto::controller-id + # testvar uspControllerInterface wan + + # testvar uspControllerIpMode ipv4-only + # testvar uspControllerIpv4 6.0.0.2 + # testvar uspControllerIpv6 6000::2 + # testvar uspControllerPort auto + # testvar uspControllerPath /controller-path + + # testvar uspControllerUseNonPayloadProtection no + # testvar uspControllerUseSessionContext no + # testvar uspControllerMTP websocket + # testvar uspControllerMTPEncryption no + # testvar uspControllerUSPEncryption no + # testvar uspControllerDomain controller.cdroutertest.com + + # testvar uspSegmentationEnable no + # testvar uspSegmentationSize auto + + # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + + # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + + # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerVerifyRecordIntegrity no + + # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem + + # testvar uspControllerHost any + # testvar uspControllerUsername qacafe + # testvar uspControllerPassword qacafe123 + + } + + SECTION "Basic Agent Configuration" { + + # testvar uspAgentID proto::agent-id + + # testvar uspAgentIpv4 auto + # testvar uspAgentIpv6 auto + # testvar uspAgentPort auto + # testvar uspAgentPath /agent-path + + # testvar uspMessageTimeout 30 + # testvar uspNotificationTimeout 30 + # testvar uspRebootTimeout 120 + + } + + SECTION "USP Scenarios" { + + # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp + # testvar uspScenarioSingleMode no + # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp + + } + + SECTION "Data Model" { + + # testvar uspSkipParameters empty + # testvar uspModifyParameters empty + # testvar uspSupportedDataModel all + + SECTION "Custom USP Data Model" { + + IGNORE testvar_group usp_profile_1 { + + # testvar uspProfileName myVendorParameters + # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml + + } + + } + + } + + SECTION "USP Agent Data Model Configuration" { + + # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + + # testvar uspParameterPath1 Device.DeviceInfo.ModelName + # testvar uspParameterPath2 Device.IP.Interface.3.Enable + # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory + # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode + + # testvar uspNotificationParamNewValue myCustomParameterValue + + # testvar uspObject1 Device.IP.Interface. + # testvar uspObject2 Device.WiFi.AccessPoint. + + # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} + # testvar uspValidSearchPathResultParam PeriodicNotifInterval + # testvar uspValidSearchPathResultValue 5000 + + # testvar uspFirmwareImage /path/to/firmware.bin + # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin + # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 + + } + +} + +SECTION "CDRouter BBF.069 Add-On" { + + # testvar supportsBBF069 yes + + SECTION "General" { + + SECTION "ACS URL" { + + # testvar bbf069ACSURL http://acs1.broadband-forum.org + # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org + + } + + SECTION "Security Certificates" { + + # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem + # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem + # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem + # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem + # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem + # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem + + } + + SECTION "HTTP Verification" { + + # testvar bbf069HTTPVerification no + + } + + } + + SECTION "Device Specific" { + + SECTION "General" { + + # testvar bbf069RootDataModel InternetGatewayDevice + # testvar bbf069UnsupportedRPC ChangeDUState + # testvar bbf069UploadType "1 Vendor Configuration File" + # testvar bbf069ExpectedUpgradeTime 100 + + } + + SECTION "Data Model" { + + # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069ActiveParamType unsignedInt + # testvar bbf069ActiveParamValue 60 + + # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069CompletePath1Type unsignedInt + # testvar bbf069CompletePath1Value 73 + + # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable + # testvar bbf069CompletePath2Type boolean + # testvar bbf069CompletePath2Value true + + # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. + # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. + # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv + # testvar bbf069InvalidPathType unsignedInt + + # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer + # testvar bbf069UnwritableType string + # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 + + } + + } + +} diff --git a/.testbed/cdrouter/configurations/ppp-ipv6 b/.testbed/cdrouter/configurations/ppp-ipv6 new file mode 100644 index 0000000000..5ba371b25f --- /dev/null +++ b/.testbed/cdrouter/configurations/ppp-ipv6 @@ -0,0 +1,2677 @@ +SECTION "About" { + + # Cable/DSL Router Test Suite + # + # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 + # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) + # + # Local.conf + # + # This is the main configuration file for CDRouter. This file defines the + # configuration of the router under test and controls various aspects of + # CDRouter's behavior. This file consists of a number of unique test variables + # called 'testvars' which are grouped by interface, protocol, or functionality. + # The basic syntax for all testvars is: + # + # testvar NAME VALUE + +} + +SECTION "Base Configuration" { + + SECTION "WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + testvar wanMode PPPoE + # testvar wanIspIp 202.254.1.1 + # testvar wanIspAssignIp 202.254.1.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.1.2 + # testvar wanIspNextIp 202.254.1.3 + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar wanIspAssignMask 255.255.255.0 + # testvar IPv4HopCount 1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + # testvar dhcpServerRapidCommit yes + # testvar dhcpServerClientIDBehavior rfc6842 + # testvar dhcpServerResponseDelay 4500 + # testvar dhcpConnectOnDemand no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar wanDhcpClientOptionCode1 60 + # testvar wanDhcpClientOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "DHCP Authentication" { + + # testvar supportsDhcpAuth no + + } + + SECTION "PPPoE Server" { + + # testvar pppoeConnectOnDemand no + # testvar pppoeIdleTimeout 60 + testvar pppoeUser softathome + testvar pppoePassword softathome + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + # testvar pppoeAcCookie auto + # testvar pppoeMaxPayload none + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpConnectOnDemand yes + # testvar pptpServerIp 202.254.201.1 + # testvar pptpClientIp 202.254.201.2 + # testvar pptpUseDHCP no + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpConnectOnDemand yes + # testvar l2tpServerIp 202.254.201.1 + # testvar l2tpClientIp 202.254.201.2 + # testvar l2tpUseDHCP no + + } + + SECTION "DS-Lite" { + + # testvar ipv6DsliteAftr 3001:aaaa::1 + # testvar dhcpv6WanAftrName aftr.qacafe.com + # testvar dsliteFirewallMode address-restricted + + } + + SECTION "MAP / LW4o6" { + + # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: + # testvar mapBmrRuleIpv6PrefixLen 48 + # testvar mapBmrRuleIpv4Prefix 5.0.0.0 + # testvar mapBmrRuleIpv4PrefixLen 24 + # testvar mapBmrRuleEABitLen 16 + + # testvar mapSharingRatio 256 + # testvar mapStartPort 4096 + # testvar mapPsid 255 + + # testvar mapEnableDhcpv6Options yes + + SECTION "MAP-E / LW4o6" { + + # testvar mapTunnelFlowLabel 0 + # testvar mapTunnelHopLimit 64 + # testvar mapTunnelTrafficClass 0 + + } + + SECTION "MAP-T" { + + # testvar mapDmrIpv6Prefix 5001:db8:: + # testvar mapDmrIpv6PrefixLen 48 + + # testvar mapTosTranslate yes + + } + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + # testvar pppConnectionDelay 10 + # testvar pppRestartTimeout 300000 + # testvar pppFailUsesICMP no + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "Wireless Access Point (AP)" { + + # testvar wanApBand 2.4GHz + # testvar wanApSSID qa-net + # testvar wanApChannel auto + + SECTION "WPA Authenticator" { + + # testvar wanApWpaMode RSN + # testvar wanApWpaKeyMgmt PSK + # testvar wanApWpaCipher CCMP-128 + # testvar wanApWpaGroupCipher auto + # testvar wanApWpaPMF auto + # testvar wanApWpaPsk qacafe123 + # testvar wanApWpaSaePassword "sae secret" + + } + } + + SECTION "WAN 802.1X and RADIUS" { + + SECTION "WAN RADIUS" { + + # testvar wanRadiusEnable no + # testvar wanRadiusInterface wan + # testvar wanRadiusIp 3.3.3.44 + # testvar wanRadiusSecret qacafe123 + # testvar wanRadiusServerAttrType1 200 + # testvar wanRadiusServerAttrData1 04040404 + + } + + SECTION "WAN EAP Settings" { + + # testvar wanEapType eap-md5 + + SECTION "WAN Supplicant Credentials" { + + # testvar wanEapIdentity1 user1 + # testvar wanEapPassword1 qacafe123 + + } + + SECTION "WAN Authentication Options" { + + # testvar wanEapRootCert /usr/cdrouter/tests/root.pem + # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem + # testvar wanEapServerCertPassword qacafe123 + # testvar wanEapFragmentSize 1024 + + } + + } + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.101.1 + # testvar wanBackupDnsServer 202.254.101.2 + # testvar wanBackupDnsServer2 0.0.0.0 + # testvar wanBackupDnsServer3 0.0.0.0 + # testvar DNStoDHCP no + # testvar supportsDnsProxy yes + # testvar supportsDnsCaching yes + # testvar dnsCacheSize 150 + # testvar dnsLookupTimeout 5 + # testvar dnsFailoverAuth "2 4 5" + # testvar dnsFailoverNonAuth "2 4 5" + # testvar dnsFailoverDelay 10 + # testvar dnsFailoverAttempts 20 + # testvar dnsRelayFailover 120 + # testvar dnsForwardServerStatus no + # testvar dnsUsageProfile opportunistic-privacy + # testvar dnsCaptive no + + SECTION "User Configurable DNS Entries" { + + # testvar dnsHostname1 test.qacafe.com + # testvar dnsIp1 5.5.5.5 + + } + + } + + SECTION "HTTP" { + + # testvar supportsHttpProxy yes + # testvar httpProxyIdleTimeout 30 + # testvar httpMaxHeaderCount 200 + + } + + SECTION "NTP" { + + # testvar ntpServer1 3.3.3.6 + # testvar ntpServerName1 time.nist.gov + # testvar ntpServer2 3.3.3.7 + # testvar ntpServerName2 time.foo.com + # testvar ntpStartDate "6/2/2007 11:00 am UTC" + # testvar ntpOffset 0 + # testvar enableRFC868TimeProtocol no + + } + + SECTION "Dynamic DNS" { + + # testvar supportsDynDns no + # testvar dynDnsServerIp 66.37.215.49 + # testvar dynDnsTransport http + # testvar dynDnsHostname test.domain.com + # testvar dynDnsUsername qacafe + # testvar dynDnsPassword qacafe123 + # testvar dynDnsSystem dyndns + # testvar dynDnsMx mail.domain.com + # testvar dynDnsBackMx no + # testvar dynDnsWildcard off + # testvar dynDnsAgent RAS/1.1 + # testvar dynDnsWait 30 + # testvar testDynDnsErrorCode no + # testvar dynDnsServerReturn !yours + + } + + SECTION "WINS Servers" { + + # testvar winsServer1 3.3.3.4 + # testvar winsServer2 3.3.3.5 + + } + + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanDomainName qacafe.com + # testvar lanMtu default + testvar lanHostname prplOS + # testvar lanGuestMode no + + SECTION "ARP Settings" { + + # testvar arpMode strict + # testvar arpSupportGratuitous yes + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + # testvar supportsDnsHostnameCreate no + + } + + SECTION "DHCP Client" { + + # testvar dhcpClientTimeout 5 + # testvar dhcpInform no + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpRapidCommit no + # testvar ipv4MaxLanClients auto + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpCreateDelay 0 + # testvar dhcpReleaseDelay 300 + # testvar dhcpServerMac auto + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + # testvar dhcpClientTrackSeconds no + # testvar dhcpClientRequestNtp no + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + SECTION "DHCP Client Extra Parameters" { + + # testvar dhcpExtraClientParams "69 70" + + } + + SECTION "DHCP Client Extra Options" { + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Hotspot Router Settings" { + + # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% + # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% + + SECTION "Hotspot Clients" { + + # testvar clientLoginName1 client1 + # testvar clientLoginPassword1 admin1 + + } + + SECTION "Advanced Hotspot Settings" { + + # testvar browserLoginProc example_login + # testvar browserLogoutProc example_logout + # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl + + } + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconRsnCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X and RADIUS" { + + SECTION "LAN RADIUS" { + + # testvar enableRADIUSserver yes + # testvar radiusHost remoteHost + # testvar radiusSecret qacafe123 + # testvar radiusServerAttrType1 200 + # testvar radiusServerAttrData1 04040404 + + } + + SECTION "LAN EAP Settings" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + SECTION "LAN Authentication Options" { + + # testvar eapRootCert /usr/cdrouter/tests/root.pem + # testvar eapServerCertPath /usr/cdrouter/tests/server.pem + # testvar eapServerCertPassword qacafe123 + # testvar eapFragmentSize 1024 + # testvar eapTxWhen 60 + # testvar eapQuietPeriod 60 + # testvar eapReAuthMax 2 + # testvar eapSendLogoffFailure yes + # testvar eapReAuthPeriod 0 + + } + + } + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "Firewall and NAT" { + + SECTION "NAT Options" { + + testvar natSimultaneousTcp yes + # testvar natSrcPort0 yes + # testvar natSupportsP2P yes + # testvar natPortParity yes + # testvar natMode port-restricted + # testvar natVerifyIpId yes + # testvar defaultTcpEchoPort 50000 + # testvar defaultUdpEchoPort 50000 + # testvar natRefreshBehavior both + + SECTION "NAT Timers" { + + # testvar natFinTimeout disabled + # testvar natRstTimeout disabled + # testvar natTcpTimeout disabled + # testvar natSynTimeout disabled + # testvar natUdpTimeout disabled + # testvar natDnsTimeout disabled + # testvar natIcmpTimeout disabled + # testvar natRtspTimeout disabled + # testvar natLagTime 0 + + } + + } + + SECTION "Protocol Pass Through" { + + SECTION "IPSEC Pass Through" { + + # testvar supportsIPSECpass yes + # testvar ipsecMaxTunnels 20 + # testvar ipsecScaleSameServer no + # testvar alwaysUseIke no + # testvar ipsecPassRetransmit no + # testvar unknownPassthrough yes + + } + + SECTION "PPTP Pass Through" { + + # testvar supportsPPTPpass yes + # testvar pptpMaxTunnels 20 + + } + + SECTION "L2TP Pass Through" { + + # testvar supportsL2TPpass yes + # testvar l2tpMaxTunnels 20 + + } + + SECTION "PPPoE Pass Through" { + + # testvar supportsPPPoEpass no + + } + + } + + SECTION "Port Triggers" { + + # testvar portTriggers no + # testvar portTriggerTimeout 0 + # testvar portTriggerDelay 0 + # testvar portTriggerOpenDelay 0 + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "Application Layer Gateways (ALGs)" { + + SECTION "MSN Messenger" { + + # testvar supportsMsnAlg no + # testvar msnNotificationServerPort 1863 + # testvar msnSwitchBoardServerPort 1863 + + } + + SECTION "RTSP" { + + # testvar supportsRtspAlg no + # testvar rtspTeardownDelay 5 + # testvar rtspGetParameterInterval 5 + + } + + SECTION "SIP" { + + # testvar supportsSipAlg yes + # testvar sipInterface wan + # testvar sipServerIp 3.3.3.8 + # testvar ipv6SipServerIp 3001:051a:cafe::4 + # testvar sipCallTeardownDelay 5 + # testvar sipMaxOutboundCalls 10 + # testvar sipMaxInboundCalls 10 + # testvar sipCallPacing 0 + # testvar sipScaleRunTime 30 + # testvar sipScaleServerPort 5060 + # testvar sipScaleClientPort 5060 + # testvar sipMaxUserNames -1 + # testvar rtpSendInterval 5000 + + } + + SECTION "FTP" { + + # testvar ftpPortTimeout 120 + + } + + } + + SECTION "Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + SECTION "Port Scanning, Firewall and DoS Options" { + + # testvar portScanStart 0 + # testvar portScanStop 65535 + # testvar portScanDelay 1 + testvar firewallTcpOpenPorts "50805" + # testvar firewallTcpClosedPorts 2323 + # testvar firewallUdpOpenPorts 1234 + testvar firewallUdpClosedPorts 68 + # testvar firewallOutBlockedTcpPorts 1234 + # testvar firewallOutBlockedUdpPorts 1234 + # testvar firewallOutBlockedIpProtos 0 + # testvar wanPingRespond no + + SECTION "Denial of Service Options" { + + # testvar dosRecoveryTime 5 + # testvar dosAttackAttempts 100 + # testvar dutMgmtPort 80 + # testvar dutSecureMgmtPort disabled + # testvar dosSynAttackPort 80 + # testvar dosSynAttackAttempts 100 + + } + + SECTION "Deprecated SSL Protocols and Ciphers" { + + # testvar sslDeprecatedProtocols "sslv2 sslv3" + # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" + + } + + } + + SECTION "DMZ" { + + # testvar lanDmzHost 192.168.1.253 + # testvar lanDmzTcpPortExceptions 113 + # testvar lanDmzUdpPortExceptions 1234 + # testvar lanDmzIpProtoExceptions 2,47 + # testvar lanDmzSupportsIcmp no + + } + + SECTION "URL Filtering" { + + # testvar urlFilterSupported no + # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" + # testvar non-filtered-urls http://qacafe.com + # testvar urlFilterBlockedText "This website is blocked" + + } + + SECTION "XBox Live Options" { + + # testvar xboxNatMinType open + # testvar xboxPort 3074 + # testvar xboxMtu 1364 + + } + + } + + SECTION "Advanced Protocols" { + + SECTION "RIP v1/v2" { + + # testvar ripSupported no + # testvar ripVersion 1 + # testvar ripV2mode multicast + # testvar ripAuthMode none + # testvar ripPassword qacafe123 + # testvar ripMaxRoutes 96 + # testvar ripRouteTimeout 180 + # testvar ripGarbageTimeout 120 + # testvar ripRouteDelay 5000 + # testvar ripAcceptWanUpdate no + + } + + SECTION "UPnP" { + + # testvar upnpSupported yes + # testvar upnpVersion 1.1 + # testvar upnpDevice InternetGatewayDevice:2 + # testvar upnpWANPPPConnection no + # testvar upnpLANDevice no + # testvar upnpMaxTcpMappings 10 + # testvar upnpMaxSubClients 10 + # testvar upnpMinSubTimeout 40 + # testvar upnpMaxSubTimeout 3600 + # testvar upnpWANFailureTimeout 120 + # testvar upnpPortStart 40000 + # testvar upnpPortStop 50000 + + } + + SECTION "LLDP" { + + # testvar supportsLLDP no + # testvar lldpLanMac none + # testvar lldpLanChassisMac auto + # testvar lldpMsgFastTx 1 + # testvar lldpMsgTxInterval 30 + # testvar lldpTxFastInit 4 + + } + + SECTION "IGMP (Multicast)" { + + # testvar supportsMulticast yes + # testvar multicastType proxy + # testvar supportsMulticastOut no + # testvar igmpVersion 2 + # testvar igmpFastLeave no + # testvar igmpRouterOption yes + # testvar igmpMaxGroups 64 + # testvar multicastCacheTimeout 10 + # testvar multicastPoolStart 224.0.1.0 + # testvar multicastPoolStop 239.255.255.255 + # testvar SSMulticastPoolStart 232.0.1.1 + # testvar SSMulticastPoolStop 232.0.1.255 + # testvar multicastJoinDelay 2 + # testvar multicastScaleDelay 1 + # testvar multicastInterface wan + # testvar multicastBypassPPPoE no + + SECTION "IGMP Timers" { + + # testvar igmpQueryInterval 125 + # testvar igmpRobustnessVariable 2 + # testvar igmpQueryResponseInterval 10 + + } + + SECTION "IPTV Options" { + + # testvar iptvChannelRange 200 + # testvar iptvChannelChangeDelay 200 + # testvar iptvMaxFailures 10 + + } + + } + + SECTION "GRE Tunnels" { + + # testvar greDFflag on + + IGNORE testvar_group greTunnel1 { + + SECTION "Generic IPv4 GRE Tunnel Endpoints" { + + # testvar greType IPv4 + # testvar greEndpoint 5.5.5.5 + # testvar greLocalNet 192.168.1.0 + # testvar greLocalMask 255.255.255.0 + + } + + SECTION "L2GRE Options" { + + # testvar greWanGroup wan2 + + } + + SECTION "L3GRE Remote IPv4 Network" { + + # testvar greHost 3.0.0.1 + # testvar greRemoteNet 3.0.0.0 + # testvar greRemoteMask 255.0.0.0 + + } + + } + + } + + } + + SECTION "Additional Features" { + + # testvar supportsIPv4 yes + # testvar internalSmtpServer 5.5.5.5 + # testvar remoteHostIp 3.3.3.3 + # testvar startOtherLanFirst no + # testvar cdrouterOui B0750C + # testvar forwardingMaxFailures 20 + # testvar forwardingPort 5001 + # testvar jumboMtu disabled + # testvar tcpUdpPortStart 10000 + + SECTION "General Purpose HTTP Server" { + + # testvar httpServerIp 3.3.3.16 + # testvar httpServerPort 80 + # testvar httpServerRoot /tmp + + } + + SECTION "Free Network Range" { + + # testvar FreeNetworkStart 200.0.0.0 + # testvar FreeNetworkMask 255.255.255.0 + # testvar FreeNetworkStop 201.0.0.0 + + } + + SECTION "TCP MSS Clamping" { + + # testvar mssClampingValue default + # testvar mssClampingInValue default + + } + + SECTION "TCP/UDP Scaling Options" { + + # testvar scaleTcpConnsPerHost 5 + # testvar natMaxTcpConns 200 + # testvar natMaxUdpConns 100 + + } + + SECTION "Global Wireless Options" { + + # testvar wirelessRetry 3 + # testvar lanWirelessMaxClients auto + # testvar wifiCapture off + # testvar wifiCaptureFilter {} + + } + + } + + SECTION "Test Execution Options and Auto-Reboot" { + + # testvar startDelay 3 + # testvar lanStartDelay 3 + # testvar startTimeout 90 + # testvar wanCloseOnExit yes + # testvar RestartDut none + # testvar RestartDutDelay disabled + # testvar ShutdownDut "echo -n" + # testvar cpeRebootMode skip + # testvar healthCheckEnable no + + } + +} + +SECTION "CDRouter DOCSIS Add-On" { + + # testvar supportsDocsis no + + SECTION "Basic Configuration" { + + # testvar docsisIpProvisioningMode ipv4-only + # testvar docsisBootDelay 30 + + # testvar docsisClientMac auto + + } + + SECTION "IPv4 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIp 10.10.10.1 + # testvar docsisMask 255.255.255.0 + + } + + SECTION "DHCPv4 Server" { + + # testvar docsisDhcpServer 10.10.10.3 + # testvar docsisAssignIp 10.10.10.2 + # testvar docsisDomain docsis.qacafe.com + # testvar docsisDhcpLeaseTime 300 + # testvar docsisDhcpRapidCommit no + + # testvar docsisDhcpServerOptionCode1 69 + # testvar docsisDhcpServerOptionData1 04040404 + + # testvar docsisDhcpClientOptionCode1 60 + # testvar docsisDhcpClientOptionData1 04040404 + + SECTION "DHCPv4 Relay" { + + # testvar docsisGateway 6.6.6.7 + # testvar docsisAssignGateway 6.6.6.6 + # testvar docsisAssignMask 255.255.255.0 + # testvar docsisDhcpRelayServer 6.6.6.7 + + } + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogServer 10.10.10.5 + # testvar docsisTimeServer 10.10.10.6 + # testvar docsisTftpServer 10.10.10.4 + + } + + } + + SECTION "IPv6 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIpv6 8001::1 + # testvar docsisIpv6PrefixLen 64 + + } + + SECTION "DHCPv6 Server" { + + # testvar docsisDhcpIpv6Server 8001::3 + # testvar docsisAssignIpv6 8001::2 + # testvar docsisDHCPv6PreferredLifetime 300 + # testvar docsisDHCPv6ValidLifetime 300 + # testvar docsisDhcpv6RapidCommit no + + # testvar docsisDhcpv6ServerOptionCode1 69 + # testvar docsisDhcpv6ServerOptionData1 04040404 + + # testvar docsisDhcpv6ClientOptionCode1 60 + # testvar docsisDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Relay" { + + # testvar docsisIpv6Gateway 9001::1 + # testvar docsisAssignIpv6PrefixLen 64 + # testvar docsisDhcpv6RelayServer 9001::1 + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogIpv6Server 8001::5 + # testvar docsisTimeIpv6Server 8001::6 + # testvar docsisTftpIpv6Server 8001::4 + + } + + } + + SECTION "CM Config File" { + + SECTION "Global TFTP Settings" { + + # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp + # testvar docsisTftpBootFile auto-docsis.bin + + } + + SECTION "Embedded Config File" { + + # testvar docsisConfig { + # Main + # { + # NetworkAccess 1; + # BaselinePrivacy + # { + # AuthTimeout 10; + # ReAuthTimeout 10; + # AuthGraceTime 600; + # OperTimeout 1; + # ReKeyTimeout 1; + # TEKGraceTime 600; + # AuthRejectTimeout 60; + # SAMapWaitTimeout 1; + # SAMapMaxRetries 4; + # } + # MaxCPE 3; + # UsServiceFlow + # { + # UsServiceFlowRef 2; + # QosParamSetType 7; + # } + # DsServiceFlow + # { + # DsServiceFlowRef 1; + # QosParamSetType 7; + # } + # SNMPv1v2cCoexistenceConfig + # { + # SNMPv1v2cCommunityName "public"; + # SNMPv1v2cTransportAddressAccess + # { + # SNMPv1v2cTransportAddress 0.0.0.0/0; + # SNMPv1v2cTransportAddressMask 0.0.0.0/0; + # } + # SNMPv1v2cAccessViewType 2; + # SNMPv1v2cAccessViewName "docsisManagerView"; + # } + # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ + # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ + # /*EndOfDataMkr*/ + # } + # } + + } + + SECTION "Vendor Defined Config File" { + + # testvar docsisConfigFile none + + } + + } + + SECTION "CM Firewall Configuration" { + + SECTION "IPv4" { + + # testvar docsisTcpOpenPorts "22 443" + # testvar docsisTcpClosedPorts all + # testvar docsisUdpOpenPorts 1234 + # testvar docsisUdpClosedPorts all + + } + + SECTION "IPv6" { + + # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" + # testvar docsisIpv6TcpClosedPorts "2323 80" + # testvar docsisIpv6UdpOpenPorts 1234 + # testvar docsisIpv6UdpClosedPorts 113 + + } + + } + +} + +SECTION "CDRouter HomeKit Add-On" { + + # testvar supportsHomeKit no + + # testvar homeKitRouterName "HomeKit Router" + # testvar homeKitHATHostname hat.local + # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ + # testvar homeKitRouterSetupCode + + # testvar homeKitManualEnabled yes + +} + +SECTION "CDRouter IKE Add-On" { + + SECTION "Global IKE Options" { + + # testvar ikeMaxPhase2SA 20 + # testvar ikeDeadPeerDetection no + # testvar ikeNewQuickModeDelay 1000 + # testvar ikeKeepAlive 20 + # testvar ikeMinimumLifetime 20 + # testvar ipsecMinimumLifetime 20 + # testvar ikePhase2DeleteDelay 100 + # testvar ikeMaxTransforms 21 + # testvar ikeInitialContact yes + # testvar ikeBringUpTunnels yes + # testvar ikeAlwaysInitiate no + # testvar useSameIpsecTunnel no + # testvar ikeNatTraversal no + # testvar ike_FQDN fqdn-test.cdrouter.com + # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com + + } + + SECTION "IPsec Tunnel Configurations" { + + SECTION "IPsec Tunnel Configuration 1" { + + # testvar ipsecTunnelKeyType1 manual + # testvar ipsecTunnelEndpoint1 5.0.0.1 + # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 + # testvar ipsecTunnelRemoteMask1 255.255.255.0 + # testvar ipsecTunnelHost1 5.0.0.2 + + SECTION "Manual IPsec Tunnel Configuration" { + + # testvar ipsecTunnelOutboundSpi1 1000 + # testvar ipsecTunnelOutEncrypt1 des + # testvar ipsecTunnelOutEncryptKey1 0102030405060708 + # testvar ipsecTunnelOutAuth1 md5-hmac + # testvar ipsecTunnelOutAuthKey1 6262626262626262 + # testvar ipsecTunnelInboundSpi1 1001 + # testvar ipsecTunnelInEncrypt1 des + # testvar ipsecTunnelInEncryptKey1 0102030405060708 + # testvar ipsecTunnelInAuth1 md5-hmac + # testvar ipsecTunnelInAuthKey1 6262626262626262 + + } + + SECTION "IKE IPsec Tunnel Configuration" { + + # testvar ipsecTunnelIkeEncrypt1 des + # testvar ipsecTunnelIkeAuth1 md5-hmac + # testvar ipsecTunnelIkeGroup1 1 + # testvar ipsecTunnelIkeLifetime1 300 + # testvar ipsecTunnelEncrypt1 3des + # testvar ipsecTunnelAuth1 sha1-hmac + # testvar ipsecTunnelPfsGroup1 1 + # testvar ipsecTunnelLifetime1 120 + # testvar ipsecTunnelPsk1 qacafe123 + # testvar ipsecTunnelIkeMode1 main + # testvar ipsecTunnelUsesNat1 no + + } + + } + + } + +} + +SECTION "CDRouter IPv6 Add-On" { + + testvar supportsIPv6 yes + + SECTION "IPv6 WAN" { + + testvar ipv6WanMode PPPoE + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001::1 + # testvar ipv6WanIspAssignIp 3001::2 + # testvar ipv6WanIspNextIp 3001::3 + # testvar ipv6WanIspPrefixLen 64 + # testvar ipv6WanDutDuid 00000000 + # testvar ipv6RelayServer 192.88.99.1 + # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 + # testvar ipv6rdPrefix 2001:1234:: + # testvar ipv6rdPrefixLen 32 + # testvar ipv6rdIPv4MaskLen 0 + # testvar ipv6rdDHCPv4Option yes + # testvar ipv6TunnelMtuType static + # testvar ipv6WanMtu 1500 + # testvar ipv6WanMtuOption no + # testvar ipv6RASendInterval 10 + # testvar ipv6ExpectRAonWan no + + SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { + + # testvar ipv6WanIspGateway 3001::9 + # testvar ipv6WanAssignPrefixLen 64 + # testvar IPv6HopCount 1 + # testvar dhcpv6RelayServer 3001::9 + + } + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + # testvar ipv6WanRDNSS no + # testvar ipv6WanDNSSL no + + } + + SECTION "DHCPv6 Server" { + + # testvar dhcpv6IAValidLifetime 300 + # testvar dhcpv6IAPreferredLifetime 300 + # testvar dhcpv6DuidType 1 + # testvar dhcpv6RestartLatency 10 + # testvar dhcpv6ServerRapidCommit yes + + # testvar dhcpv6ServerOptionCode1 69 + # testvar dhcpv6ServerOptionData1 04040404 + + # testvar wanDhcpv6ClientOptionCode1 60 + # testvar wanDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Authentication" { + + # testvar supportsDhcpv6Auth no + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: + # testvar dhcpv6WanAssignPrefixLen 48 + # testvar dhcpv6PDLatency 30 + + } + + SECTION "IPv6 NTP" { + + # testvar ipv6NtpServer1 4321::23 + # testvar ipv6NtpServerName1 time.nist.gov + + # testvar ipv6NtpServer2 4321::24 + # testvar ipv6NtpServerName2 time.foo.com + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + testvar ipv6LanIp 3001:dddd::1 + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanPrefixLen 64 + # testvar ipv6MaxLanClients 32 + # testvar ipv6RAInterval 300 + # testvar ipv6LanSubnetId 1 + + SECTION "DHCPv6 Client" { + + # testvar dhcpv6ClientTimeout 5 + # testvar ipv6DhcpClientStart ::2 + # testvar ipv6DhcpClientEnd ::1f + # testvar ipv6DhcpClientExclude "::3 ::7" + # testvar ipv6DhcpClientValidLifetime 86400 + # testvar dhcpv6RapidCommit yes + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + SECTION "IPv6 LAN DNS" { + + # testvar ipv6DNStoLAN yes + # testvar ipv6RdnssSupport yes + # testvar ipv6DnsslSupport yes + # testvar ipv6LanStaticDns no + + } + + SECTION "Unique Local Address (ULA) Options" { + + # testvar supportsULA no + # testvar ipv6LanULAPrefix fd00:: + # testvar ipv6LanULAIp ::%eui64% + # testvar ipv6LanULAMode autoconf + + } + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + } + + SECTION "IPv6 Firewall" { + + # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" + # testvar ipv6FirewallTcpClosedPorts "2323 80" + # testvar ipv6FirewallUdpOpenPorts 1234 + # testvar ipv6FirewallUdpClosedPorts 113 + # testvar ipv6FirewallOutBlockedTcpPorts 1234 + # testvar ipv6FirewallOutBlockedUdpPorts 1234 + # testvar ipv6FirewallOutBlockedIpProtos 0 + # testvar ipv6WanPingRespond no + + SECTION "IPv6 TCP MSS Clamping" { + + # testvar ipv6MssClampingValue default + # testvar ipv6MssClampingInValue default + # testvar ipv6MssClampingTestPort 8096 + + } + + } + + SECTION "IPv6 Advanced Protocols" { + + SECTION "RIPng" { + + # testvar supportsRIPng no + + } + + SECTION "MLD (IPv6 Multicast)" { + + # testvar supportsIPv6Multicast yes + # testvar supportsIPv6MulticastOut no + # testvar mldVersion 2 + # testvar mldMaxGroups 64 + # testvar mldFastLeave no + # testvar ipv6MulticastCacheTimeout 10 + # testvar ipv6MulticastJoinDelay 2 + # testvar ipv6MulticastScaleDelay 1 + + SECTION "MLD Timers" { + + # testvar mldQueryInterval 125 + # testvar mldRobustnessVariable 2 + # testvar mldQueryResponseInterval 10 + + } + + SECTION "IPv6 IPTV Options" { + + # testvar ipv6IptvChannelRange 200 + # testvar ipv6IptvChannelChangeDelay 200 + # testvar ipv6IptvMaxFailures 10 + + } + + } + + } + + SECTION "IPv6 Additional Features" { + + SECTION "IPv6 Free Network Range" { + + # testvar ipv6RemoteHost 3001:051a:cafe::1 + # testvar ipv6FreeNetworkStart 3001:cafe:1:: + # testvar ipv6FreeNetworkPrefixLen 64 + # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: + + } + + SECTION "IPv6 Multicast Pool Ranges" { + + # testvar ipv6MulticastPoolStart ff0e::1 + # testvar ipv6MulticastPoolStop ff0e:ffff:: + # testvar ipv6SSMulticastPoolStart ff3e::8000:1 + # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff + + } + + } + +} + +SECTION "CDRouter Multiport Add-On" { + + SECTION "Additional WAN Interface Setup" { + + # testvar wanFailoverTimeout 300 + + IGNORE testvar_group wan2 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.2.1 + # testvar wanIspAssignIp 202.254.2.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.2.2 + # testvar wanIspNextIp 202.254.2.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.202.1 + # testvar pptpClientIp 202.254.202.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.202.1 + # testvar l2tpClientIp 202.254.202.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.102.1 + # testvar wanBackupDnsServer 202.254.102.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:2::1 + # testvar ipv6WanIspAssignIp 3001:0:0:2::2 + # testvar ipv6WanIspNextIp 3001:0:0:2::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + IGNORE testvar_group wan3 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.3.1 + # testvar wanIspAssignIp 202.254.3.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.3.2 + # testvar wanIspNextIp 202.254.3.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.203.1 + # testvar pptpClientIp 202.254.203.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.203.1 + # testvar l2tpClientIp 202.254.203.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.103.1 + # testvar wanBackupDnsServer 202.254.103.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:3::1 + # testvar ipv6WanIspAssignIp 3001:0:0:3::2 + # testvar ipv6WanIspNextIp 3001:0:0:3::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + } + + SECTION "Additional LAN Interface Setup" { + + # testvar useSameLanInterface no + + IGNORE testvar_group lan2 { + + SECTION "IPv4 LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanGuestMode no + + SECTION "LAN Host IP" { + + # testvar hostIp 192.168.1.0 + # testvar hostMask 255.255.255.0 + # testvar hostGateway 192.168.1.1 + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "DHCP Client Configuration" { + + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + # testvar dhcpExtraClientParams "69 70" + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Configuration Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + } + + SECTION "IPv4 Firewall and NAT" { + + SECTION "Static NAT" { + + # testvar staticNatIp 202.254.1.2 + # testvar staticNatFirewall yes + # testvar natMode port-restricted + + } + + SECTION "Special Application Port Triggers" { + + # testvar portTriggers no + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "TCP and UDP Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanStaticDns no + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + + SECTION "LAN IPv6 DHCP Client" { + + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + + } + + } + +} + +SECTION "CDRouter Performance Add-On" { + + # testvar supportsPerformance no + + SECTION "Basic Configuration" { + + # testvar perfWanIp 202.254.1.4 + # testvar perfWanIpv6 3001::4 + # testvar perfPort 19750 + # testvar perfPort2 19751 + + } + + SECTION "Performance Settings" { + + # testvar perfDuration 10 + # testvar perfDownloadBandwidth 0.0 + # testvar perfInterval auto + # testvar perfIncrement 5 + # testvar perfStreams 1 + # testvar perfStreamIncr 0 + # testvar perfUdpLen auto + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + # testvar perfOmit 0 + # testvar perfDSCP 0 + # testvar perfFairness no + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresholds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + SECTION "Advanced Options" { + + # testvar perfPingEnable no + # testvar perfEnableCapture no + # testvar perfLatencyAttempts 25 + # testvar perfApplicationAttempts 4 + # testvar perfApplicationDelay 100 + + } + + SECTION "Wireless" { + + IGNORE testvar_group wireless-performance { + + SECTION "Performance Settings" { + + # testvar perfDownloadBandwidth 0.0 + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresolds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + } + + } + +} + +SECTION "CDRouter Security Add-On" { + + SECTION "Internet Connection Sharing (ICS)" { + + # testvar enableICS no + # testvar icsInterface eth0 + # testvar icsShareIPv4 yes + # testvar icsShareIPv6 yes + + } + + SECTION "Traffic Analysis" { + + # testvar enableSuricata no + + } + + SECTION "Nmap Scans" { + + # testvar enableNmap no + # testvar nmapPorts 0-65535 + # testvar nmapScanTimeout 600 + # testvar nmapTimingTemplate 5 + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleBase auto + # testvar internetScheduleTimeZone auto + # testvar internetScheduleBlockedText "This website is blocked" + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + +} + +SECTION "CDRouter SNMP Add-On" { + + # testvar supportsSnmp no + + # testvar snmpPort 161 + # testvar snmpDefaultUser auto + # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" + # testvar snmpUpdateDelay 15 + + SECTION "SNMP Options and Users" { + + # testvar snmpManagerIp 3.3.3.33 + # testvar snmpManagerIpv6 3001:051a:cafe::33 + + IGNORE testvar_group snmpuser1 { + + # testvar snmpVersion 2c + + # testvar snmpAccess read-only + # testvar snmpTransport udp + # testvar snmpRetries 5 + # testvar snmpTimeout 5 + + SECTION "SNMP v1/2c Configuration" { + + # testvar snmpCommunity public + + } + + SECTION "SNMP v3 Configuration" { + + # testvar snmpSecurityLevel noAuthNoPriv + + # testvar snmpAuthProtocol MD5 + # testvar snmpAuthUsername qacafe + # testvar snmpAuthPassword qacafe123 + + # testvar snmpPrivacyProtocol DES + # testvar snmpPrivacyPassword qacafe123 + + # testvar snmpContextName bridge1 + # testvar snmpSecurityEngineId 800000020109840301 + # testvar snmpContextEngineId 800000020109840301 + + } + + } + + } + + SECTION "SNMP Scenarios" { + + # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp + # testvar snmpScenarioSingleMode no + # testvar snmpScenarioInterface lan + # testvar snmpScenarioIpVersion IPv4 + + } + +} + +SECTION "CDRouter Storage Add-On" { + + # testvar supportsStorage no + + # testvar storageFileSize 10 + # testvar storageUserFilePath none + # testvar useMulticastDNS no + + SECTION "SMB Options and Users" { + + # testvar supportsStorageSmb yes + # testvar storageSmbMaxSessions 20 + # testvar storageSmbTimeout 120 + # testvar storageSmbPacing 0 + + IGNORE testvar_group smbuser1 { + + # testvar server MyNAS + # testvar share data + # testvar folder /home/qacafe + # testvar guest no + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + + SECTION "FTP Options and Users" { + + # testvar supportsStorageFtp yes + # testvar supportsStorageFtps yes + # testvar storageFtpMaxSessions 20 + # testvar storageFtpTimeout 120 + # testvar storageFtpPacing 0 + + IGNORE testvar_group ftpuser1 { + + # testvar server MyNAS + # testvar path /home/qacafe + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + +} + +SECTION "CDRouter TR-069 Add-On" { + + testvar supportsCWMP yes + + SECTION "Basic ACS Configuration" { + + # testvar acsIp 6.0.0.1 + # testvar acsPort 80 + testvar acsDomain acs-download.qacafe.com + # testvar acsTransport http + # testvar acsAuth digest + # testvar acsDigestQopAuth yes + # testvar acsInterface wan + testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ + # testvar acsWaitForInform 120 + # testvar acsSkipInitialInform no + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar cwmpProtocolVersion 1.0 + # testvar acsDeviceDiscovery no + # testvar acsConfigurePeriodicInform yes + # testvar tr69InitiateConnection yes + testvar acsDefaultUser cdrouter + testvar acsDefaultPassword cdrouter + testvar acsCpeDefaultUser acs + testvar acsCpeDefaultPassword acs + # testvar acsFileServerUser file_server_user + # testvar acsFileServerPassword file_server_password + + } + + SECTION "XMPP Connection Request Configuration" { + + # testvar acsSupportsXmppConnReq no + + # testvar acsXmppServerConnectAlgorithm DNS-SRV + # testvar acsXmppConnReqUsername qacafe + # testvar acsXmppConnReqResource cdrouter + # testvar acsXmppConnReqPassword qacafe123 + # testvar acsXmppConnReqUseTls no + + } + + SECTION "Advanced ACS Configuration" { + + # testvar acsCpeKeepAlive yes + # testvar acsChunkedEncoding no + # testvar acsChunkSize 64 + # testvar acsAuthOncePerSession no + # testvar acsCookieMode rfc6265 + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + # testvar acsNumberCpeAttempts 2 + # testvar acsDelayCpeAttempts 10 + # testvar acsWaitForConnectionRequest yes + # testvar acsUseTcpOffload yes + # testvar acsTargetDevice tr069_device2 + # testvar acsDualStackIp 6000::1 + # testvar acsStrictSyntaxChecking on + + } + + SECTION "SSL Configuration" { + + # testvar acsSslVersion tls + # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem + # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem + # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsCipherSuite auto + # testvar acsClientCaCertPath /path/to/client/ca/file + + } + + SECTION "Profiles" { + + # testvar cwmpSupportedDataModel auto + # testvar cwmpDataValidation yes + # testvar cwmpSkipParameters empty + # testvar cwmpModifyParameters empty + # testvar cwmpVendorSpecificParams none + + SECTION "Custom CWMP Profiles" { + + IGNORE testvar_group cwmp_profile1 { + + # testvar cwmpProfileName myVendorParameters + # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp + # testvar cwmpProfileObject InternetGatewayDevice:1 + + } + + } + + } + + SECTION "CWMP Scenarios" { + + # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp + # testvar cwmpScenarioSingleMode no + # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp + + } + + SECTION "Additional TR-069 Options" { + + # testvar tr69DeviceType IGD + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69InformTimeout 120 + # testvar tr69MinPeriodicInform 60 + # testvar tr69ScheduleInformRPC yes + # testvar tr69UploadRPC no + # testvar tr69UploadPath /tmp + # testvar tr69ConfigUploadFilename vendor_configuration_file + # testvar tr69LogUploadFilename vendor_log_file + # testvar tr69FactoryResetRPC no + # testvar tr69CpeGetRPCs no + # testvar tr69ForceBoolean no + # testvar tr69XMLCapturePath /tmp/tr69-xml + # testvar tr69DownloadTimeout 600 + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadImageVersion 1.0 + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69RebootTimeout 300 + # testvar tr69RpcTimeout 180 + # testvar tr69DownloadConfig /path/to/config + # testvar tr69MaxUserNameLen 256 + # testvar tr69MaxPasswordLen 256 + # testvar tr69MaxCpeUserNameLen 256 + # testvar tr69MaxCpePasswordLen 256 + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DUInstallImageVersion 1.0 + # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image + # testvar tr69DUInstallImageAlternateVersion 1.0 + # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb + # testvar tr69DUChangeExecEnvRef openwrt + # testvar tr69DUChangeTimeout 600 + # testvar tr69WildcardPortMappingOnly no + # testvar tr69PortMapDeletionDelay 15 + # testvar tr69PortMapCreationDelay 0 + # testvar tr69PortMapDisableDelay 15 + # testvar tr69TraceRouteTimeout 120 + + } + + SECTION "TR-111 Parts 1 and 2" { + + # testvar supportsTr111Part1 yes + # testvar supportsTr111Part2 no + # testvar STUNMaximumKeepAlivePeriod 60 + # testvar STUNMinimumKeepAlivePeriod 60 + # testvar STUNAuth no + # testvar STUNUsername qacafe + # testvar STUNPassword qacafe123 + # testvar acsUdpConnectionDelay 0 + + } + + SECTION "TR-143 Performance Tests" { + + # testvar tr143HttpDownloadSize 1000000 + # testvar tr143HttpUploadSize 1000000 + + # testvar tr143HttpDownloadHighThreshold 0.0 + # testvar tr143HttpDownloadLowThreshold 5.0 + # testvar tr143HttpDownloadResponseMax 60 + + # testvar tr143HttpUploadHighThreshold 0.0 + # testvar tr143HttpUploadLowThreshold 5.0 + # testvar tr143HttpUploadResponseMax 60 + + } + + SECTION "TR-069 LAN Side Devices" { + + IGNORE testvar_group tr069_device2 { + + # testvar acsDefaultUser qacafe + # testvar acsDefaultPassword qacafe123 + # testvar acsCpeDefaultUser qacafe + # testvar acsCpeDefaultPassword qacafe123 + # testvar acsCreatePortMapOnIGD no + # testvar acsPortMapPublicPort 20000 + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69DeviceType IGD + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DownloadConfig /path/to/config + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + + } + + } + +} + +SECTION "CDRouter USP Add-On" { + + # testvar supportsUSP no + + SECTION "Basic Controller Configuration" { + + # testvar uspControllerID proto::controller-id + # testvar uspControllerInterface wan + + # testvar uspControllerIpMode ipv4-only + # testvar uspControllerIpv4 6.0.0.2 + # testvar uspControllerIpv6 6000::2 + # testvar uspControllerPort auto + # testvar uspControllerPath /controller-path + + # testvar uspControllerUseNonPayloadProtection no + # testvar uspControllerUseSessionContext no + # testvar uspControllerMTP websocket + # testvar uspControllerMTPEncryption no + # testvar uspControllerUSPEncryption no + # testvar uspControllerDomain controller.cdroutertest.com + + # testvar uspSegmentationEnable no + # testvar uspSegmentationSize auto + + # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + + # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + + # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerVerifyRecordIntegrity no + + # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem + + # testvar uspControllerHost any + # testvar uspControllerUsername qacafe + # testvar uspControllerPassword qacafe123 + + } + + SECTION "Basic Agent Configuration" { + + # testvar uspAgentID proto::agent-id + + # testvar uspAgentIpv4 auto + # testvar uspAgentIpv6 auto + # testvar uspAgentPort auto + # testvar uspAgentPath /agent-path + + # testvar uspMessageTimeout 30 + # testvar uspNotificationTimeout 30 + # testvar uspRebootTimeout 120 + + } + + SECTION "USP Scenarios" { + + # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp + # testvar uspScenarioSingleMode no + # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp + + } + + SECTION "Data Model" { + + # testvar uspSkipParameters empty + # testvar uspModifyParameters empty + # testvar uspSupportedDataModel all + + SECTION "Custom USP Data Model" { + + IGNORE testvar_group usp_profile_1 { + + # testvar uspProfileName myVendorParameters + # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml + + } + + } + + } + + SECTION "USP Agent Data Model Configuration" { + + # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + + # testvar uspParameterPath1 Device.DeviceInfo.ModelName + # testvar uspParameterPath2 Device.IP.Interface.3.Enable + # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory + # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode + + # testvar uspNotificationParamNewValue myCustomParameterValue + + # testvar uspObject1 Device.IP.Interface. + # testvar uspObject2 Device.WiFi.AccessPoint. + + # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} + # testvar uspValidSearchPathResultParam PeriodicNotifInterval + # testvar uspValidSearchPathResultValue 5000 + + # testvar uspFirmwareImage /path/to/firmware.bin + # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin + # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 + + } + +} + +SECTION "CDRouter BBF.069 Add-On" { + + # testvar supportsBBF069 yes + + SECTION "General" { + + SECTION "ACS URL" { + + # testvar bbf069ACSURL http://acs1.broadband-forum.org + # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org + + } + + SECTION "Security Certificates" { + + # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem + # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem + # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem + # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem + # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem + # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem + + } + + SECTION "HTTP Verification" { + + # testvar bbf069HTTPVerification no + + } + + } + + SECTION "Device Specific" { + + SECTION "General" { + + # testvar bbf069RootDataModel InternetGatewayDevice + # testvar bbf069UnsupportedRPC ChangeDUState + # testvar bbf069UploadType "1 Vendor Configuration File" + # testvar bbf069ExpectedUpgradeTime 100 + + } + + SECTION "Data Model" { + + # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069ActiveParamType unsignedInt + # testvar bbf069ActiveParamValue 60 + + # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069CompletePath1Type unsignedInt + # testvar bbf069CompletePath1Value 73 + + # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable + # testvar bbf069CompletePath2Type boolean + # testvar bbf069CompletePath2Value true + + # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. + # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. + # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv + # testvar bbf069InvalidPathType unsignedInt + + # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer + # testvar bbf069UnwritableType string + # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 + + } + + } + +} diff --git a/.testbed/cdrouter/configurations/vlan b/.testbed/cdrouter/configurations/vlan new file mode 100644 index 0000000000..4591acf847 --- /dev/null +++ b/.testbed/cdrouter/configurations/vlan @@ -0,0 +1,2677 @@ +SECTION "About" { + + # Cable/DSL Router Test Suite + # + # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 + # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) + # + # Local.conf + # + # This is the main configuration file for CDRouter. This file defines the + # configuration of the router under test and controls various aspects of + # CDRouter's behavior. This file consists of a number of unique test variables + # called 'testvars' which are grouped by interface, protocol, or functionality. + # The basic syntax for all testvars is: + # + # testvar NAME VALUE + +} + +SECTION "Base Configuration" { + + SECTION "WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.1.1 + # testvar wanIspAssignIp 202.254.1.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.1.2 + # testvar wanIspNextIp 202.254.1.3 + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar wanIspAssignMask 255.255.255.0 + # testvar IPv4HopCount 1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + # testvar dhcpServerRapidCommit yes + # testvar dhcpServerClientIDBehavior rfc6842 + # testvar dhcpServerResponseDelay 4500 + # testvar dhcpConnectOnDemand no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar wanDhcpClientOptionCode1 60 + # testvar wanDhcpClientOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "DHCP Authentication" { + + # testvar supportsDhcpAuth no + + } + + SECTION "PPPoE Server" { + + # testvar pppoeConnectOnDemand no + # testvar pppoeIdleTimeout 60 + testvar pppoeUser softathome + testvar pppoePassword softathome + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + # testvar pppoeAcCookie auto + # testvar pppoeMaxPayload none + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpConnectOnDemand yes + # testvar pptpServerIp 202.254.201.1 + # testvar pptpClientIp 202.254.201.2 + # testvar pptpUseDHCP no + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpConnectOnDemand yes + # testvar l2tpServerIp 202.254.201.1 + # testvar l2tpClientIp 202.254.201.2 + # testvar l2tpUseDHCP no + + } + + SECTION "DS-Lite" { + + # testvar ipv6DsliteAftr 3001:aaaa::1 + # testvar dhcpv6WanAftrName aftr.qacafe.com + # testvar dsliteFirewallMode address-restricted + + } + + SECTION "MAP / LW4o6" { + + # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: + # testvar mapBmrRuleIpv6PrefixLen 48 + # testvar mapBmrRuleIpv4Prefix 5.0.0.0 + # testvar mapBmrRuleIpv4PrefixLen 24 + # testvar mapBmrRuleEABitLen 16 + + # testvar mapSharingRatio 256 + # testvar mapStartPort 4096 + # testvar mapPsid 255 + + # testvar mapEnableDhcpv6Options yes + + SECTION "MAP-E / LW4o6" { + + # testvar mapTunnelFlowLabel 0 + # testvar mapTunnelHopLimit 64 + # testvar mapTunnelTrafficClass 0 + + } + + SECTION "MAP-T" { + + # testvar mapDmrIpv6Prefix 5001:db8:: + # testvar mapDmrIpv6PrefixLen 48 + + # testvar mapTosTranslate yes + + } + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + # testvar pppConnectionDelay 10 + # testvar pppRestartTimeout 300000 + # testvar pppFailUsesICMP no + + } + + SECTION "WAN 802.1q VLAN" { + + testvar wanVlanId 101 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "Wireless Access Point (AP)" { + + # testvar wanApBand 2.4GHz + # testvar wanApSSID qa-net + # testvar wanApChannel auto + + SECTION "WPA Authenticator" { + + # testvar wanApWpaMode RSN + # testvar wanApWpaKeyMgmt PSK + # testvar wanApWpaCipher CCMP-128 + # testvar wanApWpaGroupCipher auto + # testvar wanApWpaPMF auto + # testvar wanApWpaPsk qacafe123 + # testvar wanApWpaSaePassword "sae secret" + + } + } + + SECTION "WAN 802.1X and RADIUS" { + + SECTION "WAN RADIUS" { + + # testvar wanRadiusEnable no + # testvar wanRadiusInterface wan + # testvar wanRadiusIp 3.3.3.44 + # testvar wanRadiusSecret qacafe123 + # testvar wanRadiusServerAttrType1 200 + # testvar wanRadiusServerAttrData1 04040404 + + } + + SECTION "WAN EAP Settings" { + + # testvar wanEapType eap-md5 + + SECTION "WAN Supplicant Credentials" { + + # testvar wanEapIdentity1 user1 + # testvar wanEapPassword1 qacafe123 + + } + + SECTION "WAN Authentication Options" { + + # testvar wanEapRootCert /usr/cdrouter/tests/root.pem + # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem + # testvar wanEapServerCertPassword qacafe123 + # testvar wanEapFragmentSize 1024 + + } + + } + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.101.1 + # testvar wanBackupDnsServer 202.254.101.2 + # testvar wanBackupDnsServer2 0.0.0.0 + # testvar wanBackupDnsServer3 0.0.0.0 + # testvar DNStoDHCP no + # testvar supportsDnsProxy yes + # testvar supportsDnsCaching yes + # testvar dnsCacheSize 150 + # testvar dnsLookupTimeout 5 + # testvar dnsFailoverAuth "2 4 5" + # testvar dnsFailoverNonAuth "2 4 5" + # testvar dnsFailoverDelay 10 + # testvar dnsFailoverAttempts 20 + # testvar dnsRelayFailover 120 + # testvar dnsForwardServerStatus no + # testvar dnsUsageProfile opportunistic-privacy + # testvar dnsCaptive no + + SECTION "User Configurable DNS Entries" { + + # testvar dnsHostname1 test.qacafe.com + # testvar dnsIp1 5.5.5.5 + + } + + } + + SECTION "HTTP" { + + # testvar supportsHttpProxy yes + # testvar httpProxyIdleTimeout 30 + # testvar httpMaxHeaderCount 200 + + } + + SECTION "NTP" { + + # testvar ntpServer1 3.3.3.6 + # testvar ntpServerName1 time.nist.gov + # testvar ntpServer2 3.3.3.7 + # testvar ntpServerName2 time.foo.com + # testvar ntpStartDate "6/2/2007 11:00 am UTC" + # testvar ntpOffset 0 + # testvar enableRFC868TimeProtocol no + + } + + SECTION "Dynamic DNS" { + + # testvar supportsDynDns no + # testvar dynDnsServerIp 66.37.215.49 + # testvar dynDnsTransport http + # testvar dynDnsHostname test.domain.com + # testvar dynDnsUsername qacafe + # testvar dynDnsPassword qacafe123 + # testvar dynDnsSystem dyndns + # testvar dynDnsMx mail.domain.com + # testvar dynDnsBackMx no + # testvar dynDnsWildcard off + # testvar dynDnsAgent RAS/1.1 + # testvar dynDnsWait 30 + # testvar testDynDnsErrorCode no + # testvar dynDnsServerReturn !yours + + } + + SECTION "WINS Servers" { + + # testvar winsServer1 3.3.3.4 + # testvar winsServer2 3.3.3.5 + + } + + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanDomainName qacafe.com + # testvar lanMtu default + testvar lanHostname prplOS + # testvar lanGuestMode no + + SECTION "ARP Settings" { + + # testvar arpMode strict + # testvar arpSupportGratuitous yes + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + # testvar supportsDnsHostnameCreate no + + } + + SECTION "DHCP Client" { + + # testvar dhcpClientTimeout 5 + # testvar dhcpInform no + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpRapidCommit no + # testvar ipv4MaxLanClients auto + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpCreateDelay 0 + # testvar dhcpReleaseDelay 300 + # testvar dhcpServerMac auto + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + # testvar dhcpClientTrackSeconds no + # testvar dhcpClientRequestNtp no + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + SECTION "DHCP Client Extra Parameters" { + + # testvar dhcpExtraClientParams "69 70" + + } + + SECTION "DHCP Client Extra Options" { + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Hotspot Router Settings" { + + # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% + # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% + + SECTION "Hotspot Clients" { + + # testvar clientLoginName1 client1 + # testvar clientLoginPassword1 admin1 + + } + + SECTION "Advanced Hotspot Settings" { + + # testvar browserLoginProc example_login + # testvar browserLogoutProc example_logout + # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl + + } + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconRsnCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X and RADIUS" { + + SECTION "LAN RADIUS" { + + # testvar enableRADIUSserver yes + # testvar radiusHost remoteHost + # testvar radiusSecret qacafe123 + # testvar radiusServerAttrType1 200 + # testvar radiusServerAttrData1 04040404 + + } + + SECTION "LAN EAP Settings" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + SECTION "LAN Authentication Options" { + + # testvar eapRootCert /usr/cdrouter/tests/root.pem + # testvar eapServerCertPath /usr/cdrouter/tests/server.pem + # testvar eapServerCertPassword qacafe123 + # testvar eapFragmentSize 1024 + # testvar eapTxWhen 60 + # testvar eapQuietPeriod 60 + # testvar eapReAuthMax 2 + # testvar eapSendLogoffFailure yes + # testvar eapReAuthPeriod 0 + + } + + } + + } + + SECTION "LAN 802.1q VLAN" { + + testvar lanVlanId 201 + # testvar lanVlanPriority 0 + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "Firewall and NAT" { + + SECTION "NAT Options" { + + # testvar natSimultaneousTcp no + # testvar natSrcPort0 yes + # testvar natSupportsP2P yes + # testvar natPortParity yes + # testvar natMode port-restricted + # testvar natVerifyIpId yes + # testvar defaultTcpEchoPort 50000 + # testvar defaultUdpEchoPort 50000 + # testvar natRefreshBehavior both + + SECTION "NAT Timers" { + + # testvar natFinTimeout disabled + # testvar natRstTimeout disabled + # testvar natTcpTimeout disabled + # testvar natSynTimeout disabled + # testvar natUdpTimeout disabled + # testvar natDnsTimeout disabled + # testvar natIcmpTimeout disabled + # testvar natRtspTimeout disabled + # testvar natLagTime 0 + + } + + } + + SECTION "Protocol Pass Through" { + + SECTION "IPSEC Pass Through" { + + # testvar supportsIPSECpass yes + # testvar ipsecMaxTunnels 20 + # testvar ipsecScaleSameServer no + # testvar alwaysUseIke no + # testvar ipsecPassRetransmit no + # testvar unknownPassthrough yes + + } + + SECTION "PPTP Pass Through" { + + # testvar supportsPPTPpass yes + # testvar pptpMaxTunnels 20 + + } + + SECTION "L2TP Pass Through" { + + # testvar supportsL2TPpass yes + # testvar l2tpMaxTunnels 20 + + } + + SECTION "PPPoE Pass Through" { + + # testvar supportsPPPoEpass no + + } + + } + + SECTION "Port Triggers" { + + # testvar portTriggers no + # testvar portTriggerTimeout 0 + # testvar portTriggerDelay 0 + # testvar portTriggerOpenDelay 0 + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "Application Layer Gateways (ALGs)" { + + SECTION "MSN Messenger" { + + # testvar supportsMsnAlg no + # testvar msnNotificationServerPort 1863 + # testvar msnSwitchBoardServerPort 1863 + + } + + SECTION "RTSP" { + + # testvar supportsRtspAlg no + # testvar rtspTeardownDelay 5 + # testvar rtspGetParameterInterval 5 + + } + + SECTION "SIP" { + + # testvar supportsSipAlg yes + # testvar sipInterface wan + # testvar sipServerIp 3.3.3.8 + # testvar ipv6SipServerIp 3001:051a:cafe::4 + # testvar sipCallTeardownDelay 5 + # testvar sipMaxOutboundCalls 10 + # testvar sipMaxInboundCalls 10 + # testvar sipCallPacing 0 + # testvar sipScaleRunTime 30 + # testvar sipScaleServerPort 5060 + # testvar sipScaleClientPort 5060 + # testvar sipMaxUserNames -1 + # testvar rtpSendInterval 5000 + + } + + SECTION "FTP" { + + # testvar ftpPortTimeout 120 + + } + + } + + SECTION "Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + SECTION "Port Scanning, Firewall and DoS Options" { + + # testvar portScanStart 0 + # testvar portScanStop 65535 + # testvar portScanDelay 1 + testvar firewallTcpOpenPorts "50805" + # testvar firewallTcpClosedPorts 2323 + # testvar firewallUdpOpenPorts 1234 + testvar firewallUdpClosedPorts 68 + # testvar firewallOutBlockedTcpPorts 1234 + # testvar firewallOutBlockedUdpPorts 1234 + # testvar firewallOutBlockedIpProtos 0 + # testvar wanPingRespond no + + SECTION "Denial of Service Options" { + + # testvar dosRecoveryTime 5 + # testvar dosAttackAttempts 100 + # testvar dutMgmtPort 80 + # testvar dutSecureMgmtPort disabled + # testvar dosSynAttackPort 80 + # testvar dosSynAttackAttempts 100 + + } + + SECTION "Deprecated SSL Protocols and Ciphers" { + + # testvar sslDeprecatedProtocols "sslv2 sslv3" + # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" + + } + + } + + SECTION "DMZ" { + + # testvar lanDmzHost 192.168.1.253 + # testvar lanDmzTcpPortExceptions 113 + # testvar lanDmzUdpPortExceptions 1234 + # testvar lanDmzIpProtoExceptions 2,47 + # testvar lanDmzSupportsIcmp no + + } + + SECTION "URL Filtering" { + + # testvar urlFilterSupported no + # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" + # testvar non-filtered-urls http://qacafe.com + # testvar urlFilterBlockedText "This website is blocked" + + } + + SECTION "XBox Live Options" { + + # testvar xboxNatMinType open + # testvar xboxPort 3074 + # testvar xboxMtu 1364 + + } + + } + + SECTION "Advanced Protocols" { + + SECTION "RIP v1/v2" { + + # testvar ripSupported no + # testvar ripVersion 1 + # testvar ripV2mode multicast + # testvar ripAuthMode none + # testvar ripPassword qacafe123 + # testvar ripMaxRoutes 96 + # testvar ripRouteTimeout 180 + # testvar ripGarbageTimeout 120 + # testvar ripRouteDelay 5000 + # testvar ripAcceptWanUpdate no + + } + + SECTION "UPnP" { + + # testvar upnpSupported yes + # testvar upnpVersion 1.1 + # testvar upnpDevice InternetGatewayDevice:2 + # testvar upnpWANPPPConnection no + # testvar upnpLANDevice no + # testvar upnpMaxTcpMappings 10 + # testvar upnpMaxSubClients 10 + # testvar upnpMinSubTimeout 40 + # testvar upnpMaxSubTimeout 3600 + # testvar upnpWANFailureTimeout 120 + # testvar upnpPortStart 40000 + # testvar upnpPortStop 50000 + + } + + SECTION "LLDP" { + + # testvar supportsLLDP no + # testvar lldpLanMac none + # testvar lldpLanChassisMac auto + # testvar lldpMsgFastTx 1 + # testvar lldpMsgTxInterval 30 + # testvar lldpTxFastInit 4 + + } + + SECTION "IGMP (Multicast)" { + + # testvar supportsMulticast yes + # testvar multicastType proxy + # testvar supportsMulticastOut no + # testvar igmpVersion 2 + # testvar igmpFastLeave no + # testvar igmpRouterOption yes + # testvar igmpMaxGroups 64 + # testvar multicastCacheTimeout 10 + # testvar multicastPoolStart 224.0.1.0 + # testvar multicastPoolStop 239.255.255.255 + # testvar SSMulticastPoolStart 232.0.1.1 + # testvar SSMulticastPoolStop 232.0.1.255 + # testvar multicastJoinDelay 2 + # testvar multicastScaleDelay 1 + # testvar multicastInterface wan + # testvar multicastBypassPPPoE no + + SECTION "IGMP Timers" { + + # testvar igmpQueryInterval 125 + # testvar igmpRobustnessVariable 2 + # testvar igmpQueryResponseInterval 10 + + } + + SECTION "IPTV Options" { + + # testvar iptvChannelRange 200 + # testvar iptvChannelChangeDelay 200 + # testvar iptvMaxFailures 10 + + } + + } + + SECTION "GRE Tunnels" { + + # testvar greDFflag on + + IGNORE testvar_group greTunnel1 { + + SECTION "Generic IPv4 GRE Tunnel Endpoints" { + + # testvar greType IPv4 + # testvar greEndpoint 5.5.5.5 + # testvar greLocalNet 192.168.1.0 + # testvar greLocalMask 255.255.255.0 + + } + + SECTION "L2GRE Options" { + + # testvar greWanGroup wan2 + + } + + SECTION "L3GRE Remote IPv4 Network" { + + # testvar greHost 3.0.0.1 + # testvar greRemoteNet 3.0.0.0 + # testvar greRemoteMask 255.0.0.0 + + } + + } + + } + + } + + SECTION "Additional Features" { + + # testvar supportsIPv4 yes + # testvar internalSmtpServer 5.5.5.5 + # testvar remoteHostIp 3.3.3.3 + # testvar startOtherLanFirst no + # testvar cdrouterOui B0750C + # testvar forwardingMaxFailures 20 + # testvar forwardingPort 5001 + # testvar jumboMtu disabled + # testvar tcpUdpPortStart 10000 + + SECTION "General Purpose HTTP Server" { + + # testvar httpServerIp 3.3.3.16 + # testvar httpServerPort 80 + # testvar httpServerRoot /tmp + + } + + SECTION "Free Network Range" { + + # testvar FreeNetworkStart 200.0.0.0 + # testvar FreeNetworkMask 255.255.255.0 + # testvar FreeNetworkStop 201.0.0.0 + + } + + SECTION "TCP MSS Clamping" { + + # testvar mssClampingValue default + # testvar mssClampingInValue default + + } + + SECTION "TCP/UDP Scaling Options" { + + # testvar scaleTcpConnsPerHost 5 + # testvar natMaxTcpConns 200 + # testvar natMaxUdpConns 100 + + } + + SECTION "Global Wireless Options" { + + # testvar wirelessRetry 3 + # testvar lanWirelessMaxClients auto + # testvar wifiCapture off + # testvar wifiCaptureFilter {} + + } + + } + + SECTION "Test Execution Options and Auto-Reboot" { + + # testvar startDelay 3 + # testvar lanStartDelay 3 + # testvar startTimeout 90 + # testvar wanCloseOnExit yes + # testvar RestartDut none + # testvar RestartDutDelay disabled + # testvar ShutdownDut "echo -n" + # testvar cpeRebootMode skip + # testvar healthCheckEnable no + + } + +} + +SECTION "CDRouter DOCSIS Add-On" { + + # testvar supportsDocsis no + + SECTION "Basic Configuration" { + + # testvar docsisIpProvisioningMode ipv4-only + # testvar docsisBootDelay 30 + + # testvar docsisClientMac auto + + } + + SECTION "IPv4 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIp 10.10.10.1 + # testvar docsisMask 255.255.255.0 + + } + + SECTION "DHCPv4 Server" { + + # testvar docsisDhcpServer 10.10.10.3 + # testvar docsisAssignIp 10.10.10.2 + # testvar docsisDomain docsis.qacafe.com + # testvar docsisDhcpLeaseTime 300 + # testvar docsisDhcpRapidCommit no + + # testvar docsisDhcpServerOptionCode1 69 + # testvar docsisDhcpServerOptionData1 04040404 + + # testvar docsisDhcpClientOptionCode1 60 + # testvar docsisDhcpClientOptionData1 04040404 + + SECTION "DHCPv4 Relay" { + + # testvar docsisGateway 6.6.6.7 + # testvar docsisAssignGateway 6.6.6.6 + # testvar docsisAssignMask 255.255.255.0 + # testvar docsisDhcpRelayServer 6.6.6.7 + + } + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogServer 10.10.10.5 + # testvar docsisTimeServer 10.10.10.6 + # testvar docsisTftpServer 10.10.10.4 + + } + + } + + SECTION "IPv6 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIpv6 8001::1 + # testvar docsisIpv6PrefixLen 64 + + } + + SECTION "DHCPv6 Server" { + + # testvar docsisDhcpIpv6Server 8001::3 + # testvar docsisAssignIpv6 8001::2 + # testvar docsisDHCPv6PreferredLifetime 300 + # testvar docsisDHCPv6ValidLifetime 300 + # testvar docsisDhcpv6RapidCommit no + + # testvar docsisDhcpv6ServerOptionCode1 69 + # testvar docsisDhcpv6ServerOptionData1 04040404 + + # testvar docsisDhcpv6ClientOptionCode1 60 + # testvar docsisDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Relay" { + + # testvar docsisIpv6Gateway 9001::1 + # testvar docsisAssignIpv6PrefixLen 64 + # testvar docsisDhcpv6RelayServer 9001::1 + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogIpv6Server 8001::5 + # testvar docsisTimeIpv6Server 8001::6 + # testvar docsisTftpIpv6Server 8001::4 + + } + + } + + SECTION "CM Config File" { + + SECTION "Global TFTP Settings" { + + # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp + # testvar docsisTftpBootFile auto-docsis.bin + + } + + SECTION "Embedded Config File" { + + # testvar docsisConfig { + # Main + # { + # NetworkAccess 1; + # BaselinePrivacy + # { + # AuthTimeout 10; + # ReAuthTimeout 10; + # AuthGraceTime 600; + # OperTimeout 1; + # ReKeyTimeout 1; + # TEKGraceTime 600; + # AuthRejectTimeout 60; + # SAMapWaitTimeout 1; + # SAMapMaxRetries 4; + # } + # MaxCPE 3; + # UsServiceFlow + # { + # UsServiceFlowRef 2; + # QosParamSetType 7; + # } + # DsServiceFlow + # { + # DsServiceFlowRef 1; + # QosParamSetType 7; + # } + # SNMPv1v2cCoexistenceConfig + # { + # SNMPv1v2cCommunityName "public"; + # SNMPv1v2cTransportAddressAccess + # { + # SNMPv1v2cTransportAddress 0.0.0.0/0; + # SNMPv1v2cTransportAddressMask 0.0.0.0/0; + # } + # SNMPv1v2cAccessViewType 2; + # SNMPv1v2cAccessViewName "docsisManagerView"; + # } + # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ + # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ + # /*EndOfDataMkr*/ + # } + # } + + } + + SECTION "Vendor Defined Config File" { + + # testvar docsisConfigFile none + + } + + } + + SECTION "CM Firewall Configuration" { + + SECTION "IPv4" { + + # testvar docsisTcpOpenPorts "22 443" + # testvar docsisTcpClosedPorts all + # testvar docsisUdpOpenPorts 1234 + # testvar docsisUdpClosedPorts all + + } + + SECTION "IPv6" { + + # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" + # testvar docsisIpv6TcpClosedPorts "2323 80" + # testvar docsisIpv6UdpOpenPorts 1234 + # testvar docsisIpv6UdpClosedPorts 113 + + } + + } + +} + +SECTION "CDRouter HomeKit Add-On" { + + # testvar supportsHomeKit no + + # testvar homeKitRouterName "HomeKit Router" + # testvar homeKitHATHostname hat.local + # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ + # testvar homeKitRouterSetupCode + + # testvar homeKitManualEnabled yes + +} + +SECTION "CDRouter IKE Add-On" { + + SECTION "Global IKE Options" { + + # testvar ikeMaxPhase2SA 20 + # testvar ikeDeadPeerDetection no + # testvar ikeNewQuickModeDelay 1000 + # testvar ikeKeepAlive 20 + # testvar ikeMinimumLifetime 20 + # testvar ipsecMinimumLifetime 20 + # testvar ikePhase2DeleteDelay 100 + # testvar ikeMaxTransforms 21 + # testvar ikeInitialContact yes + # testvar ikeBringUpTunnels yes + # testvar ikeAlwaysInitiate no + # testvar useSameIpsecTunnel no + # testvar ikeNatTraversal no + # testvar ike_FQDN fqdn-test.cdrouter.com + # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com + + } + + SECTION "IPsec Tunnel Configurations" { + + SECTION "IPsec Tunnel Configuration 1" { + + # testvar ipsecTunnelKeyType1 manual + # testvar ipsecTunnelEndpoint1 5.0.0.1 + # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 + # testvar ipsecTunnelRemoteMask1 255.255.255.0 + # testvar ipsecTunnelHost1 5.0.0.2 + + SECTION "Manual IPsec Tunnel Configuration" { + + # testvar ipsecTunnelOutboundSpi1 1000 + # testvar ipsecTunnelOutEncrypt1 des + # testvar ipsecTunnelOutEncryptKey1 0102030405060708 + # testvar ipsecTunnelOutAuth1 md5-hmac + # testvar ipsecTunnelOutAuthKey1 6262626262626262 + # testvar ipsecTunnelInboundSpi1 1001 + # testvar ipsecTunnelInEncrypt1 des + # testvar ipsecTunnelInEncryptKey1 0102030405060708 + # testvar ipsecTunnelInAuth1 md5-hmac + # testvar ipsecTunnelInAuthKey1 6262626262626262 + + } + + SECTION "IKE IPsec Tunnel Configuration" { + + # testvar ipsecTunnelIkeEncrypt1 des + # testvar ipsecTunnelIkeAuth1 md5-hmac + # testvar ipsecTunnelIkeGroup1 1 + # testvar ipsecTunnelIkeLifetime1 300 + # testvar ipsecTunnelEncrypt1 3des + # testvar ipsecTunnelAuth1 sha1-hmac + # testvar ipsecTunnelPfsGroup1 1 + # testvar ipsecTunnelLifetime1 120 + # testvar ipsecTunnelPsk1 qacafe123 + # testvar ipsecTunnelIkeMode1 main + # testvar ipsecTunnelUsesNat1 no + + } + + } + + } + +} + +SECTION "CDRouter IPv6 Add-On" { + + # testvar supportsIPv6 no + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001::1 + # testvar ipv6WanIspAssignIp 3001::2 + # testvar ipv6WanIspNextIp 3001::3 + # testvar ipv6WanIspPrefixLen 64 + # testvar ipv6WanDutDuid 00000000 + # testvar ipv6RelayServer 192.88.99.1 + # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 + # testvar ipv6rdPrefix 2001:1234:: + # testvar ipv6rdPrefixLen 32 + # testvar ipv6rdIPv4MaskLen 0 + # testvar ipv6rdDHCPv4Option yes + # testvar ipv6TunnelMtuType static + # testvar ipv6WanMtu 1500 + # testvar ipv6WanMtuOption no + # testvar ipv6RASendInterval 10 + # testvar ipv6ExpectRAonWan no + + SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { + + # testvar ipv6WanIspGateway 3001::9 + # testvar ipv6WanAssignPrefixLen 64 + # testvar IPv6HopCount 1 + # testvar dhcpv6RelayServer 3001::9 + + } + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + # testvar ipv6WanRDNSS no + # testvar ipv6WanDNSSL no + + } + + SECTION "DHCPv6 Server" { + + # testvar dhcpv6IAValidLifetime 300 + # testvar dhcpv6IAPreferredLifetime 300 + # testvar dhcpv6DuidType 1 + # testvar dhcpv6RestartLatency 10 + # testvar dhcpv6ServerRapidCommit yes + + # testvar dhcpv6ServerOptionCode1 69 + # testvar dhcpv6ServerOptionData1 04040404 + + # testvar wanDhcpv6ClientOptionCode1 60 + # testvar wanDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Authentication" { + + # testvar supportsDhcpv6Auth no + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: + # testvar dhcpv6WanAssignPrefixLen 48 + # testvar dhcpv6PDLatency 30 + + } + + SECTION "IPv6 NTP" { + + # testvar ipv6NtpServer1 4321::23 + # testvar ipv6NtpServerName1 time.nist.gov + + # testvar ipv6NtpServer2 4321::24 + # testvar ipv6NtpServerName2 time.foo.com + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + testvar ipv6LanIp 3001:dddd::1 + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanPrefixLen 64 + # testvar ipv6MaxLanClients 32 + # testvar ipv6RAInterval 300 + # testvar ipv6LanSubnetId 1 + + SECTION "DHCPv6 Client" { + + # testvar dhcpv6ClientTimeout 5 + # testvar ipv6DhcpClientStart ::2 + # testvar ipv6DhcpClientEnd ::1f + # testvar ipv6DhcpClientExclude "::3 ::7" + # testvar ipv6DhcpClientValidLifetime 86400 + # testvar dhcpv6RapidCommit yes + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + SECTION "IPv6 LAN DNS" { + + # testvar ipv6DNStoLAN yes + # testvar ipv6RdnssSupport yes + # testvar ipv6DnsslSupport yes + # testvar ipv6LanStaticDns no + + } + + SECTION "Unique Local Address (ULA) Options" { + + # testvar supportsULA no + # testvar ipv6LanULAPrefix fd00:: + # testvar ipv6LanULAIp ::%eui64% + # testvar ipv6LanULAMode autoconf + + } + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + } + + SECTION "IPv6 Firewall" { + + # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" + # testvar ipv6FirewallTcpClosedPorts "2323 80" + # testvar ipv6FirewallUdpOpenPorts 1234 + # testvar ipv6FirewallUdpClosedPorts 113 + # testvar ipv6FirewallOutBlockedTcpPorts 1234 + # testvar ipv6FirewallOutBlockedUdpPorts 1234 + # testvar ipv6FirewallOutBlockedIpProtos 0 + # testvar ipv6WanPingRespond no + + SECTION "IPv6 TCP MSS Clamping" { + + # testvar ipv6MssClampingValue default + # testvar ipv6MssClampingInValue default + # testvar ipv6MssClampingTestPort 8096 + + } + + } + + SECTION "IPv6 Advanced Protocols" { + + SECTION "RIPng" { + + # testvar supportsRIPng no + + } + + SECTION "MLD (IPv6 Multicast)" { + + # testvar supportsIPv6Multicast yes + # testvar supportsIPv6MulticastOut no + # testvar mldVersion 2 + # testvar mldMaxGroups 64 + # testvar mldFastLeave no + # testvar ipv6MulticastCacheTimeout 10 + # testvar ipv6MulticastJoinDelay 2 + # testvar ipv6MulticastScaleDelay 1 + + SECTION "MLD Timers" { + + # testvar mldQueryInterval 125 + # testvar mldRobustnessVariable 2 + # testvar mldQueryResponseInterval 10 + + } + + SECTION "IPv6 IPTV Options" { + + # testvar ipv6IptvChannelRange 200 + # testvar ipv6IptvChannelChangeDelay 200 + # testvar ipv6IptvMaxFailures 10 + + } + + } + + } + + SECTION "IPv6 Additional Features" { + + SECTION "IPv6 Free Network Range" { + + # testvar ipv6RemoteHost 3001:051a:cafe::1 + # testvar ipv6FreeNetworkStart 3001:cafe:1:: + # testvar ipv6FreeNetworkPrefixLen 64 + # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: + + } + + SECTION "IPv6 Multicast Pool Ranges" { + + # testvar ipv6MulticastPoolStart ff0e::1 + # testvar ipv6MulticastPoolStop ff0e:ffff:: + # testvar ipv6SSMulticastPoolStart ff3e::8000:1 + # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff + + } + + } + +} + +SECTION "CDRouter Multiport Add-On" { + + SECTION "Additional WAN Interface Setup" { + + # testvar wanFailoverTimeout 300 + + IGNORE testvar_group wan2 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.2.1 + # testvar wanIspAssignIp 202.254.2.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.2.2 + # testvar wanIspNextIp 202.254.2.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.202.1 + # testvar pptpClientIp 202.254.202.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.202.1 + # testvar l2tpClientIp 202.254.202.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.102.1 + # testvar wanBackupDnsServer 202.254.102.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:2::1 + # testvar ipv6WanIspAssignIp 3001:0:0:2::2 + # testvar ipv6WanIspNextIp 3001:0:0:2::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + IGNORE testvar_group wan3 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.3.1 + # testvar wanIspAssignIp 202.254.3.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.3.2 + # testvar wanIspNextIp 202.254.3.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.203.1 + # testvar pptpClientIp 202.254.203.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.203.1 + # testvar l2tpClientIp 202.254.203.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.103.1 + # testvar wanBackupDnsServer 202.254.103.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:3::1 + # testvar ipv6WanIspAssignIp 3001:0:0:3::2 + # testvar ipv6WanIspNextIp 3001:0:0:3::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + } + + SECTION "Additional LAN Interface Setup" { + + # testvar useSameLanInterface no + + IGNORE testvar_group lan2 { + + SECTION "IPv4 LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanGuestMode no + + SECTION "LAN Host IP" { + + # testvar hostIp 192.168.1.0 + # testvar hostMask 255.255.255.0 + # testvar hostGateway 192.168.1.1 + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "DHCP Client Configuration" { + + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + # testvar dhcpExtraClientParams "69 70" + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Configuration Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + } + + SECTION "IPv4 Firewall and NAT" { + + SECTION "Static NAT" { + + # testvar staticNatIp 202.254.1.2 + # testvar staticNatFirewall yes + # testvar natMode port-restricted + + } + + SECTION "Special Application Port Triggers" { + + # testvar portTriggers no + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "TCP and UDP Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanStaticDns no + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + + SECTION "LAN IPv6 DHCP Client" { + + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + + } + + } + +} + +SECTION "CDRouter Performance Add-On" { + + # testvar supportsPerformance no + + SECTION "Basic Configuration" { + + # testvar perfWanIp 202.254.1.4 + # testvar perfWanIpv6 3001::4 + # testvar perfPort 19750 + # testvar perfPort2 19751 + + } + + SECTION "Performance Settings" { + + # testvar perfDuration 10 + # testvar perfDownloadBandwidth 0.0 + # testvar perfInterval auto + # testvar perfIncrement 5 + # testvar perfStreams 1 + # testvar perfStreamIncr 0 + # testvar perfUdpLen auto + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + # testvar perfOmit 0 + # testvar perfDSCP 0 + # testvar perfFairness no + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresholds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + SECTION "Advanced Options" { + + # testvar perfPingEnable no + # testvar perfEnableCapture no + # testvar perfLatencyAttempts 25 + # testvar perfApplicationAttempts 4 + # testvar perfApplicationDelay 100 + + } + + SECTION "Wireless" { + + IGNORE testvar_group wireless-performance { + + SECTION "Performance Settings" { + + # testvar perfDownloadBandwidth 0.0 + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresolds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + } + + } + +} + +SECTION "CDRouter Security Add-On" { + + SECTION "Internet Connection Sharing (ICS)" { + + # testvar enableICS no + # testvar icsInterface eth0 + # testvar icsShareIPv4 yes + # testvar icsShareIPv6 yes + + } + + SECTION "Traffic Analysis" { + + # testvar enableSuricata no + + } + + SECTION "Nmap Scans" { + + # testvar enableNmap no + # testvar nmapPorts 0-65535 + # testvar nmapScanTimeout 600 + # testvar nmapTimingTemplate 5 + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleBase auto + # testvar internetScheduleTimeZone auto + # testvar internetScheduleBlockedText "This website is blocked" + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + +} + +SECTION "CDRouter SNMP Add-On" { + + # testvar supportsSnmp no + + # testvar snmpPort 161 + # testvar snmpDefaultUser auto + # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" + # testvar snmpUpdateDelay 15 + + SECTION "SNMP Options and Users" { + + # testvar snmpManagerIp 3.3.3.33 + # testvar snmpManagerIpv6 3001:051a:cafe::33 + + IGNORE testvar_group snmpuser1 { + + # testvar snmpVersion 2c + + # testvar snmpAccess read-only + # testvar snmpTransport udp + # testvar snmpRetries 5 + # testvar snmpTimeout 5 + + SECTION "SNMP v1/2c Configuration" { + + # testvar snmpCommunity public + + } + + SECTION "SNMP v3 Configuration" { + + # testvar snmpSecurityLevel noAuthNoPriv + + # testvar snmpAuthProtocol MD5 + # testvar snmpAuthUsername qacafe + # testvar snmpAuthPassword qacafe123 + + # testvar snmpPrivacyProtocol DES + # testvar snmpPrivacyPassword qacafe123 + + # testvar snmpContextName bridge1 + # testvar snmpSecurityEngineId 800000020109840301 + # testvar snmpContextEngineId 800000020109840301 + + } + + } + + } + + SECTION "SNMP Scenarios" { + + # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp + # testvar snmpScenarioSingleMode no + # testvar snmpScenarioInterface lan + # testvar snmpScenarioIpVersion IPv4 + + } + +} + +SECTION "CDRouter Storage Add-On" { + + # testvar supportsStorage no + + # testvar storageFileSize 10 + # testvar storageUserFilePath none + # testvar useMulticastDNS no + + SECTION "SMB Options and Users" { + + # testvar supportsStorageSmb yes + # testvar storageSmbMaxSessions 20 + # testvar storageSmbTimeout 120 + # testvar storageSmbPacing 0 + + IGNORE testvar_group smbuser1 { + + # testvar server MyNAS + # testvar share data + # testvar folder /home/qacafe + # testvar guest no + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + + SECTION "FTP Options and Users" { + + # testvar supportsStorageFtp yes + # testvar supportsStorageFtps yes + # testvar storageFtpMaxSessions 20 + # testvar storageFtpTimeout 120 + # testvar storageFtpPacing 0 + + IGNORE testvar_group ftpuser1 { + + # testvar server MyNAS + # testvar path /home/qacafe + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + +} + +SECTION "CDRouter TR-069 Add-On" { + + testvar supportsCWMP no + + SECTION "Basic ACS Configuration" { + + # testvar acsIp 6.0.0.1 + # testvar acsPort 80 + testvar acsDomain acs-download.qacafe.com + # testvar acsTransport http + # testvar acsAuth digest + # testvar acsDigestQopAuth yes + # testvar acsInterface wan + testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ + # testvar acsWaitForInform 120 + # testvar acsSkipInitialInform no + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar cwmpProtocolVersion 1.0 + # testvar acsDeviceDiscovery no + # testvar acsConfigurePeriodicInform yes + # testvar tr69InitiateConnection yes + testvar acsDefaultUser cdrouter + testvar acsDefaultPassword cdrouter + testvar acsCpeDefaultUser acs + testvar acsCpeDefaultPassword acs + # testvar acsFileServerUser file_server_user + # testvar acsFileServerPassword file_server_password + + } + + SECTION "XMPP Connection Request Configuration" { + + # testvar acsSupportsXmppConnReq no + + # testvar acsXmppServerConnectAlgorithm DNS-SRV + # testvar acsXmppConnReqUsername qacafe + # testvar acsXmppConnReqResource cdrouter + # testvar acsXmppConnReqPassword qacafe123 + # testvar acsXmppConnReqUseTls no + + } + + SECTION "Advanced ACS Configuration" { + + # testvar acsCpeKeepAlive yes + # testvar acsChunkedEncoding no + # testvar acsChunkSize 64 + # testvar acsAuthOncePerSession no + # testvar acsCookieMode rfc6265 + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + # testvar acsNumberCpeAttempts 2 + # testvar acsDelayCpeAttempts 10 + # testvar acsWaitForConnectionRequest yes + # testvar acsUseTcpOffload yes + # testvar acsTargetDevice tr069_device2 + # testvar acsDualStackIp 6000::1 + # testvar acsStrictSyntaxChecking on + + } + + SECTION "SSL Configuration" { + + # testvar acsSslVersion tls + # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem + # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem + # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsCipherSuite auto + # testvar acsClientCaCertPath /path/to/client/ca/file + + } + + SECTION "Profiles" { + + # testvar cwmpSupportedDataModel auto + # testvar cwmpDataValidation yes + # testvar cwmpSkipParameters empty + # testvar cwmpModifyParameters empty + # testvar cwmpVendorSpecificParams none + + SECTION "Custom CWMP Profiles" { + + IGNORE testvar_group cwmp_profile1 { + + # testvar cwmpProfileName myVendorParameters + # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp + # testvar cwmpProfileObject InternetGatewayDevice:1 + + } + + } + + } + + SECTION "CWMP Scenarios" { + + # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp + # testvar cwmpScenarioSingleMode no + # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp + + } + + SECTION "Additional TR-069 Options" { + + # testvar tr69DeviceType IGD + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69InformTimeout 120 + # testvar tr69MinPeriodicInform 60 + # testvar tr69ScheduleInformRPC yes + # testvar tr69UploadRPC no + # testvar tr69UploadPath /tmp + # testvar tr69ConfigUploadFilename vendor_configuration_file + # testvar tr69LogUploadFilename vendor_log_file + # testvar tr69FactoryResetRPC no + # testvar tr69CpeGetRPCs no + # testvar tr69ForceBoolean no + # testvar tr69XMLCapturePath /tmp/tr69-xml + # testvar tr69DownloadTimeout 600 + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadImageVersion 1.0 + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69RebootTimeout 300 + # testvar tr69RpcTimeout 180 + # testvar tr69DownloadConfig /path/to/config + # testvar tr69MaxUserNameLen 256 + # testvar tr69MaxPasswordLen 256 + # testvar tr69MaxCpeUserNameLen 256 + # testvar tr69MaxCpePasswordLen 256 + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DUInstallImageVersion 1.0 + # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image + # testvar tr69DUInstallImageAlternateVersion 1.0 + # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb + # testvar tr69DUChangeExecEnvRef openwrt + # testvar tr69DUChangeTimeout 600 + # testvar tr69WildcardPortMappingOnly no + # testvar tr69PortMapDeletionDelay 15 + # testvar tr69PortMapCreationDelay 0 + # testvar tr69PortMapDisableDelay 15 + # testvar tr69TraceRouteTimeout 120 + + } + + SECTION "TR-111 Parts 1 and 2" { + + # testvar supportsTr111Part1 yes + # testvar supportsTr111Part2 no + # testvar STUNMaximumKeepAlivePeriod 60 + # testvar STUNMinimumKeepAlivePeriod 60 + # testvar STUNAuth no + # testvar STUNUsername qacafe + # testvar STUNPassword qacafe123 + # testvar acsUdpConnectionDelay 0 + + } + + SECTION "TR-143 Performance Tests" { + + # testvar tr143HttpDownloadSize 1000000 + # testvar tr143HttpUploadSize 1000000 + + # testvar tr143HttpDownloadHighThreshold 0.0 + # testvar tr143HttpDownloadLowThreshold 5.0 + # testvar tr143HttpDownloadResponseMax 60 + + # testvar tr143HttpUploadHighThreshold 0.0 + # testvar tr143HttpUploadLowThreshold 5.0 + # testvar tr143HttpUploadResponseMax 60 + + } + + SECTION "TR-069 LAN Side Devices" { + + IGNORE testvar_group tr069_device2 { + + # testvar acsDefaultUser qacafe + # testvar acsDefaultPassword qacafe123 + # testvar acsCpeDefaultUser qacafe + # testvar acsCpeDefaultPassword qacafe123 + # testvar acsCreatePortMapOnIGD no + # testvar acsPortMapPublicPort 20000 + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69DeviceType IGD + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DownloadConfig /path/to/config + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + + } + + } + +} + +SECTION "CDRouter USP Add-On" { + + # testvar supportsUSP no + + SECTION "Basic Controller Configuration" { + + # testvar uspControllerID proto::controller-id + # testvar uspControllerInterface wan + + # testvar uspControllerIpMode ipv4-only + # testvar uspControllerIpv4 6.0.0.2 + # testvar uspControllerIpv6 6000::2 + # testvar uspControllerPort auto + # testvar uspControllerPath /controller-path + + # testvar uspControllerUseNonPayloadProtection no + # testvar uspControllerUseSessionContext no + # testvar uspControllerMTP websocket + # testvar uspControllerMTPEncryption no + # testvar uspControllerUSPEncryption no + # testvar uspControllerDomain controller.cdroutertest.com + + # testvar uspSegmentationEnable no + # testvar uspSegmentationSize auto + + # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + + # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + + # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerVerifyRecordIntegrity no + + # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem + + # testvar uspControllerHost any + # testvar uspControllerUsername qacafe + # testvar uspControllerPassword qacafe123 + + } + + SECTION "Basic Agent Configuration" { + + # testvar uspAgentID proto::agent-id + + # testvar uspAgentIpv4 auto + # testvar uspAgentIpv6 auto + # testvar uspAgentPort auto + # testvar uspAgentPath /agent-path + + # testvar uspMessageTimeout 30 + # testvar uspNotificationTimeout 30 + # testvar uspRebootTimeout 120 + + } + + SECTION "USP Scenarios" { + + # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp + # testvar uspScenarioSingleMode no + # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp + + } + + SECTION "Data Model" { + + # testvar uspSkipParameters empty + # testvar uspModifyParameters empty + # testvar uspSupportedDataModel all + + SECTION "Custom USP Data Model" { + + IGNORE testvar_group usp_profile_1 { + + # testvar uspProfileName myVendorParameters + # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml + + } + + } + + } + + SECTION "USP Agent Data Model Configuration" { + + # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + + # testvar uspParameterPath1 Device.DeviceInfo.ModelName + # testvar uspParameterPath2 Device.IP.Interface.3.Enable + # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory + # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode + + # testvar uspNotificationParamNewValue myCustomParameterValue + + # testvar uspObject1 Device.IP.Interface. + # testvar uspObject2 Device.WiFi.AccessPoint. + + # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} + # testvar uspValidSearchPathResultParam PeriodicNotifInterval + # testvar uspValidSearchPathResultValue 5000 + + # testvar uspFirmwareImage /path/to/firmware.bin + # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin + # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 + + } + +} + +SECTION "CDRouter BBF.069 Add-On" { + + # testvar supportsBBF069 yes + + SECTION "General" { + + SECTION "ACS URL" { + + # testvar bbf069ACSURL http://acs1.broadband-forum.org + # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org + + } + + SECTION "Security Certificates" { + + # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem + # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem + # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem + # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem + # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem + # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem + + } + + SECTION "HTTP Verification" { + + # testvar bbf069HTTPVerification no + + } + + } + + SECTION "Device Specific" { + + SECTION "General" { + + # testvar bbf069RootDataModel InternetGatewayDevice + # testvar bbf069UnsupportedRPC ChangeDUState + # testvar bbf069UploadType "1 Vendor Configuration File" + # testvar bbf069ExpectedUpgradeTime 100 + + } + + SECTION "Data Model" { + + # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069ActiveParamType unsignedInt + # testvar bbf069ActiveParamValue 60 + + # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069CompletePath1Type unsignedInt + # testvar bbf069CompletePath1Value 73 + + # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable + # testvar bbf069CompletePath2Type boolean + # testvar bbf069CompletePath2Value true + + # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. + # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. + # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv + # testvar bbf069InvalidPathType unsignedInt + + # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer + # testvar bbf069UnwritableType string + # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 + + } + + } + +} diff --git a/.testbed/cdrouter/configurations/vlan-ipv6 b/.testbed/cdrouter/configurations/vlan-ipv6 new file mode 100644 index 0000000000..3ac1ac1bb2 --- /dev/null +++ b/.testbed/cdrouter/configurations/vlan-ipv6 @@ -0,0 +1,2677 @@ +SECTION "About" { + + # Cable/DSL Router Test Suite + # + # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 + # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) + # + # Local.conf + # + # This is the main configuration file for CDRouter. This file defines the + # configuration of the router under test and controls various aspects of + # CDRouter's behavior. This file consists of a number of unique test variables + # called 'testvars' which are grouped by interface, protocol, or functionality. + # The basic syntax for all testvars is: + # + # testvar NAME VALUE + +} + +SECTION "Base Configuration" { + + SECTION "WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.1.1 + # testvar wanIspAssignIp 202.254.1.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.1.2 + # testvar wanIspNextIp 202.254.1.3 + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar wanIspAssignMask 255.255.255.0 + # testvar IPv4HopCount 1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + # testvar dhcpServerRapidCommit yes + # testvar dhcpServerClientIDBehavior rfc6842 + # testvar dhcpServerResponseDelay 4500 + # testvar dhcpConnectOnDemand no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar wanDhcpClientOptionCode1 60 + # testvar wanDhcpClientOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "DHCP Authentication" { + + # testvar supportsDhcpAuth no + + } + + SECTION "PPPoE Server" { + + # testvar pppoeConnectOnDemand no + # testvar pppoeIdleTimeout 60 + testvar pppoeUser softathome + testvar pppoePassword softathome + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + # testvar pppoeAcCookie auto + # testvar pppoeMaxPayload none + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpConnectOnDemand yes + # testvar pptpServerIp 202.254.201.1 + # testvar pptpClientIp 202.254.201.2 + # testvar pptpUseDHCP no + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpConnectOnDemand yes + # testvar l2tpServerIp 202.254.201.1 + # testvar l2tpClientIp 202.254.201.2 + # testvar l2tpUseDHCP no + + } + + SECTION "DS-Lite" { + + # testvar ipv6DsliteAftr 3001:aaaa::1 + # testvar dhcpv6WanAftrName aftr.qacafe.com + # testvar dsliteFirewallMode address-restricted + + } + + SECTION "MAP / LW4o6" { + + # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: + # testvar mapBmrRuleIpv6PrefixLen 48 + # testvar mapBmrRuleIpv4Prefix 5.0.0.0 + # testvar mapBmrRuleIpv4PrefixLen 24 + # testvar mapBmrRuleEABitLen 16 + + # testvar mapSharingRatio 256 + # testvar mapStartPort 4096 + # testvar mapPsid 255 + + # testvar mapEnableDhcpv6Options yes + + SECTION "MAP-E / LW4o6" { + + # testvar mapTunnelFlowLabel 0 + # testvar mapTunnelHopLimit 64 + # testvar mapTunnelTrafficClass 0 + + } + + SECTION "MAP-T" { + + # testvar mapDmrIpv6Prefix 5001:db8:: + # testvar mapDmrIpv6PrefixLen 48 + + # testvar mapTosTranslate yes + + } + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + # testvar pppConnectionDelay 10 + # testvar pppRestartTimeout 300000 + # testvar pppFailUsesICMP no + + } + + SECTION "WAN 802.1q VLAN" { + + testvar wanVlanId 101 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "Wireless Access Point (AP)" { + + # testvar wanApBand 2.4GHz + # testvar wanApSSID qa-net + # testvar wanApChannel auto + + SECTION "WPA Authenticator" { + + # testvar wanApWpaMode RSN + # testvar wanApWpaKeyMgmt PSK + # testvar wanApWpaCipher CCMP-128 + # testvar wanApWpaGroupCipher auto + # testvar wanApWpaPMF auto + # testvar wanApWpaPsk qacafe123 + # testvar wanApWpaSaePassword "sae secret" + + } + } + + SECTION "WAN 802.1X and RADIUS" { + + SECTION "WAN RADIUS" { + + # testvar wanRadiusEnable no + # testvar wanRadiusInterface wan + # testvar wanRadiusIp 3.3.3.44 + # testvar wanRadiusSecret qacafe123 + # testvar wanRadiusServerAttrType1 200 + # testvar wanRadiusServerAttrData1 04040404 + + } + + SECTION "WAN EAP Settings" { + + # testvar wanEapType eap-md5 + + SECTION "WAN Supplicant Credentials" { + + # testvar wanEapIdentity1 user1 + # testvar wanEapPassword1 qacafe123 + + } + + SECTION "WAN Authentication Options" { + + # testvar wanEapRootCert /usr/cdrouter/tests/root.pem + # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem + # testvar wanEapServerCertPassword qacafe123 + # testvar wanEapFragmentSize 1024 + + } + + } + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.101.1 + # testvar wanBackupDnsServer 202.254.101.2 + # testvar wanBackupDnsServer2 0.0.0.0 + # testvar wanBackupDnsServer3 0.0.0.0 + # testvar DNStoDHCP no + # testvar supportsDnsProxy yes + # testvar supportsDnsCaching yes + # testvar dnsCacheSize 150 + # testvar dnsLookupTimeout 5 + # testvar dnsFailoverAuth "2 4 5" + # testvar dnsFailoverNonAuth "2 4 5" + # testvar dnsFailoverDelay 10 + # testvar dnsFailoverAttempts 20 + # testvar dnsRelayFailover 120 + # testvar dnsForwardServerStatus no + # testvar dnsUsageProfile opportunistic-privacy + # testvar dnsCaptive no + + SECTION "User Configurable DNS Entries" { + + # testvar dnsHostname1 test.qacafe.com + # testvar dnsIp1 5.5.5.5 + + } + + } + + SECTION "HTTP" { + + # testvar supportsHttpProxy yes + # testvar httpProxyIdleTimeout 30 + # testvar httpMaxHeaderCount 200 + + } + + SECTION "NTP" { + + # testvar ntpServer1 3.3.3.6 + # testvar ntpServerName1 time.nist.gov + # testvar ntpServer2 3.3.3.7 + # testvar ntpServerName2 time.foo.com + # testvar ntpStartDate "6/2/2007 11:00 am UTC" + # testvar ntpOffset 0 + # testvar enableRFC868TimeProtocol no + + } + + SECTION "Dynamic DNS" { + + # testvar supportsDynDns no + # testvar dynDnsServerIp 66.37.215.49 + # testvar dynDnsTransport http + # testvar dynDnsHostname test.domain.com + # testvar dynDnsUsername qacafe + # testvar dynDnsPassword qacafe123 + # testvar dynDnsSystem dyndns + # testvar dynDnsMx mail.domain.com + # testvar dynDnsBackMx no + # testvar dynDnsWildcard off + # testvar dynDnsAgent RAS/1.1 + # testvar dynDnsWait 30 + # testvar testDynDnsErrorCode no + # testvar dynDnsServerReturn !yours + + } + + SECTION "WINS Servers" { + + # testvar winsServer1 3.3.3.4 + # testvar winsServer2 3.3.3.5 + + } + + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanDomainName qacafe.com + # testvar lanMtu default + testvar lanHostname prplOS + # testvar lanGuestMode no + + SECTION "ARP Settings" { + + # testvar arpMode strict + # testvar arpSupportGratuitous yes + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + # testvar supportsDnsHostnameCreate no + + } + + SECTION "DHCP Client" { + + # testvar dhcpClientTimeout 5 + # testvar dhcpInform no + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpRapidCommit no + # testvar ipv4MaxLanClients auto + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpCreateDelay 0 + # testvar dhcpReleaseDelay 300 + # testvar dhcpServerMac auto + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + # testvar dhcpClientTrackSeconds no + # testvar dhcpClientRequestNtp no + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + SECTION "DHCP Client Extra Parameters" { + + # testvar dhcpExtraClientParams "69 70" + + } + + SECTION "DHCP Client Extra Options" { + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Hotspot Router Settings" { + + # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% + # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% + + SECTION "Hotspot Clients" { + + # testvar clientLoginName1 client1 + # testvar clientLoginPassword1 admin1 + + } + + SECTION "Advanced Hotspot Settings" { + + # testvar browserLoginProc example_login + # testvar browserLogoutProc example_logout + # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl + + } + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconRsnCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X and RADIUS" { + + SECTION "LAN RADIUS" { + + # testvar enableRADIUSserver yes + # testvar radiusHost remoteHost + # testvar radiusSecret qacafe123 + # testvar radiusServerAttrType1 200 + # testvar radiusServerAttrData1 04040404 + + } + + SECTION "LAN EAP Settings" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + SECTION "LAN Authentication Options" { + + # testvar eapRootCert /usr/cdrouter/tests/root.pem + # testvar eapServerCertPath /usr/cdrouter/tests/server.pem + # testvar eapServerCertPassword qacafe123 + # testvar eapFragmentSize 1024 + # testvar eapTxWhen 60 + # testvar eapQuietPeriod 60 + # testvar eapReAuthMax 2 + # testvar eapSendLogoffFailure yes + # testvar eapReAuthPeriod 0 + + } + + } + + } + + SECTION "LAN 802.1q VLAN" { + + testvar lanVlanId 201 + # testvar lanVlanPriority 0 + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "Firewall and NAT" { + + SECTION "NAT Options" { + + testvar natSimultaneousTcp yes + # testvar natSrcPort0 yes + # testvar natSupportsP2P yes + # testvar natPortParity yes + # testvar natMode port-restricted + # testvar natVerifyIpId yes + # testvar defaultTcpEchoPort 50000 + # testvar defaultUdpEchoPort 50000 + # testvar natRefreshBehavior both + + SECTION "NAT Timers" { + + # testvar natFinTimeout disabled + # testvar natRstTimeout disabled + # testvar natTcpTimeout disabled + # testvar natSynTimeout disabled + # testvar natUdpTimeout disabled + # testvar natDnsTimeout disabled + # testvar natIcmpTimeout disabled + # testvar natRtspTimeout disabled + # testvar natLagTime 0 + + } + + } + + SECTION "Protocol Pass Through" { + + SECTION "IPSEC Pass Through" { + + # testvar supportsIPSECpass yes + # testvar ipsecMaxTunnels 20 + # testvar ipsecScaleSameServer no + # testvar alwaysUseIke no + # testvar ipsecPassRetransmit no + # testvar unknownPassthrough yes + + } + + SECTION "PPTP Pass Through" { + + # testvar supportsPPTPpass yes + # testvar pptpMaxTunnels 20 + + } + + SECTION "L2TP Pass Through" { + + # testvar supportsL2TPpass yes + # testvar l2tpMaxTunnels 20 + + } + + SECTION "PPPoE Pass Through" { + + # testvar supportsPPPoEpass no + + } + + } + + SECTION "Port Triggers" { + + # testvar portTriggers no + # testvar portTriggerTimeout 0 + # testvar portTriggerDelay 0 + # testvar portTriggerOpenDelay 0 + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "Application Layer Gateways (ALGs)" { + + SECTION "MSN Messenger" { + + # testvar supportsMsnAlg no + # testvar msnNotificationServerPort 1863 + # testvar msnSwitchBoardServerPort 1863 + + } + + SECTION "RTSP" { + + # testvar supportsRtspAlg no + # testvar rtspTeardownDelay 5 + # testvar rtspGetParameterInterval 5 + + } + + SECTION "SIP" { + + # testvar supportsSipAlg yes + # testvar sipInterface wan + # testvar sipServerIp 3.3.3.8 + # testvar ipv6SipServerIp 3001:051a:cafe::4 + # testvar sipCallTeardownDelay 5 + # testvar sipMaxOutboundCalls 10 + # testvar sipMaxInboundCalls 10 + # testvar sipCallPacing 0 + # testvar sipScaleRunTime 30 + # testvar sipScaleServerPort 5060 + # testvar sipScaleClientPort 5060 + # testvar sipMaxUserNames -1 + # testvar rtpSendInterval 5000 + + } + + SECTION "FTP" { + + # testvar ftpPortTimeout 120 + + } + + } + + SECTION "Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + SECTION "Port Scanning, Firewall and DoS Options" { + + # testvar portScanStart 0 + # testvar portScanStop 65535 + # testvar portScanDelay 1 + testvar firewallTcpOpenPorts "50805" + # testvar firewallTcpClosedPorts 2323 + # testvar firewallUdpOpenPorts 1234 + testvar firewallUdpClosedPorts 68 + # testvar firewallOutBlockedTcpPorts 1234 + # testvar firewallOutBlockedUdpPorts 1234 + # testvar firewallOutBlockedIpProtos 0 + # testvar wanPingRespond no + + SECTION "Denial of Service Options" { + + # testvar dosRecoveryTime 5 + # testvar dosAttackAttempts 100 + # testvar dutMgmtPort 80 + # testvar dutSecureMgmtPort disabled + # testvar dosSynAttackPort 80 + # testvar dosSynAttackAttempts 100 + + } + + SECTION "Deprecated SSL Protocols and Ciphers" { + + # testvar sslDeprecatedProtocols "sslv2 sslv3" + # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" + + } + + } + + SECTION "DMZ" { + + # testvar lanDmzHost 192.168.1.253 + # testvar lanDmzTcpPortExceptions 113 + # testvar lanDmzUdpPortExceptions 1234 + # testvar lanDmzIpProtoExceptions 2,47 + # testvar lanDmzSupportsIcmp no + + } + + SECTION "URL Filtering" { + + # testvar urlFilterSupported no + # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" + # testvar non-filtered-urls http://qacafe.com + # testvar urlFilterBlockedText "This website is blocked" + + } + + SECTION "XBox Live Options" { + + # testvar xboxNatMinType open + # testvar xboxPort 3074 + # testvar xboxMtu 1364 + + } + + } + + SECTION "Advanced Protocols" { + + SECTION "RIP v1/v2" { + + # testvar ripSupported no + # testvar ripVersion 1 + # testvar ripV2mode multicast + # testvar ripAuthMode none + # testvar ripPassword qacafe123 + # testvar ripMaxRoutes 96 + # testvar ripRouteTimeout 180 + # testvar ripGarbageTimeout 120 + # testvar ripRouteDelay 5000 + # testvar ripAcceptWanUpdate no + + } + + SECTION "UPnP" { + + # testvar upnpSupported yes + # testvar upnpVersion 1.1 + # testvar upnpDevice InternetGatewayDevice:2 + # testvar upnpWANPPPConnection no + # testvar upnpLANDevice no + # testvar upnpMaxTcpMappings 10 + # testvar upnpMaxSubClients 10 + # testvar upnpMinSubTimeout 40 + # testvar upnpMaxSubTimeout 3600 + # testvar upnpWANFailureTimeout 120 + # testvar upnpPortStart 40000 + # testvar upnpPortStop 50000 + + } + + SECTION "LLDP" { + + # testvar supportsLLDP no + # testvar lldpLanMac none + # testvar lldpLanChassisMac auto + # testvar lldpMsgFastTx 1 + # testvar lldpMsgTxInterval 30 + # testvar lldpTxFastInit 4 + + } + + SECTION "IGMP (Multicast)" { + + # testvar supportsMulticast yes + # testvar multicastType proxy + # testvar supportsMulticastOut no + # testvar igmpVersion 2 + # testvar igmpFastLeave no + # testvar igmpRouterOption yes + # testvar igmpMaxGroups 64 + # testvar multicastCacheTimeout 10 + # testvar multicastPoolStart 224.0.1.0 + # testvar multicastPoolStop 239.255.255.255 + # testvar SSMulticastPoolStart 232.0.1.1 + # testvar SSMulticastPoolStop 232.0.1.255 + # testvar multicastJoinDelay 2 + # testvar multicastScaleDelay 1 + # testvar multicastInterface wan + # testvar multicastBypassPPPoE no + + SECTION "IGMP Timers" { + + # testvar igmpQueryInterval 125 + # testvar igmpRobustnessVariable 2 + # testvar igmpQueryResponseInterval 10 + + } + + SECTION "IPTV Options" { + + # testvar iptvChannelRange 200 + # testvar iptvChannelChangeDelay 200 + # testvar iptvMaxFailures 10 + + } + + } + + SECTION "GRE Tunnels" { + + # testvar greDFflag on + + IGNORE testvar_group greTunnel1 { + + SECTION "Generic IPv4 GRE Tunnel Endpoints" { + + # testvar greType IPv4 + # testvar greEndpoint 5.5.5.5 + # testvar greLocalNet 192.168.1.0 + # testvar greLocalMask 255.255.255.0 + + } + + SECTION "L2GRE Options" { + + # testvar greWanGroup wan2 + + } + + SECTION "L3GRE Remote IPv4 Network" { + + # testvar greHost 3.0.0.1 + # testvar greRemoteNet 3.0.0.0 + # testvar greRemoteMask 255.0.0.0 + + } + + } + + } + + } + + SECTION "Additional Features" { + + # testvar supportsIPv4 yes + # testvar internalSmtpServer 5.5.5.5 + # testvar remoteHostIp 3.3.3.3 + # testvar startOtherLanFirst no + # testvar cdrouterOui B0750C + # testvar forwardingMaxFailures 20 + # testvar forwardingPort 5001 + # testvar jumboMtu disabled + # testvar tcpUdpPortStart 10000 + + SECTION "General Purpose HTTP Server" { + + # testvar httpServerIp 3.3.3.16 + # testvar httpServerPort 80 + # testvar httpServerRoot /tmp + + } + + SECTION "Free Network Range" { + + # testvar FreeNetworkStart 200.0.0.0 + # testvar FreeNetworkMask 255.255.255.0 + # testvar FreeNetworkStop 201.0.0.0 + + } + + SECTION "TCP MSS Clamping" { + + # testvar mssClampingValue default + # testvar mssClampingInValue default + + } + + SECTION "TCP/UDP Scaling Options" { + + # testvar scaleTcpConnsPerHost 5 + # testvar natMaxTcpConns 200 + # testvar natMaxUdpConns 100 + + } + + SECTION "Global Wireless Options" { + + # testvar wirelessRetry 3 + # testvar lanWirelessMaxClients auto + # testvar wifiCapture off + # testvar wifiCaptureFilter {} + + } + + } + + SECTION "Test Execution Options and Auto-Reboot" { + + # testvar startDelay 3 + # testvar lanStartDelay 3 + # testvar startTimeout 90 + # testvar wanCloseOnExit yes + # testvar RestartDut none + # testvar RestartDutDelay disabled + # testvar ShutdownDut "echo -n" + # testvar cpeRebootMode skip + # testvar healthCheckEnable no + + } + +} + +SECTION "CDRouter DOCSIS Add-On" { + + # testvar supportsDocsis no + + SECTION "Basic Configuration" { + + # testvar docsisIpProvisioningMode ipv4-only + # testvar docsisBootDelay 30 + + # testvar docsisClientMac auto + + } + + SECTION "IPv4 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIp 10.10.10.1 + # testvar docsisMask 255.255.255.0 + + } + + SECTION "DHCPv4 Server" { + + # testvar docsisDhcpServer 10.10.10.3 + # testvar docsisAssignIp 10.10.10.2 + # testvar docsisDomain docsis.qacafe.com + # testvar docsisDhcpLeaseTime 300 + # testvar docsisDhcpRapidCommit no + + # testvar docsisDhcpServerOptionCode1 69 + # testvar docsisDhcpServerOptionData1 04040404 + + # testvar docsisDhcpClientOptionCode1 60 + # testvar docsisDhcpClientOptionData1 04040404 + + SECTION "DHCPv4 Relay" { + + # testvar docsisGateway 6.6.6.7 + # testvar docsisAssignGateway 6.6.6.6 + # testvar docsisAssignMask 255.255.255.0 + # testvar docsisDhcpRelayServer 6.6.6.7 + + } + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogServer 10.10.10.5 + # testvar docsisTimeServer 10.10.10.6 + # testvar docsisTftpServer 10.10.10.4 + + } + + } + + SECTION "IPv6 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIpv6 8001::1 + # testvar docsisIpv6PrefixLen 64 + + } + + SECTION "DHCPv6 Server" { + + # testvar docsisDhcpIpv6Server 8001::3 + # testvar docsisAssignIpv6 8001::2 + # testvar docsisDHCPv6PreferredLifetime 300 + # testvar docsisDHCPv6ValidLifetime 300 + # testvar docsisDhcpv6RapidCommit no + + # testvar docsisDhcpv6ServerOptionCode1 69 + # testvar docsisDhcpv6ServerOptionData1 04040404 + + # testvar docsisDhcpv6ClientOptionCode1 60 + # testvar docsisDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Relay" { + + # testvar docsisIpv6Gateway 9001::1 + # testvar docsisAssignIpv6PrefixLen 64 + # testvar docsisDhcpv6RelayServer 9001::1 + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogIpv6Server 8001::5 + # testvar docsisTimeIpv6Server 8001::6 + # testvar docsisTftpIpv6Server 8001::4 + + } + + } + + SECTION "CM Config File" { + + SECTION "Global TFTP Settings" { + + # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp + # testvar docsisTftpBootFile auto-docsis.bin + + } + + SECTION "Embedded Config File" { + + # testvar docsisConfig { + # Main + # { + # NetworkAccess 1; + # BaselinePrivacy + # { + # AuthTimeout 10; + # ReAuthTimeout 10; + # AuthGraceTime 600; + # OperTimeout 1; + # ReKeyTimeout 1; + # TEKGraceTime 600; + # AuthRejectTimeout 60; + # SAMapWaitTimeout 1; + # SAMapMaxRetries 4; + # } + # MaxCPE 3; + # UsServiceFlow + # { + # UsServiceFlowRef 2; + # QosParamSetType 7; + # } + # DsServiceFlow + # { + # DsServiceFlowRef 1; + # QosParamSetType 7; + # } + # SNMPv1v2cCoexistenceConfig + # { + # SNMPv1v2cCommunityName "public"; + # SNMPv1v2cTransportAddressAccess + # { + # SNMPv1v2cTransportAddress 0.0.0.0/0; + # SNMPv1v2cTransportAddressMask 0.0.0.0/0; + # } + # SNMPv1v2cAccessViewType 2; + # SNMPv1v2cAccessViewName "docsisManagerView"; + # } + # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ + # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ + # /*EndOfDataMkr*/ + # } + # } + + } + + SECTION "Vendor Defined Config File" { + + # testvar docsisConfigFile none + + } + + } + + SECTION "CM Firewall Configuration" { + + SECTION "IPv4" { + + # testvar docsisTcpOpenPorts "22 443" + # testvar docsisTcpClosedPorts all + # testvar docsisUdpOpenPorts 1234 + # testvar docsisUdpClosedPorts all + + } + + SECTION "IPv6" { + + # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" + # testvar docsisIpv6TcpClosedPorts "2323 80" + # testvar docsisIpv6UdpOpenPorts 1234 + # testvar docsisIpv6UdpClosedPorts 113 + + } + + } + +} + +SECTION "CDRouter HomeKit Add-On" { + + # testvar supportsHomeKit no + + # testvar homeKitRouterName "HomeKit Router" + # testvar homeKitHATHostname hat.local + # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ + # testvar homeKitRouterSetupCode + + # testvar homeKitManualEnabled yes + +} + +SECTION "CDRouter IKE Add-On" { + + SECTION "Global IKE Options" { + + # testvar ikeMaxPhase2SA 20 + # testvar ikeDeadPeerDetection no + # testvar ikeNewQuickModeDelay 1000 + # testvar ikeKeepAlive 20 + # testvar ikeMinimumLifetime 20 + # testvar ipsecMinimumLifetime 20 + # testvar ikePhase2DeleteDelay 100 + # testvar ikeMaxTransforms 21 + # testvar ikeInitialContact yes + # testvar ikeBringUpTunnels yes + # testvar ikeAlwaysInitiate no + # testvar useSameIpsecTunnel no + # testvar ikeNatTraversal no + # testvar ike_FQDN fqdn-test.cdrouter.com + # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com + + } + + SECTION "IPsec Tunnel Configurations" { + + SECTION "IPsec Tunnel Configuration 1" { + + # testvar ipsecTunnelKeyType1 manual + # testvar ipsecTunnelEndpoint1 5.0.0.1 + # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 + # testvar ipsecTunnelRemoteMask1 255.255.255.0 + # testvar ipsecTunnelHost1 5.0.0.2 + + SECTION "Manual IPsec Tunnel Configuration" { + + # testvar ipsecTunnelOutboundSpi1 1000 + # testvar ipsecTunnelOutEncrypt1 des + # testvar ipsecTunnelOutEncryptKey1 0102030405060708 + # testvar ipsecTunnelOutAuth1 md5-hmac + # testvar ipsecTunnelOutAuthKey1 6262626262626262 + # testvar ipsecTunnelInboundSpi1 1001 + # testvar ipsecTunnelInEncrypt1 des + # testvar ipsecTunnelInEncryptKey1 0102030405060708 + # testvar ipsecTunnelInAuth1 md5-hmac + # testvar ipsecTunnelInAuthKey1 6262626262626262 + + } + + SECTION "IKE IPsec Tunnel Configuration" { + + # testvar ipsecTunnelIkeEncrypt1 des + # testvar ipsecTunnelIkeAuth1 md5-hmac + # testvar ipsecTunnelIkeGroup1 1 + # testvar ipsecTunnelIkeLifetime1 300 + # testvar ipsecTunnelEncrypt1 3des + # testvar ipsecTunnelAuth1 sha1-hmac + # testvar ipsecTunnelPfsGroup1 1 + # testvar ipsecTunnelLifetime1 120 + # testvar ipsecTunnelPsk1 qacafe123 + # testvar ipsecTunnelIkeMode1 main + # testvar ipsecTunnelUsesNat1 no + + } + + } + + } + +} + +SECTION "CDRouter IPv6 Add-On" { + + testvar supportsIPv6 yes + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001::1 + # testvar ipv6WanIspAssignIp 3001::2 + # testvar ipv6WanIspNextIp 3001::3 + # testvar ipv6WanIspPrefixLen 64 + # testvar ipv6WanDutDuid 00000000 + # testvar ipv6RelayServer 192.88.99.1 + # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 + # testvar ipv6rdPrefix 2001:1234:: + # testvar ipv6rdPrefixLen 32 + # testvar ipv6rdIPv4MaskLen 0 + # testvar ipv6rdDHCPv4Option yes + # testvar ipv6TunnelMtuType static + # testvar ipv6WanMtu 1500 + # testvar ipv6WanMtuOption no + # testvar ipv6RASendInterval 10 + # testvar ipv6ExpectRAonWan no + + SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { + + # testvar ipv6WanIspGateway 3001::9 + # testvar ipv6WanAssignPrefixLen 64 + # testvar IPv6HopCount 1 + # testvar dhcpv6RelayServer 3001::9 + + } + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + # testvar ipv6WanRDNSS no + # testvar ipv6WanDNSSL no + + } + + SECTION "DHCPv6 Server" { + + # testvar dhcpv6IAValidLifetime 300 + # testvar dhcpv6IAPreferredLifetime 300 + # testvar dhcpv6DuidType 1 + # testvar dhcpv6RestartLatency 10 + # testvar dhcpv6ServerRapidCommit yes + + # testvar dhcpv6ServerOptionCode1 69 + # testvar dhcpv6ServerOptionData1 04040404 + + # testvar wanDhcpv6ClientOptionCode1 60 + # testvar wanDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Authentication" { + + # testvar supportsDhcpv6Auth no + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: + # testvar dhcpv6WanAssignPrefixLen 48 + # testvar dhcpv6PDLatency 30 + + } + + SECTION "IPv6 NTP" { + + # testvar ipv6NtpServer1 4321::23 + # testvar ipv6NtpServerName1 time.nist.gov + + # testvar ipv6NtpServer2 4321::24 + # testvar ipv6NtpServerName2 time.foo.com + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + testvar ipv6LanIp 3001:dddd::1 + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanPrefixLen 64 + # testvar ipv6MaxLanClients 32 + # testvar ipv6RAInterval 300 + # testvar ipv6LanSubnetId 1 + + SECTION "DHCPv6 Client" { + + # testvar dhcpv6ClientTimeout 5 + # testvar ipv6DhcpClientStart ::2 + # testvar ipv6DhcpClientEnd ::1f + # testvar ipv6DhcpClientExclude "::3 ::7" + # testvar ipv6DhcpClientValidLifetime 86400 + # testvar dhcpv6RapidCommit yes + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + SECTION "IPv6 LAN DNS" { + + # testvar ipv6DNStoLAN yes + # testvar ipv6RdnssSupport yes + # testvar ipv6DnsslSupport yes + # testvar ipv6LanStaticDns no + + } + + SECTION "Unique Local Address (ULA) Options" { + + # testvar supportsULA no + # testvar ipv6LanULAPrefix fd00:: + # testvar ipv6LanULAIp ::%eui64% + # testvar ipv6LanULAMode autoconf + + } + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + } + + SECTION "IPv6 Firewall" { + + # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" + # testvar ipv6FirewallTcpClosedPorts "2323 80" + # testvar ipv6FirewallUdpOpenPorts 1234 + # testvar ipv6FirewallUdpClosedPorts 113 + # testvar ipv6FirewallOutBlockedTcpPorts 1234 + # testvar ipv6FirewallOutBlockedUdpPorts 1234 + # testvar ipv6FirewallOutBlockedIpProtos 0 + # testvar ipv6WanPingRespond no + + SECTION "IPv6 TCP MSS Clamping" { + + # testvar ipv6MssClampingValue default + # testvar ipv6MssClampingInValue default + # testvar ipv6MssClampingTestPort 8096 + + } + + } + + SECTION "IPv6 Advanced Protocols" { + + SECTION "RIPng" { + + # testvar supportsRIPng no + + } + + SECTION "MLD (IPv6 Multicast)" { + + # testvar supportsIPv6Multicast yes + # testvar supportsIPv6MulticastOut no + # testvar mldVersion 2 + # testvar mldMaxGroups 64 + # testvar mldFastLeave no + # testvar ipv6MulticastCacheTimeout 10 + # testvar ipv6MulticastJoinDelay 2 + # testvar ipv6MulticastScaleDelay 1 + + SECTION "MLD Timers" { + + # testvar mldQueryInterval 125 + # testvar mldRobustnessVariable 2 + # testvar mldQueryResponseInterval 10 + + } + + SECTION "IPv6 IPTV Options" { + + # testvar ipv6IptvChannelRange 200 + # testvar ipv6IptvChannelChangeDelay 200 + # testvar ipv6IptvMaxFailures 10 + + } + + } + + } + + SECTION "IPv6 Additional Features" { + + SECTION "IPv6 Free Network Range" { + + # testvar ipv6RemoteHost 3001:051a:cafe::1 + # testvar ipv6FreeNetworkStart 3001:cafe:1:: + # testvar ipv6FreeNetworkPrefixLen 64 + # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: + + } + + SECTION "IPv6 Multicast Pool Ranges" { + + # testvar ipv6MulticastPoolStart ff0e::1 + # testvar ipv6MulticastPoolStop ff0e:ffff:: + # testvar ipv6SSMulticastPoolStart ff3e::8000:1 + # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff + + } + + } + +} + +SECTION "CDRouter Multiport Add-On" { + + SECTION "Additional WAN Interface Setup" { + + # testvar wanFailoverTimeout 300 + + IGNORE testvar_group wan2 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.2.1 + # testvar wanIspAssignIp 202.254.2.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.2.2 + # testvar wanIspNextIp 202.254.2.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.202.1 + # testvar pptpClientIp 202.254.202.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.202.1 + # testvar l2tpClientIp 202.254.202.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.102.1 + # testvar wanBackupDnsServer 202.254.102.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:2::1 + # testvar ipv6WanIspAssignIp 3001:0:0:2::2 + # testvar ipv6WanIspNextIp 3001:0:0:2::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + IGNORE testvar_group wan3 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.3.1 + # testvar wanIspAssignIp 202.254.3.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.3.2 + # testvar wanIspNextIp 202.254.3.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.203.1 + # testvar pptpClientIp 202.254.203.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.203.1 + # testvar l2tpClientIp 202.254.203.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.103.1 + # testvar wanBackupDnsServer 202.254.103.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:3::1 + # testvar ipv6WanIspAssignIp 3001:0:0:3::2 + # testvar ipv6WanIspNextIp 3001:0:0:3::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + } + + SECTION "Additional LAN Interface Setup" { + + # testvar useSameLanInterface no + + IGNORE testvar_group lan2 { + + SECTION "IPv4 LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanGuestMode no + + SECTION "LAN Host IP" { + + # testvar hostIp 192.168.1.0 + # testvar hostMask 255.255.255.0 + # testvar hostGateway 192.168.1.1 + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "DHCP Client Configuration" { + + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + # testvar dhcpExtraClientParams "69 70" + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Configuration Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + } + + SECTION "IPv4 Firewall and NAT" { + + SECTION "Static NAT" { + + # testvar staticNatIp 202.254.1.2 + # testvar staticNatFirewall yes + # testvar natMode port-restricted + + } + + SECTION "Special Application Port Triggers" { + + # testvar portTriggers no + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "TCP and UDP Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanStaticDns no + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + + SECTION "LAN IPv6 DHCP Client" { + + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + + } + + } + +} + +SECTION "CDRouter Performance Add-On" { + + # testvar supportsPerformance no + + SECTION "Basic Configuration" { + + # testvar perfWanIp 202.254.1.4 + # testvar perfWanIpv6 3001::4 + # testvar perfPort 19750 + # testvar perfPort2 19751 + + } + + SECTION "Performance Settings" { + + # testvar perfDuration 10 + # testvar perfDownloadBandwidth 0.0 + # testvar perfInterval auto + # testvar perfIncrement 5 + # testvar perfStreams 1 + # testvar perfStreamIncr 0 + # testvar perfUdpLen auto + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + # testvar perfOmit 0 + # testvar perfDSCP 0 + # testvar perfFairness no + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresholds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + SECTION "Advanced Options" { + + # testvar perfPingEnable no + # testvar perfEnableCapture no + # testvar perfLatencyAttempts 25 + # testvar perfApplicationAttempts 4 + # testvar perfApplicationDelay 100 + + } + + SECTION "Wireless" { + + IGNORE testvar_group wireless-performance { + + SECTION "Performance Settings" { + + # testvar perfDownloadBandwidth 0.0 + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresolds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + } + + } + +} + +SECTION "CDRouter Security Add-On" { + + SECTION "Internet Connection Sharing (ICS)" { + + # testvar enableICS no + # testvar icsInterface eth0 + # testvar icsShareIPv4 yes + # testvar icsShareIPv6 yes + + } + + SECTION "Traffic Analysis" { + + # testvar enableSuricata no + + } + + SECTION "Nmap Scans" { + + # testvar enableNmap no + # testvar nmapPorts 0-65535 + # testvar nmapScanTimeout 600 + # testvar nmapTimingTemplate 5 + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleBase auto + # testvar internetScheduleTimeZone auto + # testvar internetScheduleBlockedText "This website is blocked" + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + +} + +SECTION "CDRouter SNMP Add-On" { + + # testvar supportsSnmp no + + # testvar snmpPort 161 + # testvar snmpDefaultUser auto + # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" + # testvar snmpUpdateDelay 15 + + SECTION "SNMP Options and Users" { + + # testvar snmpManagerIp 3.3.3.33 + # testvar snmpManagerIpv6 3001:051a:cafe::33 + + IGNORE testvar_group snmpuser1 { + + # testvar snmpVersion 2c + + # testvar snmpAccess read-only + # testvar snmpTransport udp + # testvar snmpRetries 5 + # testvar snmpTimeout 5 + + SECTION "SNMP v1/2c Configuration" { + + # testvar snmpCommunity public + + } + + SECTION "SNMP v3 Configuration" { + + # testvar snmpSecurityLevel noAuthNoPriv + + # testvar snmpAuthProtocol MD5 + # testvar snmpAuthUsername qacafe + # testvar snmpAuthPassword qacafe123 + + # testvar snmpPrivacyProtocol DES + # testvar snmpPrivacyPassword qacafe123 + + # testvar snmpContextName bridge1 + # testvar snmpSecurityEngineId 800000020109840301 + # testvar snmpContextEngineId 800000020109840301 + + } + + } + + } + + SECTION "SNMP Scenarios" { + + # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp + # testvar snmpScenarioSingleMode no + # testvar snmpScenarioInterface lan + # testvar snmpScenarioIpVersion IPv4 + + } + +} + +SECTION "CDRouter Storage Add-On" { + + # testvar supportsStorage no + + # testvar storageFileSize 10 + # testvar storageUserFilePath none + # testvar useMulticastDNS no + + SECTION "SMB Options and Users" { + + # testvar supportsStorageSmb yes + # testvar storageSmbMaxSessions 20 + # testvar storageSmbTimeout 120 + # testvar storageSmbPacing 0 + + IGNORE testvar_group smbuser1 { + + # testvar server MyNAS + # testvar share data + # testvar folder /home/qacafe + # testvar guest no + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + + SECTION "FTP Options and Users" { + + # testvar supportsStorageFtp yes + # testvar supportsStorageFtps yes + # testvar storageFtpMaxSessions 20 + # testvar storageFtpTimeout 120 + # testvar storageFtpPacing 0 + + IGNORE testvar_group ftpuser1 { + + # testvar server MyNAS + # testvar path /home/qacafe + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + +} + +SECTION "CDRouter TR-069 Add-On" { + + testvar supportsCWMP no + + SECTION "Basic ACS Configuration" { + + # testvar acsIp 6.0.0.1 + # testvar acsPort 80 + testvar acsDomain acs-download.qacafe.com + # testvar acsTransport http + # testvar acsAuth digest + # testvar acsDigestQopAuth yes + # testvar acsInterface wan + testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ + # testvar acsWaitForInform 120 + # testvar acsSkipInitialInform no + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar cwmpProtocolVersion 1.0 + # testvar acsDeviceDiscovery no + # testvar acsConfigurePeriodicInform yes + # testvar tr69InitiateConnection yes + testvar acsDefaultUser cdrouter + testvar acsDefaultPassword cdrouter + testvar acsCpeDefaultUser acs + testvar acsCpeDefaultPassword acs + # testvar acsFileServerUser file_server_user + # testvar acsFileServerPassword file_server_password + + } + + SECTION "XMPP Connection Request Configuration" { + + # testvar acsSupportsXmppConnReq no + + # testvar acsXmppServerConnectAlgorithm DNS-SRV + # testvar acsXmppConnReqUsername qacafe + # testvar acsXmppConnReqResource cdrouter + # testvar acsXmppConnReqPassword qacafe123 + # testvar acsXmppConnReqUseTls no + + } + + SECTION "Advanced ACS Configuration" { + + # testvar acsCpeKeepAlive yes + # testvar acsChunkedEncoding no + # testvar acsChunkSize 64 + # testvar acsAuthOncePerSession no + # testvar acsCookieMode rfc6265 + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + # testvar acsNumberCpeAttempts 2 + # testvar acsDelayCpeAttempts 10 + # testvar acsWaitForConnectionRequest yes + # testvar acsUseTcpOffload yes + # testvar acsTargetDevice tr069_device2 + # testvar acsDualStackIp 6000::1 + # testvar acsStrictSyntaxChecking on + + } + + SECTION "SSL Configuration" { + + # testvar acsSslVersion tls + # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem + # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem + # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsCipherSuite auto + # testvar acsClientCaCertPath /path/to/client/ca/file + + } + + SECTION "Profiles" { + + # testvar cwmpSupportedDataModel auto + # testvar cwmpDataValidation yes + # testvar cwmpSkipParameters empty + # testvar cwmpModifyParameters empty + # testvar cwmpVendorSpecificParams none + + SECTION "Custom CWMP Profiles" { + + IGNORE testvar_group cwmp_profile1 { + + # testvar cwmpProfileName myVendorParameters + # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp + # testvar cwmpProfileObject InternetGatewayDevice:1 + + } + + } + + } + + SECTION "CWMP Scenarios" { + + # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp + # testvar cwmpScenarioSingleMode no + # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp + + } + + SECTION "Additional TR-069 Options" { + + # testvar tr69DeviceType IGD + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69InformTimeout 120 + # testvar tr69MinPeriodicInform 60 + # testvar tr69ScheduleInformRPC yes + # testvar tr69UploadRPC no + # testvar tr69UploadPath /tmp + # testvar tr69ConfigUploadFilename vendor_configuration_file + # testvar tr69LogUploadFilename vendor_log_file + # testvar tr69FactoryResetRPC no + # testvar tr69CpeGetRPCs no + # testvar tr69ForceBoolean no + # testvar tr69XMLCapturePath /tmp/tr69-xml + # testvar tr69DownloadTimeout 600 + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadImageVersion 1.0 + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69RebootTimeout 300 + # testvar tr69RpcTimeout 180 + # testvar tr69DownloadConfig /path/to/config + # testvar tr69MaxUserNameLen 256 + # testvar tr69MaxPasswordLen 256 + # testvar tr69MaxCpeUserNameLen 256 + # testvar tr69MaxCpePasswordLen 256 + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DUInstallImageVersion 1.0 + # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image + # testvar tr69DUInstallImageAlternateVersion 1.0 + # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb + # testvar tr69DUChangeExecEnvRef openwrt + # testvar tr69DUChangeTimeout 600 + # testvar tr69WildcardPortMappingOnly no + # testvar tr69PortMapDeletionDelay 15 + # testvar tr69PortMapCreationDelay 0 + # testvar tr69PortMapDisableDelay 15 + # testvar tr69TraceRouteTimeout 120 + + } + + SECTION "TR-111 Parts 1 and 2" { + + # testvar supportsTr111Part1 yes + # testvar supportsTr111Part2 no + # testvar STUNMaximumKeepAlivePeriod 60 + # testvar STUNMinimumKeepAlivePeriod 60 + # testvar STUNAuth no + # testvar STUNUsername qacafe + # testvar STUNPassword qacafe123 + # testvar acsUdpConnectionDelay 0 + + } + + SECTION "TR-143 Performance Tests" { + + # testvar tr143HttpDownloadSize 1000000 + # testvar tr143HttpUploadSize 1000000 + + # testvar tr143HttpDownloadHighThreshold 0.0 + # testvar tr143HttpDownloadLowThreshold 5.0 + # testvar tr143HttpDownloadResponseMax 60 + + # testvar tr143HttpUploadHighThreshold 0.0 + # testvar tr143HttpUploadLowThreshold 5.0 + # testvar tr143HttpUploadResponseMax 60 + + } + + SECTION "TR-069 LAN Side Devices" { + + IGNORE testvar_group tr069_device2 { + + # testvar acsDefaultUser qacafe + # testvar acsDefaultPassword qacafe123 + # testvar acsCpeDefaultUser qacafe + # testvar acsCpeDefaultPassword qacafe123 + # testvar acsCreatePortMapOnIGD no + # testvar acsPortMapPublicPort 20000 + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69DeviceType IGD + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DownloadConfig /path/to/config + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + + } + + } + +} + +SECTION "CDRouter USP Add-On" { + + # testvar supportsUSP no + + SECTION "Basic Controller Configuration" { + + # testvar uspControllerID proto::controller-id + # testvar uspControllerInterface wan + + # testvar uspControllerIpMode ipv4-only + # testvar uspControllerIpv4 6.0.0.2 + # testvar uspControllerIpv6 6000::2 + # testvar uspControllerPort auto + # testvar uspControllerPath /controller-path + + # testvar uspControllerUseNonPayloadProtection no + # testvar uspControllerUseSessionContext no + # testvar uspControllerMTP websocket + # testvar uspControllerMTPEncryption no + # testvar uspControllerUSPEncryption no + # testvar uspControllerDomain controller.cdroutertest.com + + # testvar uspSegmentationEnable no + # testvar uspSegmentationSize auto + + # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + + # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + + # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerVerifyRecordIntegrity no + + # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem + + # testvar uspControllerHost any + # testvar uspControllerUsername qacafe + # testvar uspControllerPassword qacafe123 + + } + + SECTION "Basic Agent Configuration" { + + # testvar uspAgentID proto::agent-id + + # testvar uspAgentIpv4 auto + # testvar uspAgentIpv6 auto + # testvar uspAgentPort auto + # testvar uspAgentPath /agent-path + + # testvar uspMessageTimeout 30 + # testvar uspNotificationTimeout 30 + # testvar uspRebootTimeout 120 + + } + + SECTION "USP Scenarios" { + + # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp + # testvar uspScenarioSingleMode no + # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp + + } + + SECTION "Data Model" { + + # testvar uspSkipParameters empty + # testvar uspModifyParameters empty + # testvar uspSupportedDataModel all + + SECTION "Custom USP Data Model" { + + IGNORE testvar_group usp_profile_1 { + + # testvar uspProfileName myVendorParameters + # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml + + } + + } + + } + + SECTION "USP Agent Data Model Configuration" { + + # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + + # testvar uspParameterPath1 Device.DeviceInfo.ModelName + # testvar uspParameterPath2 Device.IP.Interface.3.Enable + # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory + # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode + + # testvar uspNotificationParamNewValue myCustomParameterValue + + # testvar uspObject1 Device.IP.Interface. + # testvar uspObject2 Device.WiFi.AccessPoint. + + # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} + # testvar uspValidSearchPathResultParam PeriodicNotifInterval + # testvar uspValidSearchPathResultValue 5000 + + # testvar uspFirmwareImage /path/to/firmware.bin + # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin + # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 + + } + +} + +SECTION "CDRouter BBF.069 Add-On" { + + # testvar supportsBBF069 yes + + SECTION "General" { + + SECTION "ACS URL" { + + # testvar bbf069ACSURL http://acs1.broadband-forum.org + # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org + + } + + SECTION "Security Certificates" { + + # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem + # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem + # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem + # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem + # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem + # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem + + } + + SECTION "HTTP Verification" { + + # testvar bbf069HTTPVerification no + + } + + } + + SECTION "Device Specific" { + + SECTION "General" { + + # testvar bbf069RootDataModel InternetGatewayDevice + # testvar bbf069UnsupportedRPC ChangeDUState + # testvar bbf069UploadType "1 Vendor Configuration File" + # testvar bbf069ExpectedUpgradeTime 100 + + } + + SECTION "Data Model" { + + # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069ActiveParamType unsignedInt + # testvar bbf069ActiveParamValue 60 + + # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069CompletePath1Type unsignedInt + # testvar bbf069CompletePath1Value 73 + + # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable + # testvar bbf069CompletePath2Type boolean + # testvar bbf069CompletePath2Value true + + # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. + # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. + # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv + # testvar bbf069InvalidPathType unsignedInt + + # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer + # testvar bbf069UnwritableType string + # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 + + } + + } + +} diff --git a/.testbed/cdrouter/configurations/vlan-ppp b/.testbed/cdrouter/configurations/vlan-ppp new file mode 100644 index 0000000000..29760ec464 --- /dev/null +++ b/.testbed/cdrouter/configurations/vlan-ppp @@ -0,0 +1,2677 @@ +SECTION "About" { + + # Cable/DSL Router Test Suite + # + # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 + # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) + # + # Local.conf + # + # This is the main configuration file for CDRouter. This file defines the + # configuration of the router under test and controls various aspects of + # CDRouter's behavior. This file consists of a number of unique test variables + # called 'testvars' which are grouped by interface, protocol, or functionality. + # The basic syntax for all testvars is: + # + # testvar NAME VALUE + +} + +SECTION "Base Configuration" { + + SECTION "WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + testvar wanMode PPPoE + # testvar wanIspIp 202.254.1.1 + # testvar wanIspAssignIp 202.254.1.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.1.2 + # testvar wanIspNextIp 202.254.1.3 + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar wanIspAssignMask 255.255.255.0 + # testvar IPv4HopCount 1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + # testvar dhcpServerRapidCommit yes + # testvar dhcpServerClientIDBehavior rfc6842 + # testvar dhcpServerResponseDelay 4500 + # testvar dhcpConnectOnDemand no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar wanDhcpClientOptionCode1 60 + # testvar wanDhcpClientOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "DHCP Authentication" { + + # testvar supportsDhcpAuth no + + } + + SECTION "PPPoE Server" { + + # testvar pppoeConnectOnDemand no + # testvar pppoeIdleTimeout 60 + testvar pppoeUser softathome + testvar pppoePassword softathome + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + # testvar pppoeAcCookie auto + # testvar pppoeMaxPayload none + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpConnectOnDemand yes + # testvar pptpServerIp 202.254.201.1 + # testvar pptpClientIp 202.254.201.2 + # testvar pptpUseDHCP no + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpConnectOnDemand yes + # testvar l2tpServerIp 202.254.201.1 + # testvar l2tpClientIp 202.254.201.2 + # testvar l2tpUseDHCP no + + } + + SECTION "DS-Lite" { + + # testvar ipv6DsliteAftr 3001:aaaa::1 + # testvar dhcpv6WanAftrName aftr.qacafe.com + # testvar dsliteFirewallMode address-restricted + + } + + SECTION "MAP / LW4o6" { + + # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: + # testvar mapBmrRuleIpv6PrefixLen 48 + # testvar mapBmrRuleIpv4Prefix 5.0.0.0 + # testvar mapBmrRuleIpv4PrefixLen 24 + # testvar mapBmrRuleEABitLen 16 + + # testvar mapSharingRatio 256 + # testvar mapStartPort 4096 + # testvar mapPsid 255 + + # testvar mapEnableDhcpv6Options yes + + SECTION "MAP-E / LW4o6" { + + # testvar mapTunnelFlowLabel 0 + # testvar mapTunnelHopLimit 64 + # testvar mapTunnelTrafficClass 0 + + } + + SECTION "MAP-T" { + + # testvar mapDmrIpv6Prefix 5001:db8:: + # testvar mapDmrIpv6PrefixLen 48 + + # testvar mapTosTranslate yes + + } + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + # testvar pppConnectionDelay 10 + # testvar pppRestartTimeout 300000 + # testvar pppFailUsesICMP no + + } + + SECTION "WAN 802.1q VLAN" { + + testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "Wireless Access Point (AP)" { + + # testvar wanApBand 2.4GHz + # testvar wanApSSID qa-net + # testvar wanApChannel auto + + SECTION "WPA Authenticator" { + + # testvar wanApWpaMode RSN + # testvar wanApWpaKeyMgmt PSK + # testvar wanApWpaCipher CCMP-128 + # testvar wanApWpaGroupCipher auto + # testvar wanApWpaPMF auto + # testvar wanApWpaPsk qacafe123 + # testvar wanApWpaSaePassword "sae secret" + + } + } + + SECTION "WAN 802.1X and RADIUS" { + + SECTION "WAN RADIUS" { + + # testvar wanRadiusEnable no + # testvar wanRadiusInterface wan + # testvar wanRadiusIp 3.3.3.44 + # testvar wanRadiusSecret qacafe123 + # testvar wanRadiusServerAttrType1 200 + # testvar wanRadiusServerAttrData1 04040404 + + } + + SECTION "WAN EAP Settings" { + + # testvar wanEapType eap-md5 + + SECTION "WAN Supplicant Credentials" { + + # testvar wanEapIdentity1 user1 + # testvar wanEapPassword1 qacafe123 + + } + + SECTION "WAN Authentication Options" { + + # testvar wanEapRootCert /usr/cdrouter/tests/root.pem + # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem + # testvar wanEapServerCertPassword qacafe123 + # testvar wanEapFragmentSize 1024 + + } + + } + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.101.1 + # testvar wanBackupDnsServer 202.254.101.2 + # testvar wanBackupDnsServer2 0.0.0.0 + # testvar wanBackupDnsServer3 0.0.0.0 + # testvar DNStoDHCP no + # testvar supportsDnsProxy yes + # testvar supportsDnsCaching yes + # testvar dnsCacheSize 150 + # testvar dnsLookupTimeout 5 + # testvar dnsFailoverAuth "2 4 5" + # testvar dnsFailoverNonAuth "2 4 5" + # testvar dnsFailoverDelay 10 + # testvar dnsFailoverAttempts 20 + # testvar dnsRelayFailover 120 + # testvar dnsForwardServerStatus no + # testvar dnsUsageProfile opportunistic-privacy + # testvar dnsCaptive no + + SECTION "User Configurable DNS Entries" { + + # testvar dnsHostname1 test.qacafe.com + # testvar dnsIp1 5.5.5.5 + + } + + } + + SECTION "HTTP" { + + # testvar supportsHttpProxy yes + # testvar httpProxyIdleTimeout 30 + # testvar httpMaxHeaderCount 200 + + } + + SECTION "NTP" { + + # testvar ntpServer1 3.3.3.6 + # testvar ntpServerName1 time.nist.gov + # testvar ntpServer2 3.3.3.7 + # testvar ntpServerName2 time.foo.com + # testvar ntpStartDate "6/2/2007 11:00 am UTC" + # testvar ntpOffset 0 + # testvar enableRFC868TimeProtocol no + + } + + SECTION "Dynamic DNS" { + + # testvar supportsDynDns no + # testvar dynDnsServerIp 66.37.215.49 + # testvar dynDnsTransport http + # testvar dynDnsHostname test.domain.com + # testvar dynDnsUsername qacafe + # testvar dynDnsPassword qacafe123 + # testvar dynDnsSystem dyndns + # testvar dynDnsMx mail.domain.com + # testvar dynDnsBackMx no + # testvar dynDnsWildcard off + # testvar dynDnsAgent RAS/1.1 + # testvar dynDnsWait 30 + # testvar testDynDnsErrorCode no + # testvar dynDnsServerReturn !yours + + } + + SECTION "WINS Servers" { + + # testvar winsServer1 3.3.3.4 + # testvar winsServer2 3.3.3.5 + + } + + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanDomainName qacafe.com + # testvar lanMtu default + testvar lanHostname prplOS + # testvar lanGuestMode no + + SECTION "ARP Settings" { + + # testvar arpMode strict + # testvar arpSupportGratuitous yes + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + # testvar supportsDnsHostnameCreate no + + } + + SECTION "DHCP Client" { + + # testvar dhcpClientTimeout 5 + # testvar dhcpInform no + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpRapidCommit no + # testvar ipv4MaxLanClients auto + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpCreateDelay 0 + # testvar dhcpReleaseDelay 300 + # testvar dhcpServerMac auto + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + # testvar dhcpClientTrackSeconds no + # testvar dhcpClientRequestNtp no + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + SECTION "DHCP Client Extra Parameters" { + + # testvar dhcpExtraClientParams "69 70" + + } + + SECTION "DHCP Client Extra Options" { + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Hotspot Router Settings" { + + # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% + # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% + + SECTION "Hotspot Clients" { + + # testvar clientLoginName1 client1 + # testvar clientLoginPassword1 admin1 + + } + + SECTION "Advanced Hotspot Settings" { + + # testvar browserLoginProc example_login + # testvar browserLogoutProc example_logout + # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl + + } + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconRsnCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X and RADIUS" { + + SECTION "LAN RADIUS" { + + # testvar enableRADIUSserver yes + # testvar radiusHost remoteHost + # testvar radiusSecret qacafe123 + # testvar radiusServerAttrType1 200 + # testvar radiusServerAttrData1 04040404 + + } + + SECTION "LAN EAP Settings" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + SECTION "LAN Authentication Options" { + + # testvar eapRootCert /usr/cdrouter/tests/root.pem + # testvar eapServerCertPath /usr/cdrouter/tests/server.pem + # testvar eapServerCertPassword qacafe123 + # testvar eapFragmentSize 1024 + # testvar eapTxWhen 60 + # testvar eapQuietPeriod 60 + # testvar eapReAuthMax 2 + # testvar eapSendLogoffFailure yes + # testvar eapReAuthPeriod 0 + + } + + } + + } + + SECTION "LAN 802.1q VLAN" { + + testvar lanVlanId 200 + # testvar lanVlanPriority 0 + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "Firewall and NAT" { + + SECTION "NAT Options" { + + # testvar natSimultaneousTcp no + # testvar natSrcPort0 yes + # testvar natSupportsP2P yes + # testvar natPortParity yes + # testvar natMode port-restricted + # testvar natVerifyIpId yes + # testvar defaultTcpEchoPort 50000 + # testvar defaultUdpEchoPort 50000 + # testvar natRefreshBehavior both + + SECTION "NAT Timers" { + + # testvar natFinTimeout disabled + # testvar natRstTimeout disabled + # testvar natTcpTimeout disabled + # testvar natSynTimeout disabled + # testvar natUdpTimeout disabled + # testvar natDnsTimeout disabled + # testvar natIcmpTimeout disabled + # testvar natRtspTimeout disabled + # testvar natLagTime 0 + + } + + } + + SECTION "Protocol Pass Through" { + + SECTION "IPSEC Pass Through" { + + # testvar supportsIPSECpass yes + # testvar ipsecMaxTunnels 20 + # testvar ipsecScaleSameServer no + # testvar alwaysUseIke no + # testvar ipsecPassRetransmit no + # testvar unknownPassthrough yes + + } + + SECTION "PPTP Pass Through" { + + # testvar supportsPPTPpass yes + # testvar pptpMaxTunnels 20 + + } + + SECTION "L2TP Pass Through" { + + # testvar supportsL2TPpass yes + # testvar l2tpMaxTunnels 20 + + } + + SECTION "PPPoE Pass Through" { + + # testvar supportsPPPoEpass no + + } + + } + + SECTION "Port Triggers" { + + # testvar portTriggers no + # testvar portTriggerTimeout 0 + # testvar portTriggerDelay 0 + # testvar portTriggerOpenDelay 0 + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "Application Layer Gateways (ALGs)" { + + SECTION "MSN Messenger" { + + # testvar supportsMsnAlg no + # testvar msnNotificationServerPort 1863 + # testvar msnSwitchBoardServerPort 1863 + + } + + SECTION "RTSP" { + + # testvar supportsRtspAlg no + # testvar rtspTeardownDelay 5 + # testvar rtspGetParameterInterval 5 + + } + + SECTION "SIP" { + + # testvar supportsSipAlg yes + # testvar sipInterface wan + # testvar sipServerIp 3.3.3.8 + # testvar ipv6SipServerIp 3001:051a:cafe::4 + # testvar sipCallTeardownDelay 5 + # testvar sipMaxOutboundCalls 10 + # testvar sipMaxInboundCalls 10 + # testvar sipCallPacing 0 + # testvar sipScaleRunTime 30 + # testvar sipScaleServerPort 5060 + # testvar sipScaleClientPort 5060 + # testvar sipMaxUserNames -1 + # testvar rtpSendInterval 5000 + + } + + SECTION "FTP" { + + # testvar ftpPortTimeout 120 + + } + + } + + SECTION "Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + SECTION "Port Scanning, Firewall and DoS Options" { + + # testvar portScanStart 0 + # testvar portScanStop 65535 + # testvar portScanDelay 1 + testvar firewallTcpOpenPorts "50805" + # testvar firewallTcpClosedPorts 2323 + # testvar firewallUdpOpenPorts 1234 + testvar firewallUdpClosedPorts 68 + # testvar firewallOutBlockedTcpPorts 1234 + # testvar firewallOutBlockedUdpPorts 1234 + # testvar firewallOutBlockedIpProtos 0 + # testvar wanPingRespond no + + SECTION "Denial of Service Options" { + + # testvar dosRecoveryTime 5 + # testvar dosAttackAttempts 100 + # testvar dutMgmtPort 80 + # testvar dutSecureMgmtPort disabled + # testvar dosSynAttackPort 80 + # testvar dosSynAttackAttempts 100 + + } + + SECTION "Deprecated SSL Protocols and Ciphers" { + + # testvar sslDeprecatedProtocols "sslv2 sslv3" + # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" + + } + + } + + SECTION "DMZ" { + + # testvar lanDmzHost 192.168.1.253 + # testvar lanDmzTcpPortExceptions 113 + # testvar lanDmzUdpPortExceptions 1234 + # testvar lanDmzIpProtoExceptions 2,47 + # testvar lanDmzSupportsIcmp no + + } + + SECTION "URL Filtering" { + + # testvar urlFilterSupported no + # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" + # testvar non-filtered-urls http://qacafe.com + # testvar urlFilterBlockedText "This website is blocked" + + } + + SECTION "XBox Live Options" { + + # testvar xboxNatMinType open + # testvar xboxPort 3074 + # testvar xboxMtu 1364 + + } + + } + + SECTION "Advanced Protocols" { + + SECTION "RIP v1/v2" { + + # testvar ripSupported no + # testvar ripVersion 1 + # testvar ripV2mode multicast + # testvar ripAuthMode none + # testvar ripPassword qacafe123 + # testvar ripMaxRoutes 96 + # testvar ripRouteTimeout 180 + # testvar ripGarbageTimeout 120 + # testvar ripRouteDelay 5000 + # testvar ripAcceptWanUpdate no + + } + + SECTION "UPnP" { + + # testvar upnpSupported yes + # testvar upnpVersion 1.1 + # testvar upnpDevice InternetGatewayDevice:2 + # testvar upnpWANPPPConnection no + # testvar upnpLANDevice no + # testvar upnpMaxTcpMappings 10 + # testvar upnpMaxSubClients 10 + # testvar upnpMinSubTimeout 40 + # testvar upnpMaxSubTimeout 3600 + # testvar upnpWANFailureTimeout 120 + # testvar upnpPortStart 40000 + # testvar upnpPortStop 50000 + + } + + SECTION "LLDP" { + + # testvar supportsLLDP no + # testvar lldpLanMac none + # testvar lldpLanChassisMac auto + # testvar lldpMsgFastTx 1 + # testvar lldpMsgTxInterval 30 + # testvar lldpTxFastInit 4 + + } + + SECTION "IGMP (Multicast)" { + + # testvar supportsMulticast yes + # testvar multicastType proxy + # testvar supportsMulticastOut no + # testvar igmpVersion 2 + # testvar igmpFastLeave no + # testvar igmpRouterOption yes + # testvar igmpMaxGroups 64 + # testvar multicastCacheTimeout 10 + # testvar multicastPoolStart 224.0.1.0 + # testvar multicastPoolStop 239.255.255.255 + # testvar SSMulticastPoolStart 232.0.1.1 + # testvar SSMulticastPoolStop 232.0.1.255 + # testvar multicastJoinDelay 2 + # testvar multicastScaleDelay 1 + # testvar multicastInterface wan + # testvar multicastBypassPPPoE no + + SECTION "IGMP Timers" { + + # testvar igmpQueryInterval 125 + # testvar igmpRobustnessVariable 2 + # testvar igmpQueryResponseInterval 10 + + } + + SECTION "IPTV Options" { + + # testvar iptvChannelRange 200 + # testvar iptvChannelChangeDelay 200 + # testvar iptvMaxFailures 10 + + } + + } + + SECTION "GRE Tunnels" { + + # testvar greDFflag on + + IGNORE testvar_group greTunnel1 { + + SECTION "Generic IPv4 GRE Tunnel Endpoints" { + + # testvar greType IPv4 + # testvar greEndpoint 5.5.5.5 + # testvar greLocalNet 192.168.1.0 + # testvar greLocalMask 255.255.255.0 + + } + + SECTION "L2GRE Options" { + + # testvar greWanGroup wan2 + + } + + SECTION "L3GRE Remote IPv4 Network" { + + # testvar greHost 3.0.0.1 + # testvar greRemoteNet 3.0.0.0 + # testvar greRemoteMask 255.0.0.0 + + } + + } + + } + + } + + SECTION "Additional Features" { + + # testvar supportsIPv4 yes + # testvar internalSmtpServer 5.5.5.5 + # testvar remoteHostIp 3.3.3.3 + # testvar startOtherLanFirst no + # testvar cdrouterOui B0750C + # testvar forwardingMaxFailures 20 + # testvar forwardingPort 5001 + # testvar jumboMtu disabled + # testvar tcpUdpPortStart 10000 + + SECTION "General Purpose HTTP Server" { + + # testvar httpServerIp 3.3.3.16 + # testvar httpServerPort 80 + # testvar httpServerRoot /tmp + + } + + SECTION "Free Network Range" { + + # testvar FreeNetworkStart 200.0.0.0 + # testvar FreeNetworkMask 255.255.255.0 + # testvar FreeNetworkStop 201.0.0.0 + + } + + SECTION "TCP MSS Clamping" { + + # testvar mssClampingValue default + # testvar mssClampingInValue default + + } + + SECTION "TCP/UDP Scaling Options" { + + # testvar scaleTcpConnsPerHost 5 + # testvar natMaxTcpConns 200 + # testvar natMaxUdpConns 100 + + } + + SECTION "Global Wireless Options" { + + # testvar wirelessRetry 3 + # testvar lanWirelessMaxClients auto + # testvar wifiCapture off + # testvar wifiCaptureFilter {} + + } + + } + + SECTION "Test Execution Options and Auto-Reboot" { + + # testvar startDelay 3 + # testvar lanStartDelay 3 + # testvar startTimeout 90 + # testvar wanCloseOnExit yes + # testvar RestartDut none + # testvar RestartDutDelay disabled + # testvar ShutdownDut "echo -n" + # testvar cpeRebootMode skip + # testvar healthCheckEnable no + + } + +} + +SECTION "CDRouter DOCSIS Add-On" { + + # testvar supportsDocsis no + + SECTION "Basic Configuration" { + + # testvar docsisIpProvisioningMode ipv4-only + # testvar docsisBootDelay 30 + + # testvar docsisClientMac auto + + } + + SECTION "IPv4 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIp 10.10.10.1 + # testvar docsisMask 255.255.255.0 + + } + + SECTION "DHCPv4 Server" { + + # testvar docsisDhcpServer 10.10.10.3 + # testvar docsisAssignIp 10.10.10.2 + # testvar docsisDomain docsis.qacafe.com + # testvar docsisDhcpLeaseTime 300 + # testvar docsisDhcpRapidCommit no + + # testvar docsisDhcpServerOptionCode1 69 + # testvar docsisDhcpServerOptionData1 04040404 + + # testvar docsisDhcpClientOptionCode1 60 + # testvar docsisDhcpClientOptionData1 04040404 + + SECTION "DHCPv4 Relay" { + + # testvar docsisGateway 6.6.6.7 + # testvar docsisAssignGateway 6.6.6.6 + # testvar docsisAssignMask 255.255.255.0 + # testvar docsisDhcpRelayServer 6.6.6.7 + + } + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogServer 10.10.10.5 + # testvar docsisTimeServer 10.10.10.6 + # testvar docsisTftpServer 10.10.10.4 + + } + + } + + SECTION "IPv6 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIpv6 8001::1 + # testvar docsisIpv6PrefixLen 64 + + } + + SECTION "DHCPv6 Server" { + + # testvar docsisDhcpIpv6Server 8001::3 + # testvar docsisAssignIpv6 8001::2 + # testvar docsisDHCPv6PreferredLifetime 300 + # testvar docsisDHCPv6ValidLifetime 300 + # testvar docsisDhcpv6RapidCommit no + + # testvar docsisDhcpv6ServerOptionCode1 69 + # testvar docsisDhcpv6ServerOptionData1 04040404 + + # testvar docsisDhcpv6ClientOptionCode1 60 + # testvar docsisDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Relay" { + + # testvar docsisIpv6Gateway 9001::1 + # testvar docsisAssignIpv6PrefixLen 64 + # testvar docsisDhcpv6RelayServer 9001::1 + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogIpv6Server 8001::5 + # testvar docsisTimeIpv6Server 8001::6 + # testvar docsisTftpIpv6Server 8001::4 + + } + + } + + SECTION "CM Config File" { + + SECTION "Global TFTP Settings" { + + # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp + # testvar docsisTftpBootFile auto-docsis.bin + + } + + SECTION "Embedded Config File" { + + # testvar docsisConfig { + # Main + # { + # NetworkAccess 1; + # BaselinePrivacy + # { + # AuthTimeout 10; + # ReAuthTimeout 10; + # AuthGraceTime 600; + # OperTimeout 1; + # ReKeyTimeout 1; + # TEKGraceTime 600; + # AuthRejectTimeout 60; + # SAMapWaitTimeout 1; + # SAMapMaxRetries 4; + # } + # MaxCPE 3; + # UsServiceFlow + # { + # UsServiceFlowRef 2; + # QosParamSetType 7; + # } + # DsServiceFlow + # { + # DsServiceFlowRef 1; + # QosParamSetType 7; + # } + # SNMPv1v2cCoexistenceConfig + # { + # SNMPv1v2cCommunityName "public"; + # SNMPv1v2cTransportAddressAccess + # { + # SNMPv1v2cTransportAddress 0.0.0.0/0; + # SNMPv1v2cTransportAddressMask 0.0.0.0/0; + # } + # SNMPv1v2cAccessViewType 2; + # SNMPv1v2cAccessViewName "docsisManagerView"; + # } + # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ + # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ + # /*EndOfDataMkr*/ + # } + # } + + } + + SECTION "Vendor Defined Config File" { + + # testvar docsisConfigFile none + + } + + } + + SECTION "CM Firewall Configuration" { + + SECTION "IPv4" { + + # testvar docsisTcpOpenPorts "22 443" + # testvar docsisTcpClosedPorts all + # testvar docsisUdpOpenPorts 1234 + # testvar docsisUdpClosedPorts all + + } + + SECTION "IPv6" { + + # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" + # testvar docsisIpv6TcpClosedPorts "2323 80" + # testvar docsisIpv6UdpOpenPorts 1234 + # testvar docsisIpv6UdpClosedPorts 113 + + } + + } + +} + +SECTION "CDRouter HomeKit Add-On" { + + # testvar supportsHomeKit no + + # testvar homeKitRouterName "HomeKit Router" + # testvar homeKitHATHostname hat.local + # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ + # testvar homeKitRouterSetupCode + + # testvar homeKitManualEnabled yes + +} + +SECTION "CDRouter IKE Add-On" { + + SECTION "Global IKE Options" { + + # testvar ikeMaxPhase2SA 20 + # testvar ikeDeadPeerDetection no + # testvar ikeNewQuickModeDelay 1000 + # testvar ikeKeepAlive 20 + # testvar ikeMinimumLifetime 20 + # testvar ipsecMinimumLifetime 20 + # testvar ikePhase2DeleteDelay 100 + # testvar ikeMaxTransforms 21 + # testvar ikeInitialContact yes + # testvar ikeBringUpTunnels yes + # testvar ikeAlwaysInitiate no + # testvar useSameIpsecTunnel no + # testvar ikeNatTraversal no + # testvar ike_FQDN fqdn-test.cdrouter.com + # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com + + } + + SECTION "IPsec Tunnel Configurations" { + + SECTION "IPsec Tunnel Configuration 1" { + + # testvar ipsecTunnelKeyType1 manual + # testvar ipsecTunnelEndpoint1 5.0.0.1 + # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 + # testvar ipsecTunnelRemoteMask1 255.255.255.0 + # testvar ipsecTunnelHost1 5.0.0.2 + + SECTION "Manual IPsec Tunnel Configuration" { + + # testvar ipsecTunnelOutboundSpi1 1000 + # testvar ipsecTunnelOutEncrypt1 des + # testvar ipsecTunnelOutEncryptKey1 0102030405060708 + # testvar ipsecTunnelOutAuth1 md5-hmac + # testvar ipsecTunnelOutAuthKey1 6262626262626262 + # testvar ipsecTunnelInboundSpi1 1001 + # testvar ipsecTunnelInEncrypt1 des + # testvar ipsecTunnelInEncryptKey1 0102030405060708 + # testvar ipsecTunnelInAuth1 md5-hmac + # testvar ipsecTunnelInAuthKey1 6262626262626262 + + } + + SECTION "IKE IPsec Tunnel Configuration" { + + # testvar ipsecTunnelIkeEncrypt1 des + # testvar ipsecTunnelIkeAuth1 md5-hmac + # testvar ipsecTunnelIkeGroup1 1 + # testvar ipsecTunnelIkeLifetime1 300 + # testvar ipsecTunnelEncrypt1 3des + # testvar ipsecTunnelAuth1 sha1-hmac + # testvar ipsecTunnelPfsGroup1 1 + # testvar ipsecTunnelLifetime1 120 + # testvar ipsecTunnelPsk1 qacafe123 + # testvar ipsecTunnelIkeMode1 main + # testvar ipsecTunnelUsesNat1 no + + } + + } + + } + +} + +SECTION "CDRouter IPv6 Add-On" { + + # testvar supportsIPv6 no + + SECTION "IPv6 WAN" { + + testvar ipv6WanMode PPPoE + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001::1 + # testvar ipv6WanIspAssignIp 3001::2 + # testvar ipv6WanIspNextIp 3001::3 + # testvar ipv6WanIspPrefixLen 64 + # testvar ipv6WanDutDuid 00000000 + # testvar ipv6RelayServer 192.88.99.1 + # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 + # testvar ipv6rdPrefix 2001:1234:: + # testvar ipv6rdPrefixLen 32 + # testvar ipv6rdIPv4MaskLen 0 + # testvar ipv6rdDHCPv4Option yes + # testvar ipv6TunnelMtuType static + # testvar ipv6WanMtu 1500 + # testvar ipv6WanMtuOption no + # testvar ipv6RASendInterval 10 + # testvar ipv6ExpectRAonWan no + + SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { + + # testvar ipv6WanIspGateway 3001::9 + # testvar ipv6WanAssignPrefixLen 64 + # testvar IPv6HopCount 1 + # testvar dhcpv6RelayServer 3001::9 + + } + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + # testvar ipv6WanRDNSS no + # testvar ipv6WanDNSSL no + + } + + SECTION "DHCPv6 Server" { + + # testvar dhcpv6IAValidLifetime 300 + # testvar dhcpv6IAPreferredLifetime 300 + # testvar dhcpv6DuidType 1 + # testvar dhcpv6RestartLatency 10 + # testvar dhcpv6ServerRapidCommit yes + + # testvar dhcpv6ServerOptionCode1 69 + # testvar dhcpv6ServerOptionData1 04040404 + + # testvar wanDhcpv6ClientOptionCode1 60 + # testvar wanDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Authentication" { + + # testvar supportsDhcpv6Auth no + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: + # testvar dhcpv6WanAssignPrefixLen 48 + # testvar dhcpv6PDLatency 30 + + } + + SECTION "IPv6 NTP" { + + # testvar ipv6NtpServer1 4321::23 + # testvar ipv6NtpServerName1 time.nist.gov + + # testvar ipv6NtpServer2 4321::24 + # testvar ipv6NtpServerName2 time.foo.com + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + testvar ipv6LanIp 3001:dddd::1 + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanPrefixLen 64 + # testvar ipv6MaxLanClients 32 + # testvar ipv6RAInterval 300 + # testvar ipv6LanSubnetId 1 + + SECTION "DHCPv6 Client" { + + # testvar dhcpv6ClientTimeout 5 + # testvar ipv6DhcpClientStart ::2 + # testvar ipv6DhcpClientEnd ::1f + # testvar ipv6DhcpClientExclude "::3 ::7" + # testvar ipv6DhcpClientValidLifetime 86400 + # testvar dhcpv6RapidCommit yes + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + SECTION "IPv6 LAN DNS" { + + # testvar ipv6DNStoLAN yes + # testvar ipv6RdnssSupport yes + # testvar ipv6DnsslSupport yes + # testvar ipv6LanStaticDns no + + } + + SECTION "Unique Local Address (ULA) Options" { + + # testvar supportsULA no + # testvar ipv6LanULAPrefix fd00:: + # testvar ipv6LanULAIp ::%eui64% + # testvar ipv6LanULAMode autoconf + + } + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + } + + SECTION "IPv6 Firewall" { + + # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" + # testvar ipv6FirewallTcpClosedPorts "2323 80" + # testvar ipv6FirewallUdpOpenPorts 1234 + # testvar ipv6FirewallUdpClosedPorts 113 + # testvar ipv6FirewallOutBlockedTcpPorts 1234 + # testvar ipv6FirewallOutBlockedUdpPorts 1234 + # testvar ipv6FirewallOutBlockedIpProtos 0 + # testvar ipv6WanPingRespond no + + SECTION "IPv6 TCP MSS Clamping" { + + # testvar ipv6MssClampingValue default + # testvar ipv6MssClampingInValue default + # testvar ipv6MssClampingTestPort 8096 + + } + + } + + SECTION "IPv6 Advanced Protocols" { + + SECTION "RIPng" { + + # testvar supportsRIPng no + + } + + SECTION "MLD (IPv6 Multicast)" { + + # testvar supportsIPv6Multicast yes + # testvar supportsIPv6MulticastOut no + # testvar mldVersion 2 + # testvar mldMaxGroups 64 + # testvar mldFastLeave no + # testvar ipv6MulticastCacheTimeout 10 + # testvar ipv6MulticastJoinDelay 2 + # testvar ipv6MulticastScaleDelay 1 + + SECTION "MLD Timers" { + + # testvar mldQueryInterval 125 + # testvar mldRobustnessVariable 2 + # testvar mldQueryResponseInterval 10 + + } + + SECTION "IPv6 IPTV Options" { + + # testvar ipv6IptvChannelRange 200 + # testvar ipv6IptvChannelChangeDelay 200 + # testvar ipv6IptvMaxFailures 10 + + } + + } + + } + + SECTION "IPv6 Additional Features" { + + SECTION "IPv6 Free Network Range" { + + # testvar ipv6RemoteHost 3001:051a:cafe::1 + # testvar ipv6FreeNetworkStart 3001:cafe:1:: + # testvar ipv6FreeNetworkPrefixLen 64 + # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: + + } + + SECTION "IPv6 Multicast Pool Ranges" { + + # testvar ipv6MulticastPoolStart ff0e::1 + # testvar ipv6MulticastPoolStop ff0e:ffff:: + # testvar ipv6SSMulticastPoolStart ff3e::8000:1 + # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff + + } + + } + +} + +SECTION "CDRouter Multiport Add-On" { + + SECTION "Additional WAN Interface Setup" { + + # testvar wanFailoverTimeout 300 + + IGNORE testvar_group wan2 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.2.1 + # testvar wanIspAssignIp 202.254.2.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.2.2 + # testvar wanIspNextIp 202.254.2.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.202.1 + # testvar pptpClientIp 202.254.202.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.202.1 + # testvar l2tpClientIp 202.254.202.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.102.1 + # testvar wanBackupDnsServer 202.254.102.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:2::1 + # testvar ipv6WanIspAssignIp 3001:0:0:2::2 + # testvar ipv6WanIspNextIp 3001:0:0:2::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + IGNORE testvar_group wan3 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.3.1 + # testvar wanIspAssignIp 202.254.3.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.3.2 + # testvar wanIspNextIp 202.254.3.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.203.1 + # testvar pptpClientIp 202.254.203.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.203.1 + # testvar l2tpClientIp 202.254.203.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.103.1 + # testvar wanBackupDnsServer 202.254.103.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:3::1 + # testvar ipv6WanIspAssignIp 3001:0:0:3::2 + # testvar ipv6WanIspNextIp 3001:0:0:3::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + } + + SECTION "Additional LAN Interface Setup" { + + # testvar useSameLanInterface no + + IGNORE testvar_group lan2 { + + SECTION "IPv4 LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanGuestMode no + + SECTION "LAN Host IP" { + + # testvar hostIp 192.168.1.0 + # testvar hostMask 255.255.255.0 + # testvar hostGateway 192.168.1.1 + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "DHCP Client Configuration" { + + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + # testvar dhcpExtraClientParams "69 70" + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Configuration Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + } + + SECTION "IPv4 Firewall and NAT" { + + SECTION "Static NAT" { + + # testvar staticNatIp 202.254.1.2 + # testvar staticNatFirewall yes + # testvar natMode port-restricted + + } + + SECTION "Special Application Port Triggers" { + + # testvar portTriggers no + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "TCP and UDP Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanStaticDns no + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + + SECTION "LAN IPv6 DHCP Client" { + + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + + } + + } + +} + +SECTION "CDRouter Performance Add-On" { + + # testvar supportsPerformance no + + SECTION "Basic Configuration" { + + # testvar perfWanIp 202.254.1.4 + # testvar perfWanIpv6 3001::4 + # testvar perfPort 19750 + # testvar perfPort2 19751 + + } + + SECTION "Performance Settings" { + + # testvar perfDuration 10 + # testvar perfDownloadBandwidth 0.0 + # testvar perfInterval auto + # testvar perfIncrement 5 + # testvar perfStreams 1 + # testvar perfStreamIncr 0 + # testvar perfUdpLen auto + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + # testvar perfOmit 0 + # testvar perfDSCP 0 + # testvar perfFairness no + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresholds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + SECTION "Advanced Options" { + + # testvar perfPingEnable no + # testvar perfEnableCapture no + # testvar perfLatencyAttempts 25 + # testvar perfApplicationAttempts 4 + # testvar perfApplicationDelay 100 + + } + + SECTION "Wireless" { + + IGNORE testvar_group wireless-performance { + + SECTION "Performance Settings" { + + # testvar perfDownloadBandwidth 0.0 + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresolds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + } + + } + +} + +SECTION "CDRouter Security Add-On" { + + SECTION "Internet Connection Sharing (ICS)" { + + # testvar enableICS no + # testvar icsInterface eth0 + # testvar icsShareIPv4 yes + # testvar icsShareIPv6 yes + + } + + SECTION "Traffic Analysis" { + + # testvar enableSuricata no + + } + + SECTION "Nmap Scans" { + + # testvar enableNmap no + # testvar nmapPorts 0-65535 + # testvar nmapScanTimeout 600 + # testvar nmapTimingTemplate 5 + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleBase auto + # testvar internetScheduleTimeZone auto + # testvar internetScheduleBlockedText "This website is blocked" + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + +} + +SECTION "CDRouter SNMP Add-On" { + + # testvar supportsSnmp no + + # testvar snmpPort 161 + # testvar snmpDefaultUser auto + # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" + # testvar snmpUpdateDelay 15 + + SECTION "SNMP Options and Users" { + + # testvar snmpManagerIp 3.3.3.33 + # testvar snmpManagerIpv6 3001:051a:cafe::33 + + IGNORE testvar_group snmpuser1 { + + # testvar snmpVersion 2c + + # testvar snmpAccess read-only + # testvar snmpTransport udp + # testvar snmpRetries 5 + # testvar snmpTimeout 5 + + SECTION "SNMP v1/2c Configuration" { + + # testvar snmpCommunity public + + } + + SECTION "SNMP v3 Configuration" { + + # testvar snmpSecurityLevel noAuthNoPriv + + # testvar snmpAuthProtocol MD5 + # testvar snmpAuthUsername qacafe + # testvar snmpAuthPassword qacafe123 + + # testvar snmpPrivacyProtocol DES + # testvar snmpPrivacyPassword qacafe123 + + # testvar snmpContextName bridge1 + # testvar snmpSecurityEngineId 800000020109840301 + # testvar snmpContextEngineId 800000020109840301 + + } + + } + + } + + SECTION "SNMP Scenarios" { + + # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp + # testvar snmpScenarioSingleMode no + # testvar snmpScenarioInterface lan + # testvar snmpScenarioIpVersion IPv4 + + } + +} + +SECTION "CDRouter Storage Add-On" { + + # testvar supportsStorage no + + # testvar storageFileSize 10 + # testvar storageUserFilePath none + # testvar useMulticastDNS no + + SECTION "SMB Options and Users" { + + # testvar supportsStorageSmb yes + # testvar storageSmbMaxSessions 20 + # testvar storageSmbTimeout 120 + # testvar storageSmbPacing 0 + + IGNORE testvar_group smbuser1 { + + # testvar server MyNAS + # testvar share data + # testvar folder /home/qacafe + # testvar guest no + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + + SECTION "FTP Options and Users" { + + # testvar supportsStorageFtp yes + # testvar supportsStorageFtps yes + # testvar storageFtpMaxSessions 20 + # testvar storageFtpTimeout 120 + # testvar storageFtpPacing 0 + + IGNORE testvar_group ftpuser1 { + + # testvar server MyNAS + # testvar path /home/qacafe + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + +} + +SECTION "CDRouter TR-069 Add-On" { + + testvar supportsCWMP yes + + SECTION "Basic ACS Configuration" { + + # testvar acsIp 6.0.0.1 + # testvar acsPort 80 + testvar acsDomain acs-download.qacafe.com + # testvar acsTransport http + # testvar acsAuth digest + # testvar acsDigestQopAuth yes + # testvar acsInterface wan + testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ + # testvar acsWaitForInform 120 + # testvar acsSkipInitialInform no + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar cwmpProtocolVersion 1.0 + # testvar acsDeviceDiscovery no + # testvar acsConfigurePeriodicInform yes + # testvar tr69InitiateConnection yes + testvar acsDefaultUser cdrouter + testvar acsDefaultPassword cdrouter + testvar acsCpeDefaultUser acs + testvar acsCpeDefaultPassword acs + # testvar acsFileServerUser file_server_user + # testvar acsFileServerPassword file_server_password + + } + + SECTION "XMPP Connection Request Configuration" { + + # testvar acsSupportsXmppConnReq no + + # testvar acsXmppServerConnectAlgorithm DNS-SRV + # testvar acsXmppConnReqUsername qacafe + # testvar acsXmppConnReqResource cdrouter + # testvar acsXmppConnReqPassword qacafe123 + # testvar acsXmppConnReqUseTls no + + } + + SECTION "Advanced ACS Configuration" { + + # testvar acsCpeKeepAlive yes + # testvar acsChunkedEncoding no + # testvar acsChunkSize 64 + # testvar acsAuthOncePerSession no + # testvar acsCookieMode rfc6265 + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + # testvar acsNumberCpeAttempts 2 + # testvar acsDelayCpeAttempts 10 + # testvar acsWaitForConnectionRequest yes + # testvar acsUseTcpOffload yes + # testvar acsTargetDevice tr069_device2 + # testvar acsDualStackIp 6000::1 + # testvar acsStrictSyntaxChecking on + + } + + SECTION "SSL Configuration" { + + # testvar acsSslVersion tls + # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem + # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem + # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsCipherSuite auto + # testvar acsClientCaCertPath /path/to/client/ca/file + + } + + SECTION "Profiles" { + + # testvar cwmpSupportedDataModel auto + # testvar cwmpDataValidation yes + # testvar cwmpSkipParameters empty + # testvar cwmpModifyParameters empty + # testvar cwmpVendorSpecificParams none + + SECTION "Custom CWMP Profiles" { + + IGNORE testvar_group cwmp_profile1 { + + # testvar cwmpProfileName myVendorParameters + # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp + # testvar cwmpProfileObject InternetGatewayDevice:1 + + } + + } + + } + + SECTION "CWMP Scenarios" { + + # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp + # testvar cwmpScenarioSingleMode no + # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp + + } + + SECTION "Additional TR-069 Options" { + + # testvar tr69DeviceType IGD + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69InformTimeout 120 + # testvar tr69MinPeriodicInform 60 + # testvar tr69ScheduleInformRPC yes + # testvar tr69UploadRPC no + # testvar tr69UploadPath /tmp + # testvar tr69ConfigUploadFilename vendor_configuration_file + # testvar tr69LogUploadFilename vendor_log_file + # testvar tr69FactoryResetRPC no + # testvar tr69CpeGetRPCs no + # testvar tr69ForceBoolean no + # testvar tr69XMLCapturePath /tmp/tr69-xml + # testvar tr69DownloadTimeout 600 + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadImageVersion 1.0 + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69RebootTimeout 300 + # testvar tr69RpcTimeout 180 + # testvar tr69DownloadConfig /path/to/config + # testvar tr69MaxUserNameLen 256 + # testvar tr69MaxPasswordLen 256 + # testvar tr69MaxCpeUserNameLen 256 + # testvar tr69MaxCpePasswordLen 256 + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DUInstallImageVersion 1.0 + # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image + # testvar tr69DUInstallImageAlternateVersion 1.0 + # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb + # testvar tr69DUChangeExecEnvRef openwrt + # testvar tr69DUChangeTimeout 600 + # testvar tr69WildcardPortMappingOnly no + # testvar tr69PortMapDeletionDelay 15 + # testvar tr69PortMapCreationDelay 0 + # testvar tr69PortMapDisableDelay 15 + # testvar tr69TraceRouteTimeout 120 + + } + + SECTION "TR-111 Parts 1 and 2" { + + # testvar supportsTr111Part1 yes + # testvar supportsTr111Part2 no + # testvar STUNMaximumKeepAlivePeriod 60 + # testvar STUNMinimumKeepAlivePeriod 60 + # testvar STUNAuth no + # testvar STUNUsername qacafe + # testvar STUNPassword qacafe123 + # testvar acsUdpConnectionDelay 0 + + } + + SECTION "TR-143 Performance Tests" { + + # testvar tr143HttpDownloadSize 1000000 + # testvar tr143HttpUploadSize 1000000 + + # testvar tr143HttpDownloadHighThreshold 0.0 + # testvar tr143HttpDownloadLowThreshold 5.0 + # testvar tr143HttpDownloadResponseMax 60 + + # testvar tr143HttpUploadHighThreshold 0.0 + # testvar tr143HttpUploadLowThreshold 5.0 + # testvar tr143HttpUploadResponseMax 60 + + } + + SECTION "TR-069 LAN Side Devices" { + + IGNORE testvar_group tr069_device2 { + + # testvar acsDefaultUser qacafe + # testvar acsDefaultPassword qacafe123 + # testvar acsCpeDefaultUser qacafe + # testvar acsCpeDefaultPassword qacafe123 + # testvar acsCreatePortMapOnIGD no + # testvar acsPortMapPublicPort 20000 + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69DeviceType IGD + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DownloadConfig /path/to/config + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + + } + + } + +} + +SECTION "CDRouter USP Add-On" { + + # testvar supportsUSP no + + SECTION "Basic Controller Configuration" { + + # testvar uspControllerID proto::controller-id + # testvar uspControllerInterface wan + + # testvar uspControllerIpMode ipv4-only + # testvar uspControllerIpv4 6.0.0.2 + # testvar uspControllerIpv6 6000::2 + # testvar uspControllerPort auto + # testvar uspControllerPath /controller-path + + # testvar uspControllerUseNonPayloadProtection no + # testvar uspControllerUseSessionContext no + # testvar uspControllerMTP websocket + # testvar uspControllerMTPEncryption no + # testvar uspControllerUSPEncryption no + # testvar uspControllerDomain controller.cdroutertest.com + + # testvar uspSegmentationEnable no + # testvar uspSegmentationSize auto + + # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + + # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + + # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerVerifyRecordIntegrity no + + # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem + + # testvar uspControllerHost any + # testvar uspControllerUsername qacafe + # testvar uspControllerPassword qacafe123 + + } + + SECTION "Basic Agent Configuration" { + + # testvar uspAgentID proto::agent-id + + # testvar uspAgentIpv4 auto + # testvar uspAgentIpv6 auto + # testvar uspAgentPort auto + # testvar uspAgentPath /agent-path + + # testvar uspMessageTimeout 30 + # testvar uspNotificationTimeout 30 + # testvar uspRebootTimeout 120 + + } + + SECTION "USP Scenarios" { + + # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp + # testvar uspScenarioSingleMode no + # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp + + } + + SECTION "Data Model" { + + # testvar uspSkipParameters empty + # testvar uspModifyParameters empty + # testvar uspSupportedDataModel all + + SECTION "Custom USP Data Model" { + + IGNORE testvar_group usp_profile_1 { + + # testvar uspProfileName myVendorParameters + # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml + + } + + } + + } + + SECTION "USP Agent Data Model Configuration" { + + # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + + # testvar uspParameterPath1 Device.DeviceInfo.ModelName + # testvar uspParameterPath2 Device.IP.Interface.3.Enable + # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory + # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode + + # testvar uspNotificationParamNewValue myCustomParameterValue + + # testvar uspObject1 Device.IP.Interface. + # testvar uspObject2 Device.WiFi.AccessPoint. + + # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} + # testvar uspValidSearchPathResultParam PeriodicNotifInterval + # testvar uspValidSearchPathResultValue 5000 + + # testvar uspFirmwareImage /path/to/firmware.bin + # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin + # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 + + } + +} + +SECTION "CDRouter BBF.069 Add-On" { + + # testvar supportsBBF069 yes + + SECTION "General" { + + SECTION "ACS URL" { + + # testvar bbf069ACSURL http://acs1.broadband-forum.org + # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org + + } + + SECTION "Security Certificates" { + + # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem + # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem + # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem + # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem + # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem + # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem + + } + + SECTION "HTTP Verification" { + + # testvar bbf069HTTPVerification no + + } + + } + + SECTION "Device Specific" { + + SECTION "General" { + + # testvar bbf069RootDataModel InternetGatewayDevice + # testvar bbf069UnsupportedRPC ChangeDUState + # testvar bbf069UploadType "1 Vendor Configuration File" + # testvar bbf069ExpectedUpgradeTime 100 + + } + + SECTION "Data Model" { + + # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069ActiveParamType unsignedInt + # testvar bbf069ActiveParamValue 60 + + # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069CompletePath1Type unsignedInt + # testvar bbf069CompletePath1Value 73 + + # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable + # testvar bbf069CompletePath2Type boolean + # testvar bbf069CompletePath2Value true + + # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. + # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. + # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv + # testvar bbf069InvalidPathType unsignedInt + + # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer + # testvar bbf069UnwritableType string + # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 + + } + + } + +} diff --git a/.testbed/cdrouter/configurations/vlan-ppp-ipv6 b/.testbed/cdrouter/configurations/vlan-ppp-ipv6 new file mode 100644 index 0000000000..fc5f5c5bd0 --- /dev/null +++ b/.testbed/cdrouter/configurations/vlan-ppp-ipv6 @@ -0,0 +1,2677 @@ +SECTION "About" { + + # Cable/DSL Router Test Suite + # + # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 + # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) + # + # Local.conf + # + # This is the main configuration file for CDRouter. This file defines the + # configuration of the router under test and controls various aspects of + # CDRouter's behavior. This file consists of a number of unique test variables + # called 'testvars' which are grouped by interface, protocol, or functionality. + # The basic syntax for all testvars is: + # + # testvar NAME VALUE + +} + +SECTION "Base Configuration" { + + SECTION "WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + testvar wanMode PPPoE + # testvar wanIspIp 202.254.1.1 + # testvar wanIspAssignIp 202.254.1.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.1.2 + # testvar wanIspNextIp 202.254.1.3 + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar wanIspAssignMask 255.255.255.0 + # testvar IPv4HopCount 1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + # testvar dhcpServerRapidCommit yes + # testvar dhcpServerClientIDBehavior rfc6842 + # testvar dhcpServerResponseDelay 4500 + # testvar dhcpConnectOnDemand no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar wanDhcpClientOptionCode1 60 + # testvar wanDhcpClientOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "DHCP Authentication" { + + # testvar supportsDhcpAuth no + + } + + SECTION "PPPoE Server" { + + # testvar pppoeConnectOnDemand no + # testvar pppoeIdleTimeout 60 + testvar pppoeUser softathome + testvar pppoePassword softathome + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + # testvar pppoeAcCookie auto + # testvar pppoeMaxPayload none + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpConnectOnDemand yes + # testvar pptpServerIp 202.254.201.1 + # testvar pptpClientIp 202.254.201.2 + # testvar pptpUseDHCP no + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpConnectOnDemand yes + # testvar l2tpServerIp 202.254.201.1 + # testvar l2tpClientIp 202.254.201.2 + # testvar l2tpUseDHCP no + + } + + SECTION "DS-Lite" { + + # testvar ipv6DsliteAftr 3001:aaaa::1 + # testvar dhcpv6WanAftrName aftr.qacafe.com + # testvar dsliteFirewallMode address-restricted + + } + + SECTION "MAP / LW4o6" { + + # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: + # testvar mapBmrRuleIpv6PrefixLen 48 + # testvar mapBmrRuleIpv4Prefix 5.0.0.0 + # testvar mapBmrRuleIpv4PrefixLen 24 + # testvar mapBmrRuleEABitLen 16 + + # testvar mapSharingRatio 256 + # testvar mapStartPort 4096 + # testvar mapPsid 255 + + # testvar mapEnableDhcpv6Options yes + + SECTION "MAP-E / LW4o6" { + + # testvar mapTunnelFlowLabel 0 + # testvar mapTunnelHopLimit 64 + # testvar mapTunnelTrafficClass 0 + + } + + SECTION "MAP-T" { + + # testvar mapDmrIpv6Prefix 5001:db8:: + # testvar mapDmrIpv6PrefixLen 48 + + # testvar mapTosTranslate yes + + } + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + # testvar pppConnectionDelay 10 + # testvar pppRestartTimeout 300000 + # testvar pppFailUsesICMP no + + } + + SECTION "WAN 802.1q VLAN" { + + testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "Wireless Access Point (AP)" { + + # testvar wanApBand 2.4GHz + # testvar wanApSSID qa-net + # testvar wanApChannel auto + + SECTION "WPA Authenticator" { + + # testvar wanApWpaMode RSN + # testvar wanApWpaKeyMgmt PSK + # testvar wanApWpaCipher CCMP-128 + # testvar wanApWpaGroupCipher auto + # testvar wanApWpaPMF auto + # testvar wanApWpaPsk qacafe123 + # testvar wanApWpaSaePassword "sae secret" + + } + } + + SECTION "WAN 802.1X and RADIUS" { + + SECTION "WAN RADIUS" { + + # testvar wanRadiusEnable no + # testvar wanRadiusInterface wan + # testvar wanRadiusIp 3.3.3.44 + # testvar wanRadiusSecret qacafe123 + # testvar wanRadiusServerAttrType1 200 + # testvar wanRadiusServerAttrData1 04040404 + + } + + SECTION "WAN EAP Settings" { + + # testvar wanEapType eap-md5 + + SECTION "WAN Supplicant Credentials" { + + # testvar wanEapIdentity1 user1 + # testvar wanEapPassword1 qacafe123 + + } + + SECTION "WAN Authentication Options" { + + # testvar wanEapRootCert /usr/cdrouter/tests/root.pem + # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem + # testvar wanEapServerCertPassword qacafe123 + # testvar wanEapFragmentSize 1024 + + } + + } + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.101.1 + # testvar wanBackupDnsServer 202.254.101.2 + # testvar wanBackupDnsServer2 0.0.0.0 + # testvar wanBackupDnsServer3 0.0.0.0 + # testvar DNStoDHCP no + # testvar supportsDnsProxy yes + # testvar supportsDnsCaching yes + # testvar dnsCacheSize 150 + # testvar dnsLookupTimeout 5 + # testvar dnsFailoverAuth "2 4 5" + # testvar dnsFailoverNonAuth "2 4 5" + # testvar dnsFailoverDelay 10 + # testvar dnsFailoverAttempts 20 + # testvar dnsRelayFailover 120 + # testvar dnsForwardServerStatus no + # testvar dnsUsageProfile opportunistic-privacy + # testvar dnsCaptive no + + SECTION "User Configurable DNS Entries" { + + # testvar dnsHostname1 test.qacafe.com + # testvar dnsIp1 5.5.5.5 + + } + + } + + SECTION "HTTP" { + + # testvar supportsHttpProxy yes + # testvar httpProxyIdleTimeout 30 + # testvar httpMaxHeaderCount 200 + + } + + SECTION "NTP" { + + # testvar ntpServer1 3.3.3.6 + # testvar ntpServerName1 time.nist.gov + # testvar ntpServer2 3.3.3.7 + # testvar ntpServerName2 time.foo.com + # testvar ntpStartDate "6/2/2007 11:00 am UTC" + # testvar ntpOffset 0 + # testvar enableRFC868TimeProtocol no + + } + + SECTION "Dynamic DNS" { + + # testvar supportsDynDns no + # testvar dynDnsServerIp 66.37.215.49 + # testvar dynDnsTransport http + # testvar dynDnsHostname test.domain.com + # testvar dynDnsUsername qacafe + # testvar dynDnsPassword qacafe123 + # testvar dynDnsSystem dyndns + # testvar dynDnsMx mail.domain.com + # testvar dynDnsBackMx no + # testvar dynDnsWildcard off + # testvar dynDnsAgent RAS/1.1 + # testvar dynDnsWait 30 + # testvar testDynDnsErrorCode no + # testvar dynDnsServerReturn !yours + + } + + SECTION "WINS Servers" { + + # testvar winsServer1 3.3.3.4 + # testvar winsServer2 3.3.3.5 + + } + + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanDomainName qacafe.com + # testvar lanMtu default + testvar lanHostname prplOS + # testvar lanGuestMode no + + SECTION "ARP Settings" { + + # testvar arpMode strict + # testvar arpSupportGratuitous yes + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + # testvar supportsDnsHostnameCreate no + + } + + SECTION "DHCP Client" { + + # testvar dhcpClientTimeout 5 + # testvar dhcpInform no + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpRapidCommit no + # testvar ipv4MaxLanClients auto + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpCreateDelay 0 + # testvar dhcpReleaseDelay 300 + # testvar dhcpServerMac auto + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + # testvar dhcpClientTrackSeconds no + # testvar dhcpClientRequestNtp no + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + SECTION "DHCP Client Extra Parameters" { + + # testvar dhcpExtraClientParams "69 70" + + } + + SECTION "DHCP Client Extra Options" { + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Hotspot Router Settings" { + + # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% + # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% + + SECTION "Hotspot Clients" { + + # testvar clientLoginName1 client1 + # testvar clientLoginPassword1 admin1 + + } + + SECTION "Advanced Hotspot Settings" { + + # testvar browserLoginProc example_login + # testvar browserLogoutProc example_logout + # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl + + } + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconRsnCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X and RADIUS" { + + SECTION "LAN RADIUS" { + + # testvar enableRADIUSserver yes + # testvar radiusHost remoteHost + # testvar radiusSecret qacafe123 + # testvar radiusServerAttrType1 200 + # testvar radiusServerAttrData1 04040404 + + } + + SECTION "LAN EAP Settings" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + SECTION "LAN Authentication Options" { + + # testvar eapRootCert /usr/cdrouter/tests/root.pem + # testvar eapServerCertPath /usr/cdrouter/tests/server.pem + # testvar eapServerCertPassword qacafe123 + # testvar eapFragmentSize 1024 + # testvar eapTxWhen 60 + # testvar eapQuietPeriod 60 + # testvar eapReAuthMax 2 + # testvar eapSendLogoffFailure yes + # testvar eapReAuthPeriod 0 + + } + + } + + } + + SECTION "LAN 802.1q VLAN" { + + testvar lanVlanId 200 + # testvar lanVlanPriority 0 + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "Firewall and NAT" { + + SECTION "NAT Options" { + + testvar natSimultaneousTcp yes + # testvar natSrcPort0 yes + # testvar natSupportsP2P yes + # testvar natPortParity yes + # testvar natMode port-restricted + # testvar natVerifyIpId yes + # testvar defaultTcpEchoPort 50000 + # testvar defaultUdpEchoPort 50000 + # testvar natRefreshBehavior both + + SECTION "NAT Timers" { + + # testvar natFinTimeout disabled + # testvar natRstTimeout disabled + # testvar natTcpTimeout disabled + # testvar natSynTimeout disabled + # testvar natUdpTimeout disabled + # testvar natDnsTimeout disabled + # testvar natIcmpTimeout disabled + # testvar natRtspTimeout disabled + # testvar natLagTime 0 + + } + + } + + SECTION "Protocol Pass Through" { + + SECTION "IPSEC Pass Through" { + + # testvar supportsIPSECpass yes + # testvar ipsecMaxTunnels 20 + # testvar ipsecScaleSameServer no + # testvar alwaysUseIke no + # testvar ipsecPassRetransmit no + # testvar unknownPassthrough yes + + } + + SECTION "PPTP Pass Through" { + + # testvar supportsPPTPpass yes + # testvar pptpMaxTunnels 20 + + } + + SECTION "L2TP Pass Through" { + + # testvar supportsL2TPpass yes + # testvar l2tpMaxTunnels 20 + + } + + SECTION "PPPoE Pass Through" { + + # testvar supportsPPPoEpass no + + } + + } + + SECTION "Port Triggers" { + + # testvar portTriggers no + # testvar portTriggerTimeout 0 + # testvar portTriggerDelay 0 + # testvar portTriggerOpenDelay 0 + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "Application Layer Gateways (ALGs)" { + + SECTION "MSN Messenger" { + + # testvar supportsMsnAlg no + # testvar msnNotificationServerPort 1863 + # testvar msnSwitchBoardServerPort 1863 + + } + + SECTION "RTSP" { + + # testvar supportsRtspAlg no + # testvar rtspTeardownDelay 5 + # testvar rtspGetParameterInterval 5 + + } + + SECTION "SIP" { + + # testvar supportsSipAlg yes + # testvar sipInterface wan + # testvar sipServerIp 3.3.3.8 + # testvar ipv6SipServerIp 3001:051a:cafe::4 + # testvar sipCallTeardownDelay 5 + # testvar sipMaxOutboundCalls 10 + # testvar sipMaxInboundCalls 10 + # testvar sipCallPacing 0 + # testvar sipScaleRunTime 30 + # testvar sipScaleServerPort 5060 + # testvar sipScaleClientPort 5060 + # testvar sipMaxUserNames -1 + # testvar rtpSendInterval 5000 + + } + + SECTION "FTP" { + + # testvar ftpPortTimeout 120 + + } + + } + + SECTION "Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + SECTION "Port Scanning, Firewall and DoS Options" { + + # testvar portScanStart 0 + # testvar portScanStop 65535 + # testvar portScanDelay 1 + testvar firewallTcpOpenPorts "50805" + # testvar firewallTcpClosedPorts 2323 + # testvar firewallUdpOpenPorts 1234 + testvar firewallUdpClosedPorts 68 + # testvar firewallOutBlockedTcpPorts 1234 + # testvar firewallOutBlockedUdpPorts 1234 + # testvar firewallOutBlockedIpProtos 0 + # testvar wanPingRespond no + + SECTION "Denial of Service Options" { + + # testvar dosRecoveryTime 5 + # testvar dosAttackAttempts 100 + # testvar dutMgmtPort 80 + # testvar dutSecureMgmtPort disabled + # testvar dosSynAttackPort 80 + # testvar dosSynAttackAttempts 100 + + } + + SECTION "Deprecated SSL Protocols and Ciphers" { + + # testvar sslDeprecatedProtocols "sslv2 sslv3" + # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" + + } + + } + + SECTION "DMZ" { + + # testvar lanDmzHost 192.168.1.253 + # testvar lanDmzTcpPortExceptions 113 + # testvar lanDmzUdpPortExceptions 1234 + # testvar lanDmzIpProtoExceptions 2,47 + # testvar lanDmzSupportsIcmp no + + } + + SECTION "URL Filtering" { + + # testvar urlFilterSupported no + # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" + # testvar non-filtered-urls http://qacafe.com + # testvar urlFilterBlockedText "This website is blocked" + + } + + SECTION "XBox Live Options" { + + # testvar xboxNatMinType open + # testvar xboxPort 3074 + # testvar xboxMtu 1364 + + } + + } + + SECTION "Advanced Protocols" { + + SECTION "RIP v1/v2" { + + # testvar ripSupported no + # testvar ripVersion 1 + # testvar ripV2mode multicast + # testvar ripAuthMode none + # testvar ripPassword qacafe123 + # testvar ripMaxRoutes 96 + # testvar ripRouteTimeout 180 + # testvar ripGarbageTimeout 120 + # testvar ripRouteDelay 5000 + # testvar ripAcceptWanUpdate no + + } + + SECTION "UPnP" { + + # testvar upnpSupported yes + # testvar upnpVersion 1.1 + # testvar upnpDevice InternetGatewayDevice:2 + # testvar upnpWANPPPConnection no + # testvar upnpLANDevice no + # testvar upnpMaxTcpMappings 10 + # testvar upnpMaxSubClients 10 + # testvar upnpMinSubTimeout 40 + # testvar upnpMaxSubTimeout 3600 + # testvar upnpWANFailureTimeout 120 + # testvar upnpPortStart 40000 + # testvar upnpPortStop 50000 + + } + + SECTION "LLDP" { + + # testvar supportsLLDP no + # testvar lldpLanMac none + # testvar lldpLanChassisMac auto + # testvar lldpMsgFastTx 1 + # testvar lldpMsgTxInterval 30 + # testvar lldpTxFastInit 4 + + } + + SECTION "IGMP (Multicast)" { + + # testvar supportsMulticast yes + # testvar multicastType proxy + # testvar supportsMulticastOut no + # testvar igmpVersion 2 + # testvar igmpFastLeave no + # testvar igmpRouterOption yes + # testvar igmpMaxGroups 64 + # testvar multicastCacheTimeout 10 + # testvar multicastPoolStart 224.0.1.0 + # testvar multicastPoolStop 239.255.255.255 + # testvar SSMulticastPoolStart 232.0.1.1 + # testvar SSMulticastPoolStop 232.0.1.255 + # testvar multicastJoinDelay 2 + # testvar multicastScaleDelay 1 + # testvar multicastInterface wan + # testvar multicastBypassPPPoE no + + SECTION "IGMP Timers" { + + # testvar igmpQueryInterval 125 + # testvar igmpRobustnessVariable 2 + # testvar igmpQueryResponseInterval 10 + + } + + SECTION "IPTV Options" { + + # testvar iptvChannelRange 200 + # testvar iptvChannelChangeDelay 200 + # testvar iptvMaxFailures 10 + + } + + } + + SECTION "GRE Tunnels" { + + # testvar greDFflag on + + IGNORE testvar_group greTunnel1 { + + SECTION "Generic IPv4 GRE Tunnel Endpoints" { + + # testvar greType IPv4 + # testvar greEndpoint 5.5.5.5 + # testvar greLocalNet 192.168.1.0 + # testvar greLocalMask 255.255.255.0 + + } + + SECTION "L2GRE Options" { + + # testvar greWanGroup wan2 + + } + + SECTION "L3GRE Remote IPv4 Network" { + + # testvar greHost 3.0.0.1 + # testvar greRemoteNet 3.0.0.0 + # testvar greRemoteMask 255.0.0.0 + + } + + } + + } + + } + + SECTION "Additional Features" { + + # testvar supportsIPv4 yes + # testvar internalSmtpServer 5.5.5.5 + # testvar remoteHostIp 3.3.3.3 + # testvar startOtherLanFirst no + # testvar cdrouterOui B0750C + # testvar forwardingMaxFailures 20 + # testvar forwardingPort 5001 + # testvar jumboMtu disabled + # testvar tcpUdpPortStart 10000 + + SECTION "General Purpose HTTP Server" { + + # testvar httpServerIp 3.3.3.16 + # testvar httpServerPort 80 + # testvar httpServerRoot /tmp + + } + + SECTION "Free Network Range" { + + # testvar FreeNetworkStart 200.0.0.0 + # testvar FreeNetworkMask 255.255.255.0 + # testvar FreeNetworkStop 201.0.0.0 + + } + + SECTION "TCP MSS Clamping" { + + # testvar mssClampingValue default + # testvar mssClampingInValue default + + } + + SECTION "TCP/UDP Scaling Options" { + + # testvar scaleTcpConnsPerHost 5 + # testvar natMaxTcpConns 200 + # testvar natMaxUdpConns 100 + + } + + SECTION "Global Wireless Options" { + + # testvar wirelessRetry 3 + # testvar lanWirelessMaxClients auto + # testvar wifiCapture off + # testvar wifiCaptureFilter {} + + } + + } + + SECTION "Test Execution Options and Auto-Reboot" { + + # testvar startDelay 3 + # testvar lanStartDelay 3 + # testvar startTimeout 90 + # testvar wanCloseOnExit yes + # testvar RestartDut none + # testvar RestartDutDelay disabled + # testvar ShutdownDut "echo -n" + # testvar cpeRebootMode skip + # testvar healthCheckEnable no + + } + +} + +SECTION "CDRouter DOCSIS Add-On" { + + # testvar supportsDocsis no + + SECTION "Basic Configuration" { + + # testvar docsisIpProvisioningMode ipv4-only + # testvar docsisBootDelay 30 + + # testvar docsisClientMac auto + + } + + SECTION "IPv4 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIp 10.10.10.1 + # testvar docsisMask 255.255.255.0 + + } + + SECTION "DHCPv4 Server" { + + # testvar docsisDhcpServer 10.10.10.3 + # testvar docsisAssignIp 10.10.10.2 + # testvar docsisDomain docsis.qacafe.com + # testvar docsisDhcpLeaseTime 300 + # testvar docsisDhcpRapidCommit no + + # testvar docsisDhcpServerOptionCode1 69 + # testvar docsisDhcpServerOptionData1 04040404 + + # testvar docsisDhcpClientOptionCode1 60 + # testvar docsisDhcpClientOptionData1 04040404 + + SECTION "DHCPv4 Relay" { + + # testvar docsisGateway 6.6.6.7 + # testvar docsisAssignGateway 6.6.6.6 + # testvar docsisAssignMask 255.255.255.0 + # testvar docsisDhcpRelayServer 6.6.6.7 + + } + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogServer 10.10.10.5 + # testvar docsisTimeServer 10.10.10.6 + # testvar docsisTftpServer 10.10.10.4 + + } + + } + + SECTION "IPv6 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIpv6 8001::1 + # testvar docsisIpv6PrefixLen 64 + + } + + SECTION "DHCPv6 Server" { + + # testvar docsisDhcpIpv6Server 8001::3 + # testvar docsisAssignIpv6 8001::2 + # testvar docsisDHCPv6PreferredLifetime 300 + # testvar docsisDHCPv6ValidLifetime 300 + # testvar docsisDhcpv6RapidCommit no + + # testvar docsisDhcpv6ServerOptionCode1 69 + # testvar docsisDhcpv6ServerOptionData1 04040404 + + # testvar docsisDhcpv6ClientOptionCode1 60 + # testvar docsisDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Relay" { + + # testvar docsisIpv6Gateway 9001::1 + # testvar docsisAssignIpv6PrefixLen 64 + # testvar docsisDhcpv6RelayServer 9001::1 + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogIpv6Server 8001::5 + # testvar docsisTimeIpv6Server 8001::6 + # testvar docsisTftpIpv6Server 8001::4 + + } + + } + + SECTION "CM Config File" { + + SECTION "Global TFTP Settings" { + + # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp + # testvar docsisTftpBootFile auto-docsis.bin + + } + + SECTION "Embedded Config File" { + + # testvar docsisConfig { + # Main + # { + # NetworkAccess 1; + # BaselinePrivacy + # { + # AuthTimeout 10; + # ReAuthTimeout 10; + # AuthGraceTime 600; + # OperTimeout 1; + # ReKeyTimeout 1; + # TEKGraceTime 600; + # AuthRejectTimeout 60; + # SAMapWaitTimeout 1; + # SAMapMaxRetries 4; + # } + # MaxCPE 3; + # UsServiceFlow + # { + # UsServiceFlowRef 2; + # QosParamSetType 7; + # } + # DsServiceFlow + # { + # DsServiceFlowRef 1; + # QosParamSetType 7; + # } + # SNMPv1v2cCoexistenceConfig + # { + # SNMPv1v2cCommunityName "public"; + # SNMPv1v2cTransportAddressAccess + # { + # SNMPv1v2cTransportAddress 0.0.0.0/0; + # SNMPv1v2cTransportAddressMask 0.0.0.0/0; + # } + # SNMPv1v2cAccessViewType 2; + # SNMPv1v2cAccessViewName "docsisManagerView"; + # } + # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ + # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ + # /*EndOfDataMkr*/ + # } + # } + + } + + SECTION "Vendor Defined Config File" { + + # testvar docsisConfigFile none + + } + + } + + SECTION "CM Firewall Configuration" { + + SECTION "IPv4" { + + # testvar docsisTcpOpenPorts "22 443" + # testvar docsisTcpClosedPorts all + # testvar docsisUdpOpenPorts 1234 + # testvar docsisUdpClosedPorts all + + } + + SECTION "IPv6" { + + # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" + # testvar docsisIpv6TcpClosedPorts "2323 80" + # testvar docsisIpv6UdpOpenPorts 1234 + # testvar docsisIpv6UdpClosedPorts 113 + + } + + } + +} + +SECTION "CDRouter HomeKit Add-On" { + + # testvar supportsHomeKit no + + # testvar homeKitRouterName "HomeKit Router" + # testvar homeKitHATHostname hat.local + # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ + # testvar homeKitRouterSetupCode + + # testvar homeKitManualEnabled yes + +} + +SECTION "CDRouter IKE Add-On" { + + SECTION "Global IKE Options" { + + # testvar ikeMaxPhase2SA 20 + # testvar ikeDeadPeerDetection no + # testvar ikeNewQuickModeDelay 1000 + # testvar ikeKeepAlive 20 + # testvar ikeMinimumLifetime 20 + # testvar ipsecMinimumLifetime 20 + # testvar ikePhase2DeleteDelay 100 + # testvar ikeMaxTransforms 21 + # testvar ikeInitialContact yes + # testvar ikeBringUpTunnels yes + # testvar ikeAlwaysInitiate no + # testvar useSameIpsecTunnel no + # testvar ikeNatTraversal no + # testvar ike_FQDN fqdn-test.cdrouter.com + # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com + + } + + SECTION "IPsec Tunnel Configurations" { + + SECTION "IPsec Tunnel Configuration 1" { + + # testvar ipsecTunnelKeyType1 manual + # testvar ipsecTunnelEndpoint1 5.0.0.1 + # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 + # testvar ipsecTunnelRemoteMask1 255.255.255.0 + # testvar ipsecTunnelHost1 5.0.0.2 + + SECTION "Manual IPsec Tunnel Configuration" { + + # testvar ipsecTunnelOutboundSpi1 1000 + # testvar ipsecTunnelOutEncrypt1 des + # testvar ipsecTunnelOutEncryptKey1 0102030405060708 + # testvar ipsecTunnelOutAuth1 md5-hmac + # testvar ipsecTunnelOutAuthKey1 6262626262626262 + # testvar ipsecTunnelInboundSpi1 1001 + # testvar ipsecTunnelInEncrypt1 des + # testvar ipsecTunnelInEncryptKey1 0102030405060708 + # testvar ipsecTunnelInAuth1 md5-hmac + # testvar ipsecTunnelInAuthKey1 6262626262626262 + + } + + SECTION "IKE IPsec Tunnel Configuration" { + + # testvar ipsecTunnelIkeEncrypt1 des + # testvar ipsecTunnelIkeAuth1 md5-hmac + # testvar ipsecTunnelIkeGroup1 1 + # testvar ipsecTunnelIkeLifetime1 300 + # testvar ipsecTunnelEncrypt1 3des + # testvar ipsecTunnelAuth1 sha1-hmac + # testvar ipsecTunnelPfsGroup1 1 + # testvar ipsecTunnelLifetime1 120 + # testvar ipsecTunnelPsk1 qacafe123 + # testvar ipsecTunnelIkeMode1 main + # testvar ipsecTunnelUsesNat1 no + + } + + } + + } + +} + +SECTION "CDRouter IPv6 Add-On" { + + testvar supportsIPv6 yes + + SECTION "IPv6 WAN" { + + testvar ipv6WanMode PPPoE + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001::1 + # testvar ipv6WanIspAssignIp 3001::2 + # testvar ipv6WanIspNextIp 3001::3 + # testvar ipv6WanIspPrefixLen 64 + # testvar ipv6WanDutDuid 00000000 + # testvar ipv6RelayServer 192.88.99.1 + # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 + # testvar ipv6rdPrefix 2001:1234:: + # testvar ipv6rdPrefixLen 32 + # testvar ipv6rdIPv4MaskLen 0 + # testvar ipv6rdDHCPv4Option yes + # testvar ipv6TunnelMtuType static + # testvar ipv6WanMtu 1500 + # testvar ipv6WanMtuOption no + # testvar ipv6RASendInterval 10 + # testvar ipv6ExpectRAonWan no + + SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { + + # testvar ipv6WanIspGateway 3001::9 + # testvar ipv6WanAssignPrefixLen 64 + # testvar IPv6HopCount 1 + # testvar dhcpv6RelayServer 3001::9 + + } + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + # testvar ipv6WanRDNSS no + # testvar ipv6WanDNSSL no + + } + + SECTION "DHCPv6 Server" { + + # testvar dhcpv6IAValidLifetime 300 + # testvar dhcpv6IAPreferredLifetime 300 + # testvar dhcpv6DuidType 1 + # testvar dhcpv6RestartLatency 10 + # testvar dhcpv6ServerRapidCommit yes + + # testvar dhcpv6ServerOptionCode1 69 + # testvar dhcpv6ServerOptionData1 04040404 + + # testvar wanDhcpv6ClientOptionCode1 60 + # testvar wanDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Authentication" { + + # testvar supportsDhcpv6Auth no + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: + # testvar dhcpv6WanAssignPrefixLen 48 + # testvar dhcpv6PDLatency 30 + + } + + SECTION "IPv6 NTP" { + + # testvar ipv6NtpServer1 4321::23 + # testvar ipv6NtpServerName1 time.nist.gov + + # testvar ipv6NtpServer2 4321::24 + # testvar ipv6NtpServerName2 time.foo.com + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + testvar ipv6LanIp 3001:dddd::1 + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanPrefixLen 64 + # testvar ipv6MaxLanClients 32 + # testvar ipv6RAInterval 300 + # testvar ipv6LanSubnetId 1 + + SECTION "DHCPv6 Client" { + + # testvar dhcpv6ClientTimeout 5 + # testvar ipv6DhcpClientStart ::2 + # testvar ipv6DhcpClientEnd ::1f + # testvar ipv6DhcpClientExclude "::3 ::7" + # testvar ipv6DhcpClientValidLifetime 86400 + # testvar dhcpv6RapidCommit yes + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + SECTION "IPv6 LAN DNS" { + + # testvar ipv6DNStoLAN yes + # testvar ipv6RdnssSupport yes + # testvar ipv6DnsslSupport yes + # testvar ipv6LanStaticDns no + + } + + SECTION "Unique Local Address (ULA) Options" { + + # testvar supportsULA no + # testvar ipv6LanULAPrefix fd00:: + # testvar ipv6LanULAIp ::%eui64% + # testvar ipv6LanULAMode autoconf + + } + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + } + + SECTION "IPv6 Firewall" { + + # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" + # testvar ipv6FirewallTcpClosedPorts "2323 80" + # testvar ipv6FirewallUdpOpenPorts 1234 + # testvar ipv6FirewallUdpClosedPorts 113 + # testvar ipv6FirewallOutBlockedTcpPorts 1234 + # testvar ipv6FirewallOutBlockedUdpPorts 1234 + # testvar ipv6FirewallOutBlockedIpProtos 0 + # testvar ipv6WanPingRespond no + + SECTION "IPv6 TCP MSS Clamping" { + + # testvar ipv6MssClampingValue default + # testvar ipv6MssClampingInValue default + # testvar ipv6MssClampingTestPort 8096 + + } + + } + + SECTION "IPv6 Advanced Protocols" { + + SECTION "RIPng" { + + # testvar supportsRIPng no + + } + + SECTION "MLD (IPv6 Multicast)" { + + # testvar supportsIPv6Multicast yes + # testvar supportsIPv6MulticastOut no + # testvar mldVersion 2 + # testvar mldMaxGroups 64 + # testvar mldFastLeave no + # testvar ipv6MulticastCacheTimeout 10 + # testvar ipv6MulticastJoinDelay 2 + # testvar ipv6MulticastScaleDelay 1 + + SECTION "MLD Timers" { + + # testvar mldQueryInterval 125 + # testvar mldRobustnessVariable 2 + # testvar mldQueryResponseInterval 10 + + } + + SECTION "IPv6 IPTV Options" { + + # testvar ipv6IptvChannelRange 200 + # testvar ipv6IptvChannelChangeDelay 200 + # testvar ipv6IptvMaxFailures 10 + + } + + } + + } + + SECTION "IPv6 Additional Features" { + + SECTION "IPv6 Free Network Range" { + + # testvar ipv6RemoteHost 3001:051a:cafe::1 + # testvar ipv6FreeNetworkStart 3001:cafe:1:: + # testvar ipv6FreeNetworkPrefixLen 64 + # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: + + } + + SECTION "IPv6 Multicast Pool Ranges" { + + # testvar ipv6MulticastPoolStart ff0e::1 + # testvar ipv6MulticastPoolStop ff0e:ffff:: + # testvar ipv6SSMulticastPoolStart ff3e::8000:1 + # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff + + } + + } + +} + +SECTION "CDRouter Multiport Add-On" { + + SECTION "Additional WAN Interface Setup" { + + # testvar wanFailoverTimeout 300 + + IGNORE testvar_group wan2 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.2.1 + # testvar wanIspAssignIp 202.254.2.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.2.2 + # testvar wanIspNextIp 202.254.2.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.202.1 + # testvar pptpClientIp 202.254.202.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.202.1 + # testvar l2tpClientIp 202.254.202.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.102.1 + # testvar wanBackupDnsServer 202.254.102.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:2::1 + # testvar ipv6WanIspAssignIp 3001:0:0:2::2 + # testvar ipv6WanIspNextIp 3001:0:0:2::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + IGNORE testvar_group wan3 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.3.1 + # testvar wanIspAssignIp 202.254.3.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.3.2 + # testvar wanIspNextIp 202.254.3.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.203.1 + # testvar pptpClientIp 202.254.203.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.203.1 + # testvar l2tpClientIp 202.254.203.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.103.1 + # testvar wanBackupDnsServer 202.254.103.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:3::1 + # testvar ipv6WanIspAssignIp 3001:0:0:3::2 + # testvar ipv6WanIspNextIp 3001:0:0:3::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + } + + SECTION "Additional LAN Interface Setup" { + + # testvar useSameLanInterface no + + IGNORE testvar_group lan2 { + + SECTION "IPv4 LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanGuestMode no + + SECTION "LAN Host IP" { + + # testvar hostIp 192.168.1.0 + # testvar hostMask 255.255.255.0 + # testvar hostGateway 192.168.1.1 + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "DHCP Client Configuration" { + + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + # testvar dhcpExtraClientParams "69 70" + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Configuration Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + } + + SECTION "IPv4 Firewall and NAT" { + + SECTION "Static NAT" { + + # testvar staticNatIp 202.254.1.2 + # testvar staticNatFirewall yes + # testvar natMode port-restricted + + } + + SECTION "Special Application Port Triggers" { + + # testvar portTriggers no + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "TCP and UDP Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanStaticDns no + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + + SECTION "LAN IPv6 DHCP Client" { + + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + + } + + } + +} + +SECTION "CDRouter Performance Add-On" { + + # testvar supportsPerformance no + + SECTION "Basic Configuration" { + + # testvar perfWanIp 202.254.1.4 + # testvar perfWanIpv6 3001::4 + # testvar perfPort 19750 + # testvar perfPort2 19751 + + } + + SECTION "Performance Settings" { + + # testvar perfDuration 10 + # testvar perfDownloadBandwidth 0.0 + # testvar perfInterval auto + # testvar perfIncrement 5 + # testvar perfStreams 1 + # testvar perfStreamIncr 0 + # testvar perfUdpLen auto + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + # testvar perfOmit 0 + # testvar perfDSCP 0 + # testvar perfFairness no + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresholds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + SECTION "Advanced Options" { + + # testvar perfPingEnable no + # testvar perfEnableCapture no + # testvar perfLatencyAttempts 25 + # testvar perfApplicationAttempts 4 + # testvar perfApplicationDelay 100 + + } + + SECTION "Wireless" { + + IGNORE testvar_group wireless-performance { + + SECTION "Performance Settings" { + + # testvar perfDownloadBandwidth 0.0 + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresolds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + } + + } + +} + +SECTION "CDRouter Security Add-On" { + + SECTION "Internet Connection Sharing (ICS)" { + + # testvar enableICS no + # testvar icsInterface eth0 + # testvar icsShareIPv4 yes + # testvar icsShareIPv6 yes + + } + + SECTION "Traffic Analysis" { + + # testvar enableSuricata no + + } + + SECTION "Nmap Scans" { + + # testvar enableNmap no + # testvar nmapPorts 0-65535 + # testvar nmapScanTimeout 600 + # testvar nmapTimingTemplate 5 + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleBase auto + # testvar internetScheduleTimeZone auto + # testvar internetScheduleBlockedText "This website is blocked" + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + +} + +SECTION "CDRouter SNMP Add-On" { + + # testvar supportsSnmp no + + # testvar snmpPort 161 + # testvar snmpDefaultUser auto + # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" + # testvar snmpUpdateDelay 15 + + SECTION "SNMP Options and Users" { + + # testvar snmpManagerIp 3.3.3.33 + # testvar snmpManagerIpv6 3001:051a:cafe::33 + + IGNORE testvar_group snmpuser1 { + + # testvar snmpVersion 2c + + # testvar snmpAccess read-only + # testvar snmpTransport udp + # testvar snmpRetries 5 + # testvar snmpTimeout 5 + + SECTION "SNMP v1/2c Configuration" { + + # testvar snmpCommunity public + + } + + SECTION "SNMP v3 Configuration" { + + # testvar snmpSecurityLevel noAuthNoPriv + + # testvar snmpAuthProtocol MD5 + # testvar snmpAuthUsername qacafe + # testvar snmpAuthPassword qacafe123 + + # testvar snmpPrivacyProtocol DES + # testvar snmpPrivacyPassword qacafe123 + + # testvar snmpContextName bridge1 + # testvar snmpSecurityEngineId 800000020109840301 + # testvar snmpContextEngineId 800000020109840301 + + } + + } + + } + + SECTION "SNMP Scenarios" { + + # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp + # testvar snmpScenarioSingleMode no + # testvar snmpScenarioInterface lan + # testvar snmpScenarioIpVersion IPv4 + + } + +} + +SECTION "CDRouter Storage Add-On" { + + # testvar supportsStorage no + + # testvar storageFileSize 10 + # testvar storageUserFilePath none + # testvar useMulticastDNS no + + SECTION "SMB Options and Users" { + + # testvar supportsStorageSmb yes + # testvar storageSmbMaxSessions 20 + # testvar storageSmbTimeout 120 + # testvar storageSmbPacing 0 + + IGNORE testvar_group smbuser1 { + + # testvar server MyNAS + # testvar share data + # testvar folder /home/qacafe + # testvar guest no + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + + SECTION "FTP Options and Users" { + + # testvar supportsStorageFtp yes + # testvar supportsStorageFtps yes + # testvar storageFtpMaxSessions 20 + # testvar storageFtpTimeout 120 + # testvar storageFtpPacing 0 + + IGNORE testvar_group ftpuser1 { + + # testvar server MyNAS + # testvar path /home/qacafe + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + +} + +SECTION "CDRouter TR-069 Add-On" { + + testvar supportsCWMP yes + + SECTION "Basic ACS Configuration" { + + # testvar acsIp 6.0.0.1 + # testvar acsPort 80 + testvar acsDomain acs-download.qacafe.com + # testvar acsTransport http + # testvar acsAuth digest + # testvar acsDigestQopAuth yes + # testvar acsInterface wan + testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ + # testvar acsWaitForInform 120 + # testvar acsSkipInitialInform no + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar cwmpProtocolVersion 1.0 + # testvar acsDeviceDiscovery no + # testvar acsConfigurePeriodicInform yes + # testvar tr69InitiateConnection yes + testvar acsDefaultUser cdrouter + testvar acsDefaultPassword cdrouter + testvar acsCpeDefaultUser acs + testvar acsCpeDefaultPassword acs + # testvar acsFileServerUser file_server_user + # testvar acsFileServerPassword file_server_password + + } + + SECTION "XMPP Connection Request Configuration" { + + # testvar acsSupportsXmppConnReq no + + # testvar acsXmppServerConnectAlgorithm DNS-SRV + # testvar acsXmppConnReqUsername qacafe + # testvar acsXmppConnReqResource cdrouter + # testvar acsXmppConnReqPassword qacafe123 + # testvar acsXmppConnReqUseTls no + + } + + SECTION "Advanced ACS Configuration" { + + # testvar acsCpeKeepAlive yes + # testvar acsChunkedEncoding no + # testvar acsChunkSize 64 + # testvar acsAuthOncePerSession no + # testvar acsCookieMode rfc6265 + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + # testvar acsNumberCpeAttempts 2 + # testvar acsDelayCpeAttempts 10 + # testvar acsWaitForConnectionRequest yes + # testvar acsUseTcpOffload yes + # testvar acsTargetDevice tr069_device2 + # testvar acsDualStackIp 6000::1 + # testvar acsStrictSyntaxChecking on + + } + + SECTION "SSL Configuration" { + + # testvar acsSslVersion tls + # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem + # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem + # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsCipherSuite auto + # testvar acsClientCaCertPath /path/to/client/ca/file + + } + + SECTION "Profiles" { + + # testvar cwmpSupportedDataModel auto + # testvar cwmpDataValidation yes + # testvar cwmpSkipParameters empty + # testvar cwmpModifyParameters empty + # testvar cwmpVendorSpecificParams none + + SECTION "Custom CWMP Profiles" { + + IGNORE testvar_group cwmp_profile1 { + + # testvar cwmpProfileName myVendorParameters + # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp + # testvar cwmpProfileObject InternetGatewayDevice:1 + + } + + } + + } + + SECTION "CWMP Scenarios" { + + # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp + # testvar cwmpScenarioSingleMode no + # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp + + } + + SECTION "Additional TR-069 Options" { + + # testvar tr69DeviceType IGD + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69InformTimeout 120 + # testvar tr69MinPeriodicInform 60 + # testvar tr69ScheduleInformRPC yes + # testvar tr69UploadRPC no + # testvar tr69UploadPath /tmp + # testvar tr69ConfigUploadFilename vendor_configuration_file + # testvar tr69LogUploadFilename vendor_log_file + # testvar tr69FactoryResetRPC no + # testvar tr69CpeGetRPCs no + # testvar tr69ForceBoolean no + # testvar tr69XMLCapturePath /tmp/tr69-xml + # testvar tr69DownloadTimeout 600 + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadImageVersion 1.0 + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69RebootTimeout 300 + # testvar tr69RpcTimeout 180 + # testvar tr69DownloadConfig /path/to/config + # testvar tr69MaxUserNameLen 256 + # testvar tr69MaxPasswordLen 256 + # testvar tr69MaxCpeUserNameLen 256 + # testvar tr69MaxCpePasswordLen 256 + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DUInstallImageVersion 1.0 + # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image + # testvar tr69DUInstallImageAlternateVersion 1.0 + # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb + # testvar tr69DUChangeExecEnvRef openwrt + # testvar tr69DUChangeTimeout 600 + # testvar tr69WildcardPortMappingOnly no + # testvar tr69PortMapDeletionDelay 15 + # testvar tr69PortMapCreationDelay 0 + # testvar tr69PortMapDisableDelay 15 + # testvar tr69TraceRouteTimeout 120 + + } + + SECTION "TR-111 Parts 1 and 2" { + + # testvar supportsTr111Part1 yes + # testvar supportsTr111Part2 no + # testvar STUNMaximumKeepAlivePeriod 60 + # testvar STUNMinimumKeepAlivePeriod 60 + # testvar STUNAuth no + # testvar STUNUsername qacafe + # testvar STUNPassword qacafe123 + # testvar acsUdpConnectionDelay 0 + + } + + SECTION "TR-143 Performance Tests" { + + # testvar tr143HttpDownloadSize 1000000 + # testvar tr143HttpUploadSize 1000000 + + # testvar tr143HttpDownloadHighThreshold 0.0 + # testvar tr143HttpDownloadLowThreshold 5.0 + # testvar tr143HttpDownloadResponseMax 60 + + # testvar tr143HttpUploadHighThreshold 0.0 + # testvar tr143HttpUploadLowThreshold 5.0 + # testvar tr143HttpUploadResponseMax 60 + + } + + SECTION "TR-069 LAN Side Devices" { + + IGNORE testvar_group tr069_device2 { + + # testvar acsDefaultUser qacafe + # testvar acsDefaultPassword qacafe123 + # testvar acsCpeDefaultUser qacafe + # testvar acsCpeDefaultPassword qacafe123 + # testvar acsCreatePortMapOnIGD no + # testvar acsPortMapPublicPort 20000 + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69DeviceType IGD + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DownloadConfig /path/to/config + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + + } + + } + +} + +SECTION "CDRouter USP Add-On" { + + # testvar supportsUSP no + + SECTION "Basic Controller Configuration" { + + # testvar uspControllerID proto::controller-id + # testvar uspControllerInterface wan + + # testvar uspControllerIpMode ipv4-only + # testvar uspControllerIpv4 6.0.0.2 + # testvar uspControllerIpv6 6000::2 + # testvar uspControllerPort auto + # testvar uspControllerPath /controller-path + + # testvar uspControllerUseNonPayloadProtection no + # testvar uspControllerUseSessionContext no + # testvar uspControllerMTP websocket + # testvar uspControllerMTPEncryption no + # testvar uspControllerUSPEncryption no + # testvar uspControllerDomain controller.cdroutertest.com + + # testvar uspSegmentationEnable no + # testvar uspSegmentationSize auto + + # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + + # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + + # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerVerifyRecordIntegrity no + + # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem + + # testvar uspControllerHost any + # testvar uspControllerUsername qacafe + # testvar uspControllerPassword qacafe123 + + } + + SECTION "Basic Agent Configuration" { + + # testvar uspAgentID proto::agent-id + + # testvar uspAgentIpv4 auto + # testvar uspAgentIpv6 auto + # testvar uspAgentPort auto + # testvar uspAgentPath /agent-path + + # testvar uspMessageTimeout 30 + # testvar uspNotificationTimeout 30 + # testvar uspRebootTimeout 120 + + } + + SECTION "USP Scenarios" { + + # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp + # testvar uspScenarioSingleMode no + # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp + + } + + SECTION "Data Model" { + + # testvar uspSkipParameters empty + # testvar uspModifyParameters empty + # testvar uspSupportedDataModel all + + SECTION "Custom USP Data Model" { + + IGNORE testvar_group usp_profile_1 { + + # testvar uspProfileName myVendorParameters + # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml + + } + + } + + } + + SECTION "USP Agent Data Model Configuration" { + + # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + + # testvar uspParameterPath1 Device.DeviceInfo.ModelName + # testvar uspParameterPath2 Device.IP.Interface.3.Enable + # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory + # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode + + # testvar uspNotificationParamNewValue myCustomParameterValue + + # testvar uspObject1 Device.IP.Interface. + # testvar uspObject2 Device.WiFi.AccessPoint. + + # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} + # testvar uspValidSearchPathResultParam PeriodicNotifInterval + # testvar uspValidSearchPathResultValue 5000 + + # testvar uspFirmwareImage /path/to/firmware.bin + # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin + # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 + + } + +} + +SECTION "CDRouter BBF.069 Add-On" { + + # testvar supportsBBF069 yes + + SECTION "General" { + + SECTION "ACS URL" { + + # testvar bbf069ACSURL http://acs1.broadband-forum.org + # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org + + } + + SECTION "Security Certificates" { + + # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem + # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem + # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem + # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem + # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem + # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem + + } + + SECTION "HTTP Verification" { + + # testvar bbf069HTTPVerification no + + } + + } + + SECTION "Device Specific" { + + SECTION "General" { + + # testvar bbf069RootDataModel InternetGatewayDevice + # testvar bbf069UnsupportedRPC ChangeDUState + # testvar bbf069UploadType "1 Vendor Configuration File" + # testvar bbf069ExpectedUpgradeTime 100 + + } + + SECTION "Data Model" { + + # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069ActiveParamType unsignedInt + # testvar bbf069ActiveParamValue 60 + + # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069CompletePath1Type unsignedInt + # testvar bbf069CompletePath1Value 73 + + # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable + # testvar bbf069CompletePath2Type boolean + # testvar bbf069CompletePath2Value true + + # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. + # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. + # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv + # testvar bbf069InvalidPathType unsignedInt + + # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer + # testvar bbf069UnwritableType string + # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 + + } + + } + +} diff --git a/.testbed/cdrouter/packages/CDRouter-IPv6-Top-100+mDNS.gz b/.testbed/cdrouter/packages/CDRouter-IPv6-Top-100+mDNS.gz new file mode 100644 index 0000000000000000000000000000000000000000..f1773553d4f201cc06da962ed3abf12b7b2dc15a GIT binary patch literal 20310 zcma%?Q*>rcw60^@$rszUZQHh;bZk56*tTt_zp zopU}#6bl0b0_zwB@+~H=>g3^W;mRPR?8(WX?&QqC!puzPAg-v!U~OSyZsE#k>*nML zqCV49AHs|gdG{$e9@v+bt4X||frV|BHp|U^^oKnn9mAZYw&txnj0y%cg%B| z8SkArfy(dE-#1}CE0sGpUDn+NBjq&EIx&Om?8n`cR_DCSyDumR$oKdEJpKeQFSLSy zfDrwE^yhy&a@iN?M%tA^{r3Hi;bWishv$R?r%|D2{f~DBly5fQ_$z0^Dhms zR)b30YW1%s^oMOD>1x_ftni-a@t&rVojfz)tSR|2RT`R~Z++-x=Aj)DRv(GGeB9S@ zd=({&l@Ik|Kthl4JO)zg36&EADoKg7gSh=P_wl^B9>p{=X_YNpuZYjRM!r+8$eXp1 zua}QcZ|=)@s1cLz+D#$A^Lw6G9&0R#gC378tV9@Ao{NU+3`mrW9JRPUnpRO^#ci^ z0MgeR5`Q{(5oSV*<2OFSP9ikX_z98r(&fZUpt#GQ$FcKd=R{_7tAFIr7*MVaS|&S7q^IU>aj6z&yoH!NF;D~ z!a5XozmY?ifOp%uSJbeOoMj4B0unN5w3c>usT4$sdBR2qMBALY7*ZNQdLjAU29jtE zUEo~ZMpRZh2pI{2lH~dw<@)3$bL&Kb#=vq|+YuWfnn_L#^*t5fAM)d_0r(@bgdm6q zY?GgXZE-qNInBv9Y$upr$p)`%k}v7lSS=+=28uGX|H-!Wf&eVBaS)Z-5H_4i-<(;7 z8?hEMD7J~_?VQV*O-Db3DfOa9uDmF)@mu=p69yil+_s>yn*L&2$#I#emT0Kg@>eY- zcV+aCh|($@vfpsUJw^7Rn26rV{@FycqtI7m1H+WPT@WWl<^UINH?2V^G zM4!98WNyWk;E_n{Sf<334q6mo+=Ni17KKD9#$shmu(rTjT2GYIgKf98Rm0z%?1TUL?4l5-t%KC;?Z7N5@&yCgWK zkNT^yhYJgXuvL;MVrwAf*Q=gYxg)lPs5K*)N z{DuU{N2_xt0;noqD)_h$l+(tTw{fIyg%iZdhhmW@-Q_nlI~}Hu3PzO2C!xZVHVkb{ zwazZzZCpx3*`V-7l}KQi`vB{w-?K{*g?=A~P68Sd=yb4k>qxdJ8xdU6XNSL4D_AYk zmlhKn2jJcf`}u4oY#87?fiqH%sAf5J(AAjUW#7vtZBcT|)in7F*snWH-uAr32L~Dr zupl^HaY4O*evZ?;TnE%Zyyks!>UlJ<2sEmWtS?z>l4llAM)2m+I&a({kE4ik6G9ub zR4fXRBScPf4k6C|B!DU?i{>HG;+C3cmchTk#F^lsjd4tX%RY!I?hN17kxvIg=c*}~=*nXk+m)&d_E`v`b&B{*{ZcHBH+|Ip@ktBAFhlKi>75}&`*n_q9&bIBntJKM{BlxkcCPw&T9qL|7K0t#u zx;S=fO@LbpmKKgVn)FF%8Ur0JAe;UhkMMOqNxnI8l{3oT{}12$>r&vGBp9?&U2abW z{s-3|iYTa|3cg>IdF2vqnLTiqd=?F^JSxv7apbQnea(N#vW99Y^@NxmR3n1pU|y6 zcju(G$o%oxnj$DFwQ?HSTbr3;aiFxwyQG9e>(|_KvlCUz>-H1}@!wCUK!MmVJ)DDP z6v1p7aTfPkCk_J)V1G-c6^=U~pQH-7ZRhN~VfH;25}*}oK2~P0da=!WFD**1LX~zr zla-{GE9U0I3$yDOse0iZp>{JlJ&9I}QkH3-$CxBBMlthYh$75FYZq#OAN;2In+|{&-DTEVojmG(oi9|mI)An;2jZUmSR&#e0 z@ij|u-*G8TG1*PQLlx^)h9J~=IJa=0TuE(XI;n~GnWP~BM_Dmr;SYx=36u9@M-f-M z0eJcRii8%=)-`Go-A6$=B<|mJ+fIoa>+LfCg?D?;gVum-ne1fIU-jv=n%N_x3)et4 zaw3zzbu)gQ>hwF?B7kXSGRUY0_J$0{kpe6+UYpb3)&_CLP#F31!tI#KgE@P#gic3xw$2w@iZU(3n9V|3|T&XQ0c0EMF`#mFo z2)Qk|`d6S-5jknxN%)~dZ5Rj)P#X6%67O-g?@0F7a0|1EeswCZ)7g?2lM5Sn`){9aML5`_#P2Zu%^+q!3+pxwI;78$!y2DD>49|;X z{~|bsn03?yrYzu--S}0w+|w{n2m5}Kx9vrpWqMhqYb-d=vQ3Du0eNrk0x8+D`<4Zz zIfd%htM-e}Ho5289Q>mkNgpjLO*YFiXvcUL>(@9grs!vKf7eEU{H)6*!t#xtm)6uo8q$Uj!2gZqmzA^Pcr%HS5y2Qv8mnVsI{nSOv<`}~lj zfjPOKYg|^E?;-%?m+aXfx|Pu#?vb}Jb7+HIk@|ZG#S9HCMT+wYas=5hWw#^d8hYxM z9jKP&z57pT_I=6JWD25h!hfdOCV=f)xy&RZvi(MNwqLdrYL6FI)DwS-wF#@guBG2lXmc@DCC%eQiVNJMLAhVkTq9G`g!# zTASbYu37+7n-X|t1*v)f1#QBv#F&oOp$=Evw?`XxI#&l6ecLh5 z8Pqgau@pvpsv%Z4m@fGSFBus6So$klnMHDC6as)TW9^(c4yXrtKT z`|KU0!cPqk_7VBchw-5d63V(z2Y+_B%<3Sq_NIW7CVw5mi_=EW@y~7oVSQo)%+g;Y z&eie+XK+~^SOe|!xmp|*mg)yxjr2QOi(?!>J1T`=(Gw><->i7IX_x$-`8hp}FqUj< zjgU!n2cHsj{Y<`Rg4Fyf0AlaLWR-Yn)e}vkY$gP`K z1*MT*lP^HFv{+#GWaxs)F@&9|!-Be6f6!Kxou|M~W8@JZ={`Q`O0ux21 zkU<{Og+$RBs71SM8fFSTB;(U=KV6G=Gx*)VC_PSjP(FZrI@lX-P=O+ZKU^U45fR{H zpZ^q?vCMzHX2>pb-$$6;R!5q$vYx^fTkE=7gT8B$4FX~ov4XiU#6${fnmAvyDI^3K zGk_`LuXG(~R~}@+hhMI^rv`RLlGx(lLR2iS4$K5*-9lxpzf^U14V?nxzB4Q4A*ULa z7%07d6f05`UsBJ;+)YNaisg~lK7H$9QGY)VY}GM3IZ?(=5BM>>f9_F-O5EXpzZ<2e zuAF~8TwOBx2r$QabMj9;}crQDCNqlr)qp1Q53Umojbs=?p>lq@GmX!NjGENzFr%%UIeiQTZ)9 zp1x2=C^M6KqbMvq&f)mKY$WBfhnp;DkU3FB9_&3{Zk03eh1BK<=b!ZYS}B zS)~Efzw;$Lyb^ms_$&FbldOvowR_;DtWW1!6T8Or%=ZYEZ#d(7@Ys;e`K@azoczE=Xiuv*Os>SI3lvm5~+SY z3g{AM2eLI?Urc6mrFvK+(nW#>yN5qph?0od=+u(=12|hFr-dJ^vyNMh?Ai_Kk5+Q( z6n)agCOnuo&lZh!O5{%YG!Z)hf_Y}-HW|qp>Fjv@h4@Z}Ct2?yIzbWVrEUZk8HS5+x!@1kKrYTw+qZe8ndo}-!f>l-K{uUbJ!^C=T)x&4{x44kdj^%Rbr z&Zyt_4w9O|~8 z<>!PtOF~l%xHP#<@gqB9Gl8i*C6eJ{()aB4Sn$bNQStHXGVE`9#;L4%KzcMxzf(4K zI=S1in+2Jla+Nl~oo|0*S?FL+LI@-WC$(7Kw%+ zP9??fc3YPC*s`?!fj#G(7^kU6|4r~unB2QX;CH+*{7kJ=9V+)l&uNJ{W!@}<@Q9za zho2x%h<}f1>vVoPjOVI?G43;SB4P$Eh6~x5L)Px5)aqH3#q}l6c#IsGg|wyKXBYN+&-*eiMj`f+iG)>t7cY~_pBW*hqJDtmMg-3uI( zO|mJUn~zgJO2nPo@{^rxl6lsV-1680p@#Ss3kb~MK^_z{cDO^oaHA`s#Z~4SXoN(5 zbP30PSQtUP7|bRbdxdXr5oQm=<-T64!p9(QRWdqrPiSJ^;rHey{xf4~!y>I}&kK-& z+#vvVLcmjaa#f|kTsgDMN1k=qU!4W`m;0{LL>n2?h+ml)!^u35mPkXnFNJjobeb2n zlN50?K&VArON4C5S^uHUlm<20f3n}@?UGNydH83mR5gguP0!P)J%q+-BJZ+AvZ7WUq3aA3i2Q8%@;M*Sr%?x4xPot(#cHQ={v zN!Gp0l3=uBjgvc_IsQ^kTVuQH0JPw7P(ZxMP0?>CSicO+}yo)-5N$M^IuUW7=hq^)e`L*k62s;(nC$?emRkL65S2kYnk zv3@kQj_xYY#x<33O(uD$W9sh>o*SdT;99$w_)Fvr%J!zX`EM;xtAk!mkwHVZ%g#*l z8#ks(J@&7~7r_|X+t(*40rJ030WoW+1>CkzSDs>nUUyy~^KAWmnjM!0PyAxdqvmue z5j_dN>_h46<`7U3(32d`ap_AJ;t(bsbFn(8Web$Q&Y#Q>+FA>#(uPlS_&7j8G#S~! z`%7c5c8>bh@4J~HEQ25DjDAIy&W_vWV%2Do{sDRp(?eS;59X-?Nf$IUT2yO!+UQ#F zB|h?UR?hL3^=cr6BG8hBcBFaNYb27T#nB?^jrb&z`4M%-D%2kGp=y9b8Y;x7F8VFg z8eVTM8wUQ_LDOfKYR|5`dJ5egOKh(zb$4TBCBMrI?VhUm^y<3tp5RiSws$jDPvo#K zcQXv0`ryAjc@OdFEl+^=H*$)+?>%oud=VlSqF156Gh)Aw?ng_l(WNclzY)UFX$+Hi zLUXif(Y;>LNZ1fBjE!g3DeW!xavRg5IfLooPrwNK`5q|wPcyU-9`I!B+$h z%`}FjD5c9;6R~%U%+r{I0vvD6uCBN&oy`E+IN!6g*D$B0^y9BRD>L+A%)GX-P3U~4 zXZ7IFvD7Uxjr9Gb5;k4WfE`0+FTv$N;HRF5C2M_}b>TMayQz*?{pVqe;(J%z`OIo? z%XQ(tu^b-EeQvW1jCdv6dMgBv{(0`%x6}KFTcv9eFJF9Sa97MVW6U!q!&A~tCbuWA zIggdh#G^Gq*W*v2AXKwaqvsfbY`A~h?I&f3bz270c|!ajro8m`$ywK~w607{`y!Pw z>8|{(m#RBt>HqA?3+fuLq%R zMt~IZxq6a2eV$|9(?E!Nu>5Od72t3%nRhHxbc;k&UkIcDUnpfCI=G#uiv1c>|EGbQ zm!2&%xWPap=gDZ+=(xZ%tI3p%+t-6BY=G`^OX5SVBBzd*qMFeKu9k6Bn1dyEq8L~+ zzyBR&MT_p2eQ(X77JTn^WQ9Y6idm9;{~Anp>V7x?6MJl_1t!S@|U zs07Kd=5nzw{Uu-of!V{Rz6 z#X|4n+qzIH9H+}gb(w->Eok`N(VN`60Dtac#d-QG1G(N$OBE#iBI?`A!1i?4)*z$7 zj45#EKM~-)b|FckFRxE%>U)NJZA+X|Ej0>Y1}@mS-|BLOWBpm*eh;rt&4ioCAB!f9 zv&q&@g+lv!u_`2pcNuL%ey{FO@1{A{eMADj3qv#Ubq zWis^DfeeB+-Y@7YT>avSu543{s~m=a3@)PdWZc+(xbFw*J-9N*zii$;jXmy@v3OrM$lhNe|QMfJ@!%AU*42}HcK90 zi48X|sncL;v5re&*gI;`EN(K!VD%`aGfA0XX`-n`gGyFy)UCyJN|o$CA`Pu0~-zwKcOAAmr{upGzHfb7q3yjE#4Lq(TZ`aISTSGt-l5QI9fTuJ1o4%yu^Pq5oo=P$n_lFh$pr7AhO zg62PuGZ%X@RvM~%CG!+#!0gAt+GTEy#He5dRSNbK`y(phx z^Bh+c7=W>6QVgxW_i0fL)T8W3VaRM3HEN)f`Q{rGg5a`*pnmsA^Q5HrmMtsy8WrcFf4+87nX(WqQ{bH&6 z08P^i3Lw%@*mXG{hQHguDS5_k{i2t^Lw%M!jj9;Sf{L0~IQjj~_pHi?@M89#fgExr zU_J8T_OhI}s94;;9|EfWJYtz9WEBty?SWN<{h&RkLHp;V=%$fL>*JCs2>Qw_??>Wa z=~Y8l)&`q!tj?dR#!WvT{y0OZWY58$s%B$BUS2~Q6)^pt8Z2ErFlTjz`ZRnDROPJA zq~1bjZ?K*Djh1Mcfnh1AfO|4*#qz_mO<*&6L3Q)5%zdAyp8HKH_3dh2dY8!F_7xhn zIOS0`S6vj`&IF&l4r>7a4?QtlDM-w(t-7b{j2aUXX}YTYU*BjVOZ9NoJML}Q zGH2G~6+~bTi``{TAFp^B-7JJNP#3|+)Fp)PR-?t8&M=$*ZIh_E>?6M~LSs}W z@ScIz$~YmM5-mI4nzwM6*Qt~p8bqHr&F4yFEo(LN*q>j-e`WnROjea@^yayJhqZ8Q z&Gh3FS`TVfq`Y85^zdAuH^IJ=Ag$1mt#FTcVjAwC7SH=uV~^+J zHm~eG8CXYbJDS#ctE8W1e>SrdIe{i*WVCnQiUFHG=IO3|^xW zwfThZtv`>xP{&we#7K=Z70PL&yQXg54!@Wb@*vsOLZ^0ng)b*;K~)7t1YWp|z-zCi zvb0q) za2X&DuqhV!^>&|eKx6i?Rs1ci;&$hyr4$5_iT*i@2ZR zpi@QG(HYD*yGP4~V%fUGPv;iZl6k`)##+AYmO2e8}66?o>ofWPW&)2AziR+z9WEW$HVlcJ(YUi9$EiS+GeKrF2RI;DVi72S^; zuur1fUWn<(XMHmGCzaG;S@0@4CDvuS9u`i%k2wQWSK}uletw8Q@aGCGbrIn}{fADo z==^(%em61|)fl2b9D$*AO7OgY2}46g3%mj{ud%toD!&8VkjUJzkcp&-iWU4&6X!~B z1oEG_Zj^+?zoEW7(ay~hqOcG&zD=F)zV5(~=7j9u0Nm%u(14e{57bAZMIQd|TPL6s zl@a*U<)Kps`B$%r;@!U9wbSZk<}sHwQK=RAPC6)C>(F6ceb`7&RmU(veXSV}zrim+ z^Xx$vM#Y9D3lYplf2Cc)xVvYFmrA6Vv!~^@q+6l0kpv_NWpowHTSC(_rR|Gi<-*0F zf%;CPSZ8{Yq(j(fu1jKJzh_vIH&WiU&A_*afVuG)hF16tMRP;m-q|gN{w=gA28JR& z;bM6GZ@4BFF#h5L>?M5D1K!DRGLBlF{+G1tMW)Pl-hs*sU5Wa=vR=>PX6pz&_7cCV z1luNc&)OVHztYKx0>$88nzx3) z5Vg=tp#MmD0pY$PEMdmw!tQa4p&fm!>$VF|jO6hB^-7yCU#LlyN+WE828h!X&~`@- z4Oy`>f&N`uUd?Iypa)g(;6a3qPSP;05om|quB8U^tC@O(*w+dUzx4yvWRl=gxFEcdCwqVK?`iPAAN{%7hO<49IEIx+Yn=Mg zuGkpVC&EC3FrTt~C_9c#Y@# z1q73P{Es3jJ5kMN36(P$`wD^}S&Oiyv7J5S8|CWJ$&$#6S}PhN$zxOYLv7w8%?sVI4v|}XbXW@tJ}v$+D9ArK;?9F zb&A0iAMLhGsRWohwAo0F+Ahe!NvkA{77rfDiW(cg2((s*#dhU%U+GcLzpmx%)3Ka+ z%}g_2n#N2<#ii=kSTB(-OSQI-fX)rHaTomex~SmLAAY>~c+j@-Bl-SwasDW&??*En z!?aks@`QdneJ)f-t93gH1gRFa4&HiJ6=KKe&{uw;gEN>jD2;7)iNKJj_On!3E;>Td zG@D`?Op=`sXZztr7?xyb(Q1SMT7vw&)fYyoftY^|16Br_?heCobhq#5-5Zqt;sg<2 z#6+ueXOvy%qU&qH_`%1b$4w9GPbj%;Nt*RvP%CA-9PUQ{wjEls*`D#v;~Ol&q0=^9 z*y?qvWtDn6IA}L06@ZPs`+w(c#HdSrQX9}nZcA}SpO{1An7)q73vsgAk36c|uy1K! z)uKWJDXfsiemgu1jpG7@rOtaqQRk$IM`Vzf5sl~;h2pX-@7$Z8kos*nh7l9;Pvbd1 z@`<+}-1x!s7rH~9cjU7>3$L1%LT%>w%2`NMHFO092je@|rzU9@JkZXH8)T#?-#hiw zxV>RtSpc?NY3C?zW7koue3z(?C=RM*Y0;P+FYj4Ns-k3;+VQ7oT{~9cim91rOEFE& z6)h-g^IT87jEZ^}E5j{#BbzG5B*0|d`S94|xRZZ-3cZ``r2`E#-vUw{3jV|0OW?KU zMmzV8if`a);=118WItkTNrcYV*K5{4V7qKjbZhjpf0rN`nD5_m_rg>;TGBG`0+ldo z?64ZGnC2F4=3|Oknrs&HkmpwOc}~A8$7|}?W|XZ#MQ`0WgmXLF=EH(batlc2Q_XI8@7e9r)r`$o;F8L>G^Ck>H0R63-fOMD|{;gM5Plk{PuJH9eK)J<+jB6xvKG`RaL#5iUug9_&KOP9 znHYXgFgjEQW_HfK<62Ji*An!FPpQqo9GBLYnHs8K{Be2TyI`NBSkOO z+0S1E_$b0;hyzu;ndLLg*AvIqrlcq;5}LL|g12=oY&Q{fBc&F)ArTWZ0$BZJLNM7Oow%@mEwTRt8-gVAJn^;6C+UmimMY!%=NY~Xg&*!@RX^aS6y@tiXsk%?WYN78 zO48cdw&tj>t>`2R+#*CXq1RW&oX%xN`W@0LRA?$MV4>*@zI*nqg;Y(c+Btg?^eV&j>N`vNExilz^0Q=!JHa zm0I@`WHjx|v}=w4g`Jj^n9s~Ek6scmA`6=(|EYCF+k(Apq|(%4z-f$PRSjVsXudTz zL52%AuvBjJN1$hQ&8J_3|GMVJGdM8Vc`1{tUX8FUJUDqBIDu2Us??YMVGS!#C z_02|>1wRGiLBb7BR68{u2+rJ(&xx03EBPwGr?kkGi=FhHD-2{+3+ zV4qM=Ox@RL<4{H1O$Xo*4I%BTu*a2PhA(oxw|#K7FdMOJd;N$%upUJwcK9(PE!>VSNajk3X7EXs9YiVoQc$ovk$BM2J2z1U_D$r~yF)(vB8M{Z~sv>b$@q~(LA^@IJ( zeZ-oYC)8BV!1_+9E6ENj*Jc9B*};LyPCLAd%>}_vH?bV2x{i&1sbIiHg+s^b*VaNk zbR2!R)N9~rgr^;%byHED0B9MEY{qf{U_&ziNl!7*(YmMgWFFCh2Gc|Rv#ZE~Akij3 zih<>f=KEhuj(aTlO+~X-aU~g)-*ud=dN3bRh*ur3AO9+t{rc`I$_o|ZYK_nOx7fcm z0UHeTOQ?X2fNAylPLD+{$nUKMO>r{^IG_EN-e4ErkZ*;5za?ZZ_Wn20!Mfm!XrSmS zJzPyLZriF#X*{C+zfr2^^1M&^*JMsDyOgI&YObVxYt+INznG#OKe|*i;TgE5p1V4I|E6WgLDDudTvHKzbe`nUpHF%5* zAoV$`V)X(`E|gJu+dp&xJ7|1$N;`aWI+H;HX(Fsj+0%L(J`F2aDj!D=v2Uf~?k6(T zniLzqn98ESUjLY_2b~L0nq%^CX%{3@50kR6=43@!i!1 zTzA^5rN0n8VT-Tl78caG(&(6522=2!A20CmQewZHnYFL+_xfsW<;aP&ND_2O_tN~r z$PHD(T$k808>Ff(X>)X^qXoHIqbaPYOXc&~PIq5SG(Io2qXI+-yIh-*x3U@=>xkj> zVP7_Ah`}IZT*dvLwnSgyeGKfM$A3~P;?qs9FgbFx-paeQyN&m{@k>d^S?N5R@_{Y7 zx@ffQQG+Gt@SGG{abs}w=!ej<2`ElJ+vs|B zwEDmaGuJ6ql4N;_GEPHdrpjU8_5BAgGu#))G4u|BeeDQLeRODoN9oIMX?kdc=-YDT zF{W=1El7LN{CIFZQ9bM+dB8boAOIr{N)9~sq-}nX^M@R*XdCEws79Un;Bw0JMw#hm z-*fVk$(k(g=%sC;A3`-J3`j5)r;dw^?g;UN z43-P4H9Hm^y5>j&-H&p@{@6fcWI1!Z36LPSi80o;in{)!N>PCi&st05iP1au0#V~A z(UwTu7N=7at2Mp>_FRoU@7ta{5h4vZovsd>ia?7kq_LVrr+!4+iZBc9p9XE7YsK`} z6ek|(76q$vmQBApE_UUUUp;en>SMx74Prc)I=}759F!gt95YVW9Je~rET226_MG_S zH-0iZ?eF4ctdv~JLFY`7#5P3YmR=I0sux}Bbtup{w%8o7vL0ntjcpb(w=cfesm85E zF*NBIN#in_B*27!-05ale0kIqZ-*7<5_iXVQZu5r(#jwh{X{+RG(#fMKJdTd_Pg@K zd46|B?gsj8-B|fPch4reBnME*fDI**+ZYs!qAxY6R-;H~_v^_%Q&ZxpOr$ImS4O`% zrmXg`u8q3W%W#B9%I_-t)<|dz;M47c3?ZtLqm!Q2r#RQ9S%FDNPO%ivM*cwlBC=7- z4$G8Fd-&8uBaxDo9~-Gm;jVdXBc?~Wb$rZ??48M?(-?1e;VmGv64|#MB!ZRJi#=+toStoAIL(noco+{I2lO0fZ)mM&r zb`>6zH>ZmE{N89u=!s>U0Ay^Wtw;k(xRIgpU&FM_30RK{F)2T1TrfCA%rocDkN21J;}Zb)+wR zkylgVf-w=?mE(43ad*r2DByjE5F=^s3!Hc%6fu_}-5HrP$nzU=qAtko$*2(;le^`6 z1Lgd3AV%2<*-*(5MB#^@>n4kK4uusFly75%`;$rGze0NKMJ$yd8~!*rp&Yp_$lzwm zp=|Gsh(&XP2+xH+?!VjN*Wcc-Q2$<@kI-&5uMxXye|c6R3h;yYwltg2w!qIx)EH_w z5K5uKe}J=%p{3S&KQ)gxU~pU|IZ8nO!mwNww)s&0IR0EVJh|a`>c&6GT~+R0-t^6Je0d^F2YfYF zls(ikA+PvkW;VP$MUdPVY6_ zc3O9b({iX{s0SmZcQYGW(uS=yVs~#Xcq{Z0h_4qvTh_C%#OK!$O&ow8Ss3*`SVM4V zvMDrMK}VM^2B&`5pQ)t95pU_j=gUotB>3aNJlYl#y4$pV7Jd(cq=tO~5}O!6n{xS+G>%=LcL7Xju92!0+wUru zf9QjJD3QwdLmTAvtZll#vVruB`lcC2)%>Q&SrRHfI%8)tCc0@O0PU_coJ>;3$s81R z>uo2C=jtv{mOKag569~R*;GJkjo-|IwD`Y>|Ed{(@$SyVA^=ISl&_Uk#RDjV@tP0@ z@(VSt=U>1P9b3~Kfj@uswXu(mS0}Phf_*~sm+ea2K1E}(m`@*sW}8Z6H;(NcJ2x&N zcYi&}qh`fffDzisCM8HGcpyjMhQzeZ3;wo(^p&eo3DvtGl?)Zd_IBwszED<5;}27h zSFt@6+ig*h*sMi(M{mw{n5~O1l$vwjL^*6as-b863|C}{8}*zt+SB>j*-O_ItR0yt zRCjqb(M5Om-#m> zE8H?rAY$6;=Y=etd^;?wsN8le&QJCeFxKE0%5zgkAZw(C<%Ns`!@hy?5_{yPrwdc=UK+{3h7|4GK zbBldXj;^WGyCaVPUg>_1v>|0p3&;889!ng|WrGHtBlr(5a^KH}BTsRNo{41rc^vO1 z{G_ASj&g7crXSFu_jwWkGgRW$GF2rIg%NxC-jrEhlRMcGC~D@<6B+@XKWx0K~U>{oPT zyl>Q*Ms}<`29`uVEWYH}IbiM>LJa{Ox^^=*Ooe53ft}(I>(kTA*MURJMa8HM@9Djd zq(s2S)3@dF-N)j}uinam1Liy_DD)q|J2O0ordvJ`J;<`9bh zcQ94$2-#lp*1AP}-_}q6?sOM>y3B`NYj-kRlNUI%S$x-8UHiQItfN`w z&%nmepXvV_1UCp+VjGxZzl6U;Kvdk4qv7T8K1K#!#xg+|#-pb@t6A7l`A?v|$Eyof>N0-quIg@;MIYSe{~sHOqt);J0f7Qt--_3}pI?UQ)!X$e#0e zU74Am;aYtBn^)oMI5>O!C{bIuR)%Zq$72TC*gqp?+x)@Por)Ko5BXi$9sYt@;;Isb zHQ4|Ck@yWLNZc{9`ONvxa#MnA^y=ypSk|7cdbU)%3oz6Av}Kv>GDj-S z@07?G!-*-hIurtigaIDPB|Q{MfZr|xA^$GkQfcL<*Fp_%Mg7&ULDM4vt#$LOxUOY- zJu>IA0m*GF+ksV3A~n1s523PeMzjX9D(S=zdQ!VxSHohAu}S}s6j^zFRG9|R`D9`q zYPxvJv=V-R8rX|Fc@|$*91VTK_1I}ONs473&(T7*M`_;Zo>dOx;%04*jj0p2q5P>$ z*8d3qGPOXZ0JXOzWQHMRUW|-iVS}KU&^k41>9PI({P@&zXo#kdO~u>cv7o-)HO~Mz zKeG!pwksg|2A5cMaUuxUIGVy*^|PnowdvcQ=PMoa6w>M-YTa&t7r}l6w7+Zo7A&V> zu&)0<0j&;F@kc#{dZ++6X#l!x2fi5)=90i zA&6#gm(#i$D;@*LniG-RM*SMj?QTji_izR$)V+LXfMPKvz}f0eJ2HLZR^=g57hDfw zVyQ{exxP+)r~m*Jwj|vKaa_TOrupkFDiF2g;FrKOLqBr>edTgUa93#_p^s^rAZV+V zzqP+FuB%%<4w*A~pD^KeU-pSlRLuoXyhmwiSVd1W%zi!8G)H0X z+h_sNdhgavf6nn16PRcuG)e#q+MF;lZ1H%P2_CTL$Ln-goo-8_EvDdF982gw#)zM$xmJl&#AC0th043Xzt$(e2_ za0Tns{(!x>$4MN)JYJ?bt&$XeCP}s7>Njvz^%+W#eN%AY+`3@asREnk$Z^5YJ2>mc zZ~-3^GosGl*gA(1;<-f}Lg8EILYNMpXMNip3wv9b1$pD37nIzm(80D(+&w!z%WetN_eI{eE_;WujT5f(DksG#{Luexfw1XFqcf zF>v9zfffFh30Y+_2dSuaEyRhR9G6|T()alilHFbgNH}v zIe^|365KOR9NYO8hVU8EK?1@@Nv#NAvj9)$xq#VcGXHrdR8ADt_OYUk@Cry|^tFz+ zd7c0tGl&Nj9sgshxH_e#Fs>)I~jn$`^NXw`zBvg4J^tHh4s%X4FZQxG_O_ z+Y^SeV6$ljWIMb7WO+){@i=NKb#d&P2XsV^I13(KaTqc)Vq&W#=SJAS>^QyM%)TKh zqGz0EKqjnpOH!Nx9fq}xRA7f(Yt*rU0N6sbmNgq&Eu?l=pqrE|;VTkrat}ThgM#n5v2{StL0n3T)|FK#?~Q@SKceM z-6KNz;>OMo!o$dbW|(N0oXwm zxLf_GrYimM=^AUuJPSRFrG*IN{&c|0c+ZTUraIU}&* zQK8G14ChEcOLY;5M7{1aP6C>AusQy!t5LL!5gsyK>q^sK^?vW&#fS)-A;@l@Fi{^Cy;o$LpS%gpb!Ewj?5}nJlG-o73AI&&|9zVg70%E20 zNjzWWaEmHMc*LUQ1{D;={L&UbmmrbKkyxYmuG0u6ypf(<#Poj0fAp9RH*pI58;|+* zweTJ7cv@=6VSJc-$Tdgef97P9_PE4u;NE$X$NE{tXYMW6_~y%A6Z76X?Fp~dL*N1z z1twb!ZzXRja)m(g=M+-7O><{xPFZA^FZ}2wNnXVX25X@aPrYQ0D7?aAr@+Kth|RPT@lFwO~#D1JgU##NFk zeyu$$w3d5%Mt0wp(8rHgJ@;KCsiyUL(#MZitg2o3Ih5!dIhFm42+E-~Gb;f=(-pY8 zy*8(AhDEmh__*nhK1`-7*ToT5RbGJ^^d9pR#*dK1-A$U8`(BzWhw7|Yc@V!ACH6;_9mLEq+OQ}pq#A9-`<^Fd_rCM~q zK`J#RKT0Z2N))La9C4r4>m}g(6xH-(zRL%dswuF{q;R{`*#JehE3fasmwUC!u*7PG`m|-NEH{26_X}$^yxfe`q~));m7OF zHn_qGGGA3U@zzgd-(}kz#yqg1CPB#!&5Fm^hF42wbCWpcAtuO<4R(sQcR#tQ=Gy`L zTMYw{-_Dov``(~e9VTX&Y&AcNabXd}Cwl3gD#cBZNYJ!Lgo+DeJv~~~c9g7duzI+;W*J;)r^!xwMes;6!yz9iMh;q!2Ta~K+T7Y$$ zvAG@a9KmaT!x|PyWGJj)BOb}a8XWeA!|tHp?VqjtXXEqpasNZ_?8C+T{%N;=HtzR3 z?>c1`L%s6wV%;B&&(6lfi{9yQFns^Msmzv_4^dhY%DCwdtFIDV(9ZZD9h^Ol9`-RQ z9tNzo^6|9uuCw?&ySu)8;AtYdPoo}<5>_eNvuaF?)t?M&^(OX>Xu3$O*0gR+=0tu%{}4O8rw-zhZJzy~?lf$*OG9{2Au4;8y*D zp{zh*mK6q=E>Zre!N5M9HPU9E&h<}P&G*`G1KCX+so+w6)IbNP`maI^O=Teo`H>5+ z`KVJkIMXl>xo$O;hkfnWGyT^yo#rz`5|V`-rP+gmy87JUW}jJOS_Q3jR%7@u&}*n|E9)?YMo+~jckaN7CjyAFDxIedr``~Y)iX*!k# z;zxPXAc>n1;`8Zf#72p@SzUeAdDlrrX4B62_s%BG(G$u$;|)v-^sbYnY1SEc7(+SA z5M+a$eb~d74a7lj|NMy?jPc1ywIQHnSvuidbh#wE+Y-k}CZ1$Nxl6_5e)3n43R)TksSZ5r z6zn~w{MBVdHZ(;V{a6m33`J~=fIj#e`=<|NF;GaEB=0)KH=OZ-(tPuXwwOHd(cF30 zK_r%cTlVFTKmPbbl5vPAD#^c zKF6bf-tC{S`{(1c)A9Lv@BHlj`w!Cb(ETk)DU5b(6<<8WIPZ)*+IFHiB~>b&FlsZ* z{Z3&48BS?dViCRlfSK7-p04L+Q~Z>qTg*(I@>QJ_M|_*4Vjrxo!>w%uDcYvo#&P>8 zy>gWKZHr?nD%7iAd z-KYF&QBy+2C0tc;|I>^GAhHgwMs)ck*KrNa&eY&*KAd@E=ZDd8m4%0#Bkpv7U zIz}Zw*}~7Rw#}_)6y`0^gp7v^Ft&6qkVV+D=_v5BZC4DE~eHjHF6SVYtkq`&;yD9H`U_X!$ z${x~jmA^A%+XCwjN1U7)1xgfHqSWVZluFa!RuSv>_$@x3=UDE(728G6B~piEuCrwf z)THyW_ga)P@-bI27kRF8`9mG*F_a40zc^t>Ca&`r1&G_V(B0S1FE6IE`1erZ+p7{! zj+-Z*TOM-^(akoORFr5adY;4C3zx3Ez&>C@-jwl{5<_0VOZ^coFi=n+u z9F}VDg0v&ld+0sDZ~I4y^dsaiNV%Eb577ItL;n_}pm;Xo{aNGBnkS%f1iIEKC--qy z_~)zR$Jp;Xn0@9O>nDL~R*}QHPyDu9Im>cq&j^gO0=LxnZfR=t%-HQ&GbQGdEkrtf z!Rp(*cNlyCynq+%83~mLi`rERI~X^Is6pD5DR;-Et~*Hd?v{DeD1^%{P9su*6R$oI zlS(?)MMzl~n2fnv=7EiR0Cn0~2LlKLJK73(G2&0xLLmJB>E>-P|ISWugae|#(W)UYv`|Adx z30{K@Adb_$@3pc~e$E2K$Jpe(3Sgfq;59}eVBm;zKcRh5k)#O((?zS;ne~~ z=}Ul1@OJg*7Mv=x)J|w;pjVa1W%*snZt)ZQgqcD&LFujIudtvf3+*|G1OWq(^aL=# zIt01!Arn-zelLZ589ycY2C0xMgl&dij0`?85VW!xvD(0DD~0oHG*a>as|qv{aqu0} z{#S55vH0BGZ(OFbX#fWK-P2tnO%u+d@_R4C$7zrROsz)|_u*ZkLk4DMkmrRvZCoB> z{;WXh1{*!JI}>nF`d-WAh$|#~u+h+w{EU9uiBJB;w+6U>RaIHPCcDOjF0+?A8H)KY>!V-OI$P^ zId~RxrRD%oQ1b)R+)^qM+QOV!#IxLR>yVd#+?(ainfwygllqzRG3d(ZXbVuTFbwBpH=N3>kN`TX)+(nUfLSs1jir6VLqh2$*tF_!y+fg*j)M5@s ztS1CzsV;i&INuCI`qX37%CE^LI&ot3`ve#So&;0@tR)p(q#U(CMCbYLA#)C}bQ6-N zN=!(@p&~B@SJ6WCyKf_`5vC}=2d}t&FbQEeJEH?A?ggR0IAOVBOKe{exdCDG41+OL zE_Ti*n0MyThAC(~>zD#TU@sScx^fq0ShB+3FN`b~=$19@d15Sx(ZPWqrhZ|bEFF3* z-wYLCItgQ^P5O1~Yoo`krD}#8aSUqf#9dzsPX)+A?5#M$eSW;h8GG6GGq2y?aw-gZ zzUY$wxxH%NxH!UD0;Ofo;g7Qr524Pos~D~X88)aFj6fQ?=Q_*ckGml@=F)3}cCf0u zVtS>MpN8%n;`WJl8`xWj?pNvWWec2xpWtADWmnO zJs;fIFJq)6WL_!YTKP(%vDaWr)8x%CZR#~wh*T-334Kt8N*l^ySlZ58!oJeJ6@~KB zHX5%X!xcbG_Ll~jhGcv^u%S2@Du;p)(e)~H=uOd6Or=aEIxxd!#jcVQQ+3KLp4z_t zLfJrIl&Eh~L^xBl_K1sn0;=X=@mU4!o87kvEw%=M{jI#(F_p|>8y5}|?>SDI5;2wQAisOH7R-g^!R}oX&pJYFL7mHbq{cHbxFN z6K>M?^v>?eHfyD?(8H^vou*&v9adLt=j=P)EyMUV;6pdn1ipQ6CShm0Nq#o5oIO#=5diM&qFG=fpwH!(t`RWxbp)aJ2(k0+2$*W^ zZJgjrlot^FOCD@?!%pTe*ol6{GHxATY3eG0t3#k~QxWbA>w?UwQ?r5|zQ8HhCb4#b z(&Uwk8sfq@Y;1t5MLCR9uhE?^`+nkqt7X_-1=W&gPZT(Mq*7I= zt)mvxSv}B4?fZKwsw+K_hjR++7sa)-N4{|61BFhH{?6HQ*M6XIea!XlJ_4O)e@k%w zf!!&a*V4I(_aY${LPqwl{D+oly^O2lCfq?6XYvjXSzEBa2hh2Q(Ck?BM>_+*Yc!-_ z5OMAzL*5gz_eiuBN3~^%%UeIj4-b~?y;?m`k-eYiwdS+_aApSB{o+g!G|{!ss`DbC zmt1lF;exF@IBD=(gV0dp^eUY zW#&_%NA)doj3zqRR9svAd&uE={UM9~p#wcRa-j{?~{T($WY$rdF@P1WSpzfYK$TX2m=4|v1GPdzQ zynEI;eloB!00Tj3doB~6lbuX+bT++*Y32p?j@j-{!W8To1Dk#+4#CkW!b_te(Jzqu*ys#+InnZ25emRq$Y>{SC)-t^Kz`S;3XtWY z2DkiYFXO!gLB3AydG9lXg&U_cWlr9EA@q(fG5%>=)#syUAsg4`=%bob!&uz}*Ll4t z9plKjUDv68&oUO994(uAU#zr~XGcWAs5J`}yncK5k8|CY-%K#^VUDRRpyh08=p1-M zXv-%Oz*VsA?92(4uuuJfFl+(DygTh)AVfSepHE5I)Ov7n-*7+e15FgvKp+H4qe4P_ z>UkqX=S3Za>4gUXPYK)$R}|?PoR$=)x|f~4+zqAf5%fGrd&-J6;7sSw55Wbntc+@a z=@gn+#kYB0`P*_d2>(c<(vPm#l-?l%&|P4EnR#9Au@}VU*QbTLcoP?;7Imei9wJx5 zLftc@UvkfST`^{+^0>#EeRq@dXmIA_P(oiFqGSGa!f@k5bj_xF`$aR zG98hbIwiHPIV7y3nbU09d=};i{w+22X2O4m<{1gv>-6ihBwahajsnr!Zh^T36g{nX zr%WtIgIv$YE;L!N_peOAS_ho)k6uxTk2}#(gQ7#i26CwPiGBD3{Q=&ig5_Rm(-5C- z6#4ZWcL{k}W!t1Pfw8TI*oQcw9V9-+>e}E}tcMPzT>92AG&ldGPT$Qfbw8%sW$dmh zfx;U>7*@0KiyVZt&+6Sb`6t8ViCM~tLnO&av0bX~D7$5o6tZu-4_Uk{E797J^G$9& z8HS?NYU=Z7ay>rvVDn2f z*BryAEDQr|oz2ZP(ob^86filIPVkC)U>giIq6D<&FE3~416UI0EL~)xk2P-&QAMu5 zV}ofVRP>?FcDLD$s~|B>=66R-?`aG4yL{p@ww z+U;f5nns$+=UFQbVg~2GiaN2R`y1>{QB` z#Z-tSBH4?Uil5uuK?@xt=EC=%SUG@%T({0^)^6c_L_b7AC~U7WCx``Iu0ua)D2Vy2 z$rHmspb)~5m^?XIL}_vd3|H@H2Hx(nWf%`w`6!Dz}F#aKBj2~zYHa5N|_;95=*%17xK#L=F zM6v60nv|Z9UP~jzHsgYODCH&?EGz2j|)xq zl0GGLtMkFqMTGOp9hGDodXBa9MO`YMw)p<+^I`fq&gajd6p-t{+&P8nPJ?VNX{`~f zsQ4TEg3Y+~XRk@UpYHfRw%xddm%yfrK7HN$Y09b5c*%FP3|#mKHcss# z!c~;Lu*qe2XwOYc<(y4}q5+o3Z*DW=Tth)o4OyC9rIQ6AHOPb=@5N-K!RiJQ=DVQ+ z#kyra@8)V?)3mfj5fnx##9IEuzwpTwZv9C2wlRd4V06kSKMVHk+({R(vzFFBL$j;w zv}iBYKyHtA$ypeJkp~(;&uI{qj`)k3WL(6x1KpV8^xn-TqcgFN(zRSXl@2G4HVPmO zQI-kPg7#rNJqPg_!=(f88M{BDUjc!n6APO4se|Z6^r%behaR;N?Ij!ugw|p2bII@- zOspXQBMqDdEmc0XUtL}viXLD|Z6$VG2t`9~MrCCAz^RSu1UDuu@*MMFT&vpbiaP*Y zTNJ5H(65qgi|)f)TA!4`m`z}}5v+OfRxF0LZrV;)>sLKvZF_&>V{AkR6FGpq)Ntin znj>{KeY*EhS0aospsa0iS0X})?e_!BKc(P>6ZiIOKu7E-2hD$ZAL(ZkF~fJ$f-wR} zdC&DuUZGVUVVgie`aSGK2b8pU%wA4k!tRJOzz<%6d`WC^ha!z~Ne0mSPla~{!sdh= zM{e;e#e-k@10Y9RN!q)-zFhiM83E^`J)8zV>Pshvvax3<$6W3^$kyQp7|d~6Lg}Xn zL5;qbWG3NK(|UU|Col&k(@&-z<=5?4$ZD@#jT%UByNmAEq0cc63p#uK(tU^D^5B;} z7(=BM_h<#r_LLQCv#86#P@aW8Qkj(B#$wj!Wk%6Yb#S&b>}@o8R>o^t_oAXxD7EXyi2`7T2u%9>(xN2g+KZvxJfUhydu@`ef+~eDI=k&+PM&SsygRAN@+HVBCa|5?pFPGmO0jT9HAh{}`?QfEik zh1|nDqA2xJMW&;`T+zKYjEz0A!U$PmEnB!T-PGGq-lqlYnrEMAlu7>DdYbeu7ISRP zOLDYM;@&`T&1DUQ801sP$2WxqdQeE;Y)186)z3DBEw~#T5n#sZJ|H%PijWkm5o7adyuXbNOLXog=3O$2kg_sFB z=>ynLtWl%?QkmxRf0jqhaU#D?q8XU;t>b6L6-IwAMsQcwA<`O1?-r3$jsReTxayef znSF52X#5&kEl}MQq(Qlu^dFUVbQ5JAtMvW0RDTN}3rbp|3u^H&bW)JbxbubO5&?gW zf^`FKhD)jStx7ENLYaR_!3}sC?<;U5WY!s2GXTUYhEZrHKR>xa%f0K{GU_Lz&)6o_ zq&?JNZlUu94Lq_!L}!L>B9igzWxBHD&;O6Ed##JsxcrY4V(K5SNXWKyf;+xw& z4Vf9m|EkKw;=I*zG>R55b@ zj~Hc^E_S3ckn}sK*l6E^2i_aq1Lm81z0ulf^4xfUn?OmamBP8vq=JE~4@md8^(^U|wDf$y0(UcDz{z1Jdf8hkH$CX!A|~P?@+KLdpQ2 zt@k4)Oy<}GCqb6RYx*ZY#s9Jyq31`O@WX2ihE^8|ksNebq*te$kDpImEP?4MSmrA* zlsB&&9eMar2=3qzGT{Gac+zQBq-;XKfo2afVfT|C>_jpO%VOz-Dr2obY@yU4hG&@axv0eh^)ODnSVmwtE^? zx!DFaQ)6|zM(Gp`BJv=GWlbW91+1z=`xVQ**e&oK#?yLpXMsQA1V2AdKu~Zk6Ia3W zoS?Bk^H709O2q}mu4TxFi`s42ogcLbb7#o^`fj`=Z^1N}8l(d#p{T6xf#B`u%k&+j z?q1btEXl8zuZ)p1k%6gEQ(7<4Is#6&5|kI-Z3lLE*LOH~J~%YpIxwh05VN6EO_HoL{@fbQ$ z>)Bky8EnQ%0v;4`^8Ns-*54IxR_nIAs*t@ui1A>yFU2$P(I4Ovt3POTV6zkwZbvp(TP6nf30U8ZmFoJt)mx&_g+OD7P!0meRtnE!M#2s7MID z!mQDEj#M!=r1$HOBGS1&j_EQbeU>dh4sdDKV=!m10N1rrV^*o7rlzw5ToD-20N7-zysSEKvvidu1vbNR?3R)y^Zp3bDrgLvAnmn?>PL@YIt_S&* zFrYrLgii;f$K?d(cu(%!M%AX-P+)60U*c(EG{X>m{XW{>Z+qh)3vW?yiMe``!o^PH-!NAIlmE-Qa(zFuz>Q0Z%6A<)RqgWOhxv14j%2**0G zTso5nxin`eo7(?wrx9rMNN+2*cDwc1NJk|seqZX-+*Y`RZCoe%uzG3vBS*77Qd^zI zf!zp!HkN+Lc>QwcB#~dGd(xh0r=BIw?G#ot(EMXZe{2Q(?<4vR321TA{PBBudu}4wLi}7XZkS23s;?J3(2Y?hhQCj5 z9rSy1gCNTVB#&rE>l%8P!}}1j@0&5qyyj(LRC;gWt<0)`20#G zCOu9w{6vLOHV<>9wvSUqRW|}nEN^t>qq`g-wYq!CA6P281S2rqyQfSCFT>a=gJ$e0 zM=?D~9stuLmdYe%2B!+A5Dm_swNbVb*UhKV$YLZkZrWU{)M2M0hj#qZADXPr&69H` zd6(F*Q9mnXD$hShI9^NC+uwFkR!^4?S)o1=Oz-$EHV}B;&3`FlP&(eXX*bsh%{7lf znQmV4sN-j+2mUGE7Az}-=lGzK09m4{ZY$6yATWHwf#n`X8wR7B;**616R6egYwswA z%%em5+IXRWPlMuX`s+v}J-@}~o_Vd>HMe|U3Qs!msUELn?*NqlF~eN!$yjZu?kVdt z&zsn0FbLp4iZHLoHWK&fkcd17Z>|b8*yCU!Ag(EwZP2P6U<>}Z0x%EsQC&nE8mVl~ zE(Ra{g89tpU}C$2^mXLd&)c0z3*tV?uoGR%G?B@8>5G3oG#N!XUOh6FdqhbVqVXu@ zs<=uk({jjz_Qmuyj#E`o)cndRNno;8VQf8o?X2>TvAU7FLgm@1%GMdc9FNzrdO5;& zyhF3Fqfjv`L8IM@MN0>vRWL+jG6+}$L(9Tkt0(~c1s5;PqKhPiRFuie+b$YsYh_`i zc^^s%=H1P&mUdRqIoTVq7voqjN=45@=vl*Mt zWv51kK0}tXYSOuunIui~p9#1wuu2a>Ey}x{7%PU05_rJRLfdOV(Paeogracc+$lWE z{t&0^Og(`a{UJY%KCh8cXZzsOpV2fz8K=yT;xVL>QGL^FW}|7CQu|Y821;lgOv-4jfMIbX9gyS(9a4 z$uONi8zj>_QCP!+`XJ>R=TE2Iw@srYIJSw)ISKzH~nwI9p)?LE% zU_Hr&DG)Q!Tz$Qv5SF%CrkH%&x>e*$DIVN@(=rVYbL)^UM9f0H)?+QMb|k_+ zu^e}A#G!@ACW-C7At*r?4I4SnO-T_vtOft-%mtaxd?hC%AK!7nguG5#xi7^Dym_}0 zkkr(x(0)6BbGyLnkg}>d6EdOW+`Znd(9Xdfl47Cd;@r2M;4UUuLz6I|pM> zIOM;0)OJz)qp$I0ZT9T*^dVlqhS-Z@D4+4Pbg{}hn|FsEv5BQwOnS{_yS$(u0!WkC z9&8H|G#lI)8P=BYjz6&N5pL;nbX~u3S!ZM##L?r``Y!5ZJ@nws){mKP*tEB6L)cuO zF|~VM`eWU?wQh&cw%#>9;ACkG)-$$+Hzn7fLy=C8r2`kesq6#?|C4EUO!UjaV`IJS zJal&91y^kjs@hHj*7ib}2%wv>NaSbB%cHM$BiJz%)rwADtJDgwG{g7(q9`w(BoP?l zingG318Ma(uV5mzPc80yi+^lGusI(~PlDCTUQ{L2)>h{?B3YA5=-u+|^7HEeYm^w7 zX_`Xy_lVxHr@zZjdf6;UR;BRqUXRdK!U{-*qMScJ0y<70?I$^P#`zKKuAjN__f zubtvQ!9^zrhZXp;)e|5VFG!qD*RKag|D3d#SJo&19Tog>rmaQ^K~qx@b;jdxl> z6_yFBtX*tXs^f0%==+r2Uw%DyD(vS6?~ONGV4(vK1MEL|mPza1UAWl5SXga<`fv<_ z(jm_M5l{dcI+FJdFZTkA2fXat&mD=(69bu0jJQD2_e=6rIhG)@cjjY1@@#KlPeIgw z8hIh4@IwEQaaYh_;QK97-Vs!?S2z$+l<*t=^ZLNJ4mjWFJ}ojHVU|mvn%XCxCf| zn4>P`(@o7*~oZu_Oy80oet4{q0$6(Tyk|xHYL!5PTO(9NkxpLH^@RdzF&_(d5 zE3_rM1i9vM8Qfc!;!l##&tsjCw{utMqgxyd&L9Z-kL%N0S(7FPh42B)0t>4F$dgN7 zP)S%6m+m6txcbJvpFYda@!|shs!xLYLztcP-+RuMAjTOK#M)Ne$4}d+V#gS^HV{Jbqo`#i_&dz7Cg}s;jBVKy5Y!&VmkWh76+R-nO8KlyM;U0E-zk*vb_z_ROqpe2Lw|5Q^IY{l z;r*wXH+IeQt^xu&py#TnbbjArtd8QVt7Gtm9_CE6L~kv};KBupawgWfzJ~o3k!D>% zV_Y9zsc*(DEi&NfA3X}Q4s1twS)w|g5bcEQzsl*Q)B@VCL&mG#|}D8v|lG_ay^p<~xyS)zk;aU)&i!f+4-F3Af~j zbwZ=?%XHNb?-S%x9BRd0W-kM8!!31vEZKOQ&H5yoi$W&G3JQs{F_X9AB}J>N<_ z2!9-t)j#}n09dA+U|xt5J%9N2)%iY-*ROYAY)-{bpyf~+CcWDf8iIO-8S6ekK~}NV zw56>L%z{G$9aEZ(q`*jDs*yRs7I$+ zs_>LAwEk*2>HnzHf>N}88+maM5Qel5kz*AVwm1Lv>ht3P`^k2BSwz4QNkE z-4>m~UIwK(G7Avw1m2FWAWppwg*_U$2gCd&de~qR?g&oHHlOOm396-*I;|E*c}FaIHjW=jm3sF0uAykOR0*VQ)k!FNiV-n} zrCi$K8w_U)ay&T>44Aod)`}Fv;qQ@QVePpCY(M@Q8GoD|!qj6hb!ewn0uB0;BvO%T zu?J&xTL)mLzu0CgcKY!P=QcR`g<$r&E%d3!1SpO8y*bn~e~aYHuR=HWV6Kk;RdgnI zKz^7Uveat>Ks9xTxZ+Lw(V3l?5){W(4~1%-*PG`u8xc)h`g1xZv_?f@CPL@BId4j~ zyH>g@O`Bp{;Td~<)3vpGAEp-qQvs_Qyl%fh3 za~%Mrk!1;0GUrg!{-2r4X=m@Q-;{2WcaG#Bd{ZzLa2T)WH$Hzg_Zqnl6+Hs36L$2w zXGh^<%0o4tpKr20KD%Ux!#kpU`TKcE2KhfM4(|<>q9iQ?@8R*H1~+R^bE!^Y#vey$ zq)5lnPI*r?K325*(%nY3ZTi`&6}0A!LYV>Crk7f@OL~_c^>xQ^a4?bJ-pCum!n27) zoIR{WQiza$K{nxSxvO@ZX5GH+aZ-b1XnqcXezSe=^4EPR!36FIVHvDCW7DlG>4Y_D z;r%f(9@x^Riw`v{9+Cq5D) zMrCK3J}9veSu#uxT$KqAYKDvBW zYrC0;J>G&^7u3Q18qA$2Q`UqKn<=ya(HNquv;6F<`3R_4!5$b;8_RkrF486mauWqf-~_0; zGs$NfZzs$wjEE5xMb|6~_yKe+EqCEHBc!KVz~B=yed+vU`w5@F(CD6rHu~|6k&ViH zlELgavf+#O3m(dK%^KvE#LW7dKvwK#U?`k+?0lrQY`CE6U5EE=Im8sBihNl$P_$ZA zIkJgy5*U4Y^SVw4CxOXms6n91!@j1dRqJ;DB`3PsP__&deLYRCBY!SZI$$-1|g~y4bHv`X6N{fq$2PD>QvJg4g&M>h0Ka>wr{R&g$(?a|kyI>c>{lK{v5~ z1~p``!{o?zN8OXjq5Q6Wu;xT?W_x5-G@jOb=}M-07g2Z%Wtq)TTL#rL9bOjr;*S;K z4>=xnN2vbXD3FNtwtQ#i2hI%HPh^Q1x%eIk#)(UnO*5zNqQzSvP**orx0iP=(EeW{ zPcuWCN@X$F8s#n4Pkug%)@Lg?Y63*^PZUD(8fR?qF-wL{8%j2XNme-7w$2FKr;-X0 z)(VBx*)L1N_Qtzj3r#r69!Z6lvK`T*u-2wV|hsm$vr4nwE zFsumBB?4W1y@tj++}8sx*!0wj7QX*bT_f&xv{g21H#S}xba+#E<=kaHIcW7&wMjOw zZQBE{P##DLMaFowRIz;<^~dd*;cr<{1>3Y49xT>QT;PYPQRHiLc1a((ZfsnBZp-{d z7`2|baQ!BKt5u}Y+NE^e>Q7%=$EuS6F!MFEGM4>&7BpT6;Qm?beyYKCx@bG=_j zq0$86T(OiH5$gVX*Z;tb-E-wBWz=d6qu~Y|VGeeEjazNPmM_@T<0zc;BVs(o&ue8k3BK1UT!hOVwz((Yw9*7zM)OpCZ_l^IkF)g`r)4~*{^;6U zwclaIug{;bjxETh{Al2A(t`zzL_BYSeg9j)eDt$DKRcL@yE!)f1~(B{4S$W1cK!?A zzTdpca=Ys+JLKQvX^R>;!1?dBcL%ue2Y<@oulEtR<_W$V{tbTaaW@^bxmrio{nOsf z?5w)Ohc3>2Oeq=PTt&MlWL(80!n-g_+!EIR#m~cEA2xn<7W&_{G-+#b2>$7mhlV@l zWZ(K%FY@-T?_F4VFYIu|<+nz~B!D_f)UzsSkAYR}N!2U{Uf3Dr+9gX>3MT$Hndh~H zrk2`5Y#Ls)i0?bZwC&f|*|OGu#pp848ccBOU=?HbCf1D|{F` za|GHmLK+_sF&-GRF3K+ zlY~eXHp+KVe-Uskg)p~EdzGi3(J3RcKKjA51ctF$z5Rc93=dYFKE^M1bBM!rgdzeF<4N-q|E3A!o65;}g_vZ9R!T!U0^K<>ejT@8knp9*xt{X-)O5+(FNd&HsKfp`)HkOX3|*M}tSsQT z$6h_@6PJ(pR~N6SsOpYV-M}=6tj+dXy{(lLgHLEcV5e)?OH&nnlAm5UmrYcd>R;q! zFLC5a`6Z)1g3_jHI~#h+_w9L#w4B037Vp`Dz{5!Or)E>)cX02c$q4}`%b}sR5Gp6~ ze@nk+d*cqSW)_!o%|Dj2V`YAbb#!AE`(gGTkC-{nd?)4_N^ELW zeI}w9O3dLTCp2$gY5B?px@!87i+r!z`G299pt=%VQo_v1B#tcbynkR!8cS1^PtLt5 zQnGoH0QP^Ok%1h$MZa75V(r#HF)VF&5U{VlFH{eEI`Bj;)Xusq>d-EgJ8oTCd5@41 zRk9P=>AdMA{qULNT!Gg}K)|t|tnI2vxr9&XNcpSZyR+32Ob>fK#s|VoyoJz#-LjK% z7`?~;r8pn%T+v8HnB_tqXoiWOU8kknvG~6l8xF@|x|1j>$ zD=VbW`y>wg@xG@vs^+-pbYpLJlaK$J=SrvVI17O7q8#bZ2G<&l&}grd-#s^Cz~0+Ky;kUE&ZXmF zvP>;v{fj5L|6uo!w84pEQ5ca(;N_2}St|_kjBnW!EhNgblU7Ak{Zyg9oQUg-Hz|Un zXrdS>|0d%3<3TMq+SM5q^EGOV#%hYvOD(OVxqB>la)_8B! zW2A>Bt0Ma?(HK)gtV`L(jQ2Yhi~>_XfqKV3GOxB=Rv_=zLiP^)v?UC>pERCSEhxWZ zjNT~CxQYH72j`CGM-gP{>nK7H*-BB^9zP0Zp%qj439iNR-9&AIdDM&Dn{Ol~rM~qK z=74!g`kfL_(Dbt56TG-)(z`~K^rE={X1QHn_+xx4%79J$Cp>&?1ZYPc@xrV5^!vt> zj@)YWm2o;oe`VzD0pa>EO6C|d5MbN6QSREhnvtwZ39%o)dSjT`nQx{X39D%S%6RMw z*Jpj>X*MCEnFbFrpq=%sScaJPh2#3MK6WeE>*;=`UHCe+0j|2Kdi6#pb+q@WXSV5T z$!CHNx^6ca3J$D{dVn`$>4x z3EEYR>L_7tk?*Nq7yX(7?HFu9y+zbHvp`+i%6ASa)GnowOQ!06toQ91VpSBbxxa7RM)GfiJ2-%%Z8a^be;+Dd?m)2EY zZai6y)N15$hfM!i>$1IgMVII`sjDTVWm>%`{Cv|6>WcB~E<1~J zR%sQiz%a6avBvL%-_Il+2$){`qkO^4z{PmiNgtU)$KV+FHsY>kc;sv7t?LY!%Q<2m zE>em*zN^lj&L>`=%{H=vsEgU%Q$5LGL_|}zQdU0j6OI0N-U(k_=ePGOZraSIn2gKl zBizD1ND`n7lAWTzZz(woR#_T$k1N(orTwI`X@R~$lHQyM6j3jhQoAbMQ+G&g-1rnj zHC1ap^FTav1vuTJtG%lI-!r99El$po{@2` zL<@IneU;QapYy#;_qIYo7B>QczHWb)Rv>5T^DRS_>f|jT|*Ns;V;%!0A&uvrgeg!LsnB1L;pjx?=9U^S?;}v;R4qm+kz0Y0ijTQaCoJ#kUOND=;IyI z#Bd7yOxvZPcWne2yMKVe+OXhXsKIWRL5Jgbpd2p-nc=v~&1Pz=vJthyH5}5i<4m_} znIOs;tQ^*ay>v0%>Q9J3bTQdD>ELdc!DsMofgLY~{;hErcAmRHnFpKFccu5S-7%{-%WNjTmUnJ`>s!w z0<;DFbGd9ERj#oEu4_CyfacB`2hf1^f+Us21)CopoB*$PNJby7=z?XS!3<8$5cg1wTu?GN1N<%gNZKMggX&zPKN zNSjYRMeRgi?W}6+1cLv%>NKyDi`RcIrfE}*%q)bbL%j$TE+pxl>)lS*hingK&^ zzwc&Zd%OwCkYz)zv%fu%P8y_C`%TYFiOtgEubT1|?d^^);35c=@HUVry91=r-r~c6 z{vgLHsw7iUGSr-5dGXag82f6vH6i%MSjE>Su2f-<${LABKKek{*!&~5n3oSK19`Zd z{PaaHY895g`p9P6<$;_aziqx-V$zIX@pj~;u3Zd^DL(`#r76jGc1ou31T&KxyiMHS zME8|#c0_<;G8bSSyg1sRwlBYtsxN#KWHD(e2Vd~gT@b}@)v{A*&gN!ju3T0ycBLng z-Q-k77GT{44#5dr@f?##6Lr$1cZSo=VxU=ek2{fkUqTJ~U-l1bINf&0=NHt;xEp~n zdGs~1FfOY_A{FXM#EjyX22dij+q*VVE|_8Ujurnkio}_Gx0wf^h{7lqHx-UPS8K)x%e zJIudis2bWmyK-=#6>fhKHYKfSU^u?rVu*q{tx+Je1$Ih(-7d0V$dc`&rXyK?pTxNe zJ$IMc5s&SpB!bQ5tQv4!b$3)63B3`x@~adqyTlmz<(oz?Q`4D=*RPJh)x9fq6rFSp zaH7$1*%PTnsoR9mXFG{Ex5E|EX7yS_=`UQ(h+2v2zAo;uhq0`YX~e|;<|qz=cLg6| z*cX2MK~#U9vANtz**yz2wcgSyl)*25f%WvtZVI#+D^e({ZXl#@#gq`|8s7Tj*QFH- zUsp63&f-l4AKgB1{aw>PP{9>dje1;ncI1#sgW1WB5+cjcP<%no6%KV`v6g@R_us$M z8z*OO!z$Xh=L&pz!mFp`+WQTK6c=el)8Z&ciW#b*A} z9WwU$Y~y;S>Go-IY+n!Ov?iLT90$F-`W#s;)1Ez1D3Yvt9hqT3!3L|F*eC zn}uei9*N!ITs z^fAaQq&`yj2*md~p-Zusu8>Gid9xj7)Lk~wexg))l+UAv(apqVs@xlyzwo2!WHR`j zFP~}ud;raimCKY?1FPD`jbqlRjNVEN3wL&n&)U*+PP@8m+=hR>r4Xd2NyXO1m`qcN z??is)#dF=C`S)*UU*T&4!xcz~+={Gbl2A?VrIEIMmDivkH@<{SG*uIF@!HoorTwy* zW8(k%c_Q9$VCsur_g9(rNNCDXzzb;DZsP>_Mn3BeB>oYery037YZYsk)|Kb%D_Zwp z6xEs{`%`X_v6Q*0C`|U%D^JW8HBNJN=-E-O!Xs#vGApXEVvL&(8o%oxCB)k~Sg&AR zUmvgdv%t!jmc_Op6iBeFiV|gfeiG@@&;jXvu=y<8PO9 zpUC@jt|;JxRNIz$OV6!Gs&ggoQsvu#;q^|atC80c%xCr4gNwW%sOP9Ec=`owu!*XF zz$v&qb_gEetabsMIrpD=zc!=1<^_spvpL{glE%CqE`s4jG<4gsqwgRjB|MZHe^bqr zpxBPI2LKylzn4r9<$PGi9z@DL1|PD;4NfF!bZ*qt`Tq3n2BdAvhFl(qowgxlRq?)b znv3fD+auXsKO6=Y{NcH&EpDjN+Zf79s1>8EZU69&Y+1iKy?737`*0^dD+(C)=$F|X zXDj`m07nnF@CD8FsHad5H2}?FgrH8SL?cG2$jU(qw|08n8|(rpmO6^v+_zuuw(QA-Yf2~0EeGY8ODE{6nnmF5xpn5GGW zwp#gH`}^X$y5-}LIg|G(6Yj~&KJkgFx!{TSC@l@E=!q-jW1xbY?;S^MjURy7Uk^3S zQJDKST0pekyLHo_bG*d_CK?G%(`ohBhae5N=rK*HlX?E=kdOA;Eb;&W0Q%}yr<-=6 z?{%H3NcV~V)rVsNU)YMC&B69n?!oye09UWbkA<6N{Fu|xWVpR))}&cBnhe0r?&hSR zFwr~Klu=xEgFUNbG1M!hU0Umtgn0!`O8}932h5nxHn6+}+tZ&L8`mM+o8B z$=TVachc{p-pPlv=<%f2>qk-V!*Dp^~= znQka>1?$xQfW5fKNgTmEUZy#%k`#U>NwwkXH*i(;8A_0SQ?T#cx?t9+0-NT@alz0# zIP1o60Ur}HqR!vgI)@SBxkVg8;alfIm=2$3eS6aH_rVh8v;ch`j5qLS!l+My)_K3* zXE0{AO3#FD!I_ym-11+o?`{_G1@Fs!vqL6)kV-S$ZU+a$wH5}&=C!MH^+}`v+$}1yloV(IMIv^l zc0oYFrb(u8UC+^=fHTPi;1Hpevuu#566zlMY>jh0xdAI2BOn$PmIgSN?b?=NC$8fbdaLD+1Uoz|(myVD_2Jf1U}I6GgRstY{;=0umX0 zt>bN;C%^~Io#bQIn0n(9yzM&E2j6CC?0|iXfA2^0HecO=PxH=1k2R(7&TOBI{aGFH zashLkC$8f$Pe~d|>eB8co7L3RPCFhy;^;-{q8>u!i#xenwYyKj>NyJ=JfcxE>ZD5C zn4rAv2}4=1*|Y+(9bN#kJf-P)95t0raO|1~bVQCg3m#o@7&0?rVyh(QM%cgXIKAD> zz9A{1XPjq1CaiT!Qk(%DhP8}TV2505)Ukm8*g~|HH5*$kq;^-Jo0Kf!D;rzOJf+pC zxoT!TBD*V4b+%cBWEBiRB9^f}}UJbAX#KD94-ETNI^vJSP-w`9*g* zBe3F8q05&H=SV+GbrFa}y_0901T^VjbNp3Tqi7i;JY>4om8QSy0d@Jyimxh2cB~3S z`q0Vt;KQ6+yS%<@%H&K}^Co1K_>}1pn84zgw>TExF>6_5HJ~+VwE}d_SnU9PF$JfB z)!>Y^Kt%yP+gJb$oh#F_$Zk@KH&xmyd$-367TjhA;XNYee6=`7EQ|0lqHY0<3aV|;{8_ks72zAVD0`$5QH z2m^pgq7F;zbf4*fpE(BN+$SiD=5+tz;PHN0girUuamV`-oy)T{XCy-(%{YQCKf#g$ zVx{#-JYVH-iz-EU#G>Q|6%@t%(iT6LAd$+ESfh8Z(+DQKk*-|CbbrTxbeRq}aSHs4 z$Nc(Q_>OiwEj8pYKFmGjnj`U_IoYILF0mW9cb??2epd0Bd&@Px`Lf%@ymyCP;k9}Q zT;QU>WUJw=pb@#7V%Y8QSECHh8AWj`Z=a%j!WN&wJw z1@3OI&8eGVk!?RdZhE5+lj+KJafDTsS77?x$2^7cBP8+3Ce6!zH_eqpbyh6A_3^CT zfW$j+n~GY7tOVq!P{PZ96**z~RIZUB^8i7uELZC`bxj698^B>K zcjP(8RBQ_vx7FOD6#62zNFXUUFrsCyUP@-g>@eAiNh&C4j>&-)%6$dA;&qjFeErR) z&hE{6DW(POK8xOLr>HP7}cbyDI z-{2Opzx>`2bw}qHop&7q_pDOAyf|5>*-5|G`+xScn^ossCq_k-V}8=A)cV%~tkaB5 z>tN0ARl@>_yo424#N&5ZGlSk>aMJIc^v>43v+;RvJm`1dpY_iMqm$m*xYz5v>y%jx z^~!^bb#F928;;K}x`Y03*dI2P*`o3xN=rf+54}P4DZvHpjQ`Qu$E0}Zvx?%UVdq^3 z=Gg<24Eryu&;HB4*BAUA;$4*0x64^Y=O0GCKfL$-fr;0Ns?Rxb{%PR<)3E2I?L6?O zfw!&qTux3h-s?~VQe80Y0~2Kf%xmbhi%%NO{F4LqP$PubI=4OoMi!4}HW6nwsb{+UakLkD+6a|@(ZtNZoLhA?-4u8?X(Wp-KO_RF#rjIJ| zjdNtcUfAD^(am8EyU4!Pg)F04W?1Ozo2Hk^z^+$)8+88pu7h4^4j-ZfKfs(h5gp69;HUJ` z*ASPU#P7q=h-th?noxb}yz8VQX>n)#duNm8=n3VW@dhRZde=$PH0z8zjKdsd2(lTS z{j!HI8;FzYx461JSpE78aa}KiWq}%O#jf0J66JTq{SSei=CAe7F-l(&wT^nu6a-9DPe(YbGHm5G^y-u68+<_gaA{fJ_D` z!36R46oJ$n>w;l@iV3G{cDLqoxJq-dPjdufL?KR!cOXj;ED$IV0+cDwKYnFYovfH- z0FzFXpnv|vP1pGJwA$rUQm37AE>5^4PqrnFk<2Dbg~xvSSC9%a8m*`T80se#x=iD% z%f)Owif1umIbt#tv4H`4;BV|7ee{aaLCPd~*D1c?jE|1y%Ol!i^1z31=UoSpSpIAo zl|TOY z-uX%IeBC?eON#UE`PuvTAKuH#+WHAn3ZvZ~5n4RNIPZ)*+VOyhdQd8zGHNr-*O9{P zF`Uwt#Nsx_17^0a&X3mb@;SBoQ<82mvv10$I?0vznxtZ1yRO4cYy>IVrrfY`qbXOj z_LqmW#MRd{M#)1ZUHLoD^;4r)mwb%5JdMkUK12yDs#&2xIfgpe4(9PQ%+bS>xF%Uu zOgGg2nknb>4^bLdwA2gMcO6U$6fuGBw|n|f=1HTZ@&l^}<5*OIaV#em{)InOvVlyk zIG?f>=P7+g`9n$`qJ1Uf>dR(RfBNH(fBx}*{eJ)e0RR6100960+|%;H