diff --git a/.testbed/cdrouter/configurations/prplos-certification b/.testbed/cdrouter/configurations/prplos-certification new file mode 100644 index 0000000000..330ce5bbe9 --- /dev/null +++ b/.testbed/cdrouter/configurations/prplos-certification @@ -0,0 +1,2685 @@ +SECTION "About" { + + # Cable/DSL Router Test Suite + # + # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 + # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) + # + # Local.conf + # + # This is the main configuration file for CDRouter. This file defines the + # configuration of the router under test and controls various aspects of + # CDRouter's behavior. This file consists of a number of unique test variables + # called 'testvars' which are grouped by interface, protocol, or functionality. + # The basic syntax for all testvars is: + # + # testvar NAME VALUE + +} + +SECTION "Base Configuration" { + + SECTION "WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.1.1 + # testvar wanIspAssignIp 202.254.1.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.1.2 + # testvar wanIspNextIp 202.254.1.3 + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar wanIspAssignMask 255.255.255.0 + # testvar IPv4HopCount 1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + # testvar dhcpServerRapidCommit yes + # testvar dhcpServerClientIDBehavior rfc6842 + # testvar dhcpServerResponseDelay 4500 + # testvar dhcpConnectOnDemand no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar wanDhcpClientOptionCode1 60 + # testvar wanDhcpClientOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "DHCP Authentication" { + + # testvar supportsDhcpAuth no + + } + + SECTION "PPPoE Server" { + + # testvar pppoeConnectOnDemand no + # testvar pppoeIdleTimeout 60 + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + # testvar pppoeAcCookie auto + # testvar pppoeMaxPayload none + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpConnectOnDemand yes + # testvar pptpServerIp 202.254.201.1 + # testvar pptpClientIp 202.254.201.2 + # testvar pptpUseDHCP no + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpConnectOnDemand yes + # testvar l2tpServerIp 202.254.201.1 + # testvar l2tpClientIp 202.254.201.2 + # testvar l2tpUseDHCP no + + } + + SECTION "DS-Lite" { + + # testvar ipv6DsliteAftr 3001:aaaa::1 + # testvar dhcpv6WanAftrName aftr.qacafe.com + # testvar dsliteFirewallMode address-restricted + + } + + SECTION "MAP / LW4o6" { + + # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: + # testvar mapBmrRuleIpv6PrefixLen 48 + # testvar mapBmrRuleIpv4Prefix 5.0.0.0 + # testvar mapBmrRuleIpv4PrefixLen 24 + # testvar mapBmrRuleEABitLen 16 + + # testvar mapSharingRatio 256 + # testvar mapStartPort 4096 + # testvar mapPsid 255 + + # testvar mapEnableDhcpv6Options yes + + SECTION "MAP-E / LW4o6" { + + # testvar mapTunnelFlowLabel 0 + # testvar mapTunnelHopLimit 64 + # testvar mapTunnelTrafficClass 0 + + } + + SECTION "MAP-T" { + + # testvar mapDmrIpv6Prefix 5001:db8:: + # testvar mapDmrIpv6PrefixLen 48 + + # testvar mapTosTranslate yes + + } + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + # testvar pppConnectionDelay 10 + # testvar pppRestartTimeout 300000 + # testvar pppFailUsesICMP no + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "Wireless Access Point (AP)" { + + # testvar wanApBand 2.4GHz + # testvar wanApSSID qa-net + # testvar wanApChannel auto + + SECTION "WPA Authenticator" { + + # testvar wanApWpaMode RSN + # testvar wanApWpaKeyMgmt PSK + # testvar wanApWpaCipher CCMP-128 + # testvar wanApWpaGroupCipher auto + # testvar wanApWpaPMF auto + # testvar wanApWpaPsk qacafe123 + # testvar wanApWpaSaePassword "sae secret" + + } + } + + SECTION "WAN 802.1X and RADIUS" { + + SECTION "WAN RADIUS" { + + # testvar wanRadiusEnable no + # testvar wanRadiusInterface wan + # testvar wanRadiusIp 3.3.3.44 + # testvar wanRadiusSecret qacafe123 + # testvar wanRadiusServerAttrType1 200 + # testvar wanRadiusServerAttrData1 04040404 + + } + + SECTION "WAN EAP Settings" { + + # testvar wanEapType eap-md5 + + SECTION "WAN Supplicant Credentials" { + + # testvar wanEapIdentity1 user1 + # testvar wanEapPassword1 qacafe123 + + } + + SECTION "WAN Authentication Options" { + + # testvar wanEapRootCert /usr/cdrouter/tests/root.pem + # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem + # testvar wanEapServerCertPassword qacafe123 + # testvar wanEapFragmentSize 1024 + + } + + } + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.101.1 + # testvar wanBackupDnsServer 202.254.101.2 + # testvar wanBackupDnsServer2 0.0.0.0 + # testvar wanBackupDnsServer3 0.0.0.0 + # testvar DNStoDHCP no + # testvar supportsDnsProxy yes + # testvar supportsDnsCaching yes + # testvar dnsCacheSize 150 + # testvar dnsLookupTimeout 5 + # testvar dnsFailoverAuth "2 4 5" + # testvar dnsFailoverNonAuth "2 4 5" + # testvar dnsFailoverDelay 10 + # testvar dnsFailoverAttempts 20 + # testvar dnsRelayFailover 120 + # testvar dnsForwardServerStatus no + # testvar dnsUsageProfile opportunistic-privacy + # testvar dnsCaptive no + + SECTION "User Configurable DNS Entries" { + + testvar dnsHostname1 cpe01.prplOS.prplfoundation.org + testvar dnsIp1 7.7.7.7 + + } + + } + + SECTION "HTTP" { + + # testvar supportsHttpProxy yes + # testvar httpProxyIdleTimeout 30 + # testvar httpMaxHeaderCount 200 + + } + + SECTION "NTP" { + + # testvar ntpServer1 3.3.3.6 + testvar ntpServerName1 0.europe.pool.ntp.org + # testvar ntpServer2 3.3.3.7 + testvar ntpServerName2 1.europe.pool.ntp.org + # testvar ntpStartDate "6/2/2007 11:00 am UTC" + # testvar ntpOffset 0 + # testvar enableRFC868TimeProtocol no + + } + + SECTION "Dynamic DNS" { + + # testvar supportsDynDns no + # testvar dynDnsServerIp 66.37.215.49 + # testvar dynDnsTransport http + # testvar dynDnsHostname test.domain.com + # testvar dynDnsUsername qacafe + # testvar dynDnsPassword qacafe123 + # testvar dynDnsSystem dyndns + # testvar dynDnsMx mail.domain.com + # testvar dynDnsBackMx no + # testvar dynDnsWildcard off + # testvar dynDnsAgent RAS/1.1 + # testvar dynDnsWait 30 + # testvar testDynDnsErrorCode no + # testvar dynDnsServerReturn !yours + + } + + SECTION "WINS Servers" { + + # testvar winsServer1 3.3.3.4 + # testvar winsServer2 3.3.3.5 + + } + + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanDomainName qacafe.com + # testvar lanMtu default + testvar lanHostname prplOS.lan + # testvar lanGuestMode no + + SECTION "ARP Settings" { + + # testvar arpMode strict + # testvar arpSupportGratuitous yes + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + # testvar supportsDnsHostnameCreate no + + } + + SECTION "DHCP Client" { + + # testvar dhcpClientTimeout 5 + # testvar dhcpInform no + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpRapidCommit no + # testvar ipv4MaxLanClients auto + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpCreateDelay 0 + # testvar dhcpReleaseDelay 300 + # testvar dhcpServerMac auto + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + # testvar dhcpClientTrackSeconds no + # testvar dhcpClientRequestNtp no + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + SECTION "DHCP Client Extra Parameters" { + + # testvar dhcpExtraClientParams "69 70" + + } + + SECTION "DHCP Client Extra Options" { + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Hotspot Router Settings" { + + # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% + # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% + + SECTION "Hotspot Clients" { + + # testvar clientLoginName1 client1 + # testvar clientLoginPassword1 admin1 + + } + + SECTION "Advanced Hotspot Settings" { + + # testvar browserLoginProc example_login + # testvar browserLogoutProc example_logout + # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl + + } + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconRsnCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X and RADIUS" { + + SECTION "LAN RADIUS" { + + # testvar enableRADIUSserver yes + # testvar radiusHost remoteHost + # testvar radiusSecret qacafe123 + # testvar radiusServerAttrType1 200 + # testvar radiusServerAttrData1 04040404 + + } + + SECTION "LAN EAP Settings" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + SECTION "LAN Authentication Options" { + + # testvar eapRootCert /usr/cdrouter/tests/root.pem + # testvar eapServerCertPath /usr/cdrouter/tests/server.pem + # testvar eapServerCertPassword qacafe123 + # testvar eapFragmentSize 1024 + # testvar eapTxWhen 60 + # testvar eapQuietPeriod 60 + # testvar eapReAuthMax 2 + # testvar eapSendLogoffFailure yes + # testvar eapReAuthPeriod 0 + + } + + } + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "Firewall and NAT" { + + SECTION "NAT Options" { + + testvar natSimultaneousTcp yes + # testvar natSrcPort0 yes + # testvar natSupportsP2P yes + # testvar natPortParity yes + # testvar natMode port-restricted + # testvar natVerifyIpId yes + # testvar defaultTcpEchoPort 50000 + # testvar defaultUdpEchoPort 50000 + # testvar natRefreshBehavior both + + SECTION "NAT Timers" { + + # testvar natFinTimeout disabled + # testvar natRstTimeout disabled + # testvar natTcpTimeout disabled + # testvar natSynTimeout disabled + # testvar natUdpTimeout disabled + # testvar natDnsTimeout disabled + # testvar natIcmpTimeout disabled + # testvar natRtspTimeout disabled + # testvar natLagTime 0 + + } + + } + + SECTION "Protocol Pass Through" { + + SECTION "IPSEC Pass Through" { + + # testvar supportsIPSECpass yes + # testvar ipsecMaxTunnels 20 + # testvar ipsecScaleSameServer no + # testvar alwaysUseIke no + # testvar ipsecPassRetransmit no + # testvar unknownPassthrough yes + + } + + SECTION "PPTP Pass Through" { + + # testvar supportsPPTPpass yes + # testvar pptpMaxTunnels 20 + + } + + SECTION "L2TP Pass Through" { + + # testvar supportsL2TPpass yes + # testvar l2tpMaxTunnels 20 + + } + + SECTION "PPPoE Pass Through" { + + # testvar supportsPPPoEpass no + + } + + } + + SECTION "Port Triggers" { + + # testvar portTriggers no + # testvar portTriggerTimeout 0 + # testvar portTriggerDelay 0 + # testvar portTriggerOpenDelay 0 + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "Application Layer Gateways (ALGs)" { + + SECTION "MSN Messenger" { + + # testvar supportsMsnAlg no + # testvar msnNotificationServerPort 1863 + # testvar msnSwitchBoardServerPort 1863 + + } + + SECTION "RTSP" { + + # testvar supportsRtspAlg no + # testvar rtspTeardownDelay 5 + # testvar rtspGetParameterInterval 5 + + } + + SECTION "SIP" { + + # testvar supportsSipAlg yes + # testvar sipInterface wan + # testvar sipServerIp 3.3.3.8 + # testvar ipv6SipServerIp 3001:051a:cafe::4 + # testvar sipCallTeardownDelay 5 + # testvar sipMaxOutboundCalls 10 + # testvar sipMaxInboundCalls 10 + # testvar sipCallPacing 0 + # testvar sipScaleRunTime 30 + # testvar sipScaleServerPort 5060 + # testvar sipScaleClientPort 5060 + # testvar sipMaxUserNames -1 + # testvar rtpSendInterval 5000 + + } + + SECTION "FTP" { + + # testvar ftpPortTimeout 120 + + } + + } + + SECTION "Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + SECTION "Port Scanning, Firewall and DoS Options" { + + # testvar portScanStart 0 + # testvar portScanStop 65535 + # testvar portScanDelay 1 + testvar firewallTcpOpenPorts "50805" + # testvar firewallTcpClosedPorts 2323 + # testvar firewallUdpOpenPorts 1234 + testvar firewallUdpClosedPorts 68 + # testvar firewallOutBlockedTcpPorts 1234 + # testvar firewallOutBlockedUdpPorts 1234 + # testvar firewallOutBlockedIpProtos 0 + # testvar wanPingRespond no + + SECTION "Denial of Service Options" { + + # testvar dosRecoveryTime 5 + # testvar dosAttackAttempts 100 + # testvar dutMgmtPort 80 + # testvar dutSecureMgmtPort disabled + # testvar dosSynAttackPort 80 + # testvar dosSynAttackAttempts 100 + + } + + SECTION "Deprecated SSL Protocols and Ciphers" { + + # testvar sslDeprecatedProtocols "sslv2 sslv3" + # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" + + } + + } + + SECTION "DMZ" { + + # testvar lanDmzHost 192.168.1.253 + # testvar lanDmzTcpPortExceptions 113 + # testvar lanDmzUdpPortExceptions 1234 + # testvar lanDmzIpProtoExceptions 2,47 + # testvar lanDmzSupportsIcmp no + + } + + SECTION "URL Filtering" { + + # testvar urlFilterSupported no + # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" + # testvar non-filtered-urls http://qacafe.com + # testvar urlFilterBlockedText "This website is blocked" + + } + + SECTION "XBox Live Options" { + + # testvar xboxNatMinType open + # testvar xboxPort 3074 + # testvar xboxMtu 1364 + + } + + } + + SECTION "Advanced Protocols" { + + SECTION "RIP v1/v2" { + + # testvar ripSupported no + # testvar ripVersion 1 + # testvar ripV2mode multicast + # testvar ripAuthMode none + # testvar ripPassword qacafe123 + # testvar ripMaxRoutes 96 + # testvar ripRouteTimeout 180 + # testvar ripGarbageTimeout 120 + # testvar ripRouteDelay 5000 + # testvar ripAcceptWanUpdate no + + } + + SECTION "UPnP" { + + # testvar upnpSupported yes + # testvar upnpVersion 1.1 + # testvar upnpDevice InternetGatewayDevice:2 + # testvar upnpWANPPPConnection no + # testvar upnpLANDevice no + # testvar upnpMaxTcpMappings 10 + # testvar upnpMaxSubClients 10 + # testvar upnpMinSubTimeout 40 + # testvar upnpMaxSubTimeout 3600 + # testvar upnpWANFailureTimeout 120 + # testvar upnpPortStart 40000 + # testvar upnpPortStop 50000 + + } + + SECTION "LLDP" { + + # testvar supportsLLDP no + # testvar lldpLanMac none + # testvar lldpLanChassisMac auto + # testvar lldpMsgFastTx 1 + # testvar lldpMsgTxInterval 30 + # testvar lldpTxFastInit 4 + + } + + SECTION "IGMP (Multicast)" { + + # testvar supportsMulticast yes + # testvar multicastType proxy + # testvar supportsMulticastOut no + # testvar igmpVersion 2 + # testvar igmpFastLeave no + # testvar igmpRouterOption yes + # testvar igmpMaxGroups 64 + # testvar multicastCacheTimeout 10 + # testvar multicastPoolStart 224.0.1.0 + # testvar multicastPoolStop 239.255.255.255 + # testvar SSMulticastPoolStart 232.0.1.1 + # testvar SSMulticastPoolStop 232.0.1.255 + # testvar multicastJoinDelay 2 + # testvar multicastScaleDelay 1 + # testvar multicastInterface wan + # testvar multicastBypassPPPoE no + + SECTION "IGMP Timers" { + + # testvar igmpQueryInterval 125 + # testvar igmpRobustnessVariable 2 + # testvar igmpQueryResponseInterval 10 + + } + + SECTION "IPTV Options" { + + # testvar iptvChannelRange 200 + # testvar iptvChannelChangeDelay 200 + # testvar iptvMaxFailures 10 + + } + + } + + SECTION "GRE Tunnels" { + + # testvar greDFflag on + + IGNORE testvar_group greTunnel1 { + + SECTION "Generic IPv4 GRE Tunnel Endpoints" { + + # testvar greType IPv4 + # testvar greEndpoint 5.5.5.5 + # testvar greLocalNet 192.168.1.0 + # testvar greLocalMask 255.255.255.0 + + } + + SECTION "L2GRE Options" { + + # testvar greWanGroup wan2 + + } + + SECTION "L3GRE Remote IPv4 Network" { + + # testvar greHost 3.0.0.1 + # testvar greRemoteNet 3.0.0.0 + # testvar greRemoteMask 255.0.0.0 + + } + + } + + } + + } + + SECTION "Additional Features" { + + # testvar supportsIPv4 yes + # testvar internalSmtpServer 5.5.5.5 + # testvar remoteHostIp 3.3.3.3 + # testvar startOtherLanFirst no + # testvar cdrouterOui B0750C + # testvar forwardingMaxFailures 20 + # testvar forwardingPort 5001 + # testvar jumboMtu disabled + # testvar tcpUdpPortStart 10000 + + SECTION "General Purpose HTTP Server" { + + # testvar httpServerIp 3.3.3.16 + # testvar httpServerPort 80 + # testvar httpServerRoot /tmp + + } + + SECTION "Free Network Range" { + + # testvar FreeNetworkStart 200.0.0.0 + # testvar FreeNetworkMask 255.255.255.0 + # testvar FreeNetworkStop 201.0.0.0 + + } + + SECTION "TCP MSS Clamping" { + + # testvar mssClampingValue default + # testvar mssClampingInValue default + + } + + SECTION "TCP/UDP Scaling Options" { + + # testvar scaleTcpConnsPerHost 5 + # testvar natMaxTcpConns 200 + # testvar natMaxUdpConns 100 + + } + + SECTION "Global Wireless Options" { + + # testvar wirelessRetry 3 + # testvar lanWirelessMaxClients auto + # testvar wifiCapture off + # testvar wifiCaptureFilter {} + + } + + } + + SECTION "Test Execution Options and Auto-Reboot" { + + # testvar startDelay 3 + # testvar lanStartDelay 3 + # testvar startTimeout 90 + # testvar wanCloseOnExit yes + # testvar RestartDut none + # testvar RestartDutDelay disabled + # testvar ShutdownDut "echo -n" + # testvar cpeRebootMode skip + # testvar healthCheckEnable no + + } + +} + +SECTION "CDRouter DOCSIS Add-On" { + + # testvar supportsDocsis no + + SECTION "Basic Configuration" { + + # testvar docsisIpProvisioningMode ipv4-only + # testvar docsisBootDelay 30 + + # testvar docsisClientMac auto + + } + + SECTION "IPv4 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIp 10.10.10.1 + # testvar docsisMask 255.255.255.0 + + } + + SECTION "DHCPv4 Server" { + + # testvar docsisDhcpServer 10.10.10.3 + # testvar docsisAssignIp 10.10.10.2 + # testvar docsisDomain docsis.qacafe.com + # testvar docsisDhcpLeaseTime 300 + # testvar docsisDhcpRapidCommit no + + # testvar docsisDhcpServerOptionCode1 69 + # testvar docsisDhcpServerOptionData1 04040404 + + # testvar docsisDhcpClientOptionCode1 60 + # testvar docsisDhcpClientOptionData1 04040404 + + SECTION "DHCPv4 Relay" { + + # testvar docsisGateway 6.6.6.7 + # testvar docsisAssignGateway 6.6.6.6 + # testvar docsisAssignMask 255.255.255.0 + # testvar docsisDhcpRelayServer 6.6.6.7 + + } + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogServer 10.10.10.5 + # testvar docsisTimeServer 10.10.10.6 + # testvar docsisTftpServer 10.10.10.4 + + } + + } + + SECTION "IPv6 Provisioning" { + + SECTION "Default Gateway and Network" { + + # testvar docsisIpv6 8001::1 + # testvar docsisIpv6PrefixLen 64 + + } + + SECTION "DHCPv6 Server" { + + # testvar docsisDhcpIpv6Server 8001::3 + # testvar docsisAssignIpv6 8001::2 + # testvar docsisDHCPv6PreferredLifetime 300 + # testvar docsisDHCPv6ValidLifetime 300 + # testvar docsisDhcpv6RapidCommit no + + # testvar docsisDhcpv6ServerOptionCode1 69 + # testvar docsisDhcpv6ServerOptionData1 04040404 + + # testvar docsisDhcpv6ClientOptionCode1 60 + # testvar docsisDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Relay" { + + # testvar docsisIpv6Gateway 9001::1 + # testvar docsisAssignIpv6PrefixLen 64 + # testvar docsisDhcpv6RelayServer 9001::1 + + } + + SECTION "Log, Time, and TFTP Servers" { + + # testvar docsisLogIpv6Server 8001::5 + # testvar docsisTimeIpv6Server 8001::6 + # testvar docsisTftpIpv6Server 8001::4 + + } + + } + + SECTION "CM Config File" { + + SECTION "Global TFTP Settings" { + + # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp + # testvar docsisTftpBootFile auto-docsis.bin + + } + + SECTION "Embedded Config File" { + + # testvar docsisConfig { + # Main + # { + # NetworkAccess 1; + # BaselinePrivacy + # { + # AuthTimeout 10; + # ReAuthTimeout 10; + # AuthGraceTime 600; + # OperTimeout 1; + # ReKeyTimeout 1; + # TEKGraceTime 600; + # AuthRejectTimeout 60; + # SAMapWaitTimeout 1; + # SAMapMaxRetries 4; + # } + # MaxCPE 3; + # UsServiceFlow + # { + # UsServiceFlowRef 2; + # QosParamSetType 7; + # } + # DsServiceFlow + # { + # DsServiceFlowRef 1; + # QosParamSetType 7; + # } + # SNMPv1v2cCoexistenceConfig + # { + # SNMPv1v2cCommunityName "public"; + # SNMPv1v2cTransportAddressAccess + # { + # SNMPv1v2cTransportAddress 0.0.0.0/0; + # SNMPv1v2cTransportAddressMask 0.0.0.0/0; + # } + # SNMPv1v2cAccessViewType 2; + # SNMPv1v2cAccessViewName "docsisManagerView"; + # } + # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ + # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ + # /*EndOfDataMkr*/ + # } + # } + + } + + SECTION "Vendor Defined Config File" { + + # testvar docsisConfigFile none + + } + + } + + SECTION "CM Firewall Configuration" { + + SECTION "IPv4" { + + # testvar docsisTcpOpenPorts "22 443" + # testvar docsisTcpClosedPorts all + # testvar docsisUdpOpenPorts 1234 + # testvar docsisUdpClosedPorts all + + } + + SECTION "IPv6" { + + # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" + # testvar docsisIpv6TcpClosedPorts "2323 80" + # testvar docsisIpv6UdpOpenPorts 1234 + # testvar docsisIpv6UdpClosedPorts 113 + + } + + } + +} + +SECTION "CDRouter HomeKit Add-On" { + + # testvar supportsHomeKit no + + # testvar homeKitRouterName "HomeKit Router" + # testvar homeKitHATHostname hat.local + # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ + # testvar homeKitRouterSetupCode + + # testvar homeKitManualEnabled yes + +} + +SECTION "CDRouter IKE Add-On" { + + SECTION "Global IKE Options" { + + # testvar ikeMaxPhase2SA 20 + # testvar ikeDeadPeerDetection no + # testvar ikeNewQuickModeDelay 1000 + # testvar ikeKeepAlive 20 + # testvar ikeMinimumLifetime 20 + # testvar ipsecMinimumLifetime 20 + # testvar ikePhase2DeleteDelay 100 + # testvar ikeMaxTransforms 21 + # testvar ikeInitialContact yes + # testvar ikeBringUpTunnels yes + # testvar ikeAlwaysInitiate no + # testvar useSameIpsecTunnel no + # testvar ikeNatTraversal no + # testvar ike_FQDN fqdn-test.cdrouter.com + # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com + + } + + SECTION "IPsec Tunnel Configurations" { + + SECTION "IPsec Tunnel Configuration 1" { + + # testvar ipsecTunnelKeyType1 manual + # testvar ipsecTunnelEndpoint1 5.0.0.1 + # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 + # testvar ipsecTunnelRemoteMask1 255.255.255.0 + # testvar ipsecTunnelHost1 5.0.0.2 + + SECTION "Manual IPsec Tunnel Configuration" { + + # testvar ipsecTunnelOutboundSpi1 1000 + # testvar ipsecTunnelOutEncrypt1 des + # testvar ipsecTunnelOutEncryptKey1 0102030405060708 + # testvar ipsecTunnelOutAuth1 md5-hmac + # testvar ipsecTunnelOutAuthKey1 6262626262626262 + # testvar ipsecTunnelInboundSpi1 1001 + # testvar ipsecTunnelInEncrypt1 des + # testvar ipsecTunnelInEncryptKey1 0102030405060708 + # testvar ipsecTunnelInAuth1 md5-hmac + # testvar ipsecTunnelInAuthKey1 6262626262626262 + + } + + SECTION "IKE IPsec Tunnel Configuration" { + + # testvar ipsecTunnelIkeEncrypt1 des + # testvar ipsecTunnelIkeAuth1 md5-hmac + # testvar ipsecTunnelIkeGroup1 1 + # testvar ipsecTunnelIkeLifetime1 300 + # testvar ipsecTunnelEncrypt1 3des + # testvar ipsecTunnelAuth1 sha1-hmac + # testvar ipsecTunnelPfsGroup1 1 + # testvar ipsecTunnelLifetime1 120 + # testvar ipsecTunnelPsk1 qacafe123 + # testvar ipsecTunnelIkeMode1 main + # testvar ipsecTunnelUsesNat1 no + + } + + } + + } + +} + +SECTION "CDRouter IPv6 Add-On" { + + testvar supportsIPv6 yes + + SECTION "IPv6 WAN" { + + testvar ipv6WanMode autoconf + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001::1 + # testvar ipv6WanIspAssignIp 3001::2 + # testvar ipv6WanIspNextIp 3001::3 + # testvar ipv6WanIspPrefixLen 64 + # testvar ipv6WanDutDuid 00000000 + # testvar ipv6RelayServer 192.88.99.1 + # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 + # testvar ipv6rdPrefix 2001:1234:: + # testvar ipv6rdPrefixLen 32 + # testvar ipv6rdIPv4MaskLen 0 + # testvar ipv6rdDHCPv4Option yes + # testvar ipv6TunnelMtuType static + # testvar ipv6WanMtu 1500 + # testvar ipv6WanMtuOption no + # testvar ipv6RASendInterval 10 + # testvar ipv6ExpectRAonWan no + + SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { + + # testvar ipv6WanIspGateway 3001::9 + # testvar ipv6WanAssignPrefixLen 64 + # testvar IPv6HopCount 1 + # testvar dhcpv6RelayServer 3001::9 + + } + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + # testvar ipv6WanRDNSS no + # testvar ipv6WanDNSSL no + + } + + SECTION "DHCPv6 Server" { + + # testvar dhcpv6IAValidLifetime 300 + # testvar dhcpv6IAPreferredLifetime 300 + # testvar dhcpv6DuidType 1 + # testvar dhcpv6RestartLatency 10 + # testvar dhcpv6ServerRapidCommit yes + + # testvar dhcpv6ServerOptionCode1 69 + # testvar dhcpv6ServerOptionData1 04040404 + + # testvar wanDhcpv6ClientOptionCode1 60 + # testvar wanDhcpv6ClientOptionData1 04040404 + + } + + SECTION "DHCPv6 Authentication" { + + # testvar supportsDhcpv6Auth no + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: + # testvar dhcpv6WanAssignPrefixLen 48 + # testvar dhcpv6PDLatency 30 + + } + + SECTION "IPv6 NTP" { + + # testvar ipv6NtpServer1 4321::23 + # testvar ipv6NtpServerName1 time.nist.gov + + # testvar ipv6NtpServer2 4321::24 + # testvar ipv6NtpServerName2 time.foo.com + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + testvar ipv6LanIp 3001:dddd::1 + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanPrefixLen 64 + # testvar ipv6MaxLanClients 32 + # testvar ipv6RAInterval 300 + # testvar ipv6LanSubnetId 1 + + SECTION "DHCPv6 Client" { + + # testvar dhcpv6ClientTimeout 5 + # testvar ipv6DhcpClientStart ::2 + # testvar ipv6DhcpClientEnd ::1f + # testvar ipv6DhcpClientExclude "::3 ::7" + # testvar ipv6DhcpClientValidLifetime 86400 + # testvar dhcpv6RapidCommit yes + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + SECTION "IPv6 LAN DNS" { + + # testvar ipv6DNStoLAN yes + # testvar ipv6RdnssSupport yes + # testvar ipv6DnsslSupport yes + # testvar ipv6LanStaticDns no + + } + + SECTION "Unique Local Address (ULA) Options" { + + # testvar supportsULA no + # testvar ipv6LanULAPrefix fd00:: + # testvar ipv6LanULAIp ::%eui64% + # testvar ipv6LanULAMode autoconf + + } + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + } + + SECTION "IPv6 Firewall" { + + # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" + # testvar ipv6FirewallTcpClosedPorts "2323 80" + # testvar ipv6FirewallUdpOpenPorts 1234 + # testvar ipv6FirewallUdpClosedPorts 113 + # testvar ipv6FirewallOutBlockedTcpPorts 1234 + # testvar ipv6FirewallOutBlockedUdpPorts 1234 + # testvar ipv6FirewallOutBlockedIpProtos 0 + # testvar ipv6WanPingRespond no + + SECTION "IPv6 TCP MSS Clamping" { + + # testvar ipv6MssClampingValue default + # testvar ipv6MssClampingInValue default + # testvar ipv6MssClampingTestPort 8096 + + } + + } + + SECTION "IPv6 Advanced Protocols" { + + SECTION "RIPng" { + + # testvar supportsRIPng no + + } + + SECTION "MLD (IPv6 Multicast)" { + + # testvar supportsIPv6Multicast yes + # testvar supportsIPv6MulticastOut no + # testvar mldVersion 2 + # testvar mldMaxGroups 64 + # testvar mldFastLeave no + # testvar ipv6MulticastCacheTimeout 10 + # testvar ipv6MulticastJoinDelay 2 + # testvar ipv6MulticastScaleDelay 1 + + SECTION "MLD Timers" { + + # testvar mldQueryInterval 125 + # testvar mldRobustnessVariable 2 + # testvar mldQueryResponseInterval 10 + + } + + SECTION "IPv6 IPTV Options" { + + # testvar ipv6IptvChannelRange 200 + # testvar ipv6IptvChannelChangeDelay 200 + # testvar ipv6IptvMaxFailures 10 + + } + + } + + } + + SECTION "IPv6 Additional Features" { + + SECTION "IPv6 Free Network Range" { + + # testvar ipv6RemoteHost 3001:051a:cafe::1 + # testvar ipv6FreeNetworkStart 3001:cafe:1:: + # testvar ipv6FreeNetworkPrefixLen 64 + # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: + + } + + SECTION "IPv6 Multicast Pool Ranges" { + + # testvar ipv6MulticastPoolStart ff0e::1 + # testvar ipv6MulticastPoolStop ff0e:ffff:: + # testvar ipv6SSMulticastPoolStart ff3e::8000:1 + # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff + + } + + } + +} + +SECTION "CDRouter Multiport Add-On" { + + SECTION "Additional WAN Interface Setup" { + + # testvar wanFailoverTimeout 300 + + IGNORE testvar_group wan2 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.2.1 + # testvar wanIspAssignIp 202.254.2.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.2.2 + # testvar wanIspNextIp 202.254.2.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.202.1 + # testvar pptpClientIp 202.254.202.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.202.1 + # testvar l2tpClientIp 202.254.202.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.102.1 + # testvar wanBackupDnsServer 202.254.102.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:2::1 + # testvar ipv6WanIspAssignIp 3001:0:0:2::2 + # testvar ipv6WanIspNextIp 3001:0:0:2::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + IGNORE testvar_group wan3 { + + SECTION "IPv4 WAN" { + + SECTION "WAN Interface" { + + # testvar wanInterface eth2 + # testvar wanMode DHCP + # testvar wanIspIp 202.254.3.1 + # testvar wanIspAssignIp 202.254.3.2 + # testvar wanIspMask 255.255.255.0 + # testvar wanDomainName qacafe.com + # testvar forwardingMode route + # testvar wanDutMac none + # testvar wanDutClientID 01000000000001 + # testvar wanAuthenticator no + # testvar wanNatIp 202.254.3.2 + # testvar wanIspNextIp 202.254.3.3 + # testvar wanAlwaysOn yes + + } + + SECTION "WAN Gateway and DHCP Relay" { + + # testvar wanIspGateway 10.0.0.2 + # testvar wanIspAssignGateway 4.0.0.1 + # testvar dhcpRelayServer 10.0.0.2 + + } + + SECTION "DHCP Server" { + + # testvar dhcpLeaseTime 300 + # testvar dhcpServerBroadcast no + + # testvar dhcpServerOptionCode1 69 + # testvar dhcpServerOptionData1 04040404 + + # testvar dhcpClientMac auto + + } + + SECTION "PPPoE Server" { + + # testvar pppoeUser qacafe + # testvar pppoePassword qacafe123 + # testvar pppoeAcName qacafe-ac + # testvar pppoeServiceName any + + } + + SECTION "PPTP Server" { + + # testvar pptpUser qacafe + # testvar pptpPassword qacafe123 + # testvar pptpServerIp 202.254.203.1 + # testvar pptpClientIp 202.254.203.2 + + } + + SECTION "L2TP Server" { + + # testvar l2tpUser qacafe + # testvar l2tpPassword qacafe123 + # testvar l2tpServerIp 202.254.203.1 + # testvar l2tpClientIp 202.254.203.2 + + } + + SECTION "PPP Options" { + + # testvar pppAuthType PAP + # testvar pppForceLcpMRU 1500 + # testvar pppMagicNumber yes + + } + + SECTION "WAN 802.1q VLAN" { + + # testvar wanVlanId 100 + # testvar wanVlanPriority 0 + + } + + SECTION "WAN 802.1ad VLAN" { + + # testvar enableVlanStacking no + + # testvar wanInnerVlanId 100 + # testvar wanInnerVlanPriority 0 + + # testvar wanOuterVlanId 100 + # testvar wanOuterVlanPriority 0 + # testvar wanOuterVlanQinQ no + + } + + SECTION "WAN DNS" { + + # testvar wanDnsServer 202.254.103.1 + # testvar wanBackupDnsServer 202.254.103.2 + + } + SECTION "WAN Static Routes" { + + # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 + # testvar staticRouteWanNextHop1 wan + + } + + } + + SECTION "IPv6 WAN" { + + # testvar ipv6WanMode DHCP + # testvar ipv6PPPoEAddressMode DHCP + # testvar ipv6WanIspIp 3001:0:0:3::1 + # testvar ipv6WanIspAssignIp 3001:0:0:3::2 + # testvar ipv6WanIspNextIp 3001:0:0:3::3 + # testvar ipv6WanIspPrefixLen 64 + + SECTION "WAN IPv6 DNS" { + + # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 + # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 + # testvar ipv6WanBackupDnsServer2 :: + # testvar ipv6WanBackupDnsServer3 :: + + } + + SECTION "DHCPv6 Prefix Delegation" { + + # testvar dhcpv6WanEnablePD yes + # testvar dhcpv6WanEnablePDExclude no + # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: + # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: + # testvar dhcpv6WanAssignPrefixLen 48 + + } + + SECTION "WAN IPv6 Static Routes" { + + # testvar staticIpv6RouteWanNetwork1 3001::/64 + # testvar staticIpv6RouteWanNextHop1 wan + + } + + } + + } + + } + + SECTION "Additional LAN Interface Setup" { + + testvar useSameLanInterface yes + + IGNORE testvar_group lan2 { + + SECTION "IPv4 LAN" { + + SECTION "LAN Interface" { + + # testvar lanInterface eth1 + # testvar lanMode DHCP + # testvar lanClients 1 + # testvar lanSecurity NONE + # testvar lanIp 192.168.1.1 + # testvar lanMask 255.255.255.0 + # testvar lanGuestMode no + + SECTION "LAN Host IP" { + + # testvar hostIp 192.168.1.0 + # testvar hostMask 255.255.255.0 + # testvar hostGateway 192.168.1.1 + + } + + } + + SECTION "LAN DNS" { + + # testvar lanDnsServer 192.168.1.1 + # testvar lanStaticDns no + + } + + SECTION "LAN 802.1q VLAN" { + + # testvar lanVlanId 100 + # testvar lanVlanPriority 0 + + } + + SECTION "DHCP Client Configuration" { + + # testvar dhcpClientStart 192.168.1.2 + # testvar dhcpClientEnd 192.168.1.254 + # testvar dhcpClientLeaseTime 86400 + # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" + # testvar dhcpClientVendorClass myIpDevice + # testvar useDHCPpadding yes + + # testvar lanDhcpClientOptionCode1 60 + # testvar lanDhcpClientOptionData1 04040404 + + # testvar dhcpClientOptionCode1 124 + # testvar dhcpClientOptionData1 000000000401020304 + + # testvar dhcpExtraClientParams "69 70" + + SECTION "DHCP Client Reservations" { + + # testvar dhcpClientReservedIp1 192.168.1.10 + # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 + + } + + } + + SECTION "802.11 Wireless" { + + # testvar lanSSID qa-net + # testvar lanChannel auto + # testvar lan80211Phy auto + # testvar lanBSSID auto + # testvar lan80211BandSteering none + + SECTION "WPA Configuration Options" { + + # testvar wpaMode auto + # testvar wpaKey qacafe123 + # testvar wpaSaePassword "sae secret" + # testvar wpaKeyMgmt PSK + # testvar wpaCipher auto + # testvar wpaGroupCipher auto + # testvar wpaPMF auto + + } + + SECTION "WEP Encryption Configuration Options" { + + # testvar lanWEPKey off + # testvar lanWEPKeyIndex 0 + + } + + SECTION "Expected Beacon Information" { + + # testvar wifiBeaconWpaMode none + # testvar wifiBeaconWpaKeyMgmt PSK + # testvar wifiBeaconWpaCipher CCMP-128 + # testvar wifiBeaconWpaGroupCipher CCMP-128 + # testvar wifiBeaconPhy "n a ac" + + } + + } + + SECTION "LAN 802.1X" { + + # testvar eapType eap-tls + + SECTION "LAN Supplicant Credentials" { + + # testvar eapIdentity1 user1 + # testvar eapPassword1 qacafe123 + # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem + # testvar eapUserCertPassword1 qacafe123 + # testvar eapUserPrivateKey1 "" + + } + + } + + SECTION "IPv4 Firewall and NAT" { + + SECTION "Static NAT" { + + # testvar staticNatIp 202.254.1.2 + # testvar staticNatFirewall yes + # testvar natMode port-restricted + + } + + SECTION "Special Application Port Triggers" { + + # testvar portTriggers no + + # testvar triggerName1 net2phone-1 + # testvar triggerAddrType1 ipv4 + # testvar triggerPort1 6801 + # testvar triggerType1 udp + # testvar triggerPublic1 30000 + # testvar triggerPublicType1 both + + } + + SECTION "TCP and UDP Virtual Services (Port Mappings)" { + + # testvar virtualWANTransType none + # testvar virtualLANTransType public + + SECTION "TCP Virtual Services" { + + # testvar virtualTcpServices no + + # testvar virtualTcpServicePort1 21 + # testvar virtualTcpServiceHost1 192.168.1.200 + # testvar virtualTcpServiceName1 ftp + # testvar virtualTcpServiceLanPort1 21 + + } + + SECTION "UDP Virtual Services" { + + # testvar virtualUdpServices no + + # testvar virtualUdpServicePort1 53 + # testvar virtualUdpServiceHost1 192.168.1.203 + # testvar virtualUdpServiceName1 dns + # testvar virtualUdpServiceLanPort1 53 + + } + + } + + } + + SECTION "LAN Static Routes" { + + # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 + # testvar staticRouteLanNextHop1 192.168.1.18 + + } + + } + + SECTION "IPv6 LAN" { + + # testvar ipv6LanMode autoconf + # testvar ipv6LanPrivacyAddresses no + # testvar ipv6LanStaticDns no + + SECTION "LAN IPv6 Static Routes" { + + # testvar staticIpv6RouteLanNetwork1 2001::/64 + # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a + + } + + SECTION "LAN IPv6 DHCP Client" { + + # testvar dhcpv6ClientOptionRequest "21 22" + + # testvar dhcpv6ClientOptionCode1 39 + # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 + + } + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + + } + + } + +} + +SECTION "CDRouter Performance Add-On" { + + # testvar supportsPerformance no + + SECTION "Basic Configuration" { + + # testvar perfWanIp 202.254.1.4 + # testvar perfWanIpv6 3001::4 + # testvar perfPort 19750 + # testvar perfPort2 19751 + + } + + SECTION "Performance Settings" { + + # testvar perfDuration 10 + # testvar perfDownloadBandwidth 0.0 + # testvar perfInterval auto + # testvar perfIncrement 5 + # testvar perfStreams 1 + # testvar perfStreamIncr 0 + # testvar perfUdpLen auto + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + # testvar perfOmit 0 + # testvar perfDSCP 0 + # testvar perfFairness no + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresholds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + SECTION "Advanced Options" { + + # testvar perfPingEnable no + # testvar perfEnableCapture no + # testvar perfLatencyAttempts 25 + # testvar perfApplicationAttempts 4 + # testvar perfApplicationDelay 100 + + } + + SECTION "Wireless" { + + IGNORE testvar_group wireless-performance { + + SECTION "Performance Settings" { + + # testvar perfDownloadBandwidth 0.0 + # testvar perfUploadBandwidth 0.0 + # testvar perfLantoLanBandwidth 0.0 + + } + + SECTION "WAN Download Thresholds" { + + # testvar perfDownloadMaxLatency 10000 + # testvar perfDownloadTcpRetr any + # testvar perfDownloadTcpLowThreshold 10.0 + # testvar perfDownloadTcpHighThreshold 0.0 + # testvar perfDownloadUdpLossPercentage 1.0 + # testvar perfDownloadUdpLowThreshold 10.0 + # testvar perfDownloadUdpHighThreshold 0.0 + + } + + SECTION "WAN Upload Thresholds" { + + # testvar perfUploadMaxLatency 10000 + # testvar perfUploadTcpRetr any + # testvar perfUploadTcpLowThreshold 10.0 + # testvar perfUploadTcpHighThreshold 0.0 + # testvar perfUploadUdpLossPercentage 1.0 + # testvar perfUploadUdpLowThreshold 10.0 + # testvar perfUploadUdpHighThreshold 0.0 + + } + + SECTION "LAN to LAN Thresholds" { + + # testvar perfLantoLanMaxLatency 10000 + # testvar perfLantoLanTcpRetr any + # testvar perfLantoLanTcpLowThreshold 10.0 + # testvar perfLantoLanTcpHighThreshold 0.0 + # testvar perfLantoLanUdpLossPercentage 1.0 + # testvar perfLantoLanUdpLowThreshold 10.0 + # testvar perfLantoLanUdpHighThreshold 0.0 + + } + + SECTION "Application Thresolds" { + + # testvar perfDHCPRenewMaxLatency 1000000 + # testvar perfDHCPRestartMaxLatency 2000000 + # testvar perfDNSMaxLatency 50000 + + } + + } + + } + +} + +SECTION "CDRouter Security Add-On" { + + SECTION "Internet Connection Sharing (ICS)" { + + # testvar enableICS no + # testvar icsInterface eth0 + # testvar icsShareIPv4 yes + # testvar icsShareIPv6 yes + + } + + SECTION "Traffic Analysis" { + + # testvar enableSuricata no + + } + + SECTION "Nmap Scans" { + + # testvar enableNmap no + # testvar nmapPorts 0-65535 + # testvar nmapScanTimeout 600 + # testvar nmapTimingTemplate 5 + + } + + SECTION "Parental Controls" { + + # testvar internetScheduleBase auto + # testvar internetScheduleTimeZone auto + # testvar internetScheduleBlockedText "This website is blocked" + + # testvar internetScheduleSundayMode none + # testvar internetScheduleSundayTimes "9:00am - 5:00pm" + + # testvar internetScheduleMondayMode none + # testvar internetScheduleMondayTimes "9:00am - 5:00pm" + + # testvar internetScheduleTuesdayMode none + # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleWednesdayMode none + # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleThursdayMode none + # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" + + # testvar internetScheduleFridayMode none + # testvar internetScheduleFridayTimes "9:00am - 5:00pm" + + # testvar internetScheduleSaturdayMode none + # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" + + } + +} + +SECTION "CDRouter SNMP Add-On" { + + # testvar supportsSnmp no + + # testvar snmpPort 161 + # testvar snmpDefaultUser auto + # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" + # testvar snmpUpdateDelay 15 + + SECTION "SNMP Options and Users" { + + # testvar snmpManagerIp 3.3.3.33 + # testvar snmpManagerIpv6 3001:051a:cafe::33 + + IGNORE testvar_group snmpuser1 { + + # testvar snmpVersion 2c + + # testvar snmpAccess read-only + # testvar snmpTransport udp + # testvar snmpRetries 5 + # testvar snmpTimeout 5 + + SECTION "SNMP v1/2c Configuration" { + + # testvar snmpCommunity public + + } + + SECTION "SNMP v3 Configuration" { + + # testvar snmpSecurityLevel noAuthNoPriv + + # testvar snmpAuthProtocol MD5 + # testvar snmpAuthUsername qacafe + # testvar snmpAuthPassword qacafe123 + + # testvar snmpPrivacyProtocol DES + # testvar snmpPrivacyPassword qacafe123 + + # testvar snmpContextName bridge1 + # testvar snmpSecurityEngineId 800000020109840301 + # testvar snmpContextEngineId 800000020109840301 + + } + + } + + } + + SECTION "SNMP Scenarios" { + + # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp + # testvar snmpScenarioSingleMode no + # testvar snmpScenarioInterface lan + # testvar snmpScenarioIpVersion IPv4 + + } + +} + +SECTION "CDRouter Storage Add-On" { + + # testvar supportsStorage no + + # testvar storageFileSize 10 + # testvar storageUserFilePath none + # testvar useMulticastDNS no + + SECTION "SMB Options and Users" { + + # testvar supportsStorageSmb yes + # testvar storageSmbMaxSessions 20 + # testvar storageSmbTimeout 120 + # testvar storageSmbPacing 0 + + IGNORE testvar_group smbuser1 { + + # testvar server MyNAS + # testvar share data + # testvar folder /home/qacafe + # testvar guest no + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + + SECTION "FTP Options and Users" { + + # testvar supportsStorageFtp yes + # testvar supportsStorageFtps yes + # testvar storageFtpMaxSessions 20 + # testvar storageFtpTimeout 120 + # testvar storageFtpPacing 0 + + IGNORE testvar_group ftpuser1 { + + # testvar server MyNAS + # testvar path /home/qacafe + # testvar user qacafe + # testvar password qacafe123 + # testvar permission ReadWrite + + } + + } + +} + +SECTION "CDRouter TR-069 Add-On" { + + testvar supportsCWMP yes + + SECTION "Basic ACS Configuration" { + + # testvar acsIp 6.0.0.1 + # testvar acsPort 80 + testvar acsDomain acs-download.qacafe.com + # testvar acsTransport http + # testvar acsAuth digest + # testvar acsDigestQopAuth yes + # testvar acsInterface wan + testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ + # testvar acsWaitForInform 120 + # testvar acsSkipInitialInform no + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar cwmpProtocolVersion 1.0 + # testvar acsDeviceDiscovery no + # testvar acsConfigurePeriodicInform yes + # testvar tr69InitiateConnection yes + testvar acsDefaultUser cdrouter + testvar acsDefaultPassword cdrouter + testvar acsCpeDefaultUser acs + testvar acsCpeDefaultPassword acs + # testvar acsFileServerUser file_server_user + # testvar acsFileServerPassword file_server_password + + } + + SECTION "XMPP Connection Request Configuration" { + + # testvar acsSupportsXmppConnReq no + + # testvar acsXmppServerConnectAlgorithm DNS-SRV + # testvar acsXmppConnReqUsername qacafe + # testvar acsXmppConnReqResource cdrouter + # testvar acsXmppConnReqPassword qacafe123 + # testvar acsXmppConnReqUseTls no + + } + + SECTION "Advanced ACS Configuration" { + + # testvar acsCpeKeepAlive yes + # testvar acsChunkedEncoding no + # testvar acsChunkSize 64 + # testvar acsAuthOncePerSession no + # testvar acsCookieMode rfc6265 + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + # testvar acsNumberCpeAttempts 2 + # testvar acsDelayCpeAttempts 10 + # testvar acsWaitForConnectionRequest yes + # testvar acsUseTcpOffload yes + # testvar acsTargetDevice tr069_device2 + # testvar acsDualStackIp 6000::1 + # testvar acsStrictSyntaxChecking on + + } + + SECTION "SSL Configuration" { + + # testvar acsSslVersion tls + # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem + # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem + # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem + # testvar acsCipherSuite auto + # testvar acsClientCaCertPath /path/to/client/ca/file + + } + + SECTION "Profiles" { + + # testvar cwmpSupportedDataModel auto + # testvar cwmpDataValidation yes + # testvar cwmpSkipParameters empty + # testvar cwmpModifyParameters empty + # testvar cwmpVendorSpecificParams none + + SECTION "Custom CWMP Profiles" { + + IGNORE testvar_group cwmp_profile1 { + + # testvar cwmpProfileName myVendorParameters + # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp + # testvar cwmpProfileObject InternetGatewayDevice:1 + + } + + } + + } + + SECTION "CWMP Scenarios" { + + # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp + # testvar cwmpScenarioSingleMode no + # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp + + } + + SECTION "Additional TR-069 Options" { + + # testvar tr69DeviceType IGD + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69InformTimeout 120 + # testvar tr69MinPeriodicInform 60 + # testvar tr69ScheduleInformRPC yes + # testvar tr69UploadRPC no + # testvar tr69UploadPath /tmp + # testvar tr69ConfigUploadFilename vendor_configuration_file + # testvar tr69LogUploadFilename vendor_log_file + # testvar tr69FactoryResetRPC no + # testvar tr69CpeGetRPCs no + # testvar tr69ForceBoolean no + # testvar tr69XMLCapturePath /tmp/tr69-xml + # testvar tr69DownloadTimeout 600 + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadImageVersion 1.0 + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69RebootTimeout 300 + # testvar tr69RpcTimeout 180 + # testvar tr69DownloadConfig /path/to/config + # testvar tr69MaxUserNameLen 256 + # testvar tr69MaxPasswordLen 256 + # testvar tr69MaxCpeUserNameLen 256 + # testvar tr69MaxCpePasswordLen 256 + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DUInstallImageVersion 1.0 + # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image + # testvar tr69DUInstallImageAlternateVersion 1.0 + # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb + # testvar tr69DUChangeExecEnvRef openwrt + # testvar tr69DUChangeTimeout 600 + # testvar tr69WildcardPortMappingOnly no + # testvar tr69PortMapDeletionDelay 15 + # testvar tr69PortMapCreationDelay 0 + # testvar tr69PortMapDisableDelay 15 + # testvar tr69TraceRouteTimeout 120 + + } + + SECTION "TR-111 Parts 1 and 2" { + + # testvar supportsTr111Part1 yes + # testvar supportsTr111Part2 no + # testvar STUNMaximumKeepAlivePeriod 60 + # testvar STUNMinimumKeepAlivePeriod 60 + # testvar STUNAuth no + # testvar STUNUsername qacafe + # testvar STUNPassword qacafe123 + # testvar acsUdpConnectionDelay 0 + + } + + SECTION "TR-143 Performance Tests" { + + # testvar tr143HttpDownloadSize 1000000 + # testvar tr143HttpUploadSize 1000000 + + # testvar tr143HttpDownloadHighThreshold 0.0 + # testvar tr143HttpDownloadLowThreshold 5.0 + # testvar tr143HttpDownloadResponseMax 60 + + # testvar tr143HttpUploadHighThreshold 0.0 + # testvar tr143HttpUploadLowThreshold 5.0 + # testvar tr143HttpUploadResponseMax 60 + + } + + SECTION "TR-069 LAN Side Devices" { + + IGNORE testvar_group tr069_device2 { + + # testvar acsDefaultUser qacafe + # testvar acsDefaultPassword qacafe123 + # testvar acsCpeDefaultUser qacafe + # testvar acsCpeDefaultPassword qacafe123 + # testvar acsCreatePortMapOnIGD no + # testvar acsPortMapPublicPort 20000 + # testvar tr69DeviceOui e09153 + # testvar tr69DeviceSn 2673964 + # testvar tr69DeviceType IGD + # testvar tr69DownloadImage /path/to/image + # testvar tr69DownloadOriginalImage /path/to/original_image + # testvar tr69DUInstallImage /path/to/du.image + # testvar tr69DownloadConfig /path/to/config + # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp + # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp + + } + + } + +} + +SECTION "CDRouter USP Add-On" { + + testvar supportsUSP yes + + SECTION "Basic Controller Configuration" { + + # testvar uspControllerID proto::controller-id + # testvar uspControllerInterface wan + + # testvar uspControllerIpMode ipv4-only + # testvar uspControllerIpv4 6.0.0.2 + # testvar uspControllerIpv6 6000::2 + # testvar uspControllerPort auto + # testvar uspControllerPath /controller-path + + # testvar uspControllerUseNonPayloadProtection no + # testvar uspControllerUseSessionContext no + testvar uspControllerMTP stomp + # testvar uspControllerMTPEncryption no + # testvar uspControllerUSPEncryption no + # testvar uspControllerDomain controller.cdroutertest.com + + # testvar uspSegmentationEnable no + # testvar uspSegmentationSize auto + + # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + + # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem + # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + + # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem + # testvar uspControllerVerifyRecordIntegrity no + + # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem + + # testvar uspControllerHost any + # testvar uspControllerUsername qacafe + # testvar uspControllerPassword qacafe123 + + } + + SECTION "Basic Agent Configuration" { + + # testvar uspAgentID proto::agent-id + + # testvar uspAgentIpv4 auto + # testvar uspAgentIpv6 auto + # testvar uspAgentPort auto + testvar uspAgentPath /queue/agent-1 + + # testvar uspMessageTimeout 30 + # testvar uspNotificationTimeout 30 + # testvar uspRebootTimeout 120 + + } + + SECTION "USP Scenarios" { + + # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp + # testvar uspScenarioSingleMode no + # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp + + } + + SECTION "Data Model" { + + # testvar uspSkipParameters empty + # testvar uspModifyParameters empty + # testvar uspSupportedDataModel all + + SECTION "Custom USP Data Model" { + + IGNORE testvar_group usp_profile_1 { + + # testvar uspProfileName myVendorParameters + # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml + + } + + } + + } + + SECTION "USP Agent Data Model Configuration" { + + # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. + + # testvar uspParameterPath1 Device.DeviceInfo.ModelName + # testvar uspParameterPath2 Device.IP.Interface.3.Enable + # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory + # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode + + # testvar uspNotificationParamNewValue myCustomParameterValue + + # testvar uspObject1 Device.IP.Interface. + # testvar uspObject2 Device.WiFi.AccessPoint. + + # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} + # testvar uspValidSearchPathResultParam PeriodicNotifInterval + # testvar uspValidSearchPathResultValue 5000 + + # testvar uspFirmwareImage /path/to/firmware.bin + # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin + # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 + + } + +} + +SECTION "CDRouter prpl Certification Expansion" { + + # testvar prplosCmdTimeout 10 + testvar prplosLanInterfaceAlias @CDROUTER_CONFIG_LAN_IFACE_ALIAS@ + # testvar prplosProtocol usp + +} + +SECTION "CDRouter BBF.069 Add-On" { + + # testvar supportsBBF069 yes + + SECTION "General" { + + SECTION "ACS URL" { + + # testvar bbf069ACSURL http://acs1.broadband-forum.org + # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org + + } + + SECTION "Security Certificates" { + + # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem + # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem + # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem + # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem + # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem + # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem + + } + + SECTION "HTTP Verification" { + + # testvar bbf069HTTPVerification no + + } + + } + + SECTION "Device Specific" { + + SECTION "General" { + + # testvar bbf069RootDataModel InternetGatewayDevice + # testvar bbf069UnsupportedRPC ChangeDUState + # testvar bbf069UploadType "1 Vendor Configuration File" + # testvar bbf069ExpectedUpgradeTime 100 + + } + + SECTION "Data Model" { + + # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069ActiveParamType unsignedInt + # testvar bbf069ActiveParamValue 60 + + # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval + # testvar bbf069CompletePath1Type unsignedInt + # testvar bbf069CompletePath1Value 73 + + # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable + # testvar bbf069CompletePath2Type boolean + # testvar bbf069CompletePath2Value true + + # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. + # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. + # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. + + # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv + # testvar bbf069InvalidPathType unsignedInt + + # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer + # testvar bbf069UnwritableType string + # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 + + } + + } + +}