Isolation Advance zone using PVLAN execution result

Isolation Advance zone using PVLANs

hardware requirement: Cisco  Catalyst 4500 software requirement Hypervisor/software switch:                                                         Xen /openvswitch KVM/openvswitch vmware/NEXUS vswitch      vmware/DVS

isolation within a shared network VMs deployed using multiple shared networks

primary VLAN ( pVLAN) - promiscuous ports secondary VLAN  (sVLAN) - isolated ports

isolated PVLAN promiscuous PVLAN community PVLAN - unsupported

External Device unsupported

Testcase ID

Test case name

Steps

Expected Results.

Priority

XEN

KVM Ubuntu 13.04

VMWARE DVS

Shared Network  1 PVLAN

1

Shared Network scope All  1 PVLAN Deploy VM

1. Advance zone cluster with 2 hosts,  Domain D1  domainadmin  d1domain, user d1user. Domain D2  user d2user. Create  Shared NW1  scope All <pVLAN1, sVLAN1>.  2. d1domain  deploy VM1 on NW1 on host1 , VM4 on NW1 on host2. d1user deploy VM2 on NW1 on host1, VM5 on NW1 on host2. d2user  deploy VM3 on NW1 on host1, VM6 on NW1 on host2.

1. shared NW1 with pVLAN creation succeed.
2.  All accounts able to  create VMs on NW1.
3.  All VMs  in NW1 unable to access each other All VMs in NW1 able to reach DHCP server, gateway

P1

Pass

Pass

Pass

2

Shared NW scope Domain  1 PVLAN Deploy VM

1. Advance zone cluster with 2 hosts, Domain D1  domainadmin  d1domain,  user d1user.  Domain D2  user d2user. Create  Shared NW1  scope Domain  for D1 <pVLAN1, sVLAN1>.  2. d1domain deploy VM1 on NW1 on host1 , VM4 on NW1 on host2. d1user  deploy VM2 on NW1 on host1, VM5 on NW1 on host2. d2user  try deploy VM3 on NW1 on host1, VM6 on NW1 on host2.

1. shared NW1 with pVLAN creation succeed.
2.  All accounts able to  create VMs on NW1.d1domain  & d1user able to create VMs on NW1. d2user unable to create VMs on NW1.
3. All VMs  in NW1 unable to access each other All VMs in NW1 able to reach DHCP server, gateway

P1

3

Shared NW scope Domain subdomain access TRUE 1 PVLAN Deploy VM

1. Advance zone cluster with 2 hosts, Domain D1  domainadmin  d1domain,  user d1user. Domain D1/D11 domainadmin d11domain.  Domain D2  user d2user.
2. Create  Shared NW1  scope Domain  for D1 subdomain access TRUE <pVLAN1, sVLAN1>. 
 3. As users from different domains , deploy Vms in this network,
d1domain deploy VM1 on NW1 on host1 , VM4 on NW1 on host2. d1user  deploy VM2 on NW1 on host1, VM5 on NW1 on host2. d11domain  deploy VM3 on NW1 on host1, VM6 on NW1 on host2. d2user  try deploy VM7 on NW1 on host1, VM8 on NW1 on host2.

1. shared NW1 with pVLAN creation succeed.
2. Only  accounts from doamin d1 and subdomains under this domain are allowed to create VMs on NW1.d1domain, d1user, d11domain able to create VMs on NW1. d2user unable to create VMs on NW1.
3. All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway

P1

4

Shared NW scope  Account 1 PVLAN Deploy VM

1. Advance zone cluster with 2 hosts, Domain D1  domainadmin  d1domain,  user d1user.  Domain D2  user d2user.
2. Create  Shared NW1  scope Account  for d1domainA <pVLAN1, sVLAN1>.  
3. As users from different domains , deploy Vms in this network, d1domain deploy VM1 on NW1 on host1 , VM4 on NW1 on host2. d1user try deploy VM2 on NW1 on host1, VM5 on NW1 on host2. d2user  try deploy VM3 on NW1 on host1, VM6 on NW1 on host2.

1. shared NW1 with pVLAN creation succeed.
2. d1domainA able to create VMs on NW1. d1user d2user unable to create VMs on NW1. 3. All VMs  in NW1 unable to access each other All VMs in NW1 able to reach DHCP server, gateway

P1

5

Shared NW scope  Project 1 PVLAN Deploy VM

1. Advance zone cluster with 2 hosts, Project P1 w/ account A1 A2  Project P2  w/account B1 B2
2. Create  Shared NW1  scope Project for P1 <pVLAN1, sVLAN1>. 
3. As users from different projects , deploy Vms in this network,
A1 user deploy VM1 on NW1 on host1 , VM5 on NW1 on host2. A2 user deploy VM2 on NW1 on host1, VM6 on NW1 on host2. B1 user  try deploy VM3 on NW1 on host1, VM7 on NW1 on host2. B2 user try deploy VM4 on NW1 on host1, VM8 on NW1 on host2.

1. shared NW1 with pVLAN creation succeed.
2. A1 user   A2 user able to create VMs on NW1. B1 user B2 user unable to create VMs on NW1.
3. All VMs  in NW1 unable to access each other All VMs in NW1 able to reach DHCP server, gateway

P1

6

Multiple  shared NW  scope zone using different PVLANs Deploy VM

1. Advance zone cluster with 2 hosts, Domain D1  domainadmin  d1domain,  user d1user.  Domain D2  user d2user.
2. Create multiple shared pvlan enabled networks.
Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>. Create  Shared NW2  scope zone  <pVLAN2, sVLAN2>. Create  Shared NW3  scope zone  <pVLAN3, sVLAN3>. Create  Shared NW4  scope zone  <pVLAN4, sVLAN4>.
 3. Make sure we are able to deploy multiple vms successfully in both the networks.
d1domain deploy VM1 on NW1 on host1 , VM4 on NW2 on host2, VM8 on NW3 on host1, VM12 on NW4 on host2 d1user  deploy VM2 on NW1 on host1, VM5 on NW2 on host2, VM9 on NW3 on host1, VM13 on NW4 on host2. d2user  deploy VM3 on NW1 on host1, VM6 on NW2 on host2, VM10 on NW4 on host1, VM14 on NW4 on host2.

With 1 network,
All VMs  in NW1 unable to access each other All VMs in NW1 able to reach DHCP server, gateway
Vm can access Vms from other shared networks.

. shared NW1 NW2  NW3   NW4  with different pVLANs creation succeed. 2. All users   able to create VMs on shared NW1 NW2  NW3   NW4 All VMs  in each shared NW unable to access each other All VMs  among all shared NWs unable to access each other All VMs in in each shared NW able to reach DHCP server, gateway

P1

Pass

Pass
[http://10.223.195.117:8080/client/api?command=deployVirtualMachine&zoneId=9ff201c7-6eba-4b36-b8e2-360f822cb7de&templateId=9bc1dba0-df99-11e2-b716-06f804000713&hypervisor=KVM&serviceOfferingId=e74c32fa-145f-4e03-be83-96e026209189&networkIds=54717634-c1e1-4d89-a7fc-4a0ee4886421,c7be29c8-59ec-44a5-91fd-57e058ccdcc5&displayname=d1domain1612-150-152-isolateV31&name=d1domain1612-150-152-isolateV31&response=json&sessionkey=pP%2Bk%2BAVLQA%2B9%2FBmeLHRkM1Jvd2w%3D&_=1372378780580
]{ "deployvirtualmachineresponse" :

PASS

KVM Ubuntu 13.04

VMWARE DVS

7

Shared NW using  PVLAN associated with another shared NW

1. Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Create  Shared NW2  scope zone  <pVLAN2, sVLAN1>.

shared NW2 creation FAIL

P1

Fail     CLOUDSTACK-2396

https://issues.apache.org/jira/browse/CLOUDSTACK-2888
PASS

https://issues.apache.org/jira/browse/CLOUDSTACK-2888
PASS

8

Shared NW using  the same VLAN associated with different PVLANs.

1. Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Create  Shared NW2  scope zone  <pVLAN1, sVLAN2>.

shared NW2 creation FAIL

P1

CLOUDSTACK-2396

https://issues.apache.org/jira/browse/CLOUDSTACK-2888
PASS

https://issues.apache.org/jira/browse/CLOUDSTACK-2888
PASS

9

Shared NW using  PVLAN associated with ZONE  VLAN

1. Create  Shared NW1  scope zone  using ZONE VLAN

shared NW1 creation FAIL

P1

The VLAN tag 2030 is already being used for the guest network in zone zone1

Pass
The VLAN tag 2020 is already being used for the guest network in zone zone1

Pass
The VLAN tag 2041 is already being used for the guest network in zone zone1

Test case ID

Test case name

Steps

Expected Result

Priority

XEN

KVM Ubuntu 13.04

VMWARE dvswitch

10

Should not be allowed to pass isolatedpvlan parameter when creating a isolated network.

1. Try to create a isolated network by passing isolatedpvlan parameter

Network creation should fail

P1

{ "createnetworkresponse" :

PASS

PASS

ListCommand changes

XEN

KVM Ubuntu 13.04

VMWARE dvswitch

12

listVirtualMachines() should return PVLAN related parameters

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy Vm in this network.
3. List Vm details using listVirtualMachines()

listVirtualMachines() should return PVLAN related parameters
 "isolationuri":"vlan://1611,"broadcasturi":"pvlan://1611-i998"

P1

Pass

https://issues.apache.org/jira/browse/CLOUDSTACK-2885
fixed, PASS
{ "listvirtualmachinesresponse" : { "count":1 ,"virtualmachine" : [  {"id":"8b025c78-69d0-440b-8907-7ff55f33aa33","name":"z1adminpvlan1611IP","displayname":"z1adminpvlan1611IP","account":"admin","domainid":"9bb2859c-df99-11e2-b716-06f804000713","domain":"ROOT","created":"2013-06-28T14:29:29-0700","state":"Running","haenable":true,"zoneid":"9ff201c7-6eba-4b36-b8e2-360f822cb7de","zonename":"z1","hostid":"958327d1-dd3c-4c83-a41b-c3f3413d93f7","hostname":"ubuntu8162","templateid":"9bc1dba0-df99-11e2-b716-06f804000713","templatename":"CentOS 5.5(64-bit) no GUI (KVM)","templatedisplaytext":"CentOS 5.5(64-bit) no GUI (KVM)","passwordenabled":false,"serviceofferingid":"e74c32fa-145f-4e03-be83-96e026209189","serviceofferingname":"512","cpunumber":1,"cpuspeed":100,"memory":512,"cpuused":"5.03%","networkkbsread":2,"networkkbswrite":8,"diskkbsread":23206,"diskkbswrite":11580,"diskioread":1152,"diskiowrite":1187,"guestosid":"9becdf76-df99-11e2-b716-06f804000713","rootdeviceid":0,"rootdevicetype":"ROOT","securitygroup":[],"nic":[

PASS

KVM Ubuntu 13.04

VMWARE DVS

13

listRouters() should return PVLAN related parameters

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
 2. Deploy Vm in this network.
 3. List router details using listRouters()

listRouters() should return PVLAN related parameters
"isolationuri":"vlan://1611,"broadcasturi":"pvlan://1611-i998"

P1

Pass

Pass
{ "listroutersresponse" : { "count":1 ,"router" : [  {"id":"83592e44-e79c-40f1-a14d-7cfbc35fdf3d","zoneid":"9ff201c7-6eba-4b36-b8e2-360f822cb7de","zonename":"z1","dns1":"10.223.110.254","networkdomain":"cs1cloud.internal","name":"r-4-VM","podid":"b522d14e-7ecb-40b0-bcec-f16226381232","hostid":"bcf14c6e-c44b-424d-bddc-f386d22fe43d","hostname":"ubuntu8161","linklocalip":"169.254.0.127","linklocalmacaddress":"0e:00:a9:fe:00:7f","linklocalnetmask":"255.255.0.0","linklocalnetworkid":"0d836be6-2fe8-4ec3-a53a-6f1fea3da7a3","guestipaddress":"10.223.161.111","guestmacaddress":"06:76:aa:00:00:0e","guestnetmask":"255.255.255.192","guestnetworkid":"fdc925e8-120c-47ca-b0f5-e3ca063e1734","templateid":"9bc175d4-df99-11e2-b716-06f804000713","created":"2013-06-28T13:29:53-0700","state":"Running","account":"system","domainid":"9bb2859c-df99-11e2-b716-06f804000713","domain":"ROOT","serviceofferingid":"c5ff5727-17d4-4400-b54a-a8413f095254","serviceofferingname":"System Offering For Software Router","isredundantrouter":false,"redundantstate":"UNKNOWN","role":"VIRTUAL_ROUTER","nic":[

,

PASS

14

listNetworks() should return PVLAN related parameters

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy Vm in this network.
 3. List network details using listNetworks()

listNetworks() should return PVLAN  related parameters
"broadcasturi":"pvlan://1611-i998"

P1

Pass

Pass
{ "listnetworksresponse" : { "count":1 ,"network" : [  {"id":"fdc925e8-120c-47ca-b0f5-e3ca063e1734","name":"1611-110-112","displaytext":"1611-110-112","broadcastdomaintype":"Pvlan","traffictype":"Guest","gateway":"10.223.161.65","netmask":"255.255.255.192","cidr":"10.223.161.64/26","zoneid":"9ff201c7-6eba-4b36-b8e2-360f822cb7de","zonename":"z1","networkofferingid":"3bdcf813-3d52-435a-a256-e71632366d02","networkofferingname":"DefaultSharedNetworkOffering","networkofferingdisplaytext":"Offering for Shared networks","networkofferingavailability":"Optional","issystem":false,"state":"Setup","related":"fdc925e8-120c-47ca-b0f5-e3ca063e1734","broadcasturi":"pvlan://1611-i998","dns1":"10.223.110.254","type":"Shared","vlan":"N/A","acltype":"Domain","subdomainaccess":true,"domainid":"9bb2859c-df99-11e2-b716-06f804000713","domain":"ROOT","service":[

,

,{"name":"Dns","capability":[

PASS

15

listVlanIpranges() should return PVLAN related parameters

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy Vm in this network.
3. List  VLAN details using listVlanIpranges()

listVlanIpranges() should return PVLAN related parameters
only Vlan entry is returned

P1

Pass

Pass
{ "listvlaniprangesresponse" : { "count":1 ,"vlaniprange" : [ 

Vm States

XEN

KVM Ubuntu 13.04

VMWARE dvswitch 

VMWARE Nexus vswitch 1000

16

Deploy Vm in a shared Network that is created by providing secondary Vlan. - User Vm check

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>. 2. Deploy multiple Vms in this network

Vm should be deployed successfully. For every Vm deployed following 2 entries should be created in the host: ovs-ofctl dump-flows xenbr0 1. cookie=0x0, duration=306.296s, table=0, n_packets=51, n_bytes=7536, priority=60,dl_vlan=998,dl_src=06:07:c2:00:00:26 actions=output:1 2.  cookie=0x0, duration=306.3s, table=0, n_packets=51, n_bytes=7536, priority=50,vlan_tci=0x0000,dl_src=06:07:c2:00:00:26 actions=mod_vlan_vid:998,resubmit:1 Vms should NOT be able to communicate with each other.

.
Pass

Pass

Pass

PASS

17

Deploy Vm in a shared Network that is created by providing secondary Vlan. - Router Check

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>. 2. Deploy Vm in this network.

Vm should be deployed successfully. For every router created following 3 entries should be created in the host: ovs-ofctl dump-flows xenbr0 1. cookie=0x0, duration=3503.373s, table=0, n_packets=8, n_bytes=2748, priority=100,udp,dl_vlan=998,nw_dst=255.255.255.255,tp_dst=67 actions=strip_vlan,output:18 2. cookie=0x0, duration=3503.38s, table=0, n_packets=20, n_bytes=1148, priority=200,arp,dl_vlan=998,nw_dst=10.223.161.110 actions=strip_vlan,output:18 3.cookie=0x0, duration=3503.376s, table=0, n_packets=37, n_bytes=3176, priority=150,dl_vlan=998,dl_dst=06:e0:d8:00:00:1c actions=strip_vlan,output:18 Vm should be able to go out successfully. Vm should be able to communicate with the router successfully.

Pass

Pass

Pass

PASS

18

Stop Vm

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
 2. Deploy Vm in this network.
3. Stop VM.

Vm should be stopped successfully. Following 2 entries of the Vm should get removed from the host: ovs-ofctl dump-flows xenbr0 1. cookie=0x0, duration=306.296s, table=0, n_packets=51, n_bytes=7536, priority=60,dl_vlan=998,dl_src=06:07:c2:00:00:26 actions=output:1 2.  cookie=0x0, duration=306.3s, table=0, n_packets=51, n_bytes=7536, priority=50,vlan_tci=0x0000,dl_src=06:07:c2:00:00:26 actions=mod_vlan_vid:998,resubmit:1

Pass

https://issues.apache.org/jira/browse/CLOUDSTACK-2638
https://issues.apache.org/jira/browse/CLOUDSTACK-2881
Fixed
PASS

https://issues.apache.org/jira/browse/CLOUDSTACK-2881
Fixed PASS

19

Start Vm that is in stopped state

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. Stop VM.
4. Start VM.

Vm should be stopped and started successfully. For every Vm deployed following 2 entries should be removed when stopping the Vm and get added back when the Vm is started  in the host: ovs-ofctl dump-flows xenbr0 1. cookie=0x0, duration=306.296s, table=0, n_packets=51, n_bytes=7536, priority=60,dl_vlan=998,dl_src=06:07:c2:00:00:26 actions=output:1 2.  cookie=0x0, duration=306.3s, table=0, n_packets=51, n_bytes=7536, priority=50,vlan_tci=0x0000,dl_src=06:07:c2:00:00:26 actions=mod_vlan_vid:998,resubmit:1 All VMs  in NW1 unable to access each other. All VMs in NW1 able to reach DHCP server, gateway

Pass

https://issues.apache.org/jira/browse/CLOUDSTACK-2638https://issues.apache.org/jira/browse/CLOUDSTACK-2881
Fixed
PASS

https://issues.apache.org/jira/browse/CLOUDSTACK-2881
Fixed

https://issues.apache.org/jira/browse/CLOUDSTACK-3311

20

reboot Vm

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>. 2. Deploy few Vms in this network. 3. Reboot VM.

Vm should be stopped & destroyed successfully. Following 2 entries of the Vm should get removed from the host: ovs-ofctl dump-flows xenbr0 1. cookie=0x0, duration=306.296s, table=0, n_packets=51, n_bytes=7536, priority=60,dl_vlan=998,dl_src=06:07:c2:00:00:26 actions=output:1 2.  cookie=0x0, duration=306.3s, table=0, n_packets=51, n_bytes=7536, priority=50,vlan_tci=0x0000,dl_src=06:07:c2:00:00:26 actions=mod_vlan_vid:998,resubmit:1

Pass

PASS

https://issues.apache.org/jira/browse/CLOUDSTACK-3311

21

Destroy Vm

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
 3. Destroy VM.

Vm should be stopped & destroyed successfully. Following 2 entries of the Vm should get removed from the host: ovs-ofctl dump-flows xenbr0 1. cookie=0x0, duration=306.296s, table=0, n_packets=51, n_bytes=7536, priority=60,dl_vlan=998,dl_src=06:07:c2:00:00:26 actions=output:1 2.  cookie=0x0, duration=306.3s, table=0, n_packets=51, n_bytes=7536, priority=50,vlan_tci=0x0000,dl_src=06:07:c2:00:00:26 actions=mod_vlan_vid:998,resubmit:1

Pass

https://issues.apache.org/jira/browse/CLOUDSTACK-2887
Fixed
PASS

https://issues.apache.org/jira/browse/CLOUDSTACK-2887
Fixed
PASS

21

Restore Vm that is destroyed

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. Destroy VM.
4. Even before the expunge interval is passed , restore the VM.
5. Once the Vm is in stopped state , Start this VM.

After Vm is restored, Vm should be in Running state. All VMs  in NW1 unable to access each other All VMs in NW1 able to reach DHCP server, gateway Following 2 entries of the Vm should get created in the host: ovs-ofctl dump-flows xenbr0 1. cookie=0x0, duration=306.296s, table=0, n_packets=51, n_bytes=7536, priority=60,dl_vlan=998,dl_src=06:07:c2:00:00:26 actions=output:1 2.  cookie=0x0, duration=306.3s, table=0, n_packets=51, n_bytes=7536, priority=50,vlan_tci=0x0000,dl_src=06:07:c2:00:00:26 actions=mod_vlan_vid:998,resubmit:1

Pass

https://issues.apache.org/jira/browse/CLOUDSTACK-2887
Fixed
PASS

https://issues.apache.org/jira/browse/CLOUDSTACK-2638
https://issues.apache.org/jira/browse/CLOUDSTACK-2887
Fixed PASS

22

Expunge Vm that is  destroyed

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
 3. Destroy VM.
4. Wait for the Expunge interval to pass.

Vm should be Expunged successfully.
DNS entry of this Vm should be removed from the router.

P1

https://issues.apache.org/jira/browse/CLOUDSTACK-2887
Fixed
PASS

https://issues.apache.org/jira/browse/CLOUDSTACK-2887
Fixed
PASS

KVM Ubuntu 13.04

VMWARE dvswitch

23

Expunge Vm that is  destroyed and deploy a Vm using the same Ip address as the expunged Vm.

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>. 2. Deploy few Vms in this network. 3. Destroy VM. 4. Wait for the Expunge interval to pass.5. Deploy a Vm using the same Ip address as the expunged Vm

Vm deployment shoud succeed.As part of this VM deployment, router's /etc/dhcphost entry for the expunged Vm gets deleted and the entry pertaining to the new Vm is created.Following 2 entries of the Vm should get created in the host:ovs-ofctl dump-flows xenbr01. cookie=0x0, duration=306.296s, table=0, n_packets=51, n_bytes=7536, priority=60,dl_vlan=998,dl_src=06:07:c2:00:00:26 actions=output:1 2.  cookie=0x0, duration=306.3s, table=0, n_packets=51, n_bytes=7536, priority=50,vlan_tci=0x0000,dl_src=06:07:c2:00:00:26 actions=mod_vlan_vid:998,resubmit:1

P1

Fail

https://issues.apache.org/jira/browse/CLOUDSTACK-2887
blocked

Fixed     PASS
{*}http://10.223.195.117:8080/client/api?command=deployVirtualMachine&zoneId=*9ff201c7-6eba-4b36-b8e2-360f822cb7de
&templateId=9bc1dba0-df99-11e2-b716-06f804000713
&hypervisor=KVM&serviceOfferingId=e74c32fa-145f-4e03-be83-96e026209189&networkIds=fdc925e8-120c-47ca-b0f5-e3ca063e1734
&ipaddress=10.223.161.110&displayname=z1adminpvlan1611IP&name=z1adminpvlan1611IP&response=json&sessionkey=PaLWh5YzWWDxdSaGS9XJmP7SVkc%3D

{ "deployvirtualmachineresponse" :

PASS

priority

XEN

KVM Ubuntu 13.04

VMWARE dvswitch

24

From user Vm , we should be able to fetch  metadata of the VM.

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>. 2. Deploy few Vms in this network.3.From with in the Vm , fetch  metadata of the VM.

From user Vm , we should be able to fetch  metadata of the VM.

P1

Pass

Pass
wget [http://10.223.161.110/latest/meta-data/service-offering
] wget [http://10.223.161.110/latest/meta-data/availability-zone
] wget [http://10.223.161.110/latest/meta-data/local-ipv4
] wget [http://10.223.161.110/latest/meta-data/local-hostname
] wget [http://10.223.161.110/latest/meta-data/public-ipv4
] wget [http://10.223.161.110/latest/meta-data/public-hostname
] wget [http://10.223.161.110/latest/meta-data/instance-id
]

PASS

25

From user Vm , we should be able to fetch userdata of the VM.

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>. 2. Deploy Vms in this network by passing userdata.3.From with in the Vm , fetch  userdata of the VM.

From user Vm , we should be able to fetch  userdata of the VM.

CLOUDSTACK-2397

Pass{ "deployvirtualmachineresponse" :

Pass

Pass

Vms being part of same shared network and different isolated network

XEN

KVM Ubuntu 13.04

VMWARE dvswitch

26

Vm being part of isolated network and shared network

1. Create a shared network with pvlan – SN1.2. As account1 , create isolated network N1.3. As account2 , create isolated network N2.4. As account1 - Deploy vms - VM1, VM2  in N1 (default) and SN1.5. As account2 - Deploy vms – VM3, VM4  in N2 (default) and SN1.

From VM1 , make sure you are not able to access VM2, VM3 and VM4 using the Ip-address that is assigned to it shared network SN1

Pass

PASS

PASS

.

27

Stop and start Vms that are part of isolated and shared network

Pre Req:1. Create a shared network with pvlan – SN1.2. As account1 , create isolated network N1.3. As account2 , create isolated network N2.4. As account1 - Deploy vms - VM1, VM2  in N1 (default) and SN1.5. As account2 - Deploy vms – VM3, VM4  in N2 (default) and SN1.Steps:Stop and start Vms

From VM1 , make sure you are not able to access VM2, VM3 and VM4 using the Ip-address that is assigned to it shared network SN1.

Pass

https://issues.apache.org/jira/browse/CLOUDSTACK-2881
Fixed
PASS

https://issues.apache.org/jira/browse/CLOUDSTACK-2881
Fixed
PASS

28

Reboot Vms that are part of isolated and shared network

Pre Req:1. Create a shared network with pvlan – SN1.2. As account1 , create isolated network N1.3. As account2 , create isolated network N2.4. As account1 - Deploy vms - VM1, VM2  in N1 (default) and SN1.5. As account2 - Deploy vms – VM3, VM4  in N2 (default) and SN1.Steps:Reboot Vms

From VM1 , make sure you are not able to access VM2, VM3 and VM4 using the Ip-address that is assigned to it shared network SN1.

Pass

29

Vm being part of isolated network and shared network.Have another machine in the same shared network connected to promiscuous port.

Pre Req:1. Create a shared network with pvlan – SN1.2. As account1 , create isolated network N1.3. As account2 , create isolated network N2.4. As account1 - Deploy vms - VM1, VM2  in N1 (default) and SN1.5. As account2 - Deploy vms – VM3, VM4  in N2 (default) and SN1. Steps:Have another machine in the same shared network connected to promiscuous port.

From VM1 , make sure you are not able to access VM2, VM3 and VM4 using the Ip-address that is assigned to it shared network SN1.From the machine that was added in promiscuous mode , we should be able to reach all the Vms using their Shared network Ipaddress.From the Vms , we should be able to access this machine

Pass

Network States

XEN

KVM Ubuntu 13.04

VMWARE dvswitch

30

Extend Iprange of the network

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. Consume all ips in range
4. Extend Ip range.
 5. Deploy Vm in this network.

Vm deployment should succeed.
Vm should be assigned address from the extended range.
 All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway

P2

Pass

{ "createvlaniprangeresponse" :  { "vlan" :

PASS

KVM Ubuntu 13.04

VMWARE DVS

31

Restart network

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. Restart Network.

Network restart should succeed.
After network restart:
All VMs  in NW1 unable to access each other
 All VMs in NW1 able to reach DHCP server, gateway
We should be able to deploy new Vms in this network.

P2

Pass

Pass
[http://10.223.195.117:8080/client/api?command=restartNetwork&id=fdc925e8-120c-47ca-b0f5-e3ca063e1734&cleanup=false&response=json&sessionkey=b1NMj0nphTDtKYBTkR3GBopg0wY%3D&_=1372372351031
]
{ "restartnetworkresponse" :

PASS

32

Restart network with cleanup option

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
 4. Restart Network with cleanup option.

Network restart should succeed. After network restart: All VMs  in NW1 unable to access each other. All VMs in NW1 able to reach DHCP server, gateway We should be able to deploy new Vms in this network.As part of network restart m Router is stopped and started.Following 3 entries for the router should get deleted and re-created in the host:ovs-ofctl dump-flows xenbr01. cookie=0x0, duration=3503.373s, table=0, n_packets=8, n_bytes=2748, priority=100,udp,dl_vlan=998,nw_dst=255.255.255.255,tp_dst=67 actions=strip_vlan,output:182. cookie=0x0, duration=3503.38s, table=0, n_packets=20, n_bytes=1148, priority=200,arp,dl_vlan=998,nw_dst=10.223.161.110 actions=strip_vlan,output:183.cookie=0x0, duration=3503.376s, table=0, n_packets=37, n_bytes=3176, priority=150,dl_vlan=998,dl_dst=06:e0:d8:00:00:1c actions=strip_vlan,output:18

Pass

Pass
[http://10.223.195.117:8080/client/api?command=restartNetwork&cleanup=true&id=fdc925e8-120c-47ca-b0f5-e3ca063e1734&cleanup=true&response=json&sessionkey=b1NMj0nphTDtKYBTkR3GBopg0wY%3D&_=1372371346187
]{ "restartnetworkresponse" :

33

Delete network with vms in "Running" state

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network
3. Delete Network.

Network Deletion should fail.

P2

Pass

Pass
[http://10.223.195.117:8080/client/api?command=deleteNetwork&id=fdc925e8-120c-47ca-b0f5-e3ca063e1734&response=json&sessionkey=b1NMj0nphTDtKYBTkR3GBopg0wY%3D&_=1372372621828
]
{ "deletenetworkresponse" :

34

Delete network when there are no Vms associated with it.

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
 3. Destroy all the Vms.
4. Delete Network after all the Vms are expunged.

Network Deletion should succeed.

P2

Pass

Pass

Pass

35

Stop all Vms in network and wait for network shutdown

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>. 2. Deploy few Vms in this network. 3. Stop all the Vms. 4. Wait for network scavenger thread to run.

Network should not be picked up for Shutting down.

N/A Network scavenger thread does not destroy shared networks that have no Vms to service.

https://issues.apache.org/jira/browse/CLOUDSTACK-2881
fixed
PASS

https://issues.apache.org/jira/browse/CLOUDSTACK-2881
fixed
PASS

35A

Add IP Range

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Delete IP range
or delete network
3. Add IP range or create network with IP range overlaping deleted IP range

Add IP range should succeed

Fail - shared network bug
http://bugs-ccp.citrix.com/browse/CS-17941

https://issues.apache.org/jira/browse/CLOUDSTACK-2636

Router States

XEN

KVM Ubuntu 13.04

VMWARE dvswitch

36

Stop Router

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3.Stop Router

Router should get stopped successfully. All VMs  in NW1 unable to access each other.All VMs in NW1 UNable to reach DHCP server. But should be able to reach gateway  and reach out.Following 3 entries for the router should get deleted from the host:ovs-ofctl dump-flows xenbr01. cookie=0x0, duration=3503.373s, table=0, n_packets=8, n_bytes=2748, priority=100,udp,dl_vlan=998,nw_dst=255.255.255.255,tp_dst=67 actions=strip_vlan,output:182. cookie=0x0, duration=3503.38s, table=0, n_packets=20, n_bytes=1148, priority=200,arp,dl_vlan=998,nw_dst=10.223.161.110 actions=strip_vlan,output:183.cookie=0x0, duration=3503.376s, table=0, n_packets=37, n_bytes=3176, priority=150,dl_vlan=998,dl_dst=06:e0:d8:00:00:1c actions=strip_vlan,output:18Deploying new Vm should result in the Router getting started.New VM  in NW1 unable to access  other All VMs in NW1 but able to reach DHCP server, gateway

Pass

https://issues.apache.org/jira/browse/CLOUDSTACK-2881
fixed
PASShttp://10.223.195.117:8080/client/api?command=stopRouter&id=332906f3-bc08-420c-927f-635bd27c1af8&forced=false&response=json&sessionkey=b1NMj0nphTDtKYBTkR3GBopg0wY%3D&_=1372372999783


{ "queryasyncjobresultresponse" : {"accountid":"c84ae23e-df99-11e2-b716-06f804000713","userid":"c84b4292-df99-11e2-b716-06f804000713","cmd":"org.apache.cloudstack.api.command.admin.router.StopRouterCmd","jobstatus":1,"jobprocstatus":0,"jobresultcode":0,"jobresulttype":"object","jobresult":{"router":{"id":"332906f3-bc08-420c-927f-635bd27c1af8","zoneid":"9ff201c7-6eba-4b36-b8e2-360f822cb7de","zonename":"z1","dns1":"10.223.110.254","networkdomain":"cs1cloud.internal","name":"r-10-VM","podid":"b522d14e-7ecb-40b0-bcec-f16226381232","linklocalnetworkid":"0d836be6-2fe8-4ec3-a53a-6f1fea3da7a3","guestipaddress":"10.223.161.111","guestmacaddress":"06:0c:2c:00:00:0e","guestnetmask":"255.255.255.192","guestnetworkid":"fdc925e8-120c-47ca-b0f5-e3ca063e1734","templateid":"9bc175d4-df99-11e2-b716-06f804000713","created":"2013-06-28T15:11:47-0700","state":"Stopped","account":"system","domainid":"9bb2859c-df99-11e2-b716-06f804000713","domain":"ROOT","serviceofferingid":"c5ff5727-17d4-4400-b54a-a8413f095254","serviceofferingname":"System Offering For Software Router","isredundantrouter":false,"redundantstate":"UNKNOWN","role":"VIRTUAL_ROUTER","nic":[

,

],"jobid":"3f9e8660-f132-4d1f-8dc5-7374a93317c9","jobstatus":0}},"created":"2013-06-28T15:39:14-0700","jobid":"3f9e8660-f132-4d1f-8dc5-7374a93317c9"} }

https://issues.apache.org/jira/browse/CLOUDSTACK-2881
Fixed
PASS

37

stop-start Router

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3.Stop Router
4.Start Router

When Router is stopped: Router should get stopped successfully. All VMs  in NW1 unable to access each other All VMs in NW1 able to reach DHCP server.But should be able to reach gateway  and reach out.Following 3 entries for the router should get deleted and created in the host when router is stopped and started:ovs-ofctl dump-flows xenbr01. cookie=0x0, duration=3503.373s, table=0, n_packets=8, n_bytes=2748, priority=100,udp,dl_vlan=998,nw_dst=255.255.255.255,tp_dst=67 actions=strip_vlan,output:182. cookie=0x0, duration=3503.38s, table=0, n_packets=20, n_bytes=1148, priority=200,arp,dl_vlan=998,nw_dst=10.223.161.110 actions=strip_vlan,output:183.cookie=0x0, duration=3503.376s, table=0, n_packets=37, n_bytes=3176, priority=150,dl_vlan=998,dl_dst=06:e0:d8:00:00:1c actions=strip_vlan,output:18After Router is started:  Deploying new Vms should succeed

Pass

https://issues.apache.org/jira/browse/CLOUDSTACK-2881
fixed
PASShttp://10.223.195.117:8080/client/api?command=startRouter&id=332906f3-bc08-420c-927f-635bd27c1af8&response=json&sessionkey=b1NMj0nphTDtKYBTkR3GBopg0wY%3D&_=1372373127619

{ "startrouterresponse" :

38

Reboot Router

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>. 2. Deploy few Vms in this network. Steps: 3.Reboot Router

Router should get stopped and started successfully. After router is rebooted successfully , deploy a new Vm.New VM  in NW1 unable to access  other All VMs in NW1 but able to reach DHCP server, gateway.For all existing Vms in NW1:Should not be able  to access  other all VMs in NW1 but able to reach DHCP server, gateway.

Pass

Pass
[http://10.223.195.117:8080/client/api?command=rebootRouter&id=332906f3-bc08-420c-927f-635bd27c1af8&response=json&sessionkey=b1NMj0nphTDtKYBTkR3GBopg0wY%3D&_=1372373289839
]
{ "rebootrouterresponse" :

VM live migration

XEN

KVM Ubuntu 13.04

VMWARE dvswitch

39

Host in maintenance mode

1. Advance zone  cluster with 2 hosts. Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. host1 Enable maintenance mode
4. host1 disable maintenance mode
5. host2 enable maintenance mode
6. host1 disable maintenance mode

3. All VMs on Host1 migrate to Host2 All VMs  in NW1 unable to access each other All VMs in NW1 able to reach DHCP server, gateway 5.  All VMs on Host2 migrate to Host1 All VMs  in NW1 unable to access each other All VMs in NW1 able to reach DHCP server, gateway

BLOCKED
CLOUDSTACK-2401

PASS

Fail
[https://issues.apache.org/jira/browse/CLOUDSTACK-2427
]

40

VM live migration for user VM

1. Advance zone  cluster with 2 hosts. Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
 2. Deploy few Vms in this network.
3. Perform VM Manual live migration

After live migration , Vm should still be reachable using its Ip address.It should not be able to reach any other Vms in the network.It should still be able to reach DHCP server, gateway.All other Vms in the network , should not be able to reach this VM.The following 2 rules should get cleaned up from the old host and be programmed in the new host.ovs-ofctl dump-flows xenbr01. cookie=0x0, duration=306.296s, table=0, n_packets=51, n_bytes=7536, priority=60,dl_vlan=998,dl_src=06:07:c2:00:00:26 actions=output:1 2.  cookie=0x0, duration=306.3s, table=0, n_packets=51, n_bytes=7536, priority=50,vlan_tci=0x0000,dl_src=06:07:c2:00:00:26 actions=mod_vlan_vid:998,resubmit:1

Fail
CLOUDSTACK-2401

[https://issues.apache.org/jira/browse/CLOUDSTACK-2901
]
PASS

Pass

41

VM live migration for Router VM
SSVM  CPVM

1. Advance zone  cluster with 2 hosts. Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>. 2. Deploy few Vms in this network. 3. Perform VM Manual live migration for the router.

After live migration of router , Vm deployment should succeed.New VM  in NW1 unable to access  other All VMs in NW1 but able to reach DHCP server, gateway.For all existing Vms in NW1:Should not be able  to access  other all VMs in NW1 but able to reach DHCP server, gateway.Following 3 entries for the router should get deleted from the old host and re-created in the current host where the router is running:ovs-ofctl dump-flows xenbr01. cookie=0x0, duration=3503.373s, table=0, n_packets=8, n_bytes=2748, priority=100,udp,dl_vlan=998,nw_dst=255.255.255.255,tp_dst=67 actions=strip_vlan,output:182. cookie=0x0, duration=3503.38s, table=0, n_packets=20, n_bytes=1148, priority=200,arp,dl_vlan=998,nw_dst=10.223.161.110 actions=strip_vlan,output:183.cookie=0x0, duration=3503.376s, table=0, n_packets=37, n_bytes=3176, priority=150,dl_vlan=998,dl_dst=06:e0:d8:00:00:1c actions=strip_vlan,output:18

http://bugs-ccp.citrix.com/browse/CS-17951

[https://issues.apache.org/jira/browse/CLOUDSTACK-2900
]
[https://issues.apache.org/jira/browse/CLOUDSTACK-2903
]

[http://bugs-ccp.citrix.com/browse/CS-17951
]

[https://issues.apache.org/jira/browse/CLOUDSTACK-2900
]
https://issues.apache.org/jira/browse/CLOUDSTACK-2903
\\

42

HA

1. Advance zone  cluster with 2 hosts. Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>. 2. Deploy few Vms in this network. 3. Perform VM Manual live migration for the router.

After live migration of router , Vm deployment should succeed.New VM  in NW1 unable to access  other All VMs in NW1 but able to reach DHCP server, gateway.For all existing Vms in NW1:Should not be able  to access  other all VMs in NW1 but able to reach DHCP server, gateway.Following 3 entries for the router should get deleted from the old host and re-created in the current host where the router is running:ovs-ofctl dump-flows xenbr01. cookie=0x0, duration=3503.373s, table=0, n_packets=8, n_bytes=2748, priority=100,udp,dl_vlan=998,nw_dst=255.255.255.255,tp_dst=67 actions=strip_vlan,output:182. cookie=0x0, duration=3503.38s, table=0, n_packets=20, n_bytes=1148, priority=200,arp,dl_vlan=998,nw_dst=10.223.161.110 actions=strip_vlan,output:183.cookie=0x0, duration=3503.376s, table=0, n_packets=37, n_bytes=3176, priority=150,dl_vlan=998,dl_dst=06:e0:d8:00:00:1c actions=strip_vlan,output:18

CLOUDSTACK-2428

Upgrade

43

 On an Upgraded set up , make sure that we are able to create a network with secondary vlan and deploy Vms in this network.

1. Deploy an earlier version of cloudstack in advanced zone.Upgrade to this version.2. Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>. 3. Deploy multiple Vms in this network.

Vm should be deployed successfully.For every Vm deployed following 2 entries should be created in the host:ovs-ofctl dump-flows xenbr01. cookie=0x0, duration=306.296s, table=0, n_packets=51, n_bytes=7536, priority=60,dl_vlan=998,dl_src=06:07:c2:00:00:26 actions=output:1 2.  cookie=0x0, duration=306.3s, table=0, n_packets=51, n_bytes=7536, priority=50,vlan_tci=0x0000,dl_src=06:07:c2:00:00:26 actions=mod_vlan_vid:998,resubmit:1Vms should NOT be able to communicate with each other.

Upgrade ASF 4.0 -> ASF 4.2

Upgrade ASF 4.1 -> ASF 4.2