Isolation Advance zone using PVLANs

 

 

 

 

 

 

 

 

 

hardware requirement: Cisco  Catalyst 4500
software requirement Hypervisor/software switch:                                                        
Xen /openvswitch
KVM/openvswitch
vmware/NEXUS vswitch     
vmware/DVS

 

 

 

 

 

 

 

 

 

isolation within a shared network
VMs deployed using multiple shared networks

 

 

 

 

 

 

 

 

 

primary VLAN ( pVLAN) - promiscuous ports
secondary VLAN  (sVLAN) - isolated ports

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

isolated PVLAN
promiscuous PVLAN
community PVLAN - unsupported

 

 

 

 

 

 

 

 

 

External Device unsupported

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Testcase ID

Test case name

Steps

Expected Results.

Priority

XEN

KVM CentOS 6.3

KVM Ubuntu 12.04

VMWARE DVS

VMWARE Nexus vswitch 1000

 

Shared Network  1 PVLAN

 

 

 

 

 

 

 

 

1

Shared Network scope All  1 PVLAN
Deploy VM

1. Advance zone cluster with 2 hosts,  Domain D1  domainadmin  d1domain, user d1user. Domain D2  user d2user.
Create  Shared NW1  scope All <pVLAN1, sVLAN1>. 
2. d1domain  deploy VM1 on NW1 on host1 , VM4 on NW1 on host2. d1user deploy VM2 on NW1 on host1, VM5 on NW1 on host2.
d2user  deploy VM3 on NW1 on host1, VM6 on NW1 on host2.

1. shared NW1 with pVLAN creation succeed.
2.  All accounts able to  create VMs on NW1.
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway 

P1

 

 

 

 

 

2

Shared NW scope Domain  1 PVLAN
Deploy VM

1. Advance zone cluster with 2 hosts, Domain D1  domainadmin  d1domain,  user d1user.  Domain D2  user d2user.
Create  Shared NW1  scope Domain  for D1 <pVLAN1, sVLAN1>. 
2. d1domain deploy VM1 on NW1 on host1 , VM4 on NW1 on host2.
d1user  deploy VM2 on NW1 on host1, VM5 on NW1 on host2.
d2user  try deploy VM3 on NW1 on host1, VM6 on NW1 on host2.

1. shared NW1 with pVLAN creation succeed.
2. d1domain  & d1user able to create VMs on NW1.
d2user unable to create VMs on NW1.
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway 

P1

 

 

 

 

 

3

Shared NW scope Domain subdomain access TRUE 1 PVLAN
Deploy VM

1. Advance zone cluster with 2 hosts, Domain D1  domainadmin  d1domain,  user d1user. Domain D1/D11 domainadmin d11domain.  Domain D2  user d2user.
Create  Shared NW1  scope Domain  for D1 subdomain access TRUE <pVLAN1, sVLAN1>. 
2. d1domain deploy VM1 on NW1 on host1 , VM4 on NW1 on host2.
d1user  deploy VM2 on NW1 on host1, VM5 on NW1 on host2.
d11domain  deploy VM3 on NW1 on host1, VM6 on NW1 on host2.
d2user  try deploy VM7 on NW1 on host1, VM8 on NW1 on host2.

1. shared NW1 with pVLAN creation succeed.
2. d1domain, d1user, d11domain able to create VMs on NW1.
d2user unable to create VMs on NW1.
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway 

P1

 

 

 

 

 

4

Shared NW scope  Account 1 PVLAN
Deploy VM

1. Advance zone cluster with 2 hosts, Domain D1  domainadmin  d1domain,  user d1user.  Domain D2  user d2user.
Create  Shared NW1  scope Account  for d1domainA <pVLAN1, sVLAN1>. 
2. d1domain deploy VM1 on NW1 on host1 , VM4 on NW1 on host2.
d1user try deploy VM2 on NW1 on host1, VM5 on NW1 on host2.
d2user  try deploy VM3 on NW1 on host1, VM6 on NW1 on host2.

1. shared NW1 with pVLAN creation succeed.
2. d1domainA able to create VMs on NW1.
d1user d2user unable to create VMs on NW1.
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway 

P1

 

 

 

 

 

5

Shared NW scope  Project 1 PVLAN
Deploy VM

1. Advance zone cluster with 2 hosts, Project P1 w/ account A1 A2  Project P2  w/account B1 B2
Create  Shared NW1  scope Project for P1 <pVLAN1, sVLAN1>. 
2. A1 user deploy VM1 on NW1 on host1 , VM5 on NW1 on host2.
A2 user deploy VM2 on NW1 on host1, VM6 on NW1 on host2.
B1 user  try deploy VM3 on NW1 on host1, VM7 on NW1 on host2.
B2 user try deploy VM4 on NW1 on host1, VM8 on NW1 on host2.

1. shared NW1 with pVLAN creation succeed.
2. A1 user   A2 user able to create VMs on NW1.
B1 user B2 user unable to create VMs on NW1.
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway 

P1

 

 

 

 

 

6

Multiple  shared NW  scope zone using different PVLANs
Deploy VM

1. Advance zone cluster with 2 hosts, Domain D1  domainadmin  d1domain,  user d1user.  Domain D2  user d2user.
Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
Create  Shared NW2  scope zone  <pVLAN2, sVLAN2>.
Create  Shared NW3  scope zone  <pVLAN3, sVLAN3>.
Create  Shared NW4  scope zone  <pVLAN4, sVLAN4>.
2. d1domain deploy VM1 on NW1 on host1 , VM4 on NW2 on host2, VM8 on NW3 on host1, VM12 on NW4 on host2
d1user  deploy VM2 on NW1 on host1, VM5 on NW2 on host2, VM9 on NW3 on host1, VM13 on NW4 on host2.
d2user  deploy VM3 on NW1 on host1, VM6 on NW2 on host2, VM10 on NW4 on host1, VM14 on NW4 on host2.


1. shared NW1 NW2  NW3   NW4  with different pVLANs creation succeed.
2. All users   able to create VMs on shared NW1 NW2  NW3   NW4
All VMs  in each shared NW unable to access each other
All VMs  among all shared NWs unable to access each other
All VMs in in each shared NW able to reach DHCP server, gateway 

P1

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

7

Shared NW using  PVLAN associated with another shared NW

1. Advance zone cluster with 2 hosts, Domain D1  domainadmin  d1domain,  user d1user.  Domain D2  user d2user.
Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
Create  Shared NW2  scope zone  <pVLAN1, sVLAN1>.

shared NW2 creation FAIL

 

 

 

 

 

 

8

Shared NW using  PVLAN associated with ZONE  VLAN

1. Advance zone cluster with 2 hosts, Domain D1  domainadmin  d1domain,  user d1user.  Domain D2  user d2user.
Create  Shared NW1  scope zone  using ZONE VLAN

shared NW1 creation FAIL

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

ListCommand changes

 

 

 

 

 

 

 

 

9

listVirtualMachines() should return PVLAN related parameters

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy Vm in this network.
3. List Vm details using listVirtualMachines()

listVirtualMachines() should return PVLAN related parameters

P1

 

 

 

 

 

10

listRouters() should return PVLAN related parameters

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy Vm in this network.
3. List router details using listRouters()

listRouters() should return PVLAN related parameters

P1

 

 

 

 

 

11

listNetworks() should return PVLAN related parameters

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy Vm in this network.
3. List network details using listNetworks()

listNetworks() should return PVLAN  related parameters

P1

 

 

 

 

 

12

listVlanIpranges() should return PVLAN related parameters

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy Vm in this network.
2. List  VLAN details using listVlanIpranges()

listVlanIpranges() should return PVLAN related parameters

P1

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Vm States

 

 

 

 

 

 

 

 

13

Stop Vm

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy Vm in this network.
3. Stop VM.

Vm should be stopped successfully.

P1

 

 

 

 

 

14

Start Vm that is in stopped state

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. Stop VM.
4. Start VM.

Vm should be stopped and started successfully.
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway

P1

 

 

 

 

 

15

reboot Vm

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. Reboot VM.

Reboot of VM should be successful.
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway

P1

 

 

 

 

 

16

Destroy Vm

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. Destroy VM.

Vm should be stopped & destroyed successfully.

P1

 

 

 

 

 

17

Restore Vm that is destroyed

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. Destroy VM.
4. Even before the expunge interval is passed , restore the VM.
5. Once the Vm is in stopped state , Start this VM.

After Vm is restored, Vm should be in Running state.
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway

P1

 

 

 

 

 

18

Expunge Vm that is  destroyed

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. Destroy VM.
4. Wait for the Expunge interval to pass.

Vm should be Expunged successfully.
DNS entry of this Vm should be removed from the router.

P1

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Network States

 

 

 

 

 

 

 

 

19

Extend Iprange of the network

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. Consume all ips in range
4. Extend Ip range.
5. Deploy Vm in this network.

Vm deployment should succeed.
Vm should be assigned address from the extended range.
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway

P2

 

 

 

 

 

20

Restart network

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. Restart Network.

Network restart should succeed.
After network restart:
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway
We should be able to deploy new Vms in this network.

P2

 

 

 

 

 

21

Restart network with cleanup option

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
4. Restart Network with cleanup option.

Network restart should succeed.
After network restart:
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway
We should be able to deploy new Vms in this network.
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway

P2

 

 

 

 

 

22

Delete network with vms in "Running" state

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network
3. Delete Network.

Network Deletion should fail.

P2

 

 

 

 

 

23

Delete network when there are no Vms associated with it.

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. Destroy all the Vms.
4. Delete Network after all the Vms are expunged.

Network Deletion should succeed.

P2

 

 

 

 

 

24

Stop all Vms in network and wait for network shutdown

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. Stop all the Vms.
4. Wait for network scavenger thread to run.

Network should not be picked up for Shutting down.

P2

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Router States

 

 

 

 

 

 

 

 

25

Stop Router

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3.Stop Router

Router should get stopped successfully.
All VMs  in NW1 unable to access each other
Since VR stopped, All VMs in NW1 UNable to reach DHCP server, gateway
Deploying new Vm should result in the Router getting started.
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway

P2

 

 

 

 

 

26

stop-start Router

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3.Stop Router
4.Start Router

When Router is stopped:
Router should get stopped successfully.
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway
Deploying new Vms on this network will fail.
After Router is started:
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway
Deploying new Vms should succeed

P2

 

 

 

 

 

27

Reboot Router

1. Advance zone  Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
Steps:
3.Reboot Router

Reboot Router should succeed.
After Router is started:
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway
Deploying new Vms should succeed

P2

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

VM live migration

 

 

 

 

 

 

 

 

28

Host in maintenance mode

1. Advance zone  cluster with 2 hosts. Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. host1 Enable maintenance mode
4. host1 disable maintenance mode
5. host2 enable maintenance mode
6. host1 disable maintenance mode

3. All VMs on Host1 migrate to Host2
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway
5.  All VMs on Host2 migrate to Host1
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway

 

 

 

 

 

 

29

VM live migration

1. Advance zone  cluster with 2 hosts. Create  Shared NW1  scope zone  <pVLAN1, sVLAN1>.
2. Deploy few Vms in this network.
3. Perform VM Manual live migration

3. All VMs on one Host migrate to  other host
All VMs  in NW1 unable to access each other
All VMs in NW1 able to reach DHCP server, gateway

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Upgrade

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Upgrade ASF 4.0 -> ASF 4.2

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Upgrade ASF 4.1 -> ASF 4.2

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

HA

 

 

 

 

 

 

 

 
  • No labels