ntwork srvics twork tst plan Tst cass cratd by Swamy As th primary rquirmnt of this fatur is to support its srvics supportd, QA primary focus whil runn th follow tsts is to nsur vryth is functional w.r.to SRX. Follow srvics will b supportd by CloudPlatform SRX.. 3. 4. Firwall SourcNAT StaticNAT Portforward Som of ths tsts will b carrid LB dvics lik NtScalr F5 but, th scop of tst plan is not about th validation of ths dvics rathr only SRX. Cration of offr out srvics Nam Stps Vrification Priority Typ XEN KVM VMWar. crat (i.) Ntwork offr should b cratd succssfully. a offri n follo w srvi cs* * DNS DHCP usrdata P Sanity DB vrification for out srvics 3 cratntwork out srvics 4 Cration of offr srvics. vrif y DB th sl ctd srvi cs ar prs nt. As an admi n, crat a ntw ork offri n out srvi cs.. crat (i.) Chck th follow tabls to nsur th slctd srvics ar th ons nabld slct * from ntwork_offrs; slct * from slct * from ntwork_offrs ; (i.) Crat n should tak a custom CIDR VLAN fo from adm (ii.) It should t cratd succssfully. vrify cloud.ntworks tabl spcially for th filds stat, _id. (i.) Ntwork offr should b cratd succssfully. a offri n follo w srvi cs* * DNS => VR usrdata => VR Firwall => SourcNAT=> >JuniprSRX NtScalr P Sanity 5 DB vrification for srvics vrify DB th slctd srvics ar prsnt (i.) Chck th follow tabls to nsur th slctd srvics ar th ons nabld slct * from ntwork_offrs; slct * from slct * from ntwork_offrs; 6 ct at last on NIC to a out srvics. As a non-root adm, dpl a VM a has no srvics (i.) VM dplmnt should happn out any issus (ii.) ctivity should b f Vrify cloud. ntworks tabl filds lik stat, _id
7 ct mor than on NIC to out srvics from multipl s 8 Vrify GC for d n out srvics 9 cratntwork srvics 0 ct mor than on NIC to srvics from multipl s Acquir IP for a d Ntwork has srvics nabld UI Acquir IP for a d Ntwork has srvics nabld API 3 Rlas IP for a d Ntwork has srvics nabld UI 4 Rlas IP for a d Ntwork has srvics nabld API. Hav at last two s dpl a VM a d n has no srvics. Hav at last two s an undpld VM a has no srvics. As an adm, nsur thr is a twork follow srvics. usrdata => VR Firwall => SourcNAT=> >JuniprSRX NtScalr crat a ntwork th.. As an adm, nsur thr is a twork follow srvics. usrdata => VR Firwall => SourcNAT=> >JuniprSRX NtScalr. Hav at last two s dpl a VM a d n has no srvics. Mak sur thr is a srvics nabld availabl to usr. Dpl a VM this n. 3. acquir an additional IP UI. Mak sur thr is a srvics nabld availabl to usr. Dpl a VM this n. 3. acquir an additional IP API. Mak sur thr is a srvics nabld availabl to usr. Dpl a VM this n. 3. acquir an additional IP UI 4. rlas IP UI. Mak sur thr is a srvics nabld availabl to usr. Dpl a VM this n. 3. acquir an additional IP UI 4. rlas IP API (i.) VM dplmnt should happn out any issus (ii.) ctivity should b f (i.) Vrify cloud. ntworks tabl filds lik stat, _id (ii.) Vrify cloud. nics tabl is updatd all rquird valus. (i.) wait till th GC priod basd on th stts ntwork.c. trval ntwork.c. wait (ii.) vrify GC dosn t ffc th VR (tworks should not b GC'd) (i.) Vrify cloud. ntworks tabl filds lik stat, _id (ii.) Vrify cloud. nics tabl is updatd all rquird valus. (iii.) vrify cloud. op_ntworks chck nics_co (i.) Crat n should tak a custom CIDR VLAN fo from adm (i.) slct * from slct * from ntwork_offrs; (ii.) vrify cloud. ntworks tabl filds stat, _id (i.) VM dplmnt should happn out any issus (ii.) ctivity should b f (i.) Vrify cloud. ntworks tabl filds lik stat, _id (ii.) Vrify cloud. nics tabl is updatd all rquird valus. (i.) IP should b associatd ntwork succssfully. (i.) vrify usr_ip_addrsss tabl mak sur filds lik ntwork_id, ar st to riht valus. (i.) IP should b associatd ntwork succssfully. (i.) vrify usr_ip_addrsss tabl mak sur filds lik ntwork_id, ar st to riht valus. (i.) IP should b rlasd ivn back to pool succssfully. (i.) vrify usr_ip_addrsss tabl mak sur filds lik ntwork_id, ar st to riht valus. (i.) IP should b rlasd ivn back to pool succssfully. (i.) vrify usr_ip_addrsss tabl mak sur filds lik ntwork_id, ar st to riht valus.
5 listpublicipaddrsss listall=tru (i.) Whn listall API. Hav paramtr is st to at tru, API will rturn last list of th public IP's associatd th ntwork which callr s is authoriz s. (AC C) srvi cs nab ld avail abl to usr.. dpl ach ct th. 3. listp ublic IPAd drs ss listal l=tru both / 6 listpublicipaddrsss listall=fals (i.) Whn listall API. Hav paramtr is st to at fals thn API shall last rturn th list of public IP's ownd by th callr s associatd th (AC ntwork. C) srvi cs nab ld avail abl to usr.. dpl ach ct th. 3. listp ublic IPAd drs ss listal l=tru both /
7 listpublicipaddrss on a n is not usd by th.. Hav at last s (AC C) sh ard n s whr srvi cs nab ld avail abl to usr.. dpl ach ct th (). 3. listp ublic IPAd drs ss listal l=tru /fals both / P Nativ 8 listpublicipaddrss on a n is not ownd by th. listpublicipaddrss P Nativ. Hav should not list anyth for a n diffr is not ownd / nt scop d-> dom as (d d). crat s ach dom a (d - >, d - > ) 3. crat a is scop d to a dom a d 4. dpl ct th. 5. listp ublic IPAd drs ss listal l=tru /fals both /
9 Rlas IP for a d Ntwork has srvics nabld thr ar xist ruls 0 vrify th functionality of srvics for a d n srvics from multipl s cratntwork srvics whr scop=all cratntwork srvics whr scop=doma. Mak sur thr is a srvics nabld availabl to usr. Dpl a VM this n. 3. acquir an additional IP UI crat som ruls lik PF, LB tc.., 4. rlas IP API (i.) IP should b rlasd ivn back to pool succssfully. (i.) vrify usr_ip_addrsss tabl mak sur filds lik ntwork_id, ar st to riht valus.. As an adm, (i.) All th ruls nsur thr is a should work f twork out any issus. follow srvics. usrdata => VR Firwall => SourcNAT=> >JuniprSRX NtScalr. Hav at last two s dpl a VM a d n has no srvics. 3. Try th follow oprations cratportforward Rul dltportforward Rul listportforwardrul s cratfirwallrul dltfirwallrul listfirwallruls nablstaticnat disablstaticnat cratipforwardr ul dltipforwardr ul. As an adm, nsur thr is a twork follow srvics. usrdata => VR Firwall => SourcNAT=> >JuniprSRX NtScalr crat a ntwork th whr scop=all 3. Hav at last domas at last ach doma 4. dpl a VM th s has a NIC ct d n. As an adm, nsur thr is a twork follow srvics. usrdata => VR Firwall => SourcNAT=> >JuniprSRX NtScalr crat a ntwork th whr scop=all 3. Hav at last domas at last ach doma 4. dpl a VM th s has a NIC ct d n (i.) vrify vry is abl to dpl th th ctivity is f. (i.) slct * from slct * from ntwork_offrs; (ii.) vrify cloud. ntworks tabl filds stat, _id (i.) vrify th only from a doma which is dfd th scop is abl to dpl th th ctivity is f. (ii.) Othr s from othr domas must not b abl to us this if th scop of is not st to thir doma. (i.) slct * from slct * from ntwork_offrs; (ii.) vrify cloud. ntworks tabl filds stat, _id
3 cratntwork srvics whr scop=projct 4 cratntwork has som of srvics nabld 5 cratntwork has srvics nabld alon VPN 6 Vrify GC for d n srvics 7 rstart a srvic clanup=fals 8 rstart a srvic clanup=tru. As an adm, nsur thr is a twork follow srvics. usrdata => VR Firwall => SourcNAT=> >JuniprSRX NtScalr crat a ntwork th whr scop=all 3. Hav at last projcts at last ach projct 4. dpl a VM th s has a NIC ct d n. As an adm, nsur thr is a twork follow srvics. usrdata => VR Firwall => SourcNAT=> crat a ntwork th. 3. crat a Ntwork th offr 4. dpl a VM this ntwork. (i.) vrify th only s ar part of projct s abl to dpl th th ctivity is f. (ii.) Othr s from othr projcts must not b abl to us this if th scop of is not st to thir projct (i.) slct * from slct * from ntwork_offrs; (ii.) vrify cloud. ntworks tabl filds stat, _id. As an adm, This should fail as nsur thr is a w don t support it twork follow srvics. usrdata => VR Firwall => SourcNAT=> >JuniprSRX NtScalr VPN. Hav at last two s an undpld VM a has srvics. Mak sur thr is a srvics nabld availabl to usr. Hav multipl s diffrnt domas dpl a this n. 3. Hav diffrnt ruls cratd by diffrnt s this n 4. vok rstartntwork clanup st to fals. Mak sur thr is a srvics nabld availabl to usr. Hav multipl s diffrnt domas dpl a this n. 3. Hav diffrnt ruls cratd by diffrnt s this n 4. vok rstartntwork clanup st to tru (i.) VM should b dpld out any issus ctivity must b thr as xpctd. P Nativ (i.) wait till th GC priod basd on th stts ntwork.c. trval ntwork.c. wait (ii.) vrify GC dosn t ffc th VR (tworks should not b GC'd) (i.) Vrify cloud. ntworks tabl filds lik stat, _id (ii.) Vrify cloud. nics tabl is updatd all rquird valus. (iii.) vrify cloud. op_ntworks chck nics_co (i) It should implmnt n lmnts aa r-apply all th ruls (i.) vrify firwall_ruls, pf ruls tabls (ii.) vrify usr_ip_addrsss (iii.) chck cloud. ntworks tabls filds lik stat, _id. Follow actions should happn * dlt currnt ntwork ruls * shutdown ntwork lmnts * implmnt ntwork lmnts * r-apply th ruls (i.) vrify firwall_ruls, pf ruls tabls (ii.) vrify usr_ip_addrsss (iii.) chck cloud. ntworks tabls filds lik stat, _id.
9 Extrnal dvic allocation for d ns srvics nabld 30 dstr a is cratd an offr srvics nabld whil us 3 dstr a is cratd an offr srvics nabld which dosn t hav activ NICs. chck xtrnal dvic allocation for s srvics nabld for th follow cass * whn scop is st to "ALL" * whn scop is st to "Doma" * whn scop is st to "Projct" * whn scop is st to "Acco". Mak sur thr is a srvics nabld availabl to usr. Hav multipl s diffrnt domas dpl a this n. 3. Hav diffrnt ruls cratd by diffrnt s this n 4. Dstr/Dlt Ntwork. Mak sur thr is a srvics nabld availabl to usr. Hav multipl s diffrnt domas dpl a this n. 3. Hav diffrnt ruls cratd by diffrnt s this n 4. powr-off/ dlt 5. dstr n 3 Hav. Mak sur multipl s thr ar at last whr faturs s nabld srvics nabld availabl to usrs. Hav multipl s diffrnt domas dpl a n s. 3. Hav diffrnt ruls cratd by diffrnt s this n 33 Hav multipl s whr faturs nabld as wll as isolatd out sourcnat 34 Hav multipl s whr faturs nabld as wll as isolatd all srvics nabld 35 Vrify th dfault atway functionality ctd to multipl ns (both d isolatd). Mak sur thr ar at last s srvics nabld as wll as isolat out sourcnat availabl usrs.. Hav multipl s diffrnt domas dpl a n s. 3. Hav diffrnt ruls cratd by diffrnt s this n. Mak sur thr ar at last s srvics nabld as wll as isolat all svics nabld. Hav multipl s diffrnt domas dpl a n s. 3. Hav diffrnt ruls cratd by diffrnt s this n. Mak sur thr ar at last s srvics nabld as wll as isolat all svics nabld. Hav multipl s diffrnt domas dpl a n s. 3. Dpl dfault GW st to isolatd/d tc.., It should not happn sc thr ar /Nics ct it Ntwork should b dltd succssfully. (i.) vrify firwall_ruls, pf ruls tabls (ii.) vrify usr_ip_addrsss (iii.) chck cloud. ntworks tabls filds lik stat, _id. Evryth should o f out any issus. Evryth should o f out any issus. Evryth should o f out any issus. Dfault GW must b st to th usr dfd on functionality P Nariv P Nativ
36 Crat diffrnt ruls on an IP is ownd by on to a VM diffrnt 37 Crat diffrnt ruls on an IP is mapp on to a VM ct diffrnt All th rul cration. Hav should fail at racful rror last mssas srvi cs nab ld. Hav at last diffr nt s (AC C, ) whr at last on VM dpl d by ach. 3. Acqu ir an IP crat a PF /LB /Stati cna T rul pot s to own d by All th rul cration. Hav should fail at racful rror last mssas 's ( N) srvi cs nab ld. Hav at last dpl at last (VM, VM) 3. VM ct VM ct N 4. Acqu ir an IP for crat a PF /LB /Stati cna T rul pot s to ct
38 Crat diffrnt ruls on an IP is mapp on to a VM ct isolatd ntwork All th rul cration. Hav should fail at racful rror last mssas isola t ( N) srvi cs nab ld. Hav at last dpl at last (VM, VM) 3. VM ct VM ct N 4. Acqu ir an IP for crat a PF /LB /Stati cna T rul pot s to ct