#!/bin/bash
# SPDX-License-Identifier: GPL-2.0

ALL_TESTS="ping_ipv4 ping_ipv6 flooding"
NUM_NETIFS=6
CHECK_TC="yes"
source lib.sh

h1_create()
{
	simple_if_init $h1 192.0.2.1/24 2001:db8:1::1/64
}

h1_destroy()
{
	simple_if_fini $h1 192.0.2.1/24 2001:db8:1::1/64
}

h2_create()
{
	simple_if_init $h2 192.0.2.2/24 2001:db8:1::2/64
}

h2_destroy()
{
	simple_if_fini $h2 192.0.2.2/24 2001:db8:1::2/64
}

h3_create()
{
	simple_if_init $h3 192.0.2.3/24 2001:db8:1::3/64
}

h3_destroy()
{
	simple_if_fini $h3 192.0.2.3/24 2001:db8:1::3/64
}

switch_create()
{
	ip link add dev br0 type bridge

	ip link set dev $swp1 master br0
	ip link set dev $swp2 master br0
	ip link set dev $swp3 master br0

	ip link set dev $swp1 type bridge_slave isolated on
	check_err $? "Can't set isolation on port $swp1"
	ip link set dev $swp2 type bridge_slave isolated on
	check_err $? "Can't set isolation on port $swp2"
	ip link set dev $swp3 type bridge_slave isolated off
	check_err $? "Can't disable isolation on port $swp3"

	ip link set dev br0 up
	ip link set dev $swp1 up
	ip link set dev $swp2 up
	ip link set dev $swp3 up
}

switch_destroy()
{
	ip link set dev $swp3 down
	ip link set dev $swp2 down
	ip link set dev $swp1 down

	ip link del dev br0
}

setup_prepare()
{
	h1=${NETIFS[p1]}
	swp1=${NETIFS[p2]}

	swp2=${NETIFS[p3]}
	h2=${NETIFS[p4]}

	swp3=${NETIFS[p5]}
	h3=${NETIFS[p6]}

	vrf_prepare

	h1_create
	h2_create
	h3_create

	switch_create
}

cleanup()
{
	pre_cleanup

	switch_destroy

	h3_destroy
	h2_destroy
	h1_destroy

	vrf_cleanup
}

ping_ipv4()
{
	RET=0
	ping_do $h1 192.0.2.2
	check_fail $? "Ping worked when it should not have"

	RET=0
	ping_do $h3 192.0.2.2
	check_err $? "Ping didn't work when it should have"

	log_test "Isolated port ping"
}

ping_ipv6()
{
	RET=0
	ping6_do $h1 2001:db8:1::2
	check_fail $? "Ping6 worked when it should not have"

	RET=0
	ping6_do $h3 2001:db8:1::2
	check_err $? "Ping6 didn't work when it should have"

	log_test "Isolated port ping6"
}

flooding()
{
	local mac=de:ad:be:ef:13:37
	local ip=192.0.2.100

	RET=0
	flood_test_do false $mac $ip $h1 $h2
	check_err $? "Packet was flooded when it should not have been"

	RET=0
	flood_test_do true $mac $ip $h3 $h2
	check_err $? "Packet was not flooded when it should have been"

	log_test "Isolated port flooding"
}

trap cleanup EXIT

setup_prepare
setup_wait

tests_run

exit $EXIT_STATUS