
Released on: 2010-08-20
CDRouter now supports devices that require 802.1x port authentication on the WAN. If enabled, CDRouter will create a RADIUS server with the secret wanRadiusSecret on the WAN at the IP address specified by the testvar wanRadiusIp. When 802.1x is used on the WAN, the DUT's 802.1x supplicant must be authenticated by the RADIUS server before any WAN traffic is permitted. This type of setup requires an EAP Authenticator which is typically found in a DSLAM or managed Ethernet switch. Note that CDRouter's WAN 802.1x RADIUS server supports three EAP types: EAP-MD5, EAP-TLS, and EAP-TTLS. An example configuration for 802.1x on the WAN is shown below:
# -- Basic configuration for WAN 802.1x RADIUS server testvar wanRadiusEnable yes testvar wanRadiusIp 3.3.3.44 testvar wanRadiusSecret qacafe123 # -- RADIUS server certificate configuration testvar wanEapRootCert /usr/share/doc/cdrouter/root.pem testvar wanEapServerCertPath /usr/share/doc/cdrouter/server.pem testvar wanEapServerCertPassword qacafe123 testvar wanEapFragmentSize 1024 # -- RADIUS server attributes testvar wanRadiusServerAttrType1 200 testvar wanRadiusServerAttrData1 04040404 testvar wanRadiusServerAttrType2 201 testvar wanRadiusServerAttrData2 0404040504040406 # -- WAN 802.1x EAP configuration testvar wanEapType eap-md5 testvar wanEapIdentity1 user1 testvar wanEapPassword1 qacafe123
Please see the CDRouter User's Guide for more information on each of the above testvars. Please see this Application Note for more information on testing with 802.1x on the WAN.
The latest release of the Ubuntu Linux operating system from Canonical, version 10.04 codenamed Lucid Lynx, has been tested for compatibility with CDRouter 6.2 and is now recommended by QA Cafe. CDRouter 6.2 supports both the 32-bit and 64-bit Desktop Editions of Ubuntu 10.04.
Many DHCP server implementations allow addresses within the DHCP pool to be reserved for specific clients based on MAC address. A new test case for verifying this functionality has been added to the dhcp-s.tcl test module. Up to 10 unique DHCP reservations can be defined using instances of the dhcpClientReservedIp and dhcpClientReservedMac testvars. Here's an example configuration for two DHCP reservations:
testvar dhcpClientReservedIp1 192.168.1.10 testvar dhcpClientReservedMac1 00:11:22:33:33:44 testvar dhcpClientReservedIp2 192.168.1.15 testvar dhcpClientReservedMac2 00:11:22:33:33:55
For more information on DHCP server testing with CDRouter, please see this new Application Note.
In previous releases of CDRouter, the firewall TCP and UDP open and closed port lists required that ports be listed individually. With this release, port ranges can now be specified as well:
testvar firewallTcpOpenPorts "1000-2000" testvar firewallUdpClosedPorts "90-93"
Please see this Application Note for additional information on firewall testing with CDRouter.
MD5 encryption is now supported as an authentication type for RIPv2 testing. The testvar ripSimplePassword has been deprecated. While it is still supported, the new testvar ripPassword is used in conjunction with the new testvar ripAuthMode to set Plain-text, MD5, or No-Authentication modes:
testvar ripAuthMode "md5" testvar ripPassword "admin-secret"
For more information, please see this Knowledge Base article regarding MD5 Authentication support.
It is now possible to set the testvar ripV2mode to use the broadcast address 255.255.255.255, which is useful for testing over Point-to-Point connection models:
testvar ripV2mode "limited-broadcast"
The DHCP header contains a 'seconds' field to allow DHCP clients to track the number of seconds elapsed since the client began the address acquisition or renewal process. By default, CDRouter does not implement 'seconds' tracking for DHCP clients. It is now possible to set the testvar dhcpClientTrackSeconds to enable seconds tracking for DHCP clients. When 'seconds' tracking is enabled, the DHCP client will increment the seconds value during each session.
testvar dhcpClientTrackSeconds yes
CDRouter's NTP servers now optionally support the Time protocol, as defined in IETF RFC 868. CDRouter supports Time requests via UDP on port 37 only. The Time protocol has been deprecated by NTP, as defined in IETF RFC 1305. However, some legacy devices may still require support for the Time protocol.
testvar enableRFC868TimeProtocol yes
CDRouter IPv6 now supports DHCPv6 as an IPv6 WAN connection mode. DHCPv6 can be enabled by setting the testvar ipv6WanMode to DHCP. When DHCPv6 is enabled on the WAN, CDRouter will respond to DHCPv6 non-temporary address requests from the DUT, as defined in IETF RFC 3315. The IPv6 address of the DHCPv6 server, the address assigned by the server to the client, a free address for renumbering tests, and the prefix length assigned by the server to the client are specified by the testvars ipv6WanIspIp, ipv6WanIspAssignIp, ipv6WanIspNextIp, and ipv6WanIspPrefixLen, respectively.
testvar ipv6WanMode DHCP testvar ipv6WanIspIp 2001::1 testvar ipv6WanIspAssignIp 2001::2 testvar ipv6WanIspNextIp 2001::3 testvar ipv6WanIspPrefixLen 64
CDRouter's DHCPv6 server on the WAN will provide IPv6 DNS and domain information to the client if it explicitly requests DHCPv6 option 23 (DNS Recursive Name Server) and/or 24 (Domain Search List). CDRouter will provide the IPv6 address(es) of its DNS servers and the domain name specified by the testvar wanDomainName. Please see the section titled New IPv6 DNS configuration options below for more information on configuring IPv6 addresses for CDRouter's primary and backup DNS servers. If these options are not requested by the client, CDRouter's DHCPv6 server will not provide any DNS or domain information. Note that CDRouter's DHCPv6 server will also respond to DHCPv6 Information-request messages from the client for DNS and domain information.
CDRouter's DHCPv6 server can be configured to provide specific IA Valid and Preferred lifetimes, in seconds, to the client using the testvars dhcpv6IAValidLifetime and dhcpv6IAPreferredLifetime. Likewise, up to 255 specific DHCPv6 options can be provided to the client using the testvars dhcpv6ServerOptionCode* and dhcpv6ServerOptionData*.
# -- DHCPv6 server IA lifetime configuration testvar dhcpv6IAValidLifetime 300 testvar dhcpv6IAPreferredLifetime 300 # -- DHCPv6 server additional option configuration testvar dhcpv6ServerOptionCode1 69 testvar dhcpv6ServerOptionData1 04040404 testvar dhcpv6ServerOptionCode2 71 testvar dhcpv6ServerOptionData2 0404040504040406
CDRouter IPv6 now supports DHCPv6 prefix delegation, as defined in IETF RFC 3633. Prefix delegation can be enabled when the IPv6 WAN mode is set to either DHCP or autoconf. The prefix and prefix length provided by CDRouter's DHCPv6 server on the WAN are specified by the testvars dhcpv6WanAssignPrefix and dhcpv6WanAssignPrefixLen, respectively. The testvar dhcpv6WanAssignNextPrefix specifies a free prefix on the WAN used for renumbering tests. The testvar dhcpv6PDLatency defines the amount of time, in seconds, it takes the DUT to update its LAN side IPv6 settings when a new IPv6 prefix is learned on the WAN.
testvar dhcpv6WanEnablePD yes testvar dhcpv6WanAssignPrefix 2001:dddd:: testvar dhcpv6WanAssignNextPrefix 2001:ddde:: testvar dhcpv6WanAssignPrefixLen 48 testvar dhcpv6PDLatency 30
CDRouter IPv6 now supports 6rd on the WAN, as defined in IETF RFC 5569. 6rd can be enabled by setting the testvar ipv6WanMode to 6rd. When 6rd is enabled, the 6rd prefix, prefix length, and IPv4 mask length must be configured. The 6rd prefix is specified as a 16 octet IPv6 address. The 6rd prefix length specifies the length of the 6rd prefix and must be an integer value between 1 and 128. The IPv4 mask length specifies the number of high-order bits that are identical across all IPv4 addresses within the specified 6rd domain, and must be an integer value between 0 and 32. For more information on 6rd testing with CDRouter, please see this Application Note.
testvar ipv6rdPrefix 2010:1234:: testvar ipv6rdPrefixLen 32 testvar ipv6rdIPv4MaskLen 0
Note that the IPv4 address of the 6rd relay server must be configured using the testvar ipv6RelayServer.
CDRouter now supports autoconf on on the WAN. To enable autoconf the testvar ipv6WanMode must be set autoconf. When autoconf is enabled the testvars ipv6WanIspIp and ipv6WanIspPrefixLen must also be specified. CDRouter will advertise the prefix specified by these testvars in Router Advertisements on the WAN.
testvar ipv6WanMode autoconf testvar ipv6WanIspIp 2001::1 testvar ipv6WanIspPrefixLen 64
Note that DHCPv6 prefix delegation can also be enabled when autoconf is used on the WAN.
CDRouter's primary and backup DNS servers can now be assigned IPv6 addresses using the testvars ipv6WanDnsServer and ipv6WanBackupDnsServer, respectively. By default the addresses 2001:51a:cafe::2 and 2001:51a:cafe::3 will be used, if not explicitly configured.
testvar ipv6WanDnsServer 2001:51a:cafe::2 testvar ipv6WanBackupDnsServer 2001:51a:cafe::3
A new testvar ipv6DNStoLAN has also been added. This testvar indicates whether or not the DUT supports DNS relay functionality. This testvar should be enabled if the DUT is configured to relay the IPv6 DNS servers learned on the WAN side to clients on the LAN via DHCPv6 options or the Neighbor Discovery RDNSS option. This testvar should be disabled if the DUT announces its LAN side IPv6 address as the DNS server to all clients on the LAN.
testvar ipv6DNStoLAN yes
This release of CDRouter IPv6 includes a number of new IPv6 specific test modules and over 85 unique test cases.
| Test Module | Test Cases | Description |
| dhcpv6-c.tcl | 19 | DHCPv6 client tests for the WAN side of the router |
| dhcpv6-pd.tcl | 14 | DHCPv6 prefix delegation tests for WAN to LAN IPv6 configuration |
| 6rd.tcl | 12 | 6rd tunnel tests for connecting IPv6 hosts over IPv4 networks |
| dhcpv6-s.tcl | 38 | DHCPv6 server tests for the LAN side of the router |
| ndp-wan.tcl | 8 | Neighbor Discovery Protocol and Router Advertisement tests for the WAN side of IPv6 devices |
| TOTAL: | 91 | Brand new IPv6 test cases in CDRouter 6.2! |
In previous releases of CDRouter, the firewall TCP and UDP open and closed port lists required that ports be listed individually. With this release, port ranges can now be specified as well:
testvar ipv6FirewallTcpOpenPorts "1000-2000" testvar ipv6FirewallUdpClosedPorts "90-93"
Please see this Application Note for additional information on firewall testing with CDRouter.
The test case ipv6_6to4_3 now verifies the 16 bit SLA ID field in the LAN side prefix advertised by the DUT. The testvar ipv6LanSubnetId can be used to configure the expected SLA ID. For 6to4 configurations the ipv6LanSubnetId string must be four hex characters or less:
testvar ipv6LanSubnetId ffff testvar ipv6LanSubnetId 1
The test case ipv6_ndp_32 now verifies the contents of the Router Advertisement Recursive DNS Server (RDNSS) option (25) defined in RFC 5006. If the DUT supports this option the DNS server address(es) and lifetime provided will be verified based on the expected values as defined by the ipv6DNStoLAN testvar. The ipv6RdnssSupport can be used to specify whether or not the DUT supports this option:
testvar ipv6RdnssSupport yes
If the testvar ipv6RdnssSupport is set to "no", ipv6_ndp_32 will be automatically skipped by CDRouter.
A new testvar has been added to indicate whether or not the DUT's LAN side DHCPv6 server supports DHCPv6 option 14 (Rapid Commit). This testvar defaults to "yes". The test case dhcpv6_server_102 will only be executed if Rapid Commit functionality is supported.
testvar dhcpv6RapidCommit yes
In test case ipv6_ndp_30, CDRouter now verifies the status of the other stateful configuration flag "O bit" in Router Advertisements from the DUT. CDRouter's LAN client will also attempt to obtain DNS and domain search list information if the O bit is set. Likewise, in ipv6_ndp_31 CDRouter now also verifies the status of the on-link flag (L bit) in Router Advertisement Prefix Information options from the DUT.
The DUID format utilized by CDRouter's DHCPv6 server and clients can be specified as Type 1 (DUID-LLT), Type 2 (DUID-EN), or Type 3 (DUID-LL) as defined in IETF RFC 3315.
testvar dhcpv6DuidType 1
Now when watching a Package live, or viewing results, the test case name can be clicked on to bring the user to the Documentation tab explaining the full synopsis of the test.
When the Retry test feature is enabled, the number of attempts will be displayed in the Live and Result test views.
Entirely new in version 6.2, CDRouter Visualize provides instant graphs and charts for test results. A detailed introduction to these new features is available on our website.
Careful optimizations to the internal BuddyWeb database have yielded impressive speed increases for larger data sets. For instance, packages containing large numbers of tests have been observed with up to a magnitude faster load times.
Similar to tag filtering, the Test Results page is now filterable by Package Name.
A high-level Executive Report can now be generated and printed from within BuddyWeb summarizing a particular result. For best output results, we recommend printing from the Mozilla Firefox web browser.
TEST: Verify DHCP server address reservations MODULE: dhcp-s.tcl NAME: cdrouter_dhcp_server_3
TEST: Verify IPv6 Router Advertisements include SLA ID MODULE: 6to4.tcl NAME: ipv6_6to4_3
TEST: Verify Router Advertisements contain RDNSS option MODULE: ndp.tcl NAME: ipv6_ndp_32
MODULE: ndp-wan.tcl MODULE: dhcpv6-c.tcl MODULE: dhcpv6-pd.tcl MODULE: dhcpv6-s.tcl MODULE: 6rd.tcl
For a complete description of all individual test cases included in the above test modules, please see the official list of CDRouter IPv6 test case summaries.
To avoid SSL errors due to expired certificates, existing users have three options: