Blaauwgeers PRO

• https://osrg.github.io/ryu-book/en/html/openflow_protocol.html
• https://osrg.github.io/ryu-book/en/html/rest_firewall.html#example-of-operation-of-a-single-tenant-ipv4

sudo timeout 30s tcpdump -i lo -w /vagrant/T4-lo.pcap &
sudo timeout 30s tcpdump -i s1-eth1 -w /vagrant/T4-eth1.pcap &
sudo timeout 30s tcpdump -i s1-eth2 -w /vagrant/T4-eth2.pcap &
sudo timeout 30s tcpdump -i s1-eth3 -w /vagrant/T4-eth3.pcap &

curl -X GET http://127.0.0.1:8080/wm/staticentrypusher/clear/all/json

curl -X POST -d '{"switch":"00:00:00:00:00:00:00:01", "name":"flow-mod-1", "cookie":"0", "priority":"555", "in_port":"1","active":"true", "actions":"output=2"}' http://127.0.01:8080/wm/staticentrypusher/json

curl -X POST -d '{"switch":"00:00:00:00:00:00:00:01", "name":"flow-mod-2", "cookie":"0", "priority":"555", "in_port":"2","active":"true", "actions":"output=1"}' http://127.0.01:8080/wm/staticentrypusher/json

curl -X POST -d '{"switch":"00:00:00:00:00:00:00:01","name":"flow-1arp","priority":"02501","in_port":"1","active":"true", "eth_type":"0x0890","eth_src":"00:00:00:00:00:01", "eth_dst":"ff:ff:ff:ff:ff:ff", "arp_tpa":"10.0.0.2", "actions":"set_field=arp_tpa->10.0.0.3,output=3"}' http://localhost:8080/wm/staticflowpusher/json

curl -X POST -d '{"switch":"00:00:00:00:00:00:00:01","name":"flow-1arp","priority":"02501","in_port":"1","active":"true", "eth_type":"0x0890","eth_src":"00:00:00:00:00:01", "eth_dst":"ff:ff:ff:ff:ff:ff", "arp_tpa":"10.0.0.2", "actions":"set_field=arp_tpa->10.0.0.3,output=3"}' http://localhost:8080/wm/staticflowpusher/json

curl -X GET http://127.0.0.1:8080/wm/firewall/rules/json

curl -X PUT http://127.0.0.1:8080//wm/firewall/module/enable/json

curl -X PUT http://127.0.0.1:8080/wm/firewall/module/disable/json

curl -X GET http://127.0.0.1:8080/wm/firewall/module/status/json

curl -X POST -d '{"switch":"00:00:00:00:00:00:00:01", "name":"flow-mod-1", "cookie":"0", "priority":"555", "in_port":"1","active":"true", "actions":"output=2"}' http://127.0.01:8080/wm/staticentrypusher/json

curl -X POST -d '"switchid":"00:00:00:00:00:00:00:01", "src-inport":"<short>","src-mac":"xx:xx:xx:xx:xx:xx>", "dst-mac": "<xx:xx:xx:xx:xx:xx>","dl-type": "<ARP or IPv4>", "src-ip": "<A.B.C.D/M>", "dst-ip": "<A.B.C.D/M>", "nw-proto": "<TCP or UDP or ICMP>", "tp-src": "<short>", "tp-dst": "<short>","priority": "<int>", "action": "<ALLOW or DENY>"}' http://127.0.01:8080/wm/staticentrypusher/json

"switchid":"<xx:xx:xx:xx:xx:xx:xx:xx>",
"src-inport":"<short>", 
"src-mac": "<xx:xx:xx:xx:xx:xx>",
"dst-mac": "<xx:xx:xx:xx:xx:xx>", 
"dl-type": "<ARP or IPv4>",
"src-ip": "<A.B.C.D/M>",
"dst-ip": "<A.B.C.D/M>", 
"nw-proto": "<TCP or UDP or ICMP>",
"tp-src": "<short>",
"tp-dst": "<short>", 
"priority": "<int>", 
"action": "<ALLOW or DENY>"

curl -X POST -d '{
"switch_id":"00:00:00:00:00:00:00:01",
"src-inport":"1", 
"src-mac": "00:00:00:00:00:01",
"dl-type": "ARP",
"priority": "400", 
"action": "ALLOW"
}' http://127.0.01:8080/wm/firewall/rules/json

curl -X POST -d '{
"switch_id":"00:00:00:00:00:00:00:01",
"src-inport":"2", 
"src-mac": "00:00:00:00:00:02",
"dl-type": "ARP",
"priority": "400", 
"action": "ALLOW"
}' http://127.0.01:8080/wm/firewall/rules/json

curl -X POST -d '{
"switch_id":"00:00:00:00:00:00:00:01",
"src-inport":"3", 
"src-mac": "00:00:00:00:00:03",
"dl-type": "ARP",
"priority": "400", 
"action": "ALLOW"
}' http://127.0.01:8080/wm/firewall/rules/json

curl -X POST -d '{
"switch_id":"00:00:00:00:00:00:00:01",
"dl-type": "ARP",
"priority": "500", 
"action": "ALLOW"
}' http://127.0.01:8080/wm/firewall/rules/json

curl -X POST -d '{
"switchid":"00:00:00:00:00:00:00:01",
"src-inport":"3", 
"src-mac": "00:00:00:00:00:03",
"dst-mac": "00:00:00:00:00:01", 
"dl-type": "IPv4",
"src-ip": "10.0.0.3/32",
"dst-ip": "10.0.0.1/32", 
"nw-proto": "TCP",
"tp-dst": "22", 
"priority": "300", 
"action": "ALLOW"
}' http://127.0.01:8080/wm/firewall/rules/json

curl -X POST -d '{
"switchid":"00:00:00:00:00:00:00:01",
"src-inport":"1", 
"src-mac": "00:00:00:00:00:01",
"dst-mac": "00:00:00:00:00:03", 
"dl-type": "IPv4",
"src-ip": "10.0.0.3/32",
"dst-ip": "10.0.0.2/32", 
"nw-proto": "TCP",
"tp-src": "22", 
"priority": "300", 
"action": "ALLOW"
}' http://127.0.01:8080/wm/firewall/rules/json

curl -X POST -d '{ }' http://127.0.01:8080/wm/firewall/rules/json

curl -X POST -d '{
"switchid":"00:00:00:00:00:00:00:01",
"src-inport":"1", 
"src-mac": "00:00:00:00:00:01",
"dst-mac": "00:00:00:00:00:03", 
"dl-type": "IPv4",
"src-ip": "10.0.0.1/32",
"dst-ip": "10.0.0.3/32",
"nw-proto": "ICMP",
"priority": "300", 
"action": "ALLOW"
}' http://127.0.01:8080/wm/firewall/rules/json

curl -X POST -d '{
"switchid":"00:00:00:00:00:00:00:01",
"src-inport":"3", 
"src-mac": "00:00:00:00:00:03",
"dst-mac": "00:00:00:00:00:01", 
"dl-type": "IPv4",
"src-ip": "10.0.0.3/32",
"dst-ip": "10.0.0.1/32",
"nw-proto": "ICMP",
"priority": "300", 
"action": "ALLOW"
}' http://127.0.01:8080/wm/firewall/rules/json

curl -X POST -d '{
"switchid":"00:00:00:00:00:00:00:01",
"src-inport":"3", 
"src-mac": "00:00:00:00:00:03",
"dst-mac": "00:00:00:00:00:02", 
"dl-type": "IPv4",
"src-ip": "10.0.0.3",
"dst-ip": "10.0.0.2",  
"nw-proto": "TCP",
"tp-dst": "443", 
"priority": "300", 
"action": "ALLOW"
}' http://127.0.01:8080/wm/firewall/rules/json

curl -X POST -d '{
"switchid":"00:00:00:00:00:00:00:01",
"src-inport":"2", 
"src-mac": "00:00:00:00:00:02",
"dst-mac": "00:00:00:00:00:03", 
"dl-type": "IPv4",
"src-ip": "10.0.0.2",
"dst-ip": "10.0.0.3",  
"nw-proto": "TCP",
"tp-src": "443", 
"priority": "300", 
"action": "ALLOW"
}' http://127.0.01:8080/wm/firewall/rules/json

"switchid":"00:00:00:00:00:00:00:01",
"src-inport":"2", 
"src-mac": "00:00:00:00:00:01",
"dst-mac": "00:00:00:00:00:03", 
"dl-type": "IPv4",
"src-ip": "10.0.0.2",
"dst-ip": "10.0.0.3", 
"nw-proto": "UDP",
"priority": "300", 
"action": "ALLOW"