CN109743231A - A kind of acl feature test method and device - Google Patents
A kind of acl feature test method and device Download PDFInfo
- Publication number
- CN109743231A CN109743231A CN201910133608.4A CN201910133608A CN109743231A CN 109743231 A CN109743231 A CN 109743231A CN 201910133608 A CN201910133608 A CN 201910133608A CN 109743231 A CN109743231 A CN 109743231A
- Authority
- CN
- China
- Prior art keywords
- acl
- tested
- equipment
- test
- flow
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The application provides a kind of acl feature test method and device.By writing ACL strategy is successively handed down to equipment to be tested in advance, and according to the corresponding construction test flow of ACL strategy and it is sent to equipment to be tested, the test flow before flowing through the equipment to be tested and is finally flowed through into the acl feature test result that the difference after the equipment to be tested is determined as the equipment to be tested.The application avoids strategy configuration and flow construction cumbersome required for each ACL test, can automatically test acl feature comprehensively, improve working efficiency.
Description
Technical field
This application involves Internet technical field more particularly to a kind of acl feature test method and devices.
Background technique
Accesses control list (Access Control List, ACL) is the instruction list of router and exchange interface,
For the data packet of control port disengaging.ACL is suitable for all by Routing Protocol, such as IP, IPX, AppleTalk.Configuration
After ACL strategy, limitation network flow can be completed according to relative strategy, particular device is allowed to access, specifies forwarding particular port
The functions such as data packet.In brief, ACL can be a kind of network technology means of control access with the flow in screen.
In the prior art, when testing the port acl feature of equipment, human configuration and it equipment can only be issued may make
The ACL strategy used, and the test flow of manual construction corresponding A CL strategy tests the acl feature of device port.Every time
Test is required by cumbersome configuration, and the ACL type tested is still not comprehensive enough.Lack a kind of automatic comprehensive end at present
Mouth acl feature test method.
Summary of the invention
In view of the above technical problems, the embodiment of the present application provides a kind of acl feature test method and device, and technical solution is such as
Under:
According to the embodiment of the present application in a first aspect, provide a kind of acl feature test method, this method comprises:
A kind of ACL strategy is obtained in the ACL policing type library write in advance, by the ACL policy distribution to be tested
Equipment, so that ACL described in the equipment application to be tested is tactful；
Flow is tested according to the ACL constructing tactics, and sends equipment to be tested for the test flow, wherein ACL
The corresponding flow construction rule of different ACL strategies has been preset in test macro；
It receives via the test flow for returning to ACL test macro after equipment to be tested, obtains the test flow and flowing through
Before the equipment to be tested and the comparing result after the equipment to be tested is flowed through, is determined according to the comparing result described to be measured
Try the acl feature test result of equipment.
According to the second aspect of the embodiment of the present application, a kind of acl feature test device is provided, which includes:
Strategy obtains module: for obtaining a kind of ACL strategy in the ACL policing type library write in advance, by the ACL
Policy distribution gives equipment to be tested, so that ACL described in the equipment application to be tested is tactful；
Flow constructing module: for according to the ACL constructing tactics test flow, and by the test flow be sent to
Test equipment, wherein the corresponding flow construction rule of different ACL strategies has been preset in ACL test macro；
Functional test module:, will be described for receiving via the test flow for returning to ACL test macro after equipment to be tested
Flow is tested before flowing through the equipment to be tested and flows through the difference after the equipment to be tested and is determined as described to be tested set
Standby acl feature test result.
According to the third aspect of the embodiment of the present application, a kind of ACL test macro is provided, which includes test lead and control
End,
The control terminal, for obtaining a kind of ACL strategy in the ACL policing type library write in advance, by the ACL plan
It is slightly handed down to equipment to be tested, so that ACL described in the equipment application to be tested is tactful；
The control terminal is used for the ACL policy distribution to test lead；
The test lead for testing flow according to the ACL constructing tactics, and sends the test flow to be measured
Try equipment, wherein the corresponding flow construction rule of different ACL strategies has been preset in ACL test macro；
The test lead, for receiving via the test flow for returning to ACL test macro after equipment to be tested, record is flowed through
Test flow before the equipment to be tested and the test flow after the equipment to be tested is flowed through, record result is uploaded into control
End processed；
The control terminal, it is logical with whether the determination ACL strategy is tested for comparing the record result and expected results
It crosses.
Technical solution provided by the embodiment of the present application provides a kind of acl feature test method, will write ACL in advance
Strategy is successively handed down to equipment to be tested, and according to the corresponding construction test flow of ACL strategy and is sent to equipment to be tested, finally
By the test flow before flowing through the equipment to be tested and flow through the difference after the equipment to be tested be determined as it is described to
The acl feature test result of test equipment.The application avoids strategy configuration and flow structure cumbersome required for each ACL test
It makes, can automatically test acl feature comprehensively, improve working efficiency.
It should be understood that above general description and following detailed description be only it is exemplary and explanatory, not
The embodiment of the present application can be limited.
In addition, any embodiment in the embodiment of the present application does not need to reach above-mentioned whole effects.
Detailed description of the invention
In order to illustrate the technical solutions in the embodiments of the present application or in the prior art more clearly, to embodiment or will show below
There is attached drawing needed in technical description to be briefly described, it should be apparent that, the accompanying drawings in the following description is only this
The some embodiments recorded in application embodiment can also obtain according to these attached drawings for those of ordinary skill in the art
Obtain other attached drawings.
Fig. 1 is a kind of flow chart of the acl feature test method shown in one exemplary embodiment of the application；
Fig. 2 is another flow chart of the acl feature test method shown in one exemplary embodiment of the application；
Fig. 3 is a kind of schematic diagram of the ACL test macro shown in one exemplary embodiment of the application；
Fig. 4 is a kind of schematic diagram of the acl feature test device shown in one exemplary embodiment of the application；
Fig. 5 is a kind of structural schematic diagram of computer equipment shown in one exemplary embodiment of the application.
Specific embodiment
Example embodiments are described in detail here, and the example is illustrated in the accompanying drawings.Following description is related to
When attached drawing, unless otherwise indicated, the same numbers in different drawings indicate the same or similar elements.Following exemplary embodiment
Described in embodiment do not represent all embodiments consistent with the application.On the contrary, they be only with it is such as appended
The example of the consistent device and method of some aspects be described in detail in claims, the application.
It is only to be not intended to be limiting the application merely for for the purpose of describing particular embodiments in term used in this application.
It is also intended in the application and the "an" of singular used in the attached claims, " described " and "the" including majority
Form, unless the context clearly indicates other meaning.It is also understood that term "and/or" used herein refers to and wraps
It may be combined containing one or more associated any or all of project listed.
It will be appreciated that though various information, but this may be described using term first, second, third, etc. in the application
A little information should not necessarily be limited by these terms.These terms are only used to for same type of information being distinguished from each other out.For example, not departing from
In the case where the application range, the first information can also be referred to as the second information, and similarly, the second information can also be referred to as
One information.Depending on context, word as used in this " if " can be construed to " ... when " or " when ...
When " or " in response to determination ".
Accesses control list (Access Control List, ACL) is the instruction list of router and exchange interface,
For the data packet of control port disengaging.ACL is suitable for all by Routing Protocol, such as IP, IPX, AppleTalk.Configuration
After ACL strategy, limitation network flow can be completed according to relative strategy, particular device is allowed to access, specifies forwarding particular port
The functions such as data packet.In brief, ACL can be a kind of network technology means of control access with the flow in screen.
In the prior art, when testing the port acl feature of equipment, human configuration and it equipment can only be issued may make
The ACL strategy used, and the test flow of manual construction corresponding A CL strategy tests the acl feature of device port.Every time
Test is required by cumbersome configuration, and the ACL type tested is still not comprehensive enough.Lack a kind of automatic comprehensive end at present
Mouth acl feature test method.
In view of the above problems, the embodiment of the present application provides a kind of acl feature test method, and a kind of for executing the party
The acl feature test device of method is below described in detail the acl feature test method that the present embodiment is related to, referring to Fig. 1 institute
Show, this method may comprise steps of:
S101 obtains a kind of ACL strategy in the ACL policing type library write in advance, by the ACL policy distribution give to
Test equipment, so that ACL described in the equipment application to be tested is tactful；
Wherein, it comprising the ACL strategy for different types of matching movement in the ACL policy library write in advance, illustrates
It is bright, it may include 100 different types of ACL strategies in the ACL policy library, be concretely directed to the access control plan of source IP address
Slightly, for the access control policy etc. of purpose IP address.And transmitting sequence is set for these ACL strategies, such as according to each
The common degree of ACL strategy is successively handed down to equipment to be tested according to by commonly using the sequence being of little use, or, according to be tested
The application scenarios of equipment judge the common ACL strategy of equipment to be tested, and these targeted ACL strategies are come tests column
Before table.
Further, it can continue to determine whether to receive what equipment to be tested returned, the application to the ACL strategy issued
Successful information? if receiving the application success information of ACL strategy, this testing process is continued to execute, if not receiving ACL plan
Application success information slightly, then stop testing process.
S102 tests flow according to the ACL constructing tactics, and sends equipment to be tested for the test flow,
In, the corresponding flow construction rule of different ACL strategies has been preset in ACL test macro；
Because having preset the corresponding flow construction rule of different ACL strategies in ACL test macro, issued when determination
After ACL strategy, the construction that the corresponding flow construction rule of ACL strategy carries out test flow is obtained.For example, ACL strategy is to work as
When the received traffic messages in port come from a certain source IP address, by the packet loss, then corresponding to flow construction rule can be structure
The message from some source IP address is made, or, corresponding flow construction rule can be to construct one from some source IP
The message of location and several messages from other source IP address.
S103 is received via the test flow for returning to ACL test macro after equipment to be tested, the test flow is being flowed
The acl feature for being determined as the equipment to be tested through the difference before the equipment to be tested and after flowing through the equipment to be tested is surveyed
Test result.
When the flow of construction is after ACL equipment to be tested, flow can change.The test flow is recorded to flow
Through the difference before the equipment to be tested and after flowing through the equipment to be tested, that is, record test flow is before giving out a contract for a project and gives out a contract for a project
Different conditions afterwards.Judge whether state difference meets expected results.
Specifically, different constructions rule corresponds to different expected results, still by taking above-mentioned construction rule as an example, if construction
One message from some source IP address, then expected results are to disappear after flow flows through the equipment to be tested, can not be received
To return flow.If constructing a message and several messages from other source IP address from some source IP address, in advance
Phase result is returned packet quantity -1, and the message from target source IP address disappears.
Different statistical methods can be configured with specific reference to different scenes.It needs to calculate easy scene some
Under, it can only difference of the statistics traffic messages before entering equipment to be tested with the message number of volume after outflow equipment to be tested.
It is some need the accurate scene of result under, need to count traffic messages before entering equipment to be tested and flow out equipment to be tested
The difference of the particular content of the message of volume afterwards.
Shown in Figure 2, for one kind provided by the present application, more specifically acl feature test method, this method be can wrap
Include following steps:
S201 obtains a kind of ACL strategy in the ACL policing type library write in advance, by the ACL policy distribution give to
Test equipment, so that ACL described in the equipment application to be tested is tactful；
Does S202 judge whether to receive what equipment to be tested returned, to the application success information of the ACL strategy issued?
If receiving the application success information of ACL strategy, step S203 is executed, if not receiving the application success information of ACL strategy,
Stop testing process；
S203 receives via the test flow for returning to ACL test macro after equipment to be tested, determines that the test flow exists
It flows through before the equipment to be tested and flows through the difference after the equipment to be tested；
S204 compares the difference with expected results；
S205, judges whether the difference meets expected results, if the difference does not meet expected results, executes step
S206 executes step S207 if the difference meets expected results；
S206 determines that the ACL strategy test of the type does not pass through, by the ACL strategy and corresponding test result into
Row record；
S207 determines that the ACL strategy test of the type passes through, the ACL strategy is carried out with corresponding test result
Record；
S208 obtains an ACL plan according to scheduled transmitting sequence continuing in the ACL policing type library write in advance
Equipment to be tested is omited and is handed down to, until the test of different types of ACL strategy terminates.
It should be noted that the application propose ACL test macro include test lead and control terminal and the test lead and
The division of labor mode of control terminal is only a kind of citing, which may also execute this Shen with other modules or other forms
Acl feature test method please.
Refering to what is shown in Fig. 3, the ACL test macro of the application may include test lead under a kind of specific application scenarios
With control terminal, the test lead of the ACL test macro and control hundred million are further detailed below:
The control terminal, for obtaining a kind of ACL strategy in the ACL policing type library write in advance, by the ACL plan
It is slightly handed down to equipment to be tested, so that ACL described in the equipment application to be tested is tactful；
The control terminal is used for the ACL policy distribution to test lead；
The test lead for testing flow according to the ACL constructing tactics, and sends the test flow to be measured
Try equipment, wherein the corresponding flow construction rule of different ACL strategies has been preset in ACL test macro；
The test lead, for receiving via the test flow for returning to ACL test macro after equipment to be tested, record is flowed through
Test flow before the equipment to be tested and the test flow after the equipment to be tested is flowed through, record result is uploaded into control
End processed；
The control terminal, it is logical with whether the determination ACL strategy is tested for comparing the record result and expected results
It crosses.
Corresponding to above method embodiment, the embodiment of the present application also provides a kind of acl feature test device, referring to fig. 4 institute
Show, the apparatus may include: strategy obtains module 410, flow constructing module 420 and functional test module 430.
Strategy obtains module 410:, will be described for obtaining a kind of ACL strategy in the ACL policing type library write in advance
ACL policy distribution gives equipment to be tested, so that ACL described in the equipment application to be tested is tactful；
Flow constructing module 420: for testing flow according to the ACL constructing tactics, and the test flow is sent
To equipment to be tested, wherein preset the corresponding flow construction rule of different ACL strategies in ACL test macro；
Functional test module 430:, will for receiving via the test flow for returning to ACL test macro after equipment to be tested
The test flow before flowing through the equipment to be tested and flow through the difference after the equipment to be tested be determined as it is described to be measured
Try the acl feature test result of equipment.
The embodiment of the present application also provides a kind of computer equipment, includes at least memory, processor and is stored in storage
On device and the computer program that can run on a processor, wherein processor realizes that aforementioned acl feature is surveyed when executing described program
Method for testing, the method include at least:
A kind of ACL strategy is obtained in the ACL policing type library write in advance, by the ACL policy distribution to be tested
Equipment, so that ACL described in the equipment application to be tested is tactful；
Flow is tested according to the ACL constructing tactics, and sends equipment to be tested for the test flow, wherein ACL
The corresponding flow construction rule of different ACL strategies has been preset in test macro；
It receives via the test flow for returning to ACL test macro after equipment to be tested, by the test flow flowing through
The acl feature test that difference after stating before equipment to be tested and flowing through the equipment to be tested is determined as the equipment to be tested is tied
Fruit.
Fig. 5 shows one kind provided by the embodiment of the present application and more specifically calculates device hardware structural schematic diagram, should
Equipment may include: processor 1110, memory 1120, input/output interface 1130, communication interface 1140 and bus 1150.
Wherein processor 1110, memory 1120, input/output interface 1130 and communication interface 1140 are realized each other by bus 1150
Between communication connection inside equipment.
Processor 1110 can use general CPU (Central Processing Unit, central processing unit), micro- place
Reason device, application specific integrated circuit (Application Specific Integrated Circuit, ASIC) or one
Or the modes such as multiple integrated circuits are realized, for executing relative program, to realize technical solution provided by the embodiment of the present application.
Memory 1120 can use ROM (Read Only Memory, read-only memory), RAM (Random Access
Memory, random access memory), static storage device, the forms such as dynamic memory realize.Memory 1120 can store
Operating system and other applications are realizing technical solution provided by the embodiment of the present application by software or firmware
When, relevant program code is stored in memory 1120, and execution is called by processor 1110.
Input/output interface 1130 is for connecting input/output module, to realize information input and output.Input and output/
Module can be used as component Configuration (not shown) in a device, can also be external in equipment to provide corresponding function.Wherein
Input equipment may include keyboard, mouse, touch screen, microphone, various kinds of sensors etc., output equipment may include display,
Loudspeaker, vibrator, indicator light etc..
Communication interface 1140 is used for connection communication module (not shown), to realize the communication of this equipment and other equipment
Interaction.Wherein communication module can be realized by wired mode (such as USB, cable etc.) and be communicated, can also be wirelessly
(such as mobile network, WIFI, bluetooth etc.) realizes communication.
Bus 1150 include an access, equipment various components (such as processor 1110, memory 1120, input/it is defeated
Outgoing interface 1130 and communication interface 1140) between transmit information.
It should be noted that although above equipment illustrates only processor 1110, memory 1120, input/output interface
1130, communication interface 1140 and bus 1150, but in the specific implementation process, which can also include realizing normal fortune
Other assemblies necessary to row.In addition, it will be appreciated by those skilled in the art that, it can also be only comprising real in above equipment
Component necessary to existing the embodiment of the present application scheme, without including all components shown in figure.
The embodiment of the present application also provides a kind of computer readable storage medium, is stored thereon with computer program, the program
Realize that acl feature test method above-mentioned, the method include at least when being executed by processor:
A kind of ACL strategy is obtained in the ACL policing type library write in advance, by the ACL policy distribution to be tested
Equipment, so that ACL described in the equipment application to be tested is tactful；
Flow is tested according to the ACL constructing tactics, and sends equipment to be tested for the test flow, wherein ACL
The corresponding flow construction rule of different ACL strategies has been preset in test macro；
It receives via the test flow for returning to ACL test macro after equipment to be tested, by the test flow flowing through
The acl feature test that difference after stating before equipment to be tested and flowing through the equipment to be tested is determined as the equipment to be tested is tied
Fruit.
Computer-readable medium includes permanent and non-permanent, removable and non-removable media can be by any method
Or technology come realize information store.Information can be computer readable instructions, data structure, the module of program or other data.
The example of the storage medium of computer includes, but are not limited to phase change memory (PRAM), static random access memory (SRAM), moves
State random access memory (DRAM), other kinds of random access memory (RAM), read-only memory (ROM), electric erasable
Programmable read only memory (EEPROM), flash memory or other memory techniques, read-only disc read only memory (CD-ROM) (CD-ROM),
Digital versatile disc (DVD) or other optical storage, magnetic cassettes, tape magnetic disk storage or other magnetic storage devices
Or any other non-transmission medium, can be used for storage can be accessed by a computing device information.As defined in this article, it calculates
Machine readable medium does not include temporary computer readable media (transitory media), such as the data-signal and carrier wave of modulation.
For device embodiment, since it corresponds essentially to embodiment of the method, so related place is referring to method reality
Apply the part explanation of example.The apparatus embodiments described above are merely exemplary, wherein described be used as separation unit
The unit of explanation may or may not be physically separated, and component shown as a unit can be or can also be with
It is not physical unit, it can it is in one place, or may be distributed over multiple network units.It can be according to actual
The purpose for needing to select some or all of the modules therein to realize application scheme.Those of ordinary skill in the art are not paying
Out in the case where creative work, it can understand and implement.
As seen through the above description of the embodiments, those skilled in the art can be understood that the application reality
Applying example can realize by means of software and necessary general hardware platform.Based on this understanding, the embodiment of the present application
Substantially the part that contributes to existing technology can be embodied in the form of software products technical solution in other words, the meter
Calculation machine software product can store in storage medium, such as ROM/RAM, magnetic disk, CD, including some instructions are used so that one
Platform computer equipment (can be personal computer, server or the network equipment etc.) executes each implementation of the embodiment of the present application
Method described in certain parts of example or embodiment.
System, device, module or the unit that above-described embodiment illustrates can specifically realize by computer chip or entity,
Or it is realized by the product with certain function.A kind of typically to realize that equipment is computer, the concrete form of computer can
To be personal computer, laptop computer, cellular phone, camera phone, smart phone, personal digital assistant, media play
In device, navigation equipment, E-mail receiver/send equipment, game console, tablet computer, wearable device or these equipment
The combination of any several equipment.
Various embodiments are described in a progressive manner in the application, same and similar part between each embodiment
It may refer to each other, each embodiment focuses on the differences from other embodiments.Implement especially for device
For example, since it is substantially similar to the method embodiment, so describing fairly simple, related place is referring to embodiment of the method
Part illustrates.The apparatus embodiments described above are merely exemplary, wherein it is described as illustrated by the separation member
Module may or may not be physically separated, can be the function of each module when implementing the embodiment of the present application scheme
It can realize in the same or multiple software and or hardware.Part therein or complete can also be selected according to the actual needs
Portion module achieves the purpose of the solution of this embodiment.Those of ordinary skill in the art without creative efforts,
It can understand and implement.
The above is only the specific embodiment of the embodiment of the present application, it is noted that for the common of the art
For technical staff, under the premise of not departing from the embodiment of the present application principle, several improvements and modifications can also be made, these change
Into the protection scope that also should be regarded as the embodiment of the present application with retouching.
Claims (10)
1. a kind of acl feature test method is applied to ACL test macro, which comprises
A kind of ACL strategy is obtained in the ACL policing type library write in advance, gives the ACL policy distribution to equipment to be tested,
So that ACL described in the equipment application to be tested is tactful；
Flow is tested according to the ACL constructing tactics, and sends equipment to be tested for the test flow, wherein ACL test
The corresponding flow construction rule of different ACL strategies has been preset in system；
Receive via the test flow for returning to ACL test macro after equipment to be tested, by the test flow described in flow through to
Before test equipment and flow through the acl feature test result that the difference after the equipment to be tested is determined as the equipment to be tested.
2. the method as described in claim 1, described to press acl feature test method, further includes:
Different ACL strategies in the ACL policing type library write in advance are handed down to according to scheduled transmitting sequence one by one to be measured
Equipment is tried, and is tested respectively for difference ACL constructing tactics test flow, until different types of ACL strategy is surveyed
Examination terminates.
3. the method as described in claim 1, described to give the ACL policy distribution to equipment to be tested, comprising:
It gives the ACL policy distribution to equipment to be tested, receives what equipment to be tested was sent, to the ACL strategy issued
After application success information, continue to test flow according to the ACL constructing tactics.
It is described that the test flow before flowing through the equipment to be tested and is flowed through into institute 4. the method as described in claim 1
Difference after stating equipment to be tested is determined as the acl feature test result of the equipment to be tested, comprising:
The test flow is determined before flowing through the equipment to be tested and flows through the difference after the equipment to be tested, it will be described
Difference is compared with expected results, if meeting expected results, discriminating test passes through.And record the ACL strategy of the type
With corresponding test result.
5. a kind of acl feature test device, is applied to ACL test macro, described device includes:
Strategy obtains module: for obtaining a kind of ACL strategy in the ACL policing type library write in advance, by the ACL strategy
It is handed down to equipment to be tested, so that ACL described in the equipment application to be tested is tactful；
Flow constructing module: it for testing flow according to the ACL constructing tactics, and sends the test flow to be tested
Equipment, wherein the corresponding flow construction rule of different ACL strategies has been preset in ACL test macro；
Functional test module: for receiving via the test flow for returning to ACL test macro after equipment to be tested, by the test
Flow is before flowing through the equipment to be tested and flows through the difference after the equipment to be tested and is determined as the equipment to be tested
Acl feature test result.
6. device as claimed in claim 5, described to press acl feature test device, further includes:
Different ACL strategies in the ACL policing type library write in advance are handed down to according to scheduled transmitting sequence one by one to be measured
Equipment is tried, and is tested respectively for difference ACL constructing tactics test flow, until different types of ACL strategy is surveyed
Examination terminates.
7. device as claimed in claim 5, described to give the ACL policy distribution to equipment to be tested, comprising:
It gives the ACL policy distribution to equipment to be tested, receives what equipment to be tested was sent, to the ACL strategy issued
After application success information, continue to test flow according to the ACL constructing tactics.
It is described that the test flow before flowing through the equipment to be tested and is flowed through into institute 8. device as claimed in claim 5
Difference after stating equipment to be tested is determined as the acl feature test result of the equipment to be tested, comprising:
The test flow is determined before flowing through the equipment to be tested and flows through the difference after the equipment to be tested, it will be described
Difference is compared with expected results, if meeting expected results, discriminating test passes through.And record the ACL strategy of the type
With corresponding test result.
9. a kind of ACL test macro, the system comprises test lead and control terminal,
The control terminal will be under the ACL strategy for obtaining a kind of ACL strategy in the ACL policing type library write in advance
Equipment to be tested is issued, so that ACL described in the equipment application to be tested is tactful；
The control terminal is used for the ACL policy distribution to test lead；
The test lead for testing flow according to the ACL constructing tactics, and sends to be tested set for the test flow
It is standby, wherein the corresponding flow construction rule of different ACL strategies has been preset in ACL test macro；
The test lead, for receiving via the test flow for returning to ACL test macro after equipment to be tested, record flows through described
Test flow before equipment to be tested and the test flow after the equipment to be tested is flowed through, record result is uploaded into control
End；
The control terminal passes through for comparing the record result and expected results with whether the determination ACL strategy is tested.
10. system according to claim 9, the control terminal, are also used to:
TCP connection is initiated to test lead and equipment to be tested respectively, after confirmation three-way handshake connection is successfully established, after continuing to execute
Continuous ACL policy distribution.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910133608.4A CN109743231A (en) | 2019-02-22 | 2019-02-22 | A kind of acl feature test method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910133608.4A CN109743231A (en) | 2019-02-22 | 2019-02-22 | A kind of acl feature test method and device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN109743231A true CN109743231A (en) | 2019-05-10 |
Family
ID=66368143
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910133608.4A Pending CN109743231A (en) | 2019-02-22 | 2019-02-22 | A kind of acl feature test method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109743231A (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110673995A (en) * | 2019-09-24 | 2020-01-10 | 杭州迪普科技股份有限公司 | Method, device and equipment for testing configuration result of drainage strategy |
| CN111147449A (en) * | 2019-12-09 | 2020-05-12 | 杭州迪普科技股份有限公司 | Method, device, system, equipment and medium for testing packet filtering strategy |
| CN114553750A (en) * | 2022-02-24 | 2022-05-27 | 杭州迪普科技股份有限公司 | Automatic testing method and device based on network configuration protocol |
| CN114900251A (en) * | 2022-05-27 | 2022-08-12 | 北京天融信网络安全技术有限公司 | Test system, method and device and electronic equipment |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101178687A (en) * | 2007-11-26 | 2008-05-14 | 中兴通讯股份有限公司 | Software regression testing method |
| CN101247397A (en) * | 2008-03-07 | 2008-08-20 | 中兴通讯股份有限公司 | Optimization method for effective order of mirror and access control list function |
| CN102880701A (en) * | 2012-09-24 | 2013-01-16 | 杭州安恒信息技术有限公司 | Method and system for detecting database kernel invasion hidden object |
| CN108183838A (en) * | 2017-12-25 | 2018-06-19 | 杭州迪普科技股份有限公司 | The method and device of one introduces a collection nat feature test |
| CN108769045A (en) * | 2018-06-07 | 2018-11-06 | 深圳市风云实业有限公司 | Acl rule configuration method, device and the network equipment |
| CN108924159A (en) * | 2018-07-31 | 2018-11-30 | 杭州迪普科技股份有限公司 | The verification method and device in a kind of message characteristic identification library |
-
2019
- 2019-02-22 CN CN201910133608.4A patent/CN109743231A/en active Pending
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101178687A (en) * | 2007-11-26 | 2008-05-14 | 中兴通讯股份有限公司 | Software regression testing method |
| CN101247397A (en) * | 2008-03-07 | 2008-08-20 | 中兴通讯股份有限公司 | Optimization method for effective order of mirror and access control list function |
| CN102880701A (en) * | 2012-09-24 | 2013-01-16 | 杭州安恒信息技术有限公司 | Method and system for detecting database kernel invasion hidden object |
| CN108183838A (en) * | 2017-12-25 | 2018-06-19 | 杭州迪普科技股份有限公司 | The method and device of one introduces a collection nat feature test |
| CN108769045A (en) * | 2018-06-07 | 2018-11-06 | 深圳市风云实业有限公司 | Acl rule configuration method, device and the network equipment |
| CN108924159A (en) * | 2018-07-31 | 2018-11-30 | 杭州迪普科技股份有限公司 | The verification method and device in a kind of message characteristic identification library |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110673995A (en) * | 2019-09-24 | 2020-01-10 | 杭州迪普科技股份有限公司 | Method, device and equipment for testing configuration result of drainage strategy |
| CN110673995B (en) * | 2019-09-24 | 2023-05-26 | 杭州迪普科技股份有限公司 | Method, device and equipment for testing drainage strategy configuration result |
| CN111147449A (en) * | 2019-12-09 | 2020-05-12 | 杭州迪普科技股份有限公司 | Method, device, system, equipment and medium for testing packet filtering strategy |
| CN114553750A (en) * | 2022-02-24 | 2022-05-27 | 杭州迪普科技股份有限公司 | Automatic testing method and device based on network configuration protocol |
| CN114553750B (en) * | 2022-02-24 | 2023-09-22 | 杭州迪普科技股份有限公司 | Automatic test method and device based on network configuration protocol |
| CN114900251A (en) * | 2022-05-27 | 2022-08-12 | 北京天融信网络安全技术有限公司 | Test system, method and device and electronic equipment |
| CN114900251B (en) * | 2022-05-27 | 2023-11-28 | 北京天融信网络安全技术有限公司 | Test system, test method, test device and electronic equipment |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109743231A (en) | A kind of acl feature test method and device | |
| CN109359118B (en) | Data writing method and device | |
| US10136345B2 (en) | Testing a mobile application | |
| CN110022260B (en) | Cross-environment receipt message processing method and system | |
| EP3812994A1 (en) | Data evidence preservation method and system based on multiple blockchain networks | |
| CN110022345B (en) | Method, system, device and equipment for processing request in alliance chain | |
| US8824328B2 (en) | Systems and methods for optimizing the performance of an application communicating over a network | |
| CN106484603B (en) | A kind of service test method and device | |
| CN109302423B (en) | Vulnerability scanning capability testing method and device | |
| CN108337699A (en) | A kind of method, apparatus of online, mobile terminal and storage medium | |
| WO2019178957A1 (en) | Distributed system test method and device, computer device and storage medium | |
| CN110147685A (en) | Data verification method, system, device and equipment | |
| CN107154959A (en) | A kind of method and apparatus of the access network address | |
| CN109982034A (en) | Access request processing method and processing device in video monitoring system | |
| CN110347645A (en) | A kind of electronic document deposits card method and device | |
| CN113179295B (en) | Message processing method and device | |
| CN109615423A (en) | The processing method and processing device of business | |
| CN113791792A (en) | Application calling information acquisition method and device and storage medium | |
| CN109905486A (en) | A kind of application program identification methods of exhibiting and device | |
| WO2016165674A1 (en) | Trusted environment operating method and device for terminal | |
| CN109345249B (en) | Payment failure processing method and device | |
| US9813927B2 (en) | Mobile terminal flow identification method and apparatus | |
| CN108111431B (en) | Service data sending method, device, computing equipment and computer readable storage medium | |
| CN109190876A (en) | A kind of safety access method and device of service product | |
| US10742802B2 (en) | Methods and devices for verifying a communication number |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20190510 |
|
| RJ01 | Rejection of invention patent application after publication |