From 9213d9cc7bcd731baaf606fcdc956764482f45e9 Mon Sep 17 00:00:00 2001
From: sarthurdev <965089+sarthurdev@users.noreply.github.com>
Date: Tue, 4 Jan 2022 01:04:54 +0100
Subject: firewall: T4130: Add state-policy test to firewall smoketest

---
 smoketest/scripts/cli/test_firewall.py | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

(limited to 'smoketest/scripts/cli/test_firewall.py')

diff --git a/smoketest/scripts/cli/test_firewall.py b/smoketest/scripts/cli/test_firewall.py
index 1520020fd..5f728f0cd 100755
--- a/smoketest/scripts/cli/test_firewall.py
+++ b/smoketest/scripts/cli/test_firewall.py
@@ -134,6 +134,23 @@ class TestFirewall(VyOSUnitTestSHIM.TestCase):
                     break
             self.assertTrue(matched)
 
+    def test_state_policy(self):
+        self.cli_set(['firewall', 'state-policy', 'established', 'action', 'accept'])
+        self.cli_set(['firewall', 'state-policy', 'related', 'action', 'accept'])
+        self.cli_set(['firewall', 'state-policy', 'invalid', 'action', 'drop'])
+
+        self.cli_commit()
+
+        chains = {
+            'ip filter': ['VYOS_FW_IN', 'VYOS_FW_OUTPUT', 'VYOS_FW_LOCAL'],
+            'ip6 filter': ['VYOS_FW6_IN', 'VYOS_FW6_OUTPUT', 'VYOS_FW6_LOCAL']
+        }
+
+        for table in ['ip filter', 'ip6 filter']:
+            for chain in chains[table]:
+                nftables_output = cmd(f'sudo nft list chain {table} {chain}')
+                self.assertTrue('jump VYOS_STATE_POLICY' in nftables_output)
+
     def test_sysfs(self):
         for name, conf in sysfs_config.items():
             paths = glob(conf['sysfs'])
-- 
cgit v1.2.3