*** Settings ***
Test Teardown     DeletePolicyAndObject    ${policyIds}    ${objectids}
Force Tags        tsg_adc    Security_Policy
Library           OperatingSystem
Resource          ../../../../02-Keyword/tsg_adc/SystemCommand.robot
Resource          ../../../../02-Keyword/tsg_bfapi/PolicyObject.robot
Resource          ../../../../02-Keyword/tsg_bfapi/LogVariable.robot
Resource          ../../../../02-Keyword/tsg_bfapi/ApiRequest.robot
Library           Custometest
Resource          ../../../../02-Keyword/tsg_bfapi/policy_object/Policy.robot

*** Variables ***
${policyIds}      ${EMPTY}
${objectids}      ${EMPTY}

*** Test Cases ***
SecurityPolicy-Allow-DNS-00001
    [Tags]    selfserver    monitor    dns
    Comment    创建安全策略
    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Allow-DNS-00001    policyType=tsg_security    policyDesc=autotest    action=allow    userRegion={"protocol": "DNS"}    isValid=${1}    appIdObjects=4
    ${rescode}    ${policyId}    AddPolicies    1    ${policyDict}    v2
    #删除策略
    ${policyIds}    Create List    {"policyType":"tsg_security","policyIds":[${policyId}]}
    Comment    功能端验证HTTP验证
    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    nslookup -d www.yhd.com
    ...    ELSE    set variable    nslookup -d www.yhd.com
    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    canonical name = www.yhd.com
    ...    ELSE    Create List    canonical name = www.yhd.com
    ${starttime}    Get Time
    Sleep    ${policyVerificationSleepSeconds}s
    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}
    Sleep    ${policyLogVerificationSleepSeconds}s
    ${endtime}    Get Time
    #日志验证
    ${s}    Convert to String    ${policyId}
    GetLogList    security_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    common_sled_ip    192.168.40.161