:input;type filter hook input priority 0
:ingress;type filter hook ingress device lo priority 0

*bridge;test-bridge;input
*netdev;test-netdev;ingress

vlan id 4094;ok
vlan id 0;ok
# bad vlan id
vlan id 4096;fail
vlan id 4094 vlan cfi 0;ok
vlan id 4094 vlan cfi != 1;ok
vlan id 4094 vlan cfi 1;ok
# bad cfi
vlan id 4094 vlan cfi 2;fail
vlan id 4094 vlan cfi 1 vlan pcp 8;fail
vlan id 4094 vlan cfi 1 vlan pcp 7;ok
vlan id 4094 vlan cfi 1 vlan pcp 3;ok

ether type vlan vlan id 4094;ok;vlan id 4094
ether type vlan vlan id 0;ok;vlan id 0
ether type vlan vlan id 4094 vlan cfi 0;ok;vlan id 4094 vlan cfi 0
ether type vlan vlan id 4094 vlan cfi 1;ok;vlan id 4094 vlan cfi 1
ether type vlan vlan id 4094 vlan cfi 2;fail

vlan id 4094 tcp dport 22;ok
vlan id 1 ip saddr 10.0.0.1;ok
vlan id 1 ip saddr 10.0.0.0/23;ok
vlan id 1 ip saddr 10.0.0.0/23 udp dport 53;ok
ether type vlan vlan id 1 ip saddr 10.0.0.0/23 udp dport 53;ok;vlan id 1 ip saddr 10.0.0.0/23 udp dport 53

vlan id { 1, 2, 4, 100, 4095 } vlan pcp 1-3;ok
vlan id { 1, 2, 4, 100, 4096 };fail

ether type vlan ip protocol 1 accept;ok

# illegal dependencies
ether type ip vlan id 1;fail
ether type ip vlan id 1 ip saddr 10.0.0.1;fail