NAME

 RTU_E_Out_null_hmacmd5 - Router Tunnel Mode ESP Outbound NULL with HMAC-MD5 authentication


TARGET

 Router


SYNOPSIS

 RTU_E_Out_null_hmacmd5.seq [-tooloption ...] -pkt RTU_E_null_hmacmd5.def
 -tooloption : v6eval tool option
 See also RTU_E_common.def and RTU_common.def


INITIALIZATION

For details of Network Topology, see 00README

Set NUT's SAD and SPD as following:

 (Link0) (Link1)
 NET4 NET2 NET0 NET1
 HOST1_NET4 -- SG1 -- Router -- NUT -- HOST1_NET1
 <====tunnel======= 

Security Association Database (SAD)

source address NUT_NET0
destination address SG1_NET2
SPI 0x1000
mode tunnel
protocol ESP
ESP algorithm NULL
ESP authentication HMAC-MD5
ESP authentication key 0123456789ABCDEF

Security Policy Database (SPD)

tunnel source address NUT_NET0
tunnel destination address SG1_NET2
source address NET1
destination address NET4
upper spec any
direction out
protocol ESP
mode tunnel


TEST PROCEDURE

 Tester Target Tester
 (Link0) (Link1)
 | | |
 | |<--------------------------| | | ICMP Echo Reply | | | | |<--------------------------| | | ICMP Echo Reply | | | (with ESP) | | | | | | | | v v v 
  1. Send ICMP Echo Reply to Link1
  2. Receive ICMP Echo Reply with ESP from Link0

ICMP Echo Reply to Link1

IP Header Source Address HOST1_NET1
Destination Address HOST1_NET4
ICMP Type 129 (Echo Reply)

ICMP Echo Reply with ESP from Link0

IP Header Source Address NUT_NET0
Destination Address SG1_NET2
ESP SPI 0x1000
Algorithm NULL
Authentication Algorithm HAMC-MD5
Authentication Key 0123456789ABCDEF
IP Header Source Address HOST1_NET1
Destination Address HOST1_NET4
ICMP Type 129 (Echo Reply)


JUDGEMENT

 PASS: ICMP Echo Reply with ESP received


SEE ALSO

 perldoc V6evalTool
 IPSEC.html IPsec Test Common Utility

AltStyle によって変換されたページ (->オリジナル) /