No. | Title |
Result | Log | Script | Packet | Dump (bin) |
| Host Transport Mode |
|
|
|
|
|
| Initialize for Host |
|
|
|
|
|
1 | Set Global Address and Check (Host) | PASS | X | X | X | Link0 |
| Host Transport ESP Outbound. |
|
|
|
|
|
| ESP Outbound without authentication |
|
|
|
|
|
2 | Outbound ESP packet (DES-CBC) | PASS | X | X | X | Link0 |
3 | Outbound ESP packet (3DES-CBC) | PASS | X | X | X | Link0 |
4 | Outbound ESP packet (RIJNDAEL-CBC) | PASS | X | X | X | Link0 |
| ESP Outbound with authentication |
|
|
|
|
|
5 | Outbound ESP packet (NULL, HMAC-MD5) | FAIL, Why | X | X | X | Link0 |
6 | Outbound ESP packet (NULL, HMAC-SHA1) | FAIL, Why | X | X | X | Link0 |
7 | Outbound ESP packet (NULL, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
8 | Outbound ESP packet (DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 |
9 | Outbound ESP packet (DES-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 |
10 | Outbound ESP packet (DES-CBC, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
11 | Outbound ESP packet (3DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 |
12 | Outbound ESP packet (3DES-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 |
13 | Outbound ESP packet (3DES-CBC, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
14 | Outbound ESP packet (RIJNDAEL-CBC, HMAC-MD5) | PASS | X | X | X | Link0 |
15 | Outbound ESP packet (RIJNDAEL-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 |
16 | Outbound ESP packet (RIJNDAEL-CBC, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
| ESP Outbound Padding |
|
|
|
|
|
17 | Outbound Padding (NULL, HMAC-MD5) | FAIL, Why | X | X | X | Link0 |
18 | Outbound Padding (NULL, HMAC-SHA1) | FAIL, Why | X | X | X | Link0 |
19 | Outbound Padding (NULL, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
20 | Outbound Padding (DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 |
21 | Outbound Padding (DES-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 |
22 | Outbound Padding (DES-CBC, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
23 | Outbound Padding (3DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 |
24 | Outbound Padding (3DES-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 |
25 | Outbound Padding (3DES-CBC, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
26 | Outbound Padding (RIJNDAEL-CBC, HMAC-MD5) | PASS | X | X | X | Link0 |
27 | Outbound Padding (RIJNDAEL-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 |
28 | Outbound Padding (RIJNDAEL-CBC, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
| ESP Outbound Sequence Counter Overflow |
|
|
|
|
|
29 | Sequence Counter Overflow check | SKIP | - | X | X | - |
| ESP Outbound Lifetime of SA |
|
|
|
|
|
30 | Lifetime of SA using time, ESP (NULL),ESP Authentication HMAC-MD5 | PASS | X | X | X | Link0 |
31 | Lifetime of SA using byte, ESP (NULL),ESP Authentication HMAC-MD5 | Not yet supported | X | X | X | Link0 |
| ESP Outbound Header Order |
|
|
|
|
|
32 | Header Order (Fragment Header vs ESP (NULL, HMAC-MD5) ) | SKIP | - | X | X | - |
33 | Header Order (Fragment Header vs ESP (NULL, HMAC-SHA1) ) | SKIP | - | X | X | - |
34 | Header Order (Fragment Header vs ESP (NULL, HMAC-SHA2-256) ) | SKIP | - | X | X | - |
| ESP Outbound Connect SA bundles |
|
|
|
|
|
35 | Connect two SA bundles with different spi, different IPdst, ESP (DES-CBC) | PASS | X | X | X | Link0 |
36 | Connect two SA bundles with different spi, different IPdst, ESP (3DES-CBC) | PASS | X | X | X | Link0 |
37 | Connect two SA bundles with different spi, different IPdst, ESP (RIJNDAEL-CBC) | PASS | X | X | X | Link0 |
38 | Connect two SA bundles with same spi, different IPdst, ESP (DES-CBC) | PASS | X | X | X | Link0 |
39 | Connect two SA bundles with same spi, different IPdst, ESP (3DES-CBC) | PASS | X | X | X | Link0 |
40 | Connect two SA bundles with same spi, different IPdst, ESP (RIJNDAEL-CBC) | PASS | X | X | X | Link0 |
| Host Transport ESP Inbound. |
|
|
|
|
|
| ESP Inbound without authentication |
|
|
|
|
|
41 | Inbound ESP packet (DES-CBC) | PASS | X | X | X | Link0 |
42 | Inbound ESP packet (3DES-CBC) | PASS | X | X | X | Link0 |
43 | Inbound ESP packet (RIJNDAEL-CBC) | PASS | X | X | X | Link0 |
44 | Inbound ESP (DES-CBC) packet (Invalid Encryption Key) | PASS | X | X | X | Link0 |
45 | Inbound ESP (3DES-CBC) packet (Invalid Encryption Key) | PASS | X | X | X | Link0 |
46 | Inbound ESP (RIJNDAEL-CBC) packet (Invalid Encryption Key) | PASS | X | X | X | Link0 |
| ESP Inbound with authentication |
|
|
|
|
|
47 | Inbound ESP packet (NULL, HMAC-MD5) | FAIL, Why | X | X | X | Link0 |
48 | Inbound ESP packet (NULL, HMAC-SHA1) | FAIL, Why | X | X | X | Link0 |
49 | Inbound ESP packet (NULL, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
50 | Inbound ESP packet (DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 |
51 | Inbound ESP packet (DES-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 |
52 | Inbound ESP packet (DES-CBC, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
53 | Inbound ESP packet (3DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 |
54 | Inbound ESP packet (3DES-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 |
55 | Inbound ESP packet (3DES-CBC, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
56 | Inbound ESP packet (RIJNDAEL-CBC, HMAC-MD5) | PASS | X | X | X | Link0 |
57 | Inbound ESP packet (RIJNDAEL-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 |
58 | Inbound ESP packet (RIJNDAEL-CBC, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
59 | Inbound ESP (DES-CBC, HMAC-MD5) packet (Invalid Authentication Key) | PASS | X | X | X | Link0 |
60 | Inbound ESP (DES-CBC, HMAC-SHA1) packet (Invalid Authentication Key) | PASS | X | X | X | Link0 |
61 | Inbound ESP (DES-CBC, HMAC-SHA2-256) packet (Invalid Authentication Key) | FAIL, Why | X | X | X | Link0 |
| ESP Inbound Padding |
|
|
|
|
|
62 | Inbound Padding (NULL, HMAC-MD5) | FAIL, Why | X | X | X | Link0 |
63 | Inbound Padding (NULL, HMAC-SHA1) | FAIL, Why | X | X | X | Link0 |
64 | Inbound Padding (NULL, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
65 | Inbound Padding (DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 |
66 | Inbound Padding (DES-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 |
67 | Inbound Padding (DES-CBC, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
68 | Inbound Padding (3DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 |
69 | Inbound Padding (3DES-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 |
70 | Inbound Padding (3DES-CBC, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
71 | Inbound Padding (RIJNDAEL-CBC, HMAC-MD5) | PASS | X | X | X | Link0 |
72 | Inbound Padding (RIJNDAEL-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 |
73 | Inbound Padding (RIJNDAEL-CBC, HMAC-SHA2-256) | FAIL, Why | X | X | X | Link0 |
74 | Padding Length is 255 (max), ESP (DES-CBC) | PASS | X | X | X | Link0 |
75 | Padding Length is 255 (max), ESP (3DES-CBC) | PASS | X | X | X | Link0 |
76 | Padding Length is 255 (max), ESP (RIJNDAEL-CBC) | PASS | X | X | X | Link0 |
77 | Invalid Padding, ESP(DES-CBC) | PASS | X | X | X | Link0 |
78 | Invalid Padding, ESP(3DES-CBC) | PASS | X | X | X | Link0 |
79 | Invalid Padding, ESP(RIJNDAEL-CBC) | PASS | X | X | X | Link0 |
| ESP Inbound Anti-Replay Window |
|
|
|
|
|
80 | Duplicate Sequence Number check | FAIL, Why | X | X | X | Link0 |
81 | Sliding receive window check | FAIL, Why | X | X | X | Link0 |
82 | Expand or shift Receive Window | - | X | X | X | Link0 |
| ESP Inbound Lifetime of SA |
|
|
|
|
|
83 | Lifetime of SA using time, ESP (NULL),ESP Authentication HMAC-MD5 | PASS | X | X | X | Link0 |
84 | Lifetime of SA using byte, ESP (NULL),ESP Authentication HMAC-MD5 | Not yet supported | X | X | X | Link0 |
| ESP Inbound Header Order |
|
|
|
|
|
85 | Header Order (Fragment Header vs ESP (NULL, HMAC-MD5)) | SKIP | - | X | X | - |
86 | Header Order (Fragment Header vs ESP (NULL, HMAC-SHA1)) | SKIP | - | X | X | - |
87 | Header Order (Fragment Header vs ESP (NULL, HMAC-SHA2-256)) | SKIP | - | X | X | - |
| ESP Inbound Connect SA bundles |
|
|
|
|
|
88 | Connect two SA bundles with different spi, different IPsrc, ESP (DES-CBC) | PASS | X | X | X | Link0 |
89 | Connect two SA bundles with different spi, different IPsrc, ESP (3DES-CBC) | PASS | X | X | X | Link0 |
90 | Connect two SA bundles with different spi, different IPsrc, ESP (RIJNDAEL-CBC) | PASS | X | X | X | Link0 |
91 | Connect two SA bundles with different spi, same IPsrc, ESP (DES-CBC) | PASS | X | X | X | Link0 |
92 | Connect two SA bundles with different spi, same IPsrc, ESP (3DES-CBC) | PASS | X | X | X | Link0 |
93 | Connect two SA bundles with different spi, same IPsrc, ESP (RIJNDAEL-CBC) | PASS | X | X | X | Link0 |
| Host Transport Common Outbound. |
|
|
|
|
|
94 | Select SPD entry (policy=discard,none), ESP (DES-CBC) | PASS | X | X | X | Link0 |
95 | Select SPD entry (policy=discard,none), ESP (3DES-CBC) | PASS | X | X | X | Link0 |
96 | Select SPD entry (policy=discard,none), ESP(RIJNDAEL-CBC) | PASS | X | X | X | Link0 |
| Host Transport Common Inbound. |
|
|
|
|
|
97 | Select SPD entry (policy=discard,none), ESP (DES-CBC) | PASS | X | X | X | Link0 |
98 | Select SPD entry (policy=discard,none), ESP (3DES-CBC) | PASS | X | X | X | Link0 |
99 | Select SPD entry (policy=discard,none), ESP (RIJNDAEL-CBC) | PASS | X | X | X | Link0 |