Test Information

TitleConnect two SA bundles with different spi, different IPsrc, ESP (DES-CBC)
CommandLine./HTR_E_In_2SA_DspiDipsrc_descbc.seq -pkt ./HTR_E_2SA_DspiDip_descbc.def -log 111.html -ti Connect two SA bundles with different spi, different IPsrc, ESP (DES-CBC)
TestVersionREL_2_1_1
ToolVersionREL_3_3_2
Start2011/10/24 16:24:48
Tn/usr/local/v6eval//etc//tn.def
Nu/usr/local/v6eval//etc//nut.def
Pkt./HTR_E_2SA_DspiDip_descbc.def
Systemfreebsd-i386
TargetNamefreebsd-head
HostNameipv6-conf
Typehost

Test Sequence Execution Log

16:24:48Start

*** Target initialization phase ***
Target: Clear all SAD and SPD entries
16:24:48 vRemote(ipsecClearAll.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecClearAll.rmt -t freebsd-i386 -u root -p v6eval -d cuau0 -o 1 ''
Connected

# 
# /sbin/setkey -c <<EOD
spdflush;
flush;
EOD

# # sendMessagesSync: never got /sbin/setkey -c <<EODspdflush;flush;EOD
echo $status
0~
[EOT]

Target: Set SAD entries: src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" spi=0x1000 mode=transport protocol=esp ealgo=des-cbc ealgokey=TAHITEST
16:24:54 vRemote(ipsecSetSAD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSAD.rmt -t freebsd-i386 -u root -p v6eval -d cuau0 -o 1 src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" spi=0x1000 mode=transport protocol=esp ealgo=des-cbc ealgokey=TAHITEST ''
Connected

# 
# /sbin/setkey -c <<EOD
add 3ffe:501:ffff:ff05:200:ff:fe00:c1c1 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8
    esp 0x1000
    -m transport
    -E des-cbc "TAHITEST"
;
dump;
EOD

3ffe:501:ffff:ff05:200:ff:fe00:c1c1 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8 
        esp mode=transport spi=4096(0x00001000) reqid=0(0x00000000)
        E: des-cbc  54414849 54455354
        seq=0x00000000 replay=0 flags=0x00000040 state=mature 
        created: Oct 25 12:03:08 2011   current: Oct 25 12:03:08 2011
        diff: 0(s)      hard: 0(s)      soft: 0(s)
        last:                           hard: 0(s)      soft: 0(s)
        current: 0(bytes)       hard: 0(bytes)  soft: 0(bytes)
        allocated: 0    hard: 0 soft: 0
        sadb_seq=0 pid=1767 refcnt=1
# # sendMessagesSync: never got /sbin/setkey -c <<EODadd 3ffe:501:ffff:ff05:200:ff:fe00:c1c1 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8    esp 0x1000    -m transport    -E des-cbc "TAHITEST";dump;EOD
echo $status
0~
[EOT]

Target: Set SPD entries: src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" upperspec=any direction=in protocol=esp mode=transport
16:24:59 vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuau0 -o 1 src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" upperspec=any direction=in protocol=esp mode=transport ''
Connected

# 
# /sbin/setkey -c <<EOD
spdadd 3ffe:501:ffff:ff05:200:ff:fe00:c1c1 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8
       any
       -P in ipsec
       esp/transport/3ffe:501:ffff:ff05:200:ff:fe00:c1c1-3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8/require
;
spddump;
EOD

3ffe:501:ffff:ff05:200:ff:fe00:c1c1[any] 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8[any] any
        in ipsec
        esp/transport/3ffe:501:ffff:ff05:200:ff:fe00:c1c1-3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8/require
        spid=116 seq=0 pid=1768
        refcnt=1
# # sendMessagesSync: never got /sbin/setkey -c <<EODspdadd 3ffe:501:ffff:ff05:200:ff:fe00:c1c1 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8       any       -P in ipsec       esp/transport/3ffe:501:ffff:ff05:200:ff:fe00:c1c1-3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8/require;spddump;EOD
echo $status
0~
[EOT]

Target: Set SAD entries: src="3ffe:501:ffff:ff05:200:ff:fe00:c2c2" dst="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" spi=0x2000 mode=transport protocol=esp ealgo=des-cbc ealgokey=foo0foo1
16:25:05 vRemote(ipsecSetSAD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSAD.rmt -t freebsd-i386 -u root -p v6eval -d cuau0 -o 1 src="3ffe:501:ffff:ff05:200:ff:fe00:c2c2" dst="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" spi=0x2000 mode=transport protocol=esp ealgo=des-cbc ealgokey=foo0foo1 ''
Connected

# 
# /sbin/setkey -c <<EOD
add 3ffe:501:ffff:ff05:200:ff:fe00:c2c2 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8
    esp 0x2000
    -m transport
    -E des-cbc "foo0foo1"
;
dump;
EOD

3ffe:501:ffff:ff05:200:ff:fe00:c2c2 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8 
        esp mode=transport spi=8192(0x00002000) reqid=0(0x00000000)
        E: des-cbc  666f6f30 666f6f31
        seq=0x00000000 replay=0 flags=0x00000040 state=mature 
        created: Oct 25 12:03:19 2011   current: Oct 25 12:03:19 2011
        diff: 0(s)      hard: 0(s)      soft: 0(s)
        last:                           hard: 0(s)      soft: 0(s)
        current: 0(bytes)       hard: 0(bytes)  soft: 0(bytes)
        allocated: 0    hard: 0 soft: 0
        sadb_seq=1 pid=1769 refcnt=1
3ffe:501:ffff:ff05:200:ff:fe00:c1c1 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8 
        esp mode=transport spi=4096(0x00001000) reqid=0(0x00000000)
        E: des-cbc  54414849 54455354
        seq=0x00000000 replay=0 flags=0x00000040 state=mature 
        created: Oct 25 12:03:08 2011   current: Oct 25 12:03:19 2011
        diff: 11(s)     hard: 0(s)      soft: 0(s)
        last:                           hard: 0(s)      soft: 0(s)
        current: 0(bytes)       hard: 0(bytes)  soft: 0(bytes)
        allocated: 0    hard: 0 soft: 0
        sadb_seq=0 pid=1769 refcnt=1
# # sendMessagesSync: never got /sbin/setkey -c <<EODadd 3ffe:501:ffff:ff05:200:ff:fe00:c2c2 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8    esp 0x2000    -m transport    -E des-cbc "foo0foo1";dump;EOD
echo $status
0~
[EOT]

Target: Set SPD entries: src="3ffe:501:ffff:ff05:200:ff:fe00:c2c2" dst="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" upperspec=any direction=in protocol=esp mode=transport
16:25:11 vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuau0 -o 1 src="3ffe:501:ffff:ff05:200:ff:fe00:c2c2" dst="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" upperspec=any direction=in protocol=esp mode=transport ''
Connected

# 
# /sbin/setkey -c <<EOD
spdadd 3ffe:501:ffff:ff05:200:ff:fe00:c2c2 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8
       any
       -P in ipsec
       esp/transport/3ffe:501:ffff:ff05:200:ff:fe00:c2c2-3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8/require
;
spddump;
EOD

3ffe:501:ffff:ff05:200:ff:fe00:c1c1[any] 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8[any] any
        in ipsec
        esp/transport/3ffe:501:ffff:ff05:200:ff:fe00:c1c1-3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8/require
        spid=116 seq=1 pid=1770
        refcnt=1
3ffe:501:ffff:ff05:200:ff:fe00:c2c2[any] 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8[any] any
        in ipsec
        esp/transport/3ffe:501:ffff:ff05:200:ff:fe00:c2c2-3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8/require
        spid=117 seq=0 pid=1770
        refcnt=1
# # sendMessagesSync: never got /sbin/setkey -c <<EODspdadd 3ffe:501:ffff:ff05:200:ff:fe00:c2c2 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8       any       -P in ipsec       esp/transport/3ffe:501:ffff:ff05:200:ff:fe00:c2c2-3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8/require;spddump;EOD
echo $status
0~
[EOT]

*** Target testing phase ***
16:25:17Start Capturing Packets (Link0)
16:25:17 vSend(Link0,ra_to_nut)
send ra_to_nut
16:25:17 Wait 3 second
16:25:20 vSend(Link0,echo_request_from_host1_esp)
send echo_request_from_host1_esp
16:25:20 vRecv(Link0,ns_to_router_linkaddr ns_to_router echo_reply_to_host1) timeout:6 cntLimit:0 seektime:0
recv echo_reply_to_host1
16:25:20 vRecv(Link0,ns_to_router_linkaddr ns_to_router) timeout:6 cntLimit:0 seektime:0
recv ns_to_router_linkaddr
16:25:25 vSend(Link0,na_from_router_linkaddr)
send na_from_router_linkaddr

NC about Router was PROBE state, but now it's REACHABLE.
16:25:25 vRecv(Link0,ns_to_router_linkaddr) timeout:6 cntLimit:0 seektime:0
vRecv() return status=1
16:25:31 vRecv(Link0,ns_to_router_linkaddr) timeout:6 cntLimit:0 seektime:0
vRecv() return status=1

TN received echo reply from NUT to HOST1.
Ping over 1st SA bundle is available.
16:25:37 vSend(Link0,echo_request_from_host2_esp)
send echo_request_from_host2_esp
16:25:37 vRecv(Link0,ns_to_router_linkaddr ns_to_router echo_reply_to_host2) timeout:6 cntLimit:0 seektime:0
recv echo_reply_to_host2
16:25:37 vRecv(Link0,ns_to_router_linkaddr ns_to_router) timeout:6 cntLimit:0 seektime:0
vRecv() return status=1

TN received echo reply from NUT to HOST2.
Ping over 2nd SA bundle is available.
Ping over coexisting two SA bundles are available.
OK
16:25:43End

Packet Reverse Log