Test Information

TitleSelect SPD entry (policy=discard,none), ESP (3DES-CBC)
CommandLine./HTR_C_Out_3descbc_SPD_discard_none.seq -pkt ./HTR_E_SPD_discard_none.def -log 121.html -ti Select SPD entry (policy=discard,none), ESP (3DES-CBC)
TestVersionREL_2_1_1
ToolVersionREL_3_3_2
Start2011/10/24 16:34:09
Tn/usr/local/v6eval//etc//tn.def
Nu/usr/local/v6eval//etc//nut.def
Pkt./HTR_E_SPD_discard_none.def
Systemfreebsd-i386
TargetNamefreebsd-head
HostNameipv6-conf
Typehost

Test Sequence Execution Log

16:34:09Start

*** Target initialization phase ***
Target: Clear all SAD and SPD entries
16:34:09 vRemote(ipsecClearAll.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecClearAll.rmt -t freebsd-i386 -u root -p v6eval -d cuau0 -o 1 ''
Connected

# 
# /sbin/setkey -c <<EOD
spdflush;
flush;
EOD

# # sendMessagesSync: never got /sbin/setkey -c <<EODspdflush;flush;EOD
echo $status
0~
[EOT]

Target: Set SAD entries: src="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" dst="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" spi=0x1000 mode=transport protocol=esp ealgo=3des-cbc ealgokey=TAHITEST89ABCDEFGHIJKLMN
16:34:14 vRemote(ipsecSetSAD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSAD.rmt -t freebsd-i386 -u root -p v6eval -d cuau0 -o 1 src="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" dst="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" spi=0x1000 mode=transport protocol=esp ealgo=3des-cbc ealgokey=TAHITEST89ABCDEFGHIJKLMN ''
Connected

# 
# /sbin/setkey -c <<EOD
add 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8 3ffe:501:ffff:ff05:200:ff:fe00:c1c1
    esp 0x1000
    -m transport
    -E 3des-cbc "TAHITEST89ABCDEFGHIJKLMN"
;
dump;
EOD

3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8 3ffe:501:ffff:ff05:200:ff:fe00:c1c1 
        esp mode=transport spi=4096(0x00001000) reqid=0(0x00000000)
        E: 3des-cbc  54414849 54455354 38394142 43444546 4748494a 4b4c4d4e
        seq=0x00000000 replay=0 flags=0x00000040 state=mature 
        created: Oct 25 12:12:28 2011   current: Oct 25 12:12:28 2011
        diff: 0(s)      hard: 0(s)      soft: 0(s)
        last:                           hard: 0(s)      soft: 0(s)
        current: 0(bytes)       hard: 0(bytes)  soft: 0(bytes)
        allocated: 0    hard: 0 soft: 0
        sadb_seq=0 pid=1339 refcnt=1
# # sendMessagesSync: never got /sbin/setkey -c <<EODadd 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8 3ffe:501:ffff:ff05:200:ff:fe00:c1c1    esp 0x1000    -m transport    -E 3des-cbc "TAHITEST89ABCDEFGHIJKLMN";dump;EOD
echo $status
0~
[EOT]

Target: Set SPD entries: src="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" dst="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" upperspec=any direction=out policy=discard
16:34:20 vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuau0 -o 1 src="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" dst="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" upperspec=any direction=out policy=discard ''
Connected

# 
# /sbin/setkey -c <<EOD
spdadd 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8 3ffe:501:ffff:ff05:200:ff:fe00:c1c1
       any
       -P out discard
;
spddump;
EOD

3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8[any] 3ffe:501:ffff:ff05:200:ff:fe00:c1c1[any] any
        out discard
        spid=6 seq=0 pid=1340
        refcnt=1
# # sendMessagesSync: never got /sbin/setkey -c <<EODspdadd 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8 3ffe:501:ffff:ff05:200:ff:fe00:c1c1       any       -P out discard;spddump;EOD
echo $status
0~
[EOT]

Target: Set SAD entries: src="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" dst="3ffe:501:ffff:ff05:200:ff:fe00:c2c2" spi=0x2000 mode=transport protocol=esp ealgo=3des-cbc ealgokey=foo0foo1foo2foo3foo4foo5
16:34:26 vRemote(ipsecSetSAD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSAD.rmt -t freebsd-i386 -u root -p v6eval -d cuau0 -o 1 src="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" dst="3ffe:501:ffff:ff05:200:ff:fe00:c2c2" spi=0x2000 mode=transport protocol=esp ealgo=3des-cbc ealgokey=foo0foo1foo2foo3foo4foo5 ''
Connected

# 
# /sbin/setkey -c <<EOD
add 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8 3ffe:501:ffff:ff05:200:ff:fe00:c2c2
    esp 0x2000
    -m transport
    -E 3des-cbc "foo0foo1foo2foo3foo4foo5"
;
dump;
EOD

3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8 3ffe:501:ffff:ff05:200:ff:fe00:c2c2 
        esp mode=transport spi=8192(0x00002000) reqid=0(0x00000000)
        E: 3des-cbc  666f6f30 666f6f31 666f6f32 666f6f33 666f6f34 666f6f35
        seq=0x00000000 replay=0 flags=0x00000040 state=mature 
        created: Oct 25 12:12:40 2011   current: Oct 25 12:12:40 2011
        diff: 0(s)      hard: 0(s)      soft: 0(s)
        last:                           hard: 0(s)      soft: 0(s)
        current: 0(bytes)       hard: 0(bytes)  soft: 0(bytes)
        allocated: 0    hard: 0 soft: 0
        sadb_seq=1 pid=1341 refcnt=1
3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8 3ffe:501:ffff:ff05:200:ff:fe00:c1c1 
        esp mode=transport spi=4096(0x00001000) reqid=0(0x00000000)
        E: 3des-cbc  54414849 54455354 38394142 43444546 4748494a 4b4c4d4e
        seq=0x00000000 replay=0 flags=0x00000040 state=mature 
        created: Oct 25 12:12:28 2011   current: Oct 25 12:12:40 2011
        diff: 12(s)     hard: 0(s)      soft: 0(s)
        last:                           hard: 0(s)      soft: 0(s)
        current: 0(bytes)       hard: 0(bytes)  soft: 0(bytes)
        allocated: 0    hard: 0 soft: 0
        sadb_seq=0 pid=1341 refcnt=1
# # sendMessagesSync: never got /sbin/setkey -c <<EODadd 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8 3ffe:501:ffff:ff05:200:ff:fe00:c2c2    esp 0x2000    -m transport    -E 3des-cbc "foo0foo1foo2foo3foo4foo5";dump;EOD
echo $status
0~
[EOT]

Target: Set SPD entries: src="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" dst="3ffe:501:ffff:ff05:200:ff:fe00:c2c2" upperspec=any direction=out policy=none
16:34:31 vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuau0 -o 1 src="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" dst="3ffe:501:ffff:ff05:200:ff:fe00:c2c2" upperspec=any direction=out policy=none ''
Connected

# 
# /sbin/setkey -c <<EOD
spdadd 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8 3ffe:501:ffff:ff05:200:ff:fe00:c2c2
       any
       -P out none
;
spddump;
EOD

3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8[any] 3ffe:501:ffff:ff05:200:ff:fe00:c1c1[any] any
        out discard
        spid=6 seq=1 pid=1342
        refcnt=1
3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8[any] 3ffe:501:ffff:ff05:200:ff:fe00:c2c2[any] any
        out none
        spid=7 seq=0 pid=1342
        refcnt=1
# # sendMessagesSync: never got /sbin/setkey -c <<EODspdadd 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8 3ffe:501:ffff:ff05:200:ff:fe00:c2c2       any       -P out none;spddump;EOD
echo $status
0~
[EOT]

*** Target testing phase ***
16:34:36Start Capturing Packets (Link0)
16:34:36 vSend(Link0,ra_to_nut)
send ra_to_nut
16:34:36 Wait 3 second

Subtest No.1: Discard the packet if policy=discard
16:34:39 vSend(Link0,echo_request_from_host1)
send echo_request_from_host1
16:34:39 vRecv(Link0,ns_to_router_linkaddr ns_to_router echo_reply_to_host1) timeout:6 cntLimit:0 seektime:0
vRecv() return status=1

TN received no echo reply from NUT to HOST2.
Ping over 1st SPD entry (policy=discard) is available.
Subtest No.1 PASS

Subtest No.2: Pass the packet without IPsec process if policy=none
16:34:45 vSend(Link0,echo_request_from_host2)
send echo_request_from_host2
16:34:45 vRecv(Link0,ns_to_router_linkaddr ns_to_router echo_reply_to_host2) timeout:6 cntLimit:0 seektime:0
recv echo_reply_to_host2
16:34:45 vRecv(Link0,ns_to_router_linkaddr ns_to_router) timeout:6 cntLimit:0 seektime:0
recv ns_to_router_linkaddr
16:34:50 vSend(Link0,na_from_router_linkaddr)
send na_from_router_linkaddr

NC about Router was PROBE state, but now it's REACHABLE.
16:34:50 vRecv(Link0,ns_to_router_linkaddr) timeout:6 cntLimit:0 seektime:0
vRecv() return status=1
16:34:56 vRecv(Link0,ns_to_router_linkaddr) timeout:6 cntLimit:0 seektime:0
vRecv() return status=1

TN received echo reply from NUT to HOST2.
Ping over 2nd SPD entry (policy=none) is available.
Subtest No.2 PASS

Subtest Results
|1| Discard the packet if policy=discard | PASS |
|2| Pass the packet without IPsec process if policy=none | PASS |
OK
16:35:02End

Packet Reverse Log