NAME

  HTR_E_Out_2SA_SspiDipdst_3descbc - Host Transport Mode ESP Outbound 2 SA selection, Same SPI, Different IPdst, ESP (3DES-CBC)
  

TARGET

  Host

SYNOPSIS

  HTR_E_Out_2SA_SspiDipdst_3descbc.seq [-tooloption ...] -pkt HTR_E_2SA_SspiDip_3descbc.def
    -tooloption : v6eval tool option
  See also HTR_E_common.def and HTR_common.def

INITIALIZATION

For details of Network Topology, see 00README

Set NUT's SAD and SPD as following:

              NET5      NET3
    HOST1_NET5 -- Router -- NUT
         <----transport------ (SA1)
    HOST2_NET5
         <----transport------ (SA2)

Security Association Database (SAD) for SA1

Security Policy Database (SPD) for SA1

Security Association Database (SAD) for SA2

Security Policy Database (SPD) for SA2

TEST PROCEDURE

 Tester                      Target
   |                           |
   |-------------------------->|
   |      ICMP Echo Request    |
   |        From Host1         |
   |                           |
   |<--------------------------|
   |      ICMP Echo Reply      |
   |         To Host1          |
   |        (using SA1)        |
   |                           |
   |                           |
   |-------------------------->|
   |      ICMP Echo Request    |
   |        From Host2         |
   |                           |
   |<--------------------------|
   |      ICMP Echo Reply      |
   |         To Host2          |
   |        (using SA2)        |
   |                           |
   v                           v

1. Send ICMP Echo Request from Host1
2. Receive ICMP Echo Reply using SA1 to Host1
3. Send ICMP Echo Request from Host2
4. Receive ICMP Echo Reply using SA2 to Host2

ICMP Echo Request from Host1

ICMP Echo Reply using SA1 to Host1

ICMP Echo Request from Host2

ICMP Echo Reply using SA2 to Host2

JUDGMENT

  PASS: Both ICMP Echo Reply with ESP (using SA1, SA2) received

SEE ALSO

  perldoc V6evalTool

  IPSEC.html IPsec Test Common Utility