NAME

  HTR_E_Out_Padding_3descbc - Host Transport Mode ESP Outbound 3DES-CBC padding without authentication

TARGET

  Host

SYNOPSIS

  HTR_E_Out_Padding_3descbc.seq [-tooloption ...] -pkt HTR_E_Padding_3descbc.def
    -tooloption : v6eval tool option
  See also HTR_E_common.def and HTR_common.def

INITIALIZATION

For details of Network Topology, see 00README

Set NUT's SAD and SPD as following: 

              NET5      NET3
    HOST1_NET5 -- Router -- NUT
         <----transport------

Security Association Database (SAD)

source address NUT_NET3
destination address HOST1_NET5
SPI 0x1000
mode transport
protocol ESP
ESP algorithm 3DES-CBC
ESP algorithm key TAHITEST89ABCDEFGHIJKLMN
Authentication Algorithm HMAC-MD5
Authentication Key TAHITEST89ABCDEF

Security Policy Database (SPD)

source address NUT_NET3
destination address HOST1_NET5
upper spec any
direction out
protocol ESP
mode transport

TEST PROCEDURE

 Tester                      Target
   |                           |
   |-------------------------->|
   |      ICMP Echo Request    |
   |                           |
   |<--------------------------|
   |      ICMP Echo Reply      |
   |        (with ESP)         |
   |                           |
   v                           v
  1. Send ICMP Echo Request
  2. Receive ICMP Echo Reply with ESP

ICMP Echo Request

IP Header Source Address HOST1_NET5
Destination Address NUT_NET3
ICMP Type 128 (Echo Request)
Data Length 7

ICMP Echo Reply with ESP

IP Header Source Address NUT_NET3
Destination Address HOST1_NET5
ESP SPI 0x1000
Algorithm 3DES-CBC
Key TAHITEST89ABCDEFGHIJKLMN
Authentication Algorithm HMAC-MD5
Authentication Key TAHITEST89ABCDEF
Padding Sequential
Padding Length 7
ICMP Type 129 (Echo Reply)
Data Length 7

JUDGMENT

  PASS: ICMP Echo Reply with ESP received

SEE ALSO

  perldoc V6evalTool

  IPSEC.html IPsec Test Common Utility