NAME

  RTU_A_In_2SA_DspiSipsrc - Router Tunnel Mode AH Inbound 2 SA selection, Different SPI, Same IPsrc

TARGET

  Router

SYNOPSIS

  RTU_E_In_2SA_DspiSipsrc.seq [-tooloption ...] -pkt RTU_E_2SA_DspiSip.def
    -tooloption : v6eval tool option
  See also RTU_E_common.def and RTU_common.def

INITIALIZATION

For details of Network Topology, see 00README

Set NUT's SAD and SPD as following:

                           (Link0)  (Link1)
            NET4   NET2      NET0   NET1
  HOST1_NET4 -- SG1 -- Router -- NUT -- HOST1_NET1
                 =====tunnel======> (SA1)
                 =====tunnel======> (SA2)

Security Association Database (SAD) for SA1

source address	SG1_NET2
destination address	NUT_NET0
SPI	0x1000
mode	tunnel
protocol	AH
AH algorithm	HMAC-MD5
AH algorithm key	TAHITEST89ABCDEF

Security Association Database (SAD) for SA2

source address	SG1_NET2
destination address	NUT_NET0
SPI	0x2000
mode	tunnel
protocol	AH
AH algorithm	HMAC-MD5
AH algorithm key	foo0foo1foo2foo3

Security Policy Database (SPD)

No SPD entry

TEST PROCEDURE

 Tester                      Target                      Tester
              (Link0)                     (Link1)
   |                           |                           |
   |-------------------------->|                           |
   |      ICMP Echo Request    |                           |
   |       From Host1Net4      |                           |
   |        (using SA1)        |                           |
   |                           |                           |
   |                           |-------------------------->|
   |                           |      ICMP Echo Request    |
   |                           |       From Host1Net4      |
   |                           |                           |
   |                           |                           |
   |-------------------------->|                           |
   |      ICMP Echo Request    |                           |
   |       From Host1Net4      |                           |
   |        (using SA2)        |                           |
   |                           |                           |
   |                           |-------------------------->|
   |                           |      ICMP Echo Request    |
   |                           |       From Host1Net4      |
   |                           |                           |
   |                           |                           |
   v                           v                           v

Send ICMP Echo Request FromHost1Net4 using SA1 to Link0
Receive ICMP Echo Request FromHost1Net4 from Link1
Send ICMP Echo Request FromHost1Net4 using SA2 to Link0
Receive ICMP Echo Request FromHost1Net4 from Link1

ICMP Echo Request FromHost1Net4 using SA1 to Link0

IP Header	Source Address	SG1_NET2
	Destination Address	NUT_NET0
ESP	SPI	0x1000
	Algorithm	HMAC-MD5
	Key	TAHITEST89ABCDEF
IP Header	Source Address	HOST1_NET4
	Destination Address	HOST1_NET1
ICMP	Type	128 (Echo Request)

ICMP Echo Request FromHost1Net4 from Link1

IP Header	Source Address	HOST1_NET4
	Destination Address	HOST1_NET1
ICMP	Type	128 (Echo Request)

ICMP Echo Request FromHost1Net6 using SA2 to Link0

IP Header	Source Address	SG1_NET2
	Destination Address	NUT_NET0
AH	SPI	0x2000
	Algorithm	HMAC-MD5
	Key	foo0foo1foo2foo3
IP Header	Source Address	HOST1_NET4
	Destination Address	HOST1_NET1
ICMP	Type	128 (Echo Request)