NAME

  RTU_E_Out_Padding_descbc - Router Tunnel Mode ESP Outbound Padding DES-CBC


TARGET

  Router


SYNOPSIS

  RTU_E_Out_Padding_descbc.seq [-tooloption ...] -pkt RTU_E_Padding_descbc.def
    -tooloption : v6eval tool option
  See also RTU_E_common.def and RTU_common.def


INITIALIZATION

For details of Network Topology, see 00README

Set NUT's SAD and SPD as following:

                           (Link0) (Link1)
            NET4   NET2      NET0   NET1
  HOST1_NET4 -- SG1 -- Router -- NUT -- HOST1_NET1
                 <====tunnel=======

Security Association Database (SAD)

source address NUT_NET0
destination address SG1_NET2
SPI 0x1000
mode tunnel
protocol ESP
ESP algorithm DES-CBC
ESP algorithm key TAHITEST

Security Policy Database (SPD)

tunnel source address NUT_NET0
tunnel destination address SG1_NET2
source address NET1
destination address NET4
upper spec any
direction out
protocol ESP
mode tunnel


TEST PROCEDURE

 Tester                      Target                      Tester
              (Link0)                     (Link1)
   |                           |                           |
   |                           |<--------------------------|
   |                           |      ICMP Echo Reply      |
   |                           |                           |
   |<--------------------------|                           |
   |      ICMP Echo Reply      |                           |
   |        (with ESP)         |                           |
   |                           |                           |
   |                           |                           |
   v                           v                           v
  1. Send ICMP Echo Reply to Link1
  2. Receive ICMP Echo Reply with ESP from Link0

ICMP Echo Reply to Link1

IP Header Source Address HOST1_NET1
Destination Address HOST1_NET4
ICMP Type 129 (Echo Reply)
Data Length 7

ICMP Echo Reply with ESP from Link0

IP Header Source Address NUT_NET0
Destination Address SG1_NET2
ESP SPI 0x1000
Algorithm DES-CBC
Key TAHITEST
Padding Sequential
Padding Length 7
IP Header Source Address HOST1_NET1
Destination Address HOST1_NET4
ICMP Type 129 (Echo Reply)
Data Length 7


JUDGMENT

  PASS: ICMP Echo Reply with ESP received


SEE ALSO

  perldoc V6evalTool
  IPSEC.html IPsec Test Common Utility