RTU_E_Out_descbc_hmacsha1 - Router Tunnel Mode ESP Outbound DES-CBC with HMAC-SHA1 authentication
Router
RTU_E_Out_descbc_hmacsha1.seq [-tooloption ...] -pkt RTU_E_descbc_hmacsha1.def -tooloption : v6eval tool option See also RTU_E_common.def and RTU_common.def
For details of Network Topology, see 00README
Set NUT's SAD and SPD as following:
(Link0) (Link1) NET4 NET2 NET0 NET1 HOST1_NET4 -- SG1 -- Router -- NUT -- HOST1_NET1 <====tunnel=======
Security Association Database (SAD)
source address | NUT_NET0 |
destination address | SG1_NET2 |
SPI | 0x1000 |
mode | tunnel |
protocol | ESP |
ESP algorithm | DES-CBC |
ESP algorithm key | 01234567 |
ESP authentication | HMAC-SHA1 |
ESP authentication key | 0123456789ABCDEF0123 |
Security Policy Database (SPD)
tunnel source address | NUT_NET0 |
tunnel destination address | SG1_NET2 |
source address | NET1 |
destination address | NET4 |
upper spec | any |
direction | out |
protocol | ESP |
mode | tunnel |
Tester Target Tester (Link0) (Link1) | | | | |<--------------------------| | | ICMP Echo Reply | | | | |<--------------------------| | | ICMP Echo Reply | | | (with ESP) | | | | | | | | v v v
ICMP Echo Reply to Link1
IP Header | Source Address | HOST1_NET1 |
Destination Address | HOST1_NET4 | |
ICMP | Type | 129 (Echo Reply) |
ICMP Echo Reply with ESP from Link0
IP Header | Source Address | NUT_NET0 |
Destination Address | SG1_NET2 | |
ESP | SPI | 0x1000 |
Algorithm | DES-CBC | |
Key | 01234567 | |
Authentication Algorithm | HAMC-SHA1 | |
Authentication Key | 0123456789ABCDEF0123 | |
IP Header | Source Address | HOST1_NET1 |
Destination Address | HOST1_NET4 | |
ICMP | Type | 129 (Echo Reply) |
PASS: ICMP Echo Reply with ESP received
perldoc V6evalTool
IPSEC.html IPsec Test Common Utility