No. | Title |
Result | Log | Script | Packet | Dump (bin) |
Dump (txt) |
| Host Transport Mode |
|
|
|
|
|
|
| Initialize for Host |
|
|
|
|
|
|
1 | Set Global Address and Check (Host) | PASS | X | X | X | Link0 | Link0 |
| Host Transport AH Outbound |
|
|
|
|
|
|
| Host Transport AH Outbound with authentication |
|
|
|
|
|
|
2 | Outbound AH packet (HMAC-MD5) | PASS | X | X | X | Link0 | Link0 |
3 | Outbound AH packet (HMAC-SHA1) | PASS | X | X | X | Link0 | Link0 |
| Host Transport AH Outbound Header Order |
|
|
|
|
|
|
4 | Outbound Header Order (Fragment Header vs AH) | PASS | X | X | X | Link0 | Link0 |
| Host Transport AH Outbound Connect SA bundles |
|
|
|
|
|
|
5 | Connect two SA bundles with different spi, different IPdst | PASS | X | X | X | Link0 | Link0 |
6 | Connect two SA bundles with same spi, different IPdst | PASS | X | X | X | Link0 | Link0 |
| Host Transport AH Inbound |
|
|
|
|
|
|
| Host Transport AH Inbound with authentication |
|
|
|
|
|
|
7 | Inbound AH packet (HMAC-MD5) | PASS | X | X | X | Link0 | Link0 |
8 | Inbound AH packet (HMAC-SHA1) | PASS | X | X | X | Link0 | Link0 |
| Host Transport AH Inbound Header Order |
|
|
|
|
|
|
9 | Inbound Header Order (Fragment Header vs AH) | PASS | X | X | X | Link0 | Link0 |
| Host Transport AH Inbound Connect SA bundles |
|
|
|
|
|
|
10 | Connect two SA bundles with different spi, different IPsrc | PASS | X | X | X | Link0 | Link0 |
11 | Connect two SA bundles with different spi, same IPsrc | PASS | X | X | X | Link0 | Link0 |
| Host Transport AH Inbound, Detect modification of packet with AH |
|
|
|
|
|
|
12 | Detect modification of IPv6 header IP dst address with AH | PASS | X | X | X | Link0 | Link0 |
13 | Detect modification of IPv6 header IP src address with AH | PASS | X | X | X | Link0 | Link0 |
14 | Undetect modification of IPv6 header hoplimit with AH | PASS | X | X | X | Link0 | Link0 |
15 | Detect modification of IPv6 header IP dst address with Routing header and AH | PASS | X | X | X | Link0 | Link0 |
16 | Detect modification of Routing header "last router address" with AH | PASS | X | X | X | Link0 | Link0 |
17 | Detect modification of DstOpt header option type before AH | PASS | X | X | X | Link0 | Link0 |
18 | Detect modification of DstOpt header option len before AH | PASS | X | X | X | Link0 | Link0 |
19 | Detect modification of DstOpt header option data before AH | PASS | X | X | X | Link0 | Link0 |
20 | Detect modification of DstOpt header option data after AH | PASS | X | X | X | Link0 | Link0 |
21 | Detect modification of HBHOpt header option type with AH | PASS | X | X | X | Link0 | Link0 |
22 | Detect modification of HBHOpt header option len with AH | PASS | X | X | X | Link0 | Link0 |
23 | Detect modification of HBHOpt header option data with AH | PASS | X | X | X | Link0 | Link0 |
24 | Detect modification of payload with AH | PASS | X | X | X | Link0 | Link0 |
| Host Transport ESP Outbound |
|
|
|
|
|
|
| ESP Outbound without authentication |
|
|
|
|
|
|
25 | Outbound ESP packet (DES-CBC) | PASS | X | X | X | Link0 | Link0 |
26 | Outbound ESP packet (3DES-CBC) | PASS | X | X | X | Link0 | Link0 |
| ESP Outbound with authentication |
|
|
|
|
|
|
27 | Outbound ESP packet (NULL, HMAC-MD5) | PASS | X | X | X | Link0 | Link0 |
28 | Outbound ESP packet (NULL, HMAC-SHA1) | PASS | X | X | X | Link0 | Link0 |
29 | Outbound ESP packet (DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 | Link0 |
30 | Outbound ESP packet (DES-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 | Link0 |
31 | Outbound ESP packet (3DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 | Link0 |
32 | Outbound ESP packet (3DES-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 | Link0 |
| ESP Outbound Padding |
|
|
|
|
|
|
33 | Outbound Padding (NULL, HMAC-MD5) | PASS | X | X | X | Link0 | Link0 |
34 | Outbound Padding (DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 | Link0 |
35 | Outbound Padding (3DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 | Link0 |
| ESP Outbound Header Order |
|
|
|
|
|
|
36 | Header Order (Fragment Header vs ESP) | PASS | X | X | X | Link0 | Link0 |
| ESP Outbound Connect SA bundles |
|
|
|
|
|
|
37 | Connect two SA bundles with different spi, different IPdst | PASS | X | X | X | Link0 | Link0 |
38 | Connect two SA bundles with same spi, different IPdst | PASS | X | X | X | Link0 | Link0 |
| Host Transport ESP Inbound |
|
|
|
|
|
|
| ESP Inbound without authentication |
|
|
|
|
|
|
39 | Inbound ESP packet (DES-CBC) | PASS | X | X | X | Link0 | Link0 |
40 | Inbound ESP packet (3DES-CBC) | PASS | X | X | X | Link0 | Link0 |
41 | Inbound ESP packet (Invalid Encryption Key) | PASS | X | X | X | Link0 | Link0 |
| ESP Inbound with authentication |
|
|
|
|
|
|
42 | Inbound ESP packet (NULL, HMAC-MD5) | PASS | X | X | X | Link0 | Link0 |
43 | Inbound ESP packet (NULL, HMAC-SHA1) | PASS | X | X | X | Link0 | Link0 |
44 | Inbound ESP packet (DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 | Link0 |
45 | Inbound ESP packet (DES-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 | Link0 |
46 | Inbound ESP packet (3DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 | Link0 |
47 | Inbound ESP packet (3DES-CBC, HMAC-SHA1) | PASS | X | X | X | Link0 | Link0 |
48 | Inbound ESP packet (Invalid Authentication Key) | PASS | X | X | X | Link0 | Link0 |
| ESP Inbound Padding |
|
|
|
|
|
|
49 | Inbound Padding (NULL, HMAC-MD5) | PASS | X | X | X | Link0 | Link0 |
50 | Inbound Padding (DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 | Link0 |
51 | Inbound Padding (3DES-CBC, HMAC-MD5) | PASS | X | X | X | Link0 | Link0 |
52 | Padding Length is 255 (max) | PASS | X | X | X | Link0 | Link0 |
53 | Invalid Padding | WARN, Why | X | X | X | Link0 | Link0 |
| ESP Inbound Header Order |
|
|
|
|
|
|
54 | Header Order (Fragment Header vs ESP) | PASS | X | X | X | Link0 | Link0 |
| ESP Inbound Connect SA bundles |
|
|
|
|
|
|
55 | Connect two SA bundles with different spi, different IPsrc | PASS | X | X | X | Link0 | Link0 |
56 | Connect two SA bundles with different spi, same IPsrc | PASS | X | X | X | Link0 | Link0 |
| Host Transport AH-ESP Outbound |
|
|
|
|
|
|
57 | Outbound AH-ESP combination | PASS | X | X | X | Link0 | Link0 |
| Host Transport AH-ESP Inbound |
|
|
|
|
|
|
58 | Inbound AH-ESP combination | PASS | X | X | X | Link0 | Link0 |
| Host Transport Common Outbound |
|
|
|
|
|
|
59 | Select SPD entry (policy=discard,none) | PASS | X | X | X | Link0 | Link0 |
| Host Transport Common Inbound |
|
|
|
|
|
|
| Inbound Connect SA bundles |
|
|
|
|
|
|
60 | Connect two SA bundles with same spi, same IPsrc, different protocol | PASS | X | X | X | Link0 | Link0 |
61 | Select SPD entry (policy=discard,none) | PASS | X | X | X | Link0 | Link0 |
| Router Tunnel Mode |
|
|
|
|
|
|
| Initialize for Router |
|
|
|
|
|
|
62 | Set Global Address and Check (Router) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| Router Tunnel AH Outbound |
|
|
|
|
|
|
| Router Tunnel AH Outbound with authentication |
|
|
|
|
|
|
63 | Outbound AH packet (HMAC-MD5) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
64 | Outbound AH packet (HMAC-SHA1) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| Router Tunnel AH Outbound Connect SA bundles |
|
|
|
|
|
|
65 | Connect two SA bundles with different spi, different IPdst | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
66 | Connect two SA bundles with same spi, different IPdst | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| Router Tunnel AH Inbound |
|
|
|
|
|
|
| Router Tunnel AH Inbound with authentication |
|
|
|
|
|
|
67 | Inbound AH Tunnel packet (with SPD entry) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
68 | Inbound AH packet (HMAC-MD5) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
69 | Inbound AH packet (HMAC-SHA1) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| Router Tunnel AH Inbound Header Order |
|
|
|
|
|
|
70 | Header Order (Destination Options Header vs AH) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| Router Tunnel AH Inbound Connect SA bundles |
|
|
|
|
|
|
71 | Connect two SA bundles with different spi, different IPsrc | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
72 | Connect two SA bundles with different spi, same IPsrc | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| Router Tunnel AH Inbound, Detect modification of packet with AH |
|
|
|
|
|
|
73 | Detect modification of IPv6 header IP dst address with AH | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
74 | Detect modification of IPv6 header IP src address with AH | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
75 | Undetect modification of IPv6 header hoplimit with AH | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
76 | Detect modification of IPv6 header IP dst address with Routing header and AH | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
77 | Detect modification of Routing header "last router address" with AH | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
78 | Detect modification of DstOpt header option type before AH | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
79 | Detect modification of DstOpt header option len before AH | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
80 | Detect modification of DstOpt header option data before AH | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
81 | Detect modification of HBHOpt header option type with AH | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
82 | Detect modification of HBHOpt header option len with AH | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
83 | Detect modification of HBHOpt header option data with AH | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
84 | Detect modification of inner IPv6 header hoplimit of AH tunnel | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
85 | Detect modification of inner payload of AH tunnel | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| Router Tunnel ESP Outbound |
|
|
|
|
|
|
| ESP Outbound without authentication |
|
|
|
|
|
|
86 | Outbound ESP packet (DES-CBC) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
87 | Outbound ESP packet (3DES-CBC) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| ESP Outbound with authentication |
|
|
|
|
|
|
88 | Outbound ESP packet (NULL, HMAC-MD5) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
89 | Outbound ESP packet (NULL, HMAC-SHA1) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
90 | Outbound ESP packet (DES-CBC, HMAC-MD5) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
91 | Outbound ESP packet (DES-CBC, HMAC-SHA1) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
92 | Outbound ESP packet (3DES-CBC, HMAC-MD5) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
93 | Outbound ESP packet (3DES-CBC, HMAC-SHA1) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| ESP Outbound Padding |
|
|
|
|
|
|
94 | Outbound Padding (NULL, HMAC-MD5) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
95 | Outbound Padding (DES-CBC, HMAC-MD5) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
96 | Outbound Padding (3DES-CBC, HMAC-MD5) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| ESP Outbound Connect SA bundles |
|
|
|
|
|
|
97 | Connect two SA bundles with different spi, different IPdst | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
98 | Connect two SA bundles with same spi, different IPdst | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| Router Tunnel ESP Inbound |
|
|
|
|
|
|
99 | Inbound ESP Tunnel packet (with SPD entry) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| ESP Inbound without authentication |
|
|
|
|
|
|
100 | Inbound ESP packet (DES-CBC) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
101 | Inbound ESP packet (3DES-CBC) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
102 | Inbound ESP packet (Invalid Encryption Key) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| ESP Inbound with authentication |
|
|
|
|
|
|
103 | Inbound ESP packet (NULL, HMAC-MD5) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
104 | Inbound ESP packet (NULL, HMAC-SHA1) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
105 | Inbound ESP packet (DES-CBC, HMAC-MD5) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
106 | Inbound ESP packet (DES-CBC, HMAC-SHA1) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
107 | Inbound ESP packet (3DES-CBC, HMAC-MD5) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
108 | Inbound ESP packet (3DES-CBC, HMAC-SHA1) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
109 | Inbound ESP packet (Invalid Authentication Key) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| Router Tunnel ESP Inbound Header Order |
|
|
|
|
|
|
110 | Header Order (Destination Options Header vs ESP) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| ESP Inbound Padding |
|
|
|
|
|
|
111 | Inbound Padding (NULL, HMAC-MD5) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
112 | Inbound Padding (DES-CBC, HMAC-MD5) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
113 | Inbound Padding (3DES-CBC, HMAC-MD5) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
114 | Padding Length is 255 (max) | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
115 | Invalid Padding | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| ESP Inbound Connect SA bundles |
|
|
|
|
|
|
116 | Connect two SA bundles with different spi, different IPsrc | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
117 | Connect two SA bundles with different spi, same IPsrc | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |
| Router Tunnel Common Inbound |
|
|
|
|
|
|
| Inbound Connect SA bundles |
|
|
|
|
|
|
118 | Connect two SA bundles with same spi, same IPsrc, different protocol | Router Only | X | X | X | Link0 Link1 | Link0 Link1 |