| Subject | 2.6.1 | 26(s20040119) |
|---|---|---|
| Overall | PASS: 32( 66.7%) WARN: 1( 2.1%) FAIL: 15( 31.2%) |
PASS: 38( 79.2%) WARN: 1( 2.1%) FAIL: 9( 18.8%) |
| Set Global Address and Check (Host) | PASS | PASS |
| Outbound AH packet (HMAC-MD5) | PASS | PASS |
| Outbound AH packet (HMAC-SHA1) | FAIL | FAIL |
| Outbound Header Order (Fragment Header vs AH) | SKIP | SKIP |
| Connect two SA bundles with different spi, different IPdst | PASS | PASS |
| Connect two SA bundles with same spi, different IPdst | PASS | PASS |
| Inbound AH packet (HMAC-MD5) | PASS | PASS |
| Inbound AH packet (HMAC-SHA1) | PASS | FAIL |
| Inbound Header Order (Fragment Header vs AH) | SKIP | SKIP |
| Connect two SA bundles with different spi, different IPsrc | FAIL | PASS |
| Connect two SA bundles with different spi, same IPsrc | FAIL | PASS |
| Detect modification of IPv4 header IP dst address with AH | FAIL | PASS |
| Detect modification of IPv4 header IP src address with AH | PASS | PASS |
| Undetect modification of IPv4 header TTL with AH | PASS | PASS |
| Detect modification of payload with AH | PASS | PASS |
| Outbound ESP packet (DES-CBC) | PASS | PASS |
| Outbound ESP packet (3DES-CBC) | FAIL | FAIL |
| Outbound ESP packet (NULL, HMAC-MD5) | PASS | PASS |
| Outbound ESP packet (NULL, HMAC-SHA1) | PASS | PASS |
| Outbound ESP packet (DES-CBC, HMAC-MD5) | FAIL | PASS |
| Outbound ESP packet (DES-CBC, HMAC-SHA1) | PASS | PASS |
| Outbound ESP packet (3DES-CBC, HMAC-MD5) | PASS | FAIL |
| Outbound ESP packet (3DES-CBC, HMAC-SHA1) | PASS | PASS |
| Outbound Padding (NULL, HMAC-MD5) | PASS | PASS |
| Outbound Padding (DES-CBC, HMAC-MD5) | PASS | FAIL |
| Outbound Padding (3DES-CBC, HMAC-MD5) | FAIL | PASS |
| Header Order (Fragment Header vs ESP) | SKIP | SKIP |
| Connect two SA bundles with different spi, different IPdst | PASS | PASS |
| Connect two SA bundles with same spi, different IPdst | PASS | PASS |
| Inbound ESP packet (DES-CBC) | PASS | PASS |
| Inbound ESP packet (3DES-CBC) | FAIL | FAIL |
| Inbound ESP packet (Invalid Encryption Key) | PASS | PASS |
| Inbound ESP packet (NULL, HMAC-MD5) | PASS | FAIL |
| Inbound ESP packet (NULL, HMAC-SHA1) | FAIL | FAIL |
| Inbound ESP packet (DES-CBC, HMAC-MD5) | PASS | PASS |
| Inbound ESP packet (DES-CBC, HMAC-SHA1) | PASS | PASS |
| Inbound ESP packet (3DES-CBC, HMAC-MD5) | FAIL | PASS |
| Inbound ESP packet (3DES-CBC, HMAC-SHA1) | FAIL | PASS |
| Inbound ESP packet (Invalid Authentication Key) | FAIL | PASS |
| Inbound Padding (NULL, HMAC-MD5) | FAIL | PASS |
| Inbound Padding (DES-CBC, HMAC-MD5) | PASS | PASS |
| Inbound Padding (3DES-CBC, HMAC-MD5) | FAIL | PASS |
| Padding Length is 255 (max) | PASS | PASS |
| Invalid Padding | WARN | WARN |
| Header Order (Fragment Header vs ESP) | SKIP | SKIP |
| Connect two SA bundles with different spi, different IPsrc | PASS | PASS |
| Connect two SA bundles with different spi, same IPsrc | PASS | PASS |
| Outbound AH-ESP combination | PASS | PASS |
| Inbound AH-ESP combination | PASS | PASS |
| Select SPD entry (policy=discard,none) | PASS | PASS |
| Connect two SA bundles with same spi, same IPsrc, different protocol | FAIL | FAIL |
| Select SPD entry (policy=discard,none) | PASS | PASS |
| Set Global Address and Check (Router) | Router Only | Router Only |
| Outbound AH packet (HMAC-MD5) | Router Only | Router Only |
| Outbound AH packet (HMAC-SHA1) | Router Only | Router Only |
| Connect two SA bundles with different spi, different IPdst | Router Only | Router Only |
| Connect two SA bundles with same spi, different IPdst | Router Only | Router Only |
| Inbound AH Tunnel packet (with SPD entry) | Router Only | Router Only |
| Inbound AH packet (HMAC-MD5) | Router Only | Router Only |
| Inbound AH packet (HMAC-SHA1) | Router Only | Router Only |
| Connect two SA bundles with different spi, different IPsrc | Router Only | Router Only |
| Connect two SA bundles with different spi, same IPsrc | Router Only | Router Only |
| Detect modification of IPv4 header IP dst address with AH | Router Only | Router Only |
| Detect modification of IPv4 header IP src address with AH | Router Only | Router Only |
| Undetect modification of IPv4 header TTL with AH | Router Only | Router Only |
| Detect modification of inner IPv4 header TTL of AH tunnel | Router Only | Router Only |
| Detect modification of inner payload of AH tunnel | Router Only | Router Only |
| Outbound ESP packet (DES-CBC) | Router Only | Router Only |
| Outbound ESP packet (3DES-CBC) | Router Only | Router Only |
| Outbound ESP packet (NULL, HMAC-MD5) | Router Only | Router Only |
| Outbound ESP packet (NULL, HMAC-SHA1) | Router Only | Router Only |
| Outbound ESP packet (DES-CBC, HMAC-MD5) | Router Only | Router Only |
| Outbound ESP packet (DES-CBC, HMAC-SHA1) | Router Only | Router Only |
| Outbound ESP packet (3DES-CBC, HMAC-MD5) | Router Only | Router Only |
| Outbound ESP packet (3DES-CBC, HMAC-SHA1) | Router Only | Router Only |
| Outbound Padding (NULL) | Router Only | Router Only |
| Outbound Padding (DES-CBC) | Router Only | Router Only |
| Outbound Padding (3DES-CBC) | Router Only | Router Only |
| Connect two SA bundles with different spi, different IPdst | Router Only | Router Only |
| Connect two SA bundles with same spi, different IPdst | Router Only | Router Only |
| Inbound ESP Tunnel packet (with SPD entry) | Router Only | Router Only |
| Inbound ESP packet (DES-CBC) | Router Only | Router Only |
| Inbound ESP packet (3DES-CBC) | Router Only | Router Only |
| Inbound ESP packet (Invalid Encryption Key) | Router Only | Router Only |
| Inbound ESP packet (NULL, HMAC-MD5) | Router Only | Router Only |
| Inbound ESP packet (NULL, HMAC-SHA1) | Router Only | Router Only |
| Inbound ESP packet (DES-CBC, HMAC-MD5) | Router Only | Router Only |
| Inbound ESP packet (DES-CBC, HMAC-SHA1) | Router Only | Router Only |
| Inbound ESP packet (3DES-CBC, HMAC-MD5) | Router Only | Router Only |
| Inbound ESP packet (3DES-CBC, HMAC-SHA1) | Router Only | Router Only |
| Inbound ESP packet (Invalid Authentication Key) | Router Only | Router Only |
| Inbound Padding (NULL) | Router Only | Router Only |
| Inbound Padding (DES-CBC) | Router Only | Router Only |
| Inbound Padding (3DES-CBC) | Router Only | Router Only |
| Padding Length is 255 (max) | Router Only | Router Only |
| Invalid Padding | Router Only | Router Only |
| Connect two SA bundles with different spi, different IPsrc | Router Only | Router Only |
| Connect two SA bundles with different spi, same IPsrc | Router Only | Router Only |
| Connect two SA bundles with same spi, same IPsrc, different protocol | Router Only | Router Only |