NAME

  C_RFC3315_21.5.1_ReconfigAuthProto.seq - Checking Reconfigure Authentication Protocol for Client

TARGET

  Client

SYNOPSIS

   C_RFC3315_21.5.1_ReconfigAuthProto.seq [-tooloption...] -pkt   C_RFC3315_21.5.1_ReconfigAuthProto.def -tooloption : v6eval tool option


  See Also  DHCPv6.def  

INITIALIZATION

• Network Topology

          NUT(Client)
          |           
          |                        
Link0   --+--------+------------------------ 3ffe:501:ffff:101::/64
                   |
                   |          
                   TN(Server) 
    

• Verification Points



   The client will receive a Reconfigure Key from the server in the
   initial Reply message from the server.  The client records the
   Reconfigure Key for use in authenticating subsequent Reconfigure
   messages.
   

   To authenticate a Reconfigure message, the client computes an
   HMAC-MD5 over the DHCP Reconfigure message, using the Reconfigure Key
   received from the server.  If this computed HMAC-MD5 matches the
   value in the Authentication option, the client accepts the
   Reconfigure message. 
    

• Configurations



    Enable Reconfigure Key Authenticaion Protocol Service
    

    

    

    
Device Name
    
Device Type
    
Interface
    
Assigned Prefix
    
Link Local Addr
    
MAC Addr
    
    

    
Client
    
NUT
    
Link0
    
3ffe:501:ffff:101::/64
    
NUT's Linklocal address
    
NUT's MAC address
    
    

    
Server
    
TN
    
Link0
    
3ffe:501:ffff:101::/64
    
fe80::200:ff:fe00:a1a1
    
00:00:00:00:a1:a1
    
    
    

TEST PROCEDURE

       NUT     TN
        |       | 
        |       | Initialize NUT (as a DHCPv6 client)
        |       | 
        | ----> | Solicit  
        | <---- | Advertise
        | ----> | Request with Authentication Accept Option (*3)
        | <---- | Reply with Authentication Option
        |       | 
        |       | Host address prefix is changed from 3ffe:501:ffff:100:: to 3ffe:501:ffff:200:: 
        |       | Reload server configuration 
        |       | 
        | <---- | Reconfigure with comptuted Authentication(w/Authentication Option)
        |       | w/Option Request Option(IA_NA) w/IA_NA w/Reconfigure Message Option(msg-type=5) 
        |       | 
        | ----> | Renew w/Option Request Option(IA_NA) w/IA_NA (*6)
        |       | 
        | <---- | Reply w/IA_NA w/IA_Address 
        |       | 
        | <---- | Echo Request(send to NUT's new address )
        | ----> | Echo Reply (*9)

JUDGEMENT

 (*3) PASS: TN receive Request message with Authenticaion Accept option.
 (*6) PASS: TN receive Renew message with Option Request Option(IA_NA) and IA_NA Option.
 (*9) PASS: TN receive Echo Reply message.

TERMINATION

  N/A

REFERENCE

   see also RFC3315
   19.4.2. Creation and Transmission of Renew Messages
   21.5. Reconfigure Key Authentication Protocol
   21.5.3. Client considerations for Reconfigure Key protocol

SEE ALSO

  perldoc  V6evalTool