NAME

  S_RFC3315_21.4.5.2_DeclineReplyInvalid.seq - Receiving invalid renew message and discard

TARGET

  Server

SYNOPSIS

  S_RFC3315_21.4.5.2_DeclineReplyInvalid.seq [-tooloption ...]
  -pkt S_RFC3315_21.4.5.2_DeclineReplyInvalid.def
  -tooloption: v6eval tool option. See also DHCPv6.def
 

INITIALIZATION

• Network Topology

          TN(Client1)  
             |
Link0 -------+-----------+--------------- 3ffe:501:ffff:100::/64
                         |
                       NUT(Server1)
  

• Verification Points

  The server uses the key identified in the message and validates the
  message as specified in section 21.4.2.  If the message fails to pass
  the validation test or the server does not know the key identified by
  the 'key ID' field, the server MUST discard the message and MAY
  choose to log the validation failure.
  

• Configuration



Enable Delayed Authenticaion Protocol Service Authenticaion parameter
• DHCP realm: DHCPv6.TEST.EXAMPLE.COM
• Client DUID: 00:01:00:01:00:04:93:e0:00:00:00:00:a2:a2
• Key id: 1
• Shared secret key: TAHITEST_VALID12



Device Name	Device Type	I/F	Assigned Prefix	Link Local Addr	MAC Addr
Server1	NUT	Link0	3ffe:501:ffff:100::/64	NUT's Linklocal address	NUT's MAC address
Client1	TN	Link0	3ffe:501:ffff:100::/64	fe80::200:ff:fe00:a2a2	00:00:00:00:a2:a2

TEST PROCEDURE

       NUT     TN
        |       | 
        |       | initialize NUT (as a DHCPv6 Server)
        |       | 
        | <---- | Solicit w/ Authtication Option
        | ----> | Advertise w/ Authtication Option
        | <---- | Request w/ Authtication Option
        | ----> | Reply(*1) w/ Authtication Option
        |       | 
        | <---- | Decline (w/ Authentication Option key id = 2)
        | --->X | No Reply (w/ Authentication Optin that includes Authentication information) (*1)
        |       | 

JUDGEMENT

  (*1) PASS: If NUT received Decline message, the message faild the validation test,
             the NUT MUST discard the message.

TERMINATION

REFERENCE

  see also RFC3315
  21.4.5 Server Considerations for Delayed Authentication protocol
  21.4.5.2. Receiving Request, Confirm, Renew, Rebind or Release Messages
         and Sending Reply Messages
  22.11 Authentication Option

SEE ALSO