Test Information

Title	Key Exchange Payload Format + DH2 **
CommandLine	./SGW/SG_I_A_RFC2409_5_13_2.seq -pkt ./SGW/SG_I_A_RFC2409_5_13_2.def test_type=BASIC -log 20.html -ti Key Exchange Payload Format + DH2 **
TestVersion	undefined
ToolVersion	REL_3_0_8
Start	2006/03/16 13:45:48
Tn	/usr/local/v6eval//etc//tn.def
Nu	/usr/local/v6eval//etc//nut.def
Pkt	./SGW/SG_I_A_RFC2409_5_13_2.def
System	freebsd-i386
TargetName	FreeBSD 5.4-RELEASE
HostName	target1.tahi.org
Type	router

Test Sequence Execution Log

13:45:48	Start
	* Target IKE initialization phase * Target: Reset IKE SA entries: saddump
13:45:49	vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD dump; flush; EOD ? dump; ? flush; ? EOD The result of line 1: No SAD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD echo $status 0 target1# kill -TERM `head -1 /var/run/racoon.pid` head: /var/run/racoon.pid: No such file or directory target1# target1# echo $status 1 target1# /bin/rm -f /var/run/racoon.pid target1# target1# echo $status 0 ~ [EOT]
	Target: Clear SPD entries: spddump
13:45:56	vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD spddump; spdflush? spddump; ; EOD ? spdflush; EOD ? EOD The result of line 1: No SPD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD echo $status 0 ~ [EOT]
	Target: Set SPD entries: src=3ffe:501:ffff:100::/64 dst=3ffe:501:ffff:104::/64 tsrc=3ffe:501:ffff:102::1 tdst=3ffe:501:ffff:103::11 upperspec=any direction=out protocol=PROTO_IPSEC_ESP mode=Tunnel
13:46:02	vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 src=3ffe:501:ffff:100::/64 dst=3ffe:501:ffff:104::/64 tsrc=3ffe:501:ffff:102::1 tdst=3ffe:501:ffff:103::11 upperspec=any direction=out protocol=PROTO_IPSEC_ESP mode=Tunnel '' Connected target1# target1# /usr/sbin/setkey -c <<EOD spdadd 3ffe:501:ffff:100::/64 3ffe:501:ffff:104::/64 any -P out ipsec esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require ; spddump; EOD ? spdadd 3ffe:501:ffff:100::/64 3ffe:501:ffff:104::/64 any -P out ipsec esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require ; spddump; EOD ? any ? -P out ipsec ? esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require ? ; ? spddump; ? EOD 3ffe:501:ffff:100::/64[any] 3ffe:501:ffff:104::/64[any] any out ipsec esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require created: Mar 16 13:53:12 2006 lastused: Mar 16 13:53:12 2006 lifetime: 0(s) validtime: 0(s) spid=16559 seq=0 pid=697 refcnt=1 target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspdadd 3ffe:501:ffff:100::/64 3ffe:501:ffff:104::/64 any -P out ipsec esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require;spddump;EOD echo $status 0 ~ [EOT]
	Target: Set IKE SA entries: dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=aggressive doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x30 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:104::/64 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA
13:46:08	vRemote(ikeSetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeSetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=aggressive doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x30 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:104::/64 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA '' Connected target1# target1# ~[set] echocheck target1# target1# ~[put] freebsd-i386.psk.txt /tmp/psk.txt Dtarget1# target1# target1# /bin/chmod 600 /tmp/psk.txt target1# echo $status 0 target1# ~[set] echocheck target1# target1# ~[put] freebsd-i386.ike.conf /tmp/ike.conf Dtarget1# target1# target1# test -f /var/run/racoon.pid &&kill -TERM `head -1 /var/run/racoon.pid` target1# target1# echo $status 1 target1# /usr/local/sbin/racoon -f /tmp/ike.conf target1# target1# echo $status 0 ~ [EOT]
13:46:22	vRemote(ikeEnable.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeEnable.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 ''
	* Target initialization phase *
13:46:23	Start Capturing Packets (Link0)
13:46:23	Start Capturing Packets (Link1)
	* Target testing phase * * Phase-1 1st message recv *
13:46:23	vSend(Link1,echo_request_send_net0host1_net4host2) Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)
13:46:23	vRecv(Link0,isakmp_phase1_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:10 cntLimit:0 seektime:0 Recv 1st message from HOST1(NUT)
	**OK payload_check payload_check_KE OK payload_check Key Exchange Payload(DH2) Format is correct * Target test finish ***
13:46:23	Stop Capturing Packets (Link0)
13:46:23	Stop Capturing Packets (Link1)
	Target: Reset IKE SA entries: saddump
13:46:23	vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD dump; flush; EOD ? dump; ? flush; ? EOD The result of line 1: No SAD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD echo $status 0 target1# kill -TERM `head -1 /var/run/racoon.pid` target1# target1# echo $status 0 target1# /bin/rm -f /var/run/racoon.pid target1# target1# echo $status 0 ~ [EOT]
	Target: Clear SPD entries: spddump
13:46:29	vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD spddump; spdflus? spddump; h; EOD ? spdflush; EOD ? EOD 3ffe:501:ffff:100::/64[any] 3ffe:501:ffff:104::/64[any] any out ipsec esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require created: Mar 16 13:53:12 2006 lastused: Mar 16 13:53:31 2006 lifetime: 0(s) validtime: 0(s) spid=16559 seq=0 pid=707 refcnt=1 target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD echo $status 0 ~ [EOT]
	OK
13:46:35	End

Packet Reverse Log

Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT) at 13:46:23

Frame_Ether                     (length:70)
| Hdr_Ether                       (length:14)
| | DestinationAddress               = 00:00:02:00:26:ba
| | SourceAddress                    = 00:00:00:00:00:10
| | Type                             = 34525
| Packet_IPv6                     (length:56)
| | Hdr_IPv6                        (length:40)
| | | Version                          = 6
| | | TrafficClass                     = 0
| | | FlowLabel                        = 0
| | | PayloadLength                    = 16
| | | NextHeader                       = 58
| | | HopLimit                         = 64
| | | SourceAddress                    = 3ffe:501:ffff:100::13
| | | DestinationAddress               = 3ffe:501:ffff:104::11
| | ICMPv6_EchoRequest              (length:16)
| | | Type                             = 128
| | | Code                             = 0
| | | Checksum                         = 36089 calc(36089)
| | | Identifier                       = 0
| | | SequenceNumber                   = 0
| | | Payload                         (length:8)
| | | | data                             = 4563686f 44617461

Recv at 13:46:23

Frame_Ether                     (length:318)
| Hdr_Ether                       (length:14)
| | DestinationAddress               = 00:00:00:00:00:11
| | SourceAddress                    = 00:00:02:00:27:cd
| | Type                             = 34525
| Packet_IPv6                     (length:304)
| | Hdr_IPv6                        (length:40)
| | | Version                          = 6
| | | TrafficClass                     = 0
| | | FlowLabel                        = 0
| | | PayloadLength                    = 264
| | | NextHeader                       = 17
| | | HopLimit                         = 64
| | | SourceAddress                    = 3ffe:501:ffff:102::1
| | | DestinationAddress               = 3ffe:501:ffff:103::11
| | Upp_UDP                         (length:264)
| | | Hdr_UDP                         (length:8)
| | | | SourcePort                       = 500
| | | | DestinationPort                  = 500
| | | | Length                           = 264
| | | | Checksum                         = 50407 calc(50407)
| | | Udp_ISAKMP                      (length:256)
| | | | Hdr_ISAKMP                      (length:28)
| | | | | InitiatorCookie                  = 415454d47c0ed818
| | | | | ResponderCookie                  = 0000000000000000
| | | | | NextPayload                      = 1
| | | | | MjVer                            = 1
| | | | | MnVer                            = 0
| | | | | ExchangeType                     = 4
| | | | | Reserved                         = 0
| | | | | AFlag                            = 0
| | | | | CFlag                            = 0
| | | | | EFlag                            = 0
| | | | | MessageID                        = 0
| | | | | Length                           = 256
| | | | Pld_ISAKMP_SA_IPsec_IDonly      (length:52)
| | | | | NextPayload                      = 4
| | | | | Reserved1                        = 0
| | | | | PayloadLength                    = 52
| | | | | DOI                              = 1
| | | | | Situation                        = 1
| | | | | Pld_ISAKMP_P_ISAKMP             (length:40)
| | | | | | NextPayload                      = 0
| | | | | | Reserved1                        = 0
| | | | | | PayloadLength                    = 40
| | | | | | ProposalNumber                   = 1
| | | | | | ProtocolID                       = 1
| | | | | | SPIsize                          = 0
| | | | | | NumOfTransforms                  = 1
| | | | | | SPI                              = 
| | | | | | Pld_ISAKMP_T                    (length:32)
| | | | | | | NextPayload                      = 0
| | | | | | | Reserved1                        = 0
| | | | | | | PayloadLength                    = 32
| | | | | | | TransformNumber                  = 1
| | | | | | | TransformID                      = 1
| | | | | | | Reserved2                        = 0
| | | | | | | Attr_ISAKMP_TV                  (length:4)
| | | | | | | | AF                               = 1
| | | | | | | | Type                             = 11
| | | | | | | | Value                            = 1
| | | | | | | Attr_ISAKMP_TV                  (length:4)
| | | | | | | | AF                               = 1
| | | | | | | | Type                             = 12
| | | | | | | | Value                            = 28800
| | | | | | | Attr_ISAKMP_TV                  (length:4)
| | | | | | | | AF                               = 1
| | | | | | | | Type                             = 1
| | | | | | | | Value                            = 5
| | | | | | | Attr_ISAKMP_TV                  (length:4)
| | | | | | | | AF                               = 1
| | | | | | | | Type                             = 3
| | | | | | | | Value                            = 1
| | | | | | | Attr_ISAKMP_TV                  (length:4)
| | | | | | | | AF                               = 1
| | | | | | | | Type                             = 2
| | | | | | | | Value                            = 2
| | | | | | | Attr_ISAKMP_TV                  (length:4)
| | | | | | | | AF                               = 1
| | | | | | | | Type                             = 4
| | | | | | | | Value                            = 2
| | | | Pld_ISAKMP_KE                   (length:132)
| | | | | NextPayload                      = 10
| | | | | Reserved1                        = 0
| | | | | PayloadLength                    = 132
| | | | | KeyExchangeData                  = 
| | | | |   7bd565a5 0a64d3c0  9b68135b f6068ab4  81a07f90 7f20e57b  6af4fbd9 5f5379f1
| | | | |   48a0ab12 9e0dcc59  fa46fac8 b912eee5  52abac00 c3306b1e  ec34eb6c c7fd4678
| | | | |   cd67ecd7 5b71400a  9479ae09 07cd9297  a484b77d 9cdf8390  87aaf205 4a2b4d5b
| | | | |   363c61b8 f668bad8  5ed6e5df c040845a  e33c91ce 9474754f  21f35268 4df814e8
| | | | Pld_ISAKMP_NONCE                (length:20)
| | | | | NextPayload                      = 5
| | | | | Reserved1                        = 0
| | | | | PayloadLength                    = 20
| | | | | NonceData                        = 8643b86a 4dc3ab5d  c9c29438 58d769fa
| | | | Pld_ISAKMP_ID_IPV6_ADDR         (length:24)
| | | | | NextPayload                      = 0
| | | | | Reserved1                        = 0
| | | | | PayloadLength                    = 24
| | | | | IDtype                           = 5
| | | | | ProtocolID                       = 17
| | | | | Port                             = 500
| | | | | ID                               = 3ffe:501:ffff:102::1
===isakmp_phase1_recv=================================