IPv6 Conformance Test For IKE(SGW:Aggressive mode)

Tool Version :REL_3_0_8
Test Program Version :V6PC_IKE_1_0_3
Start:2006/03/16 13:35:59
End :2006/03/16 16:50:05
No.Title ResultLogScriptPacketDump
(bin)

Initialize




1InitializationPASSXXXLink0

Initiator Test





1 Phase I





1.1 aggressive mode





1.1.1 pre-shared key





1.1.1.1 Sending the first message





1.1.1.1.1 Position of payload




2Position of payload ***PASSXXXLink0 Link1

1.1.1.1.2 ISAKMP Header




3ISAKMP Header Format ***PASSXXXLink0 Link1

1.1.1.1.3 Security Association Payload




4SA Payload Format ***PASSXXXLink0 Link1

1.1.1.1.4 Proposal Payload




5Proposal Payload Format ***PASSXXXLink0 Link1

1.1.1.1.5 Transform Payload





1.1.1.1.5.1 Transform Payload Format check




6Transform Payload Format ***PASSXXXLink0 Link1
7Transform Payload Format(Multiple Transform Payload) ***Not yet supportedXXXLink0 Link1

1.1.1.1.5.2 Transform Payload SA Attributes check




8Attributes include MD5 ***Not yet supportedXXXLink0 Link1
9Attributes include SHA ***PASSXXXLink0 Link1
10Attributes include DES **Not yet supportedXXXLink0 Link1
11Attributes include 3DES **PASSXXXLink0 Link1
12Attributes include AESNot yet supportedXXXLink0 Link1
13Attributes include PSK ***PASSXXXLink0 Link1
14Attributes include RSA sign **Not yet supportedXXXLink0 Link1
15Attributes include DH1 ***Not yet supportedXXXLink0 Link1
16Attributes include DH2 **PASSXXXLink0 Link1
17Attributes include DH5Not yet supportedXXXLink0 Link1
18Attributes include DH14Not yet supportedXXXLink0 Link1

1.1.1.1.6 Key Exchange Payload




19Key Exchange Payload Format + DH1 ***Not yet supportedXXXLink0 Link1
20Key Exchange Payload Format + DH2 **PASSXXXLink0 Link1
21Key Exchange Payload Format + DH5Not yet supportedXXXLink0 Link1
22Key Exchange Payload Format + DH14Not yet supportedXXXLink0 Link1

1.1.1.1.7 Nonce Payload




23Nonce Payload Format ***PASSXXXLink0 Link1

1.1.1.1.8 Identification Payload




24Identification Payload Format ***PASSXXXLink0 Link1

1.1.1.2 Sending the third message





1.1.1.2.1 HASH Payload




25HASH Payload Format ***PASSXXXLink0 Link1

1.1.1.3 Implementation of Aggressive Mode with pre-shared key




26Implementation of Aggressive Mode with pre-shared key***PASSXXXLink0 Link1

1.1.2 RSA signature





1.1.2.1 Sending the fifth message





1.1.2.1.1 Certificate Request Payload




27Certificate Request Payload Format ***Not yet supportedXXXLink0 Link1

1.1.2.2 Sending the third message





1.1.2.2.1 Signature Payload




28Signature Payload Format ***Not yet supportedXXXLink0 Link1

1.1.2.2.2 Certificate Payload




29Certificate Payload Format ***Not yet supportedXXXLink0 Link1

1.1.2.3 Implementation of Aggressive Mode with RSA signatures




30Implementation of Aggressive Mode with RSA signatures **Not yet supportedXXXLink0 Link1

1.2 Payload Processing





1.2.1 General Message Processing




31Processing invalid ISAKMP Payload Length *PASSXXXLink0 Link1

1.2.2 ISKAMP Header Processing




32Processing invalid Responder Cookie field *PASSXXXLink0 Link1
33Processing invalid Next Payload field *PASSXXXLink0 Link1
34Processing invalid Major Version field(major 15, minor 0) *FAILXXXLink0 Link1
35Processing invalid Minor Version field(major 1, minor 15) *FAILXXXLink0 Link1
36Processing invalid Exchange Type field *PASSXXXLink0 Link1
37Processing invalid Flags field *PASSXXXLink0 Link1
38Processing invalid Message ID field *PASSXXXLink0 Link1

1.2.3 Generic Payload Header Processing




39Processing invalid Next Payload field *PASSXXXLink0 Link1
40Processing invalid RESERVED field *FAILXXXLink0 Link1

1.2.4 Security Association Payload Processing




41Processing invalid Next Payload field *PASSXXXLink0 Link1
42Processing invalid DOI field *PASSXXXLink0 Link1
43Processing invalid Situation field *PASSXXXLink0 Link1
44Processing invalid proposal(Encryption Algorithm) *PASSXXXLink0 Link1
45Processing invalid proposal(Hash Algorithm) *PASSXXXLink0 Link1
46Processing invalid proposal(Authentication method) *PASSXXXLink0 Link1
47Processing invalid proposal(Diffie-Hellman Group) *PASSXXXLink0 Link1
48Processing invalid proposal(Life Type) *PASSXXXLink0 Link1

1.2.5 Proposal Payload Processing




49Processing invalid Protocol-ID field *PASSXXXLink0 Link1
50Processing invalid SPI field *FAILXXXLink0 Link1
51Processing invalid proposal *FAILXXXLink0 Link1

1.2.6 Transform Payload Processing




52Processing invalid Transform-ID field *PASSXXXLink0 Link1
53Processing invalid Transform Payload *PASSXXXLink0 Link1
54Multiple Transform Payloads check(modify proposal) *PASSXXXLink0 Link1

1.2.7 Key Exchange Payload Processing




55Processing invalid Key Exchange Data field *FAILXXXLink0 Link1

1.2.8 Identification Payload Processing




56Processing invalid ID type field *PASSXXXLink0 Link1
57Not include Identification Payload *PASSXXXLink0 Link1
58Invalid Identification Payload recieve *PASSXXXLink0 Link1

1.2.9 Hash Payload Processing




59Processing invalid Hash Payload *PASSXXXLink0 Link1
60Processing invalid Hash Data field *PASSXXXLink0 Link1

1.2.10 Signature Payload Processing




61Processing invalid Signature Payload *Not yet supportedXXXLink0 Link1
62Processing invalid Signature Data field *Not yet supportedXXXLink0 Link1

1.2.11 Certificate Request Payload Processing




63Processing invalid Certificate Encoding field *Not yet supportedXXXLink0 Link1
64Processing invalid Certificate Authority field *Not yet supportedXXXLink0 Link1
65Processing invalid Certificate Type with Certificate Authority *Not yet supportedXXXLink0 Link1

1.2.12 Certificate Payload Processing




66Processing invalid Certificate Encoding field *Not yet supportedXXXLink0 Link1
67Processing invalid Certificate Data field *Not yet supportedXXXLink0 Link1

2 Phase II





2.1 quick mode





2.1.1 Sending the first message





2.1.1.1 Encryption of payload




68Encryption of ISAKMP payload ***PASSXXXLink0 Link1

2.1.1.2 Position of payload




69Position of payload ***PASSXXXLink0 Link1

2.1.1.3 ISAKMP Header




70ISAKMP Header Format ***PASSXXXLink0 Link1

2.1.1.4 HASH(1) Payload




71HASH Payload Format ***PASSXXXLink0 Link1

2.1.1.5 Security Association Payload




72SA Payload Format ***PASSXXXLink0 Link1

2.1.1.6 Proposal Payload




73Proposal Payload Format ***PASSXXXLink0 Link1

2.1.1.7 Transform Payload





2.1.1.7.1 Transform Payload Format check




74Transform Payload Format ***PASSXXXLink0 Link1
75Transform Payload Format(Multiple Transform) ***Not yet supportedXXXLink0 Link1

2.1.1.7.2 Transform Payload SA Attributes check




76ESP_DES,HMAC-MD5 ***Not yet supportedXXXLink0 Link1
77ESP_3DES,HMAC-MD5 **Not yet supportedXXXLink0 Link1
78ESP_3DES,HMAC-SHAPASSXXXLink0 Link1
79ESP_3DES,AES-XCBC-MACNot yet supportedXXXLink0 Link1
80ESP_AES,HMAC-SHANot yet supportedXXXLink0 Link1
81ESP_NULL,HMAC-MD5 ***Not yet supportedXXXLink0 Link1
82ESP_NULL,HMAC-SHA ***Not yet supportedXXXLink0 Link1
83ESP_NULL,AES-XCBC-MACNot yet supportedXXXLink0 Link1
84ESP without Authentication Algorithm(ESP_DES) ***Not yet supportedXXXLink0 Link1
85ESP without Authentication Algorithm(ESP_3DES) ***Not yet supportedXXXLink0 Link1
86ESP without Authentication Algorithm(ESP_AES)Not yet supportedXXXLink0 Link1

2.1.1.8 Transform Payload w/ PFS





2.1.1.8.1 PFS with DH




87enable PFS with DH1 ***Not yet supportedXXXLink0 Link1
88enable PFS with DH2 **Not yet supportedXXXLink0 Link1
89enable PFS with DH5Not yet supportedXXXLink0 Link1
90enable PFS with DH14Not yet supportedXXXLink0 Link1

2.1.1.8.2 consistent of multiple proposal




91consistent of proposal(Diffie-Hellman Group(Transform Payload)) ***Not yet supportedXXXLink0 Link1

2.1.1.9 Key Exchange Payload w/ PFS




92Key Exchange Payload Format +DH1 ***Not yet supportedXXXLink0 Link1
93Key Exchange Payload Format +DH2 **Not yet supportedXXXLink0 Link1
94Key Exchange Payload Format +DH5Not yet supportedXXXLink0 Link1
95Key Exchange Payload Format +DH14Not yet supportedXXXLink0 Link1

2.1.1.10 Nonce Payload




96Nonce Payload Format ***PASSXXXLink0 Link1

2.1.1.11 Key Exchange Payload w/o PFS




97Key Exchange Payload w/o PFSPASSXXXLink0 Link1

2.1.1.12 Identification Payload




98Identification Payload Format(Tunnel mode vs SGW) ***PASSXXXLink0 Link1
99Identification Payload Format(Tunnel mode vs HOST) ***PASSXXXLink0 Link1

2.1.2 Sending the third message





2.1.2.1 HASH(3) Payload




100HASH Payload Format ***PASSXXXLink0 Link1

2.1.3 Receiving the fourth message(Informational Exchange)




101set Commit Bit(CONNECTED Notify Message) ***Not yet supportedXXXLink0 Link1

2.1.4 Implementation of Quick Mode




102ESP_3DES(Tunnel mode vs SGW)Not yet supportedXXXLink0 Link1
103ESP_3DES and HMAC-SHA(Tunnel mode vs SGW) ***PASSXXXLink0 Link1
104ESP_3DES(Tunnel mode vs HOST)Not yet supportedXXXLink0 Link1
105ESP_3DES and HMAC-SHA(Tunnel mode vs HOST) ***PASSXXXLink0 Link1
106ESP_3DES and HMAC-SHA with PFS ***Not yet supportedXXXLink0 Link1

2.1.5 Modification of IPsec SA




107Re-keying of IPsec SAPASSXXXLink0 Link1
108Using new SA for outbound traffic **FAILXXXLink0 Link1
109Accept both old and new SA for incoming traffic **FAILXXXLink0 Link1

2.1.6 Anti-replay




110Increasing Sequence NumberPASSXXXLink0 Link1
111Sequence Number VerificationNot yet supportedXXXLink0 Link1

2.2 Payload Processing





2.2.1 General Message Processing




112Processing invalid ISAKMP Payload Length *PASSXXXLink0 Link1

2.2.2 ISKAMP Header Processing




113Processing invalid Responder Cookie field *PASSXXXLink0 Link1
114Processing invalid Next Payload field *PASSXXXLink0 Link1
115Processing invalid Major Version field(major 15, minor 0)*FAILXXXLink0 Link1
116Processing invalid Minor Version field(major 1, minor 15) *FAILXXXLink0 Link1
117Processing invalid Exchange Type field *PASSXXXLink0 Link1
118Processing invalid Flags field *PASSXXXLink0 Link1
119Processing invalid Message ID field *PASSXXXLink0 Link1

2.2.3 Generic Payload Header Processing




120Processing invalid Next Payload field *PASSXXXLink0 Link1
121Processing invalid RESERVED field *FAILXXXLink0 Link1

2.2.4 Hash Payload Processing




122Processing invalid Hash Payload *PASSXXXLink0 Link1
123Processing invalid Hash Data field *PASSXXXLink0 Link1

2.2.5 Security Association Payload Processing




124Processing invalid Next Payload field *PASSXXXLink0 Link1
125Processing invalid DOI field *PASSXXXLink0 Link1
126Processing invalid Situation field *PASSXXXLink0 Link1
127Processing invalid proposal(ESP Authentication) *PASSXXXLink0 Link1
128Processing invalid proposal(Diffie-Hellman Group) *PASSXXXLink0 Link1
129Processing invalid proposal(Life Type) *PASSXXXLink0 Link1
130Processing invalid proposal(Encapsulation Mode) *PASSXXXLink0 Link1

2.2.6 Proposal Payload Processing




131Processing invalid Protocol-ID field *PASSXXXLink0 Link1
132Processing invalid SPI field *FAILXXXLink0 Link1
133Processing invalid proposal *FAILXXXLink0 Link1

2.2.7 Transform Payload Processing




134Processing invalid Transform-ID field *PASSXXXLink0 Link1
135Processing invalid Transform Payload *PASSXXXLink0 Link1
136Multiple Transform Payloads check(modify proposal) *PASSXXXLink0 Link1

2.2.8 Key Exchange Payload Processing




137Processing invalid Key Exchange Data field *FAILXXXLink0 Link1

2.2.9 Identification Payload Processing




138Processing invalid ID type field *PASSXXXLink0 Link1
139Invalid Identification Payload *PASSXXXLink0 Link1

Responder Test





1 Phase I





1.1 Aggressive mode





1.1.1 pre-shared key





1.1.1.1 Sending the second message





1.1.1.1.1 Position of payload




140Position of payload ***PASSXXXLink0 Link1

1.1.1.1.2 ISAKMP Header




141ISAKMP Header Format ***PASSXXXLink0 Link1

1.1.1.1.3 Security Association Payload




142SA Payload Format ***PASSXXXLink0 Link1

1.1.1.1.4 Proposal Payload




143Proposal Payload Format ***PASSXXXLink0 Link1

1.1.1.1.5 Transform Payload





1.1.1.1.5.1 Transform Payload Format check




144Transform Payload Format ***PASSXXXLink0 Link1

1.1.1.1.5.2 Transform Payload SA Attributes check




145DES,MD5,PSK,DH1 ***Not yet supportedXXXLink0 Link1
146DES,SHA,PSK,DH2 **Not yet supportedXXXLink0 Link1
147AES,SHA,PSK,DH2Not yet supportedXXXLink0 Link1
1483DES,MD5,PSK,DH2 **Not yet supportedXXXLink0 Link1
1493DES,SHA,PSK,DH2PASSXXXLink0 Link1
1503DES,SHA,RSA sign,DH2 **Not yet supportedXXXLink0 Link1
1513DES,SHA,PSK,DH1 **Not yet supportedXXXLink0 Link1
1523DES,SHA,PSK,DH5Not yet supportedXXXLink0 Link1
1533DES,SHA,PSK,DH14Not yet supportedXXXLink0 Link1

1.1.1.1.5.3 Select proposal




154Multiple Transform Payloads(Select proposal) ***PASSXXXLink0 Link1

1.1.1.1.6 Key Exchange Payload




155Key Exchange Payload Format + DH1 ***Not yet supportedXXXLink0 Link1
156Key Exchange Payload Format + DH2 **PASSXXXLink0 Link1
157Key Exchange Payload Format + DH5Not yet supportedXXXLink0 Link1
158Key Exchange Payload Format + DH14Not yet supportedXXXLink0 Link1

1.1.1.1.7 Nonce Payload




159Nonce Payload Format ***PASSXXXLink0 Link1

1.1.1.1.8 Identification Payload




160Identification Payload Format ***PASSXXXLink0 Link1

1.1.1.1.9 HASH Payload




161HASH Payload Format ***PASSXXXLink0 Link1

1.1.1.2 Implementation of Aggressive Mode with pre-shared key




162Implementation of Aggressive Mode with pre-shared key ***PASSXXXLink0 Link1

1.1.1.3 Modification of ISAKMP SA




163cookie field **PASSXXXLink0 Link1

1.1.2 RSA signature





1.1.2.1 Sending the second message





1.1.2.1.1 Signature Payload




164Signature Payload Format ***Not yet supportedXXXLink0 Link1

1.1.2.1.2 Certificate Request Payload




165Certificate Request Payload Format ***Not yet supportedXXXLink0 Link1

1.1.2.1.3 Certificate Payload




166Certificate Payload Format ***Not yet supportedXXXLink0 Link1

1.1.2.2 Implementation of Aggressive Mode with RSA signatures




167Implementation of Aggressive Mode with RSA signatures **Not yet supportedXXXLink0 Link1

1.2 Payload Processing





1.2.1 General Message Processing




168Processing invalid ISAKMP Payload Length *PASSXXXLink0 Link1

1.2.2 ISKAMP Header Processing




169Processing invalid Initiator Cookie field *PASSXXXLink0 Link1
170Processing invalid Next Payload field *PASSXXXLink0 Link1
171Processing invalid Major Version field(major 15, minor 0) *PASSXXXLink0 Link1
172Processing invalid Minor Version field(major 1, minor 15) *PASSXXXLink0 Link1
173Processing invalid Exchange Type field *PASSXXXLink0 Link1
174Processing invalid Flags field *PASSXXXLink0 Link1
175Processing invalid Message ID field *PASSXXXLink0 Link1

1.2.3 Generic Payload Header Processing




176Processing invalid Next Payload field *PASSXXXLink0 Link1
177Processing invalid RESERVED field *FAILXXXLink0 Link1

1.2.4 Security Association Payload Processing




178Processing invalid Next Payload field *PASSXXXLink0 Link1
179Processing invalid DOI field *PASSXXXLink0 Link1
180Processing invalid Situation field *PASSXXXLink0 Link1
181Processing invalid proposal(Encryption Algorithm) *PASSXXXLink0 Link1
182Processing invalid proposal(Hash Algorithm) *PASSXXXLink0 Link1
183Processing invalid proposal(Authentication method) *PASSXXXLink0 Link1
184Processing invalid proposal(Diffie-Hellman Group) *PASSXXXLink0 Link1
185Processing invalid proposal(Life Type) *PASSXXXLink0 Link1
186IPSEC Situation Definition(SIT_SECRECY) *PASSXXXLink0 Link1
187IPSEC Situation Definition(SIT_INTEGRITY) *PASSXXXLink0 Link1

1.2.5 Proposal Payload Processing




188Processing invalid Protocol-ID field *PASSXXXLink0 Link1
189Processing invalid SPI field *PASSXXXLink0 Link1
190Processing invalid proposal *FAILXXXLink0 Link1

1.2.6 Transform Payload Processing




191Processing invalid Transform-ID field *PASSXXXLink0 Link1
192Processing invalid Transform Payload *PASSXXXLink0 Link1
193Multiple Transform Payloads check(reject proposal) *PASSXXXLink0 Link1

1.2.7 Key Exchange Payload Processing




194Processing invalid Key Exchange Data field *FAILXXXLink0 Link1

1.2.8 Identification Payload Processing




195Processing invalid ID type field *FAILXXXLink0 Link1
196Not include Identification Payload *PASSXXXLink0 Link1
197invalid Identification Payload recieve *FAILXXXLink0 Link1

1.2.9 Hash Payload Processing




198Processing invalid Hash Payload *PASSXXXLink0 Link1
199Processing invalid Hash Data field *PASSXXXLink0 Link1

1.2.10 Signature Payload Processing




200Processing invalid Signature Payload *Not yet supportedXXXLink0 Link1
201Processing invalid Signature Data field *Not yet supportedXXXLink0 Link1

1.2.11 Certificate Request Payload Processing




202Processing invalid Certificate Encoding field *Not yet supportedXXXLink0 Link1
203Processing invalid Certificate Authority field *Not yet supportedXXXLink0 Link1
204Processing invalid Certificate Type with Certificate Authority *Not yet supportedXXXLink0 Link1

1.2.12 Certificate Payload Processing




205Processing invalid Certificate Encoding field *Not yet supportedXXXLink0 Link1
206Processing invalid Certificate Data field *Not yet supportedXXXLink0 Link1

2 Phase II





2.1 quick mode





2.1.1 Sendign the second message





2.1.1.1 Encryption of payload




207Encryption of ISAKMP payload ***PASSXXXLink0 Link1

2.1.1.2 Position of payload




208Position of payload ***PASSXXXLink0 Link1

2.1.1.3 ISAKMP Header




209ISAKMP Header Format ***PASSXXXLink0 Link1

2.1.1.4 HASH(2) Payload




210HASH Payload Format ***PASSXXXLink0 Link1

2.1.1.5 Security Association Payload




211SA Payload Format ***PASSXXXLink0 Link1

2.1.1.6 Proposal Payload




212Proposal Payload Format ***PASSXXXLink0 Link1

2.1.1.7 Transform Payload





2.1.1.7.1 Transform Payload Format check




213Transform Payload Format ***PASSXXXLink0 Link1

2.1.1.7.2 Transform Payload SA Attributes check




214ESP_DES,HMAC-MD5 ***Not yet supportedXXXLink0 Link1
215ESP_3DES,HMAC-MD5 **Not yet supportedXXXLink0 Link1
216ESP_3DES,HMAC-SHAPASSXXXLink0 Link1
217ESP_3DES,AES-XCBC-MACNot yet supportedXXXLink0 Link1
218ESP_AES,HMAC-SHANot yet supportedXXXLink0 Link1
219ESP_NULL,HMAC-MD5 ***Not yet supportedXXXLink0 Link1
220ESP_NULL,HMAC-SHA ***Not yet supportedXXXLink0 Link1
221ESP_NULL,AES-XCBC-MACNot yet supportedXXXLink0 Link1
222ESP without Authentication Algorithm(ESP_DES) ***Not yet supportedXXXLink0 Link1
223ESP without Authentication Algorithm(ESP_3DES) ***Not yet supportedXXXLink0 Link1
224ESP without Authentication Algorithm(ESP_AES)Not yet supportedXXXLink0 Link1

2.1.1.7.3 Select proposal




225Multiple Proposal and Transform Payloads (select proposal) ***PASSXXXLink0 Link1

2.1.1.8 Transform Payload w/ PFS




226enable PFS with DH1 ***Not yet supportedXXXLink0 Link1
227enable PFS with DH2 ***Not yet supportedXXXLink0 Link1
228enable PFS with DH5Not yet supportedXXXLink0
229enable PFS with DH14Not yet supportedXXXLink0

2.1.1.9 Key Exchange Payload w/ PFS




230Key Exchange Payload Format + DH1 ***Not yet supportedXXXLink0 Link1
231Key Exchange Payload Format +DH2 **Not yet supportedXXXLink0 Link1
232Key Exchange Payload Format +DH5Not yet supportedXXXLink0 Link1
233Key Exchange Payload Format +DH14Not yet supportedXXXLink0 Link1

2.1.1.10 Nonce Payload




234Nonce Payload Format ***PASSXXXLink0 Link1

2.1.1.11 Key Exchange Payload w/o PFS




235Key Exchange Payload w/o PFSPASSXXXLink0

2.1.1.12 Identification Payload




236Identification Payload Format(Tunnel mode vs SGW) ***PASSXXXLink0 Link1
237Identification Payload Format(Tunnel mode vs HOST) ***PASSXXXLink0 Link1

2.1.2 Receiving the fourth message(Informational Exchange)




238set Commit Bit(CONNECTED Notify Message) ***Not yet supportedXXXLink0 Link1

2.1.3 Implementation of Quick Mode




239ESP_3DES(Tunnel mode vs SGW)Not yet supportedXXXLink0 Link1
240ESP_3DES and HMAC-SHA(Tunnel mode vs SGW) ***PASSXXXLink0 Link1
241ESP_3DES(Tunnel mode vs HOST)Not yet supportedXXXLink0 Link1
242ESP_3DES and HMAC-SHA(Tunnel mode vs HOST) ***PASSXXXLink0 Link1
243ESP_3DES and HMAC-SHA with PFS ***Not yet supportedXXXLink0 Link1

2.1.4 Modification of IPsec SA




244Using new SA for outbound traffic **PASSXXXLink0 Link1
245Accept both old and new SA for incoming traffic **PASSXXXLink0 Link1

2