Test Information

TitleUsing new SA for outbound traffic **
CommandLine./SGW/SG_I_RFC2408_5_3_2_1.seq -pkt ./SGW/SG_I_RFC2408_5_3_2_1.def test_phase=2 test_type=BASIC -log 107.html -ti Using new SA for outbound traffic **
TestVersionundefined
ToolVersionREL_3_0_8
Start2006/03/13 14:48:20
Tn/usr/local/v6eval//etc//tn.def
Nu/usr/local/v6eval//etc//nut.def
Pkt./SGW/SG_I_RFC2408_5_3_2_1.def
Systemfreebsd-i386
TargetNameFreeBSD 5.4-RELEASE
HostNametarget1.tahi.org
Typerouter

Test Sequence Execution Log

14:48:20Start

*** Target IKE initialization phase ***
Target: Reset IKE SA entries: saddump
14:48:21 vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump ''
Connected

target1# 
target1# /usr/sbin/setkey -c <<EOD
dump;
flush;
EOD
? dump;
? flush;

? EOD
The result of line 1: No SAD entries.
target1# 
target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD
echo $status
0
target1# kill -TERM `head -1 /var/run/racoon.pid`
head: /var/run/racoon.pid: No such file or directory

target1# 
target1# echo $status
1
target1# /bin/rm -f /var/run/racoon.pid

target1# 
target1# echo $status
0
~
[EOT]

Target: Clear SPD entries: spddump
14:48:28 vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump ''
Connected

target1# 
target1# /usr/sbin/setkey -c <<EOD
spddump;
spdflus? spddump;
h;
EOD

? spdflush;
EOD

? EOD
The result of line 1: No SPD entries.
target1# 
target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD
echo $status
0
~
[EOT]

Target: Set SPD entries: src=3ffe:501:ffff:100::/64 dst=3ffe:501:ffff:104::/64 tsrc=3ffe:501:ffff:102::1 tdst=3ffe:501:ffff:103::11 upperspec=any direction=out protocol=PROTO_IPSEC_ESP mode=Tunnel
14:48:34 vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 src=3ffe:501:ffff:100::/64 dst=3ffe:501:ffff:104::/64 tsrc=3ffe:501:ffff:102::1 tdst=3ffe:501:ffff:103::11 upperspec=any direction=out protocol=PROTO_IPSEC_ESP mode=Tunnel ''
Connected

target1# 
target1# /usr/sbin/setkey -c <<EOD
spdadd 3ffe:501:ffff:100::/64 3ffe:501:ffff:104::/64
       any
       -P out ipsec
       esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
;
spddump;
EOD

? spdadd 3ffe:501:ffff:100::/64 3ffe:501:ffff:104::/64
       any
       -P out ipsec
       esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
;
spddump;
EOD

?        any
?        -P out ipsec
?        esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
? ;
? spddump;
? EOD
3ffe:501:ffff:100::/64[any] 3ffe:501:ffff:104::/64[any] any
        out ipsec
        esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
        created: Mar 13 14:55:12 2006  lastused: Mar 13 14:55:12 2006
        lifetime: 0(s) validtime: 0(s)
        spid=17513 seq=0 pid=1582
        refcnt=1
target1# 
target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspdadd 3ffe:501:ffff:100::/64 3ffe:501:ffff:104::/64       any       -P out ipsec       esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require;spddump;EOD
echo $status
0
target1#~
[EOT]

Target: Set IKE SA entries: dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:104::/64 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=60 ph2_p1_t1_lt_unit=seconds ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA
14:48:40 vRemote(ikeSetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeSetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:104::/64 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=60 ph2_p1_t1_lt_unit=seconds ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA ''
Connected

target1# 
target1# ~[set] echocheck

target1# 
target1# ~[put] freebsd-i386.psk.txt /tmp/psk.txt
Dtarget1# 
target1# 
target1# /bin/chmod 600 /tmp/psk.txt
target1# echo $status
0
target1# ~[set] echocheck

target1# 
target1# ~[put] freebsd-i386.ike.conf /tmp/ike.conf
Dtarget1# 
target1# 
target1# test -f /var/run/racoon.pid &&kill -TERM `head -1 /var/run/racoon.pid`

target1# 
target1# echo $status
1
target1# /usr/local/sbin/racoon -f /tmp/ike.conf

target1# 
target1# echo $status
0
~
[EOT]
14:48:55 vRemote(ikeEnable.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeEnable.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 ''


*** Target initialization phase ***
14:48:55Start Capturing Packets (Link0)
14:48:55Start Capturing Packets (Link1)

*** Echo Request message send ***
14:48:55Clear Captured Packets (Link0)
14:48:55Clear Captured Packets (Link1)
14:48:55 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

*** Target pre-test seaquence ***
14:48:56Clear Captured Packets (Link0)

*** Phase-1 1st message recv ***
14:48:56 vRecv(Link0,isakmp_phase1_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:10 cntLimit:0 seektime:0
Receive Neighbor Solicitation from SGW1(NUT)
14:48:56 vSend(Link0,router_na)
Send Neighbor Advertisement(TN)
14:48:57 vRecv(Link0,isakmp_phase1_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:10 cntLimit:0 seektime:0
Recv 1st message from HOST1(NUT)

OK payload_check
*** Phase-1 2nd message send ***
14:48:57Clear Captured Packets (Link0)
14:48:57 vSend(Link0,isakmp_phase1_send_2nd)
Send 2nd message from HOST2(TN)

*** Phase-1 3rd message recv ***
14:48:57 vRecv(Link0,isakmp_phase1_recv_3rd router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:0 seektime:0
Recv 3rd message from HOST1(NUT)

OK payload_check
*** Phase-1 4th message send ***
14:48:58Clear Captured Packets (Link0)
14:48:58 vSend(Link0,isakmp_phase1_send_4th)
Send 4th message from HOST2(TN)

*** Phase-1 5th message recv ***
14:48:59 vRecv(Link0,isakmp_phase1_recv_5th router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:0 seektime:0
Recv 5th message from HOST1(NUT)

OK payload_check
*** Phase-1 6th message send ***
14:48:59Clear Captured Packets (Link0)
14:48:59 vSend(Link0,isakmp_phase1_send_6th)
Send 6th message from HOST2(TN)

*** Target testing phase start ***
*** Phase-2 1st message recv ***
14:48:59 vRecv(Link0,isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:0 seektime:0
recv unexpect packet at 14:48:59
Recv Phase-2 1st message (HDR*, HASH(1), SA, Ni, *, *) from HOST1(NUT)

OK payload_check
*** Phase-2 2nd message send ***
14:49:00Clear Captured Packets (Link0)
14:49:00 vSend(Link0,isakmp_phase2_send_2nd)
Send Phase-2 2nd message (HDR*, HASH(2), SA, Nr) from HOST2(TN)

*** Phase-2 3rd message recv ***
14:49:00 vRecv(Link0,isakmp_phase2_recv_3rd router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:0 seektime:0
Recv Phase-2 3rd message HDR*, HASH(3) from HOST1(NUT)

OK payload_check
*** IPsec SA is esatblished ***
14:49:01Clear Captured Packets (Link0)
14:49:01Clear Captured Packets (Link1)
14:49:01 vRecv(Link0,echo_request_send_net0host1_net4host2 router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:3 cntLimit:0 seektime:0
vRecv() return status=1

NG:Receive no packets
*** Echo Request message send ***
14:49:04 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)
14:49:04 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Received Encapsulated Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

*** Encrypted Echo Request message recv 1 ***
*** Re-key testing phase start ***
*** Echo Request message send ***
14:49:05 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

## 1st SA elapsed time: 4 ##
14:49:05 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Received Encapsulated Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

*** Encrypted Echo Request message recv 2 ***
14:49:05 Wait 3 second

*** Echo Request message send ***
14:49:08Clear Captured Packets (Link1)
14:49:08 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

## 1st SA elapsed time: 8 ##
14:49:09 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Received Encapsulated Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

*** Encrypted Echo Request message recv 3 ***
14:49:09 Wait 3 second

*** Echo Request message send ***
14:49:12Clear Captured Packets (Link1)
14:49:12 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

## 1st SA elapsed time: 11 ##
14:49:12 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Received Encapsulated Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

*** Encrypted Echo Request message recv 4 ***
14:49:13 Wait 3 second

*** Echo Request message send ***
14:49:16Clear Captured Packets (Link1)
14:49:16 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

## 1st SA elapsed time: 15 ##
14:49:16 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Received Encapsulated Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

*** Encrypted Echo Request message recv 5 ***
14:49:16 Wait 3 second

*** Echo Request message send ***
14:49:19Clear Captured Packets (Link1)
14:49:19 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

## 1st SA elapsed time: 19 ##
14:49:20 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Received Encapsulated Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

*** Encrypted Echo Request message recv 6 ***
14:49:20 Wait 3 second

*** Echo Request message send ***
14:49:23Clear Captured Packets (Link1)
14:49:23 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

## 1st SA elapsed time: 22 ##
14:49:23 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Received Encapsulated Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

*** Encrypted Echo Request message recv 7 ***
14:49:24 Wait 3 second

*** Echo Request message send ***
14:49:27Clear Captured Packets (Link1)
14:49:27 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

## 1st SA elapsed time: 26 ##
14:49:27 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Received Encapsulated Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

*** Encrypted Echo Request message recv 8 ***
14:49:27 Wait 3 second

*** Echo Request message send ***
14:49:30Clear Captured Packets (Link1)
14:49:30 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

## 1st SA elapsed time: 30 ##
14:49:31 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Received Encapsulated Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

*** Encrypted Echo Request message recv 9 ***
14:49:31 Wait 3 second

*** Echo Request message send ***
14:49:34Clear Captured Packets (Link1)
14:49:34 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

## 1st SA elapsed time: 33 ##
14:49:34 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Received Encapsulated Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

*** Encrypted Echo Request message recv 10 ***
14:49:35 Wait 3 second

*** Echo Request message send ***
14:49:38Clear Captured Packets (Link1)
14:49:38 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

## 1st SA elapsed time: 37 ##
14:49:38 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Receive Neighbor Solicitation from SGW1(NUT)
14:49:38 vSend(Link0,router_na)
Send Neighbor Advertisement(TN)
14:49:38 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Receive Neighbor Solicitation from SGW1(NUT)
14:49:39 vSend(Link0,router_na)
Send Neighbor Advertisement(TN)
14:49:39 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Receive Neighbor Solicitation from SGW1(NUT)
14:49:39 vSend(Link0,router_na)
Send Neighbor Advertisement(TN)
14:49:39 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Received Encapsulated Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

*** Encrypted Echo Request message recv 11 ***
14:49:40 Wait 3 second

*** Echo Request message send ***
14:49:43Clear Captured Packets (Link1)
14:49:43 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

## 1st SA elapsed time: 42 ##
14:49:43 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Receive Neighbor Solicitation from SGW1(NUT)
14:49:43 vSend(Link0,router_na)
Send Neighbor Advertisement(TN)
14:49:44 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Received Encapsulated Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

*** Encrypted Echo Request message recv 12 ***
14:49:44 Wait 3 second

*** Echo Request message send ***
14:49:47Clear Captured Packets (Link1)
14:49:47 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

## 1st SA elapsed time: 46 ##
14:49:47 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
Received Encapsulated Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

*** Encrypted Echo Request message recv 13 ***
14:49:48 Wait 3 second

*** Echo Request message send ***
14:49:51Clear Captured Packets (Link1)
14:49:51 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)

## 1st SA elapsed time: 50 ##
14:49:51 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:1 seektime:0
!!! ISAKMP PayloadLength decode(59426) over remain size(168)
Recv Phase-2 1st message (HDR*, HASH(1), SA, Ni, *, *) from HOST1(NUT)

OK payload_check
*** Re-Key 1st message recv ***
*** Re-Key 2nd message send ***
14:49:51Clear Captured Packets (Link0)
14:49:51 vSend(Link0,isakmp_phase2_send_2nd)
Send Phase-2 2nd message (HDR*, HASH(2), SA, Nr) from HOST2(TN)

*** Re-Key 3rd message recv ***
14:49:52 vRecv(Link0,isakmp_phase2_recv_3rd router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:0 seektime:0
Recv Phase-2 3rd message HDR*, HASH(3) from HOST1(NUT)

OK payload_check
*** 2nd IPsec SA is esatblished ***
*** Encrypted Echo Request message recv using 2nd IPsec SA ***
*** Wait expiring 1st IPsec SA: 9 sec. ***
14:49:52 Wait 9 second

*** Echo Request message send ***
14:50:01Clear Captured Packets (Link0)
14:50:01Clear Captured Packets (Link1)
14:50:01 vSend(Link1,echo_request_send_net0host1_net4host2)
Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)
14:50:02 vRecv(Link0,echo_request_recv_esp_tunnel_net2sgw1_net3sgw2 router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:2 seektime:0
Receive Encrypted Echo Request from HOST-1(TN)

## 1st SA elapsed time: 61 ##
## 2nd SA elapsed time: 10 ##
*** Encrypted Echo Request message recv using 2nd IPsec SA ***
Using new SA for outbound traffic is correct
*** Target test finish ***
14:50:02Stop Capturing Packets (Link0)
14:50:02Stop Capturing Packets (Link1)

Target: Reset IKE SA entries: saddump
14:50:02 vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump ''
Connected

target1# 
target1# /usr/sbin/setkey -c <<EOD
dump;
flush;
EOD
? dump;
? flush;
? EOD

3ffe:501:ffff:102::1 3ffe:501:ffff:103::11 
        esp mode=tunnel spi=4097(0x00001001) reqid=0(0x00000000)
        E: 3des-cbc  e51ffbdb 0e4f001e 14442776 222f9f25 69c57f98 5d08c082
        A: hmac-sha1  ce63464a 0038611e 691ee8c7 23aaba2f 4a6bd849
        seq=0x00000001 replay=4 flags=0x00000000 state=mature 
        created: Mar 13 14:56:28 2006   current: Mar 13 14:56:40 2006
        diff: 12(s)     hard: 60(s)     soft: 48(s)
        last: Mar 13 14:56:38 2006      hard: 0(s)      soft: 0(s)
        current: 132(bytes)     hard: 0(bytes)  soft: 0(bytes)
        allocated: 1    hard: 0 soft: 0
        sadb_seq=1 pid=1589 refcnt=2
3ffe:501:ffff:103::11 3ffe:501:ffff:102::1 
        esp mode=tunnel spi=156828979(0x09590533) reqid=0(0x00000000)
        E: 3des-cbc  5ece865f bf66fa02 3f4022fd 02efc19d d64064f6 7873eaa2
        A: hmac-sha1  d98b252d 8346de4a 37873ae2 4030526a f6e55490
        seq=0x00000000 replay=4 flags=0x00000000 state=mature 
        created: Mar 13 14:56:28 2006   current: Mar 13 14:56:40 2006
        diff: 12(s)     hard: 60(s)     soft: 48(s)
        last:                           hard: 0(s)      soft: 0(s)
        current: 0(bytes)       hard: 0(bytes)  soft: 0(bytes)
        allocated: 0    hard: 0 soft: 0
        sadb_seq=0 pid=1589 refcnt=1
target1# 
target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD
echo $status
0
target1# kill -TERM `head -1 /var/run/racoon.pid`

target1# 
target1# echo $status
0
target1# /bin/rm -f /var/run/racoon.pid

target1# 
target1# echo $status
0
~
[EOT]

Target: Clear SPD entries: spddump
14:50:08 vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump ''
Connected

target1# 
target1# /usr/sbin/setkey -c <<EOD
spddump;
spdflu? spddump;
sh;
EOD

? spdflush;
EOD

? EOD
3ffe:501:ffff:100::/64[any] 3ffe:501:ffff:104::/64[any] any
        out ipsec
        esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
        created: Mar 13 14:55:12 2006  lastused: Mar 13 14:56:38 2006
        lifetime: 0(s) validtime: 0(s)
        spid=17513 seq=0 pid=1592
        refcnt=1
target1# 
target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD
echo $status
0
~
[EOT]

OK
14:50:14End

Packet Reverse Log