Test Information

Title	Attributes include PSK ***
CommandLine	./SGW/SG_I_RFC2409_4_8_2.seq -pkt ./SGW/SG_I_RFC2409_4_8_2.def test_type=BASIC -log 12.html -ti Attributes include PSK ***
TestVersion	undefined
ToolVersion	REL_3_0_8
Start	2006/03/13 13:53:06
Tn	/usr/local/v6eval//etc//tn.def
Nu	/usr/local/v6eval//etc//nut.def
Pkt	./SGW/SG_I_RFC2409_4_8_2.def
System	freebsd-i386
TargetName	FreeBSD 5.4-RELEASE
HostName	target1.tahi.org
Type	router

Test Sequence Execution Log

13:53:07	Start
	* Target IKE initialization phase * Target: Reset IKE SA entries: saddump
13:53:07	vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD dump; flush; ? dump; ? Eflush; OD ? EOD The result of line 1: No SAD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD echo $status 0 target1# kill -TERM `head -1 /var/run/racoon.pid` head: /var/run/racoon.pid: No such file or directory target1# target1# echo $status 1 target1# /bin/rm -f /var/run/racoon.pid target1# target1# echo $status 0 ~ [EOT]
	Target: Clear SPD entries: spddump
13:53:14	vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD spddump; spdfl? spddump; ush; EOD ? spdflush; EOD ? EOD The result of line 1: No SPD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD echo $status 0 target1#~ [EOT]
	Target: Set SPD entries: src=3ffe:501:ffff:100::/64 dst=3ffe:501:ffff:104::/64 tsrc=3ffe:501:ffff:102::1 tdst=3ffe:501:ffff:103::11 upperspec=any direction=out protocol=PROTO_IPSEC_ESP mode=Tunnel
13:53:20	vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 src=3ffe:501:ffff:100::/64 dst=3ffe:501:ffff:104::/64 tsrc=3ffe:501:ffff:102::1 tdst=3ffe:501:ffff:103::11 upperspec=any direction=out protocol=PROTO_IPSEC_ESP mode=Tunnel '' Connected target1# target1# /usr/sbin/setkey -c <<EOD spdadd 3ffe:501:ffff:100::/64 3ffe:501:ffff:104::/64 any -P out ipsec esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require ; spddump; EOD ? spdadd 3ffe:501:ffff:100::/64 3ffe:501:ffff:104::/64 any -P out ipsec esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require ; spddump; EOD ? any ? -P out ipsec ? esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require ? ; ? spddump; ? EOD 3ffe:501:ffff:100::/64[any] 3ffe:501:ffff:104::/64[any] any out ipsec esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require created: Mar 13 13:59:58 2006 lastused: Mar 13 13:59:58 2006 lifetime: 0(s) validtime: 0(s) spid=16502 seq=0 pid=662 refcnt=1 target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspdadd 3ffe:501:ffff:100::/64 3ffe:501:ffff:104::/64 any -P out ipsec esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require;spddump;EOD echo $status 0 ~ [EOT]
	Target: Set IKE SA entries: dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:104::/64 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA
13:53:26	vRemote(ikeSetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeSetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:104::/64 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA '' Connected target1# target1# ~[set] echocheck target1# target1# ~[put] freebsd-i386.psk.txt /tmp/psk.txt Dtarget1# target1# target1# /bin/chmod 600 /tmp/psk.txt target1# echo $status 0 target1# ~[set] echocheck target1# target1# ~[put] freebsd-i386.ike.conf /tmp/ike.conf Dtarget1# target1# target1# test -f /var/run/racoon.pid &&kill -TERM `head -1 /var/run/racoon.pid` target1# target1# echo $status 1 target1# /usr/local/sbin/racoon -f /tmp/ike.conf target1# target1# echo $status 0 ~ [EOT]
13:53:42	vRemote(ikeEnable.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeEnable.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 ''
	* Target initialization phase *
13:53:43	Start Capturing Packets (Link0)
13:53:43	Start Capturing Packets (Link1)
	* Target testing phase * * Phase-1 1st message recv *
13:53:43	vSend(Link1,echo_request_send_net0host1_net4host2) Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT)
13:53:43	vRecv(Link0,isakmp_phase1_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:10 cntLimit:0 seektime:0 Receive Neighbor Solicitation from SGW1(NUT)
13:53:44	vSend(Link0,router_na) Send Neighbor Advertisement(TN)
13:53:44	vRecv(Link0,isakmp_phase1_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:10 cntLimit:0 seektime:0 Recv 1st message from HOST1(NUT)
	OK payload_check Transform payload SA Attributes(PSK) is correct * Target test finish *
13:53:44	Stop Capturing Packets (Link0)
13:53:44	Stop Capturing Packets (Link1)
	Target: Reset IKE SA entries: saddump
13:53:44	vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD dump; flush; EOD ? dump; ? flush; ? EOD The result of line 1: No SAD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD echo $status 0 target1# kill -TERM `head -1 /var/run/racoon.pid` target1# target1# echo $status 0 target1# /bin/rm -f /var/run/racoon.pid target1# /bin/rm -f /var/run/racoon.pid target1# target1# echo $status 0 ~ [EOT]
	Target: Clear SPD entries: spddump
13:53:51	vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD spddump; spdflush;? spddump; EOD ? spdflush; EOD ? EOD 3ffe:501:ffff:100::/64[any] 3ffe:501:ffff:104::/64[any] any out ipsec esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require created: Mar 13 13:59:58 2006 lastused: Mar 13 14:00:19 2006 lifetime: 0(s) validtime: 0(s) spid=16502 seq=0 pid=691 refcnt=1 target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD echo $status 0 ~ [EOT]
	OK
13:53:57	End

Packet Reverse Log

Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT) at 13:53:43

Frame_Ether                     (length:70)
| Hdr_Ether                       (length:14)
| | DestinationAddress               = 00:00:02:00:26:ba
| | SourceAddress                    = 00:00:00:00:00:10
| | Type                             = 34525
| Packet_IPv6                     (length:56)
| | Hdr_IPv6                        (length:40)
| | | Version                          = 6
| | | TrafficClass                     = 0
| | | FlowLabel                        = 0
| | | PayloadLength                    = 16
| | | NextHeader                       = 58
| | | HopLimit                         = 64
| | | SourceAddress                    = 3ffe:501:ffff:100::13
| | | DestinationAddress               = 3ffe:501:ffff:104::11
| | ICMPv6_EchoRequest              (length:16)
| | | Type                             = 128
| | | Code                             = 0
| | | Checksum                         = 36089 calc(36089)
| | | Identifier                       = 0
| | | SequenceNumber                   = 0
| | | Payload                         (length:8)
| | | | data                             = 4563686f 44617461

Recv at 13:53:43

Frame_Ether                     (length:86)
| Hdr_Ether                       (length:14)
| | DestinationAddress               = 33:33:ff:00:00:11
| | SourceAddress                    = 00:00:02:00:27:cd
| | Type                             = 34525
| Packet_IPv6                     (length:72)
| | Hdr_IPv6                        (length:40)
| | | Version                          = 6
| | | TrafficClass                     = 0
| | | FlowLabel                        = 0
| | | PayloadLength                    = 32
| | | NextHeader                       = 58
| | | HopLimit                         = 255
| | | SourceAddress                    = 3ffe:501:ffff:102::1
| | | DestinationAddress               = ff02::1:ff00:11
| | ICMPv6_NS                       (length:32)
| | | Type                             = 135
| | | Code                             = 0
| | | Checksum                         = 50092 calc(50092)
| | | Reserved                         = 0
| | | TargetAddress                    = 3ffe:501:ffff:102::11
| | | Opt_ICMPv6_SLL                  (length:8)
| | | | Type                             = 1
| | | | Length                           = 1
| | | | LinkLayerAddress                 = 00:00:02:00:27:cd
===isakmp_phase1_recv=================================
ng compare _HETHER_nut2tnA11.DestinationAddress received:33:33:ff:00:00:11 = 00:00:00:00:00:11
ng compare _HDR_IPV6_isakmp_phase1_recv.NextHeader received:58 = 17
ng compare _HDR_IPV6_isakmp_phase1_recv.DestinationAddress received:ff02::1:ff00:11 = 3ffe:501:ffff:103::11
ng meta Packet_IPv6.Upp_UDP != Packet_IPv6.ICMPv6_NS
===router_ns_multi=================================

Send Neighbor Advertisement(TN) at 13:53:44

Frame_Ether                     (length:86)
| Hdr_Ether                       (length:14)
| | DestinationAddress               = 00:00:02:00:27:cd
| | SourceAddress                    = 00:00:00:00:00:11
| | Type                             = 34525
| Packet_IPv6                     (length:72)
| | Hdr_IPv6                        (length:40)
| | | Version                          = 6
| | | TrafficClass                     = 0
| | | FlowLabel                        = 0
| | | PayloadLength                    = 32
| | | NextHeader                       = 58
| | | HopLimit                         = 255
| | | SourceAddress                    = 3ffe:501:ffff:102::11
| | | DestinationAddress               = 3ffe:501:ffff:102::1
| | ICMPv6_NA                       (length:32)
| | | Type                             = 136
| | | Code                             = 0
| | | Checksum                         = 50027 calc(50027)
| | | RFlag                            = 1
| | | SFlag                            = 1
| | | OFlag                            = 1
| | | Reserved                         = 0
| | | TargetAddress                    = 3ffe:501:ffff:102::11
| | | Opt_ICMPv6_TLL                  (length:8)
| | | | Type                             = 2
| | | | Length                           = 1
| | | | LinkLayerAddress                 = 00:00:00:00:00:11

Recv at 13:53:44

Frame_Ether                     (length:142)
| Hdr_Ether                       (length:14)
| | DestinationAddress               = 00:00:00:00:00:11
| | SourceAddress                    = 00:00:02:00:27:cd
| | Type                             = 34525
| Packet_IPv6                     (length:128)
| | Hdr_IPv6                        (length:40)
| | | Version                          = 6
| | | TrafficClass                     = 0
| | | FlowLabel                        = 0
| | | PayloadLength                    = 88
| | | NextHeader                       = 17
| | | HopLimit                         = 64
| | | SourceAddress                    = 3ffe:501:ffff:102::1
| | | DestinationAddress               = 3ffe:501:ffff:103::11
| | Upp_UDP                         (length:88)
| | | Hdr_UDP                         (length:8)
| | | | SourcePort                       = 500
| | | | DestinationPort                  = 500
| | | | Length                           = 88
| | | | Checksum                         = 50262 calc(50262)
| | | Udp_ISAKMP                      (length:80)
| | | | Hdr_ISAKMP                      (length:28)
| | | | | InitiatorCookie                  = 4ed411e7fe70d52d
| | | | | ResponderCookie                  = 0000000000000000
| | | | | NextPayload                      = 1
| | | | | MjVer                            = 1
| | | | | MnVer                            = 0
| | | | | ExchangeType                     = 2
| | | | | Reserved                         = 0
| | | | | AFlag                            = 0
| | | | | CFlag                            = 0
| | | | | EFlag                            = 0
| | | | | MessageID                        = 0
| | | | | Length                           = 80
| | | | Pld_ISAKMP_SA_IPsec_IDonly      (length:52)
| | | | | NextPayload                      = 0
| | | | | Reserved1                        = 0
| | | | | PayloadLength                    = 52
| | | | | DOI                              = 1
| | | | | Situation                        = 1
| | | | | Pld_ISAKMP_P_ISAKMP             (length:40)
| | | | | | NextPayload                      = 0
| | | | | | Reserved1                        = 0
| | | | | | PayloadLength                    = 40
| | | | | | ProposalNumber                   = 1
| | | | | | ProtocolID                       = 1
| | | | | | SPIsize                          = 0
| | | | | | NumOfTransforms                  = 1
| | | | | | SPI                              = 
| | | | | | Pld_ISAKMP_T                    (length:32)
| | | | | | | NextPayload                      = 0
| | | | | | | Reserved1                        = 0
| | | | | | | PayloadLength                    = 32
| | | | | | | TransformNumber                  = 1
| | | | | | | TransformID                      = 1
| | | | | | | Reserved2                        = 0
| | | | | | | Attr_ISAKMP_TV                  (length:4)
| | | | | | | | AF                               = 1
| | | | | | | | Type                             = 11
| | | | | | | | Value                            = 1
| | | | | | | Attr_ISAKMP_TV                  (length:4)
| | | | | | | | AF                               = 1
| | | | | | | | Type                             = 12
| | | | | | | | Value                            = 28800
| | | | | | | Attr_ISAKMP_TV                  (length:4)
| | | | | | | | AF                               = 1
| | | | | | | | Type                             = 1
| | | | | | | | Value                            = 5
| | | | | | | Attr_ISAKMP_TV                  (length:4)
| | | | | | | | AF                               = 1
| | | | | | | | Type                             = 3
| | | | | | | | Value                            = 1
| | | | | | | Attr_ISAKMP_TV                  (length:4)
| | | | | | | | AF                               = 1
| | | | | | | | Type                             = 2
| | | | | | | | Value                            = 2
| | | | | | | Attr_ISAKMP_TV                  (length:4)
| | | | | | | | AF                               = 1
| | | | | | | | Type                             = 4
| | | | | | | | Value                            = 2
===isakmp_phase1_recv=================================