Test Information

Title	IPSEC Situation Definition(SIT_SECRECY) *
CommandLine	./SGW/SG_R_RFC2407_4_2_2_1.seq -pkt ./SGW/SG_R_RFC2407_4_2_2_1.def test_type=BASIC -log 184.html -ti IPSEC Situation Definition(SIT_SECRECY) *
TestVersion	undefined
ToolVersion	REL_3_0_8
Start	2006/03/13 15:55:59
Tn	/usr/local/v6eval//etc//tn.def
Nu	/usr/local/v6eval//etc//nut.def
Pkt	./SGW/SG_R_RFC2407_4_2_2_1.def
System	freebsd-i386
TargetName	FreeBSD 5.4-RELEASE
HostName	target1.tahi.org
Type	router

Test Sequence Execution Log

15:55:59	Start
	* Target IKE initialization phase * Target: Reset IKE SA entries: saddump
15:56:00	vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD dump; flush;? dump; EOD ? flush; EOD ? EOD The result of line 1: No SAD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD echo $status 0 target1# kill -TERM `head -1 /var/run/racoon.pid` head: /var/run/racoon.pid: No such file or directory target1# target1# echo $status 1 target1# /bin/rm -f /var/run/racoon.pid target1# target1# echo $status 0 ~ [EOT]
	Target: Clear SPD entries: spddump
15:56:06	vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD spddump; sp? spddump; dflush; EOD ? spdflush; EOD ? EOD The result of line 1: No SPD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD echo $status 0 ~ [EOT]
	Target: Set SPD entries: dst=3ffe:501:ffff:100::/64 src=3ffe:501:ffff:104::/64 tdst=3ffe:501:ffff:102::1 tsrc=3ffe:501:ffff:103::11 direction=in protocol=PROTO_IPSEC_ESP mode=Tunnel
15:56:12	vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 dst=3ffe:501:ffff:100::/64 src=3ffe:501:ffff:104::/64 tdst=3ffe:501:ffff:102::1 tsrc=3ffe:501:ffff:103::11 direction=in protocol=PROTO_IPSEC_ESP mode=Tunnel '' Connected target1# target1# /usr/sbin/setkey -c <<EOD spdadd 3ffe:501:ffff:104::/64 3ffe:501:ffff:100::/64 any -P in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require ; spddump; EOD ? spdadd 3ffe:501:ffff:104::/64 3ffe:501:ffff:100::/64 any -P in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require ; spddump; EOD ? any ? -P in ipsec ? esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require ? ; ? spddump; ? EOD 3ffe:501:ffff:104::/64[any] 3ffe:501:ffff:100::/64[any] any in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require created: Mar 13 16:02:50 2006 lastused: Mar 13 16:02:50 2006 lifetime: 0(s) validtime: 0(s) spid=18701 seq=0 pid=2666 refcnt=1 target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspdadd 3ffe:501:ffff:104::/64 3ffe:501:ffff:100::/64 any -P in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require;spddump;EOD echo $status 0 ~ [EOT]
	Target: Set IKE SA entries: dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:104::/64 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA
15:56:18	vRemote(ikeSetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeSetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:104::/64 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA '' Connected target1# target1# ~[set] echocheck target1# target1# ~[put] freebsd-i386.psk.txt /tmp/psk.txt Dtarget1# target1# target1# /bin/chmod 600 /tmp/psk.txt target1# echo $status 0 target1# ~[set] echocheck target1# target1# ~[put] freebsd-i386.ike.conf /tmp/ike.conf Dtarget1# target1# target1# test -f /var/run/racoon.pid &&kill -TERM `head -1 /var/run/racoon.pid` target1# target1# echo $status 1 target1# /usr/local/sbin/racoon -f /tmp/ike.conf target1# target1# echo $status 0 ~ [EOT]
15:56:32	vRemote(ikeEnable.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeEnable.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 ''
	* Target initialization phase *
15:56:33	Start Capturing Packets (Link0)
15:56:33	Start Capturing Packets (Link1)
	* Target testing phase * * Phase-1 1st message send *
15:56:33	Clear Captured Packets (Link1)
15:56:33	Clear Captured Packets (Link0)
15:56:33	vSend(Link0,isakmp_phase1_send_1st) Send 1st message from HOST2(TN)
	Proposal Payload doesn't exist after SA. * Phase-1 2nd message receive *
15:56:34	vRecv(Link0,isakmp_phase1_recv_2nd router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:0 seektime:0 vRecv() return status=1
	NG:Receive no packets OK:Phase-1 2nd message is not returned. Checking whether SIT_SECRECY is supported is PASS * Target test finish *
15:56:39	Stop Capturing Packets (Link1)
15:56:39	Stop Capturing Packets (Link0)
	Target: Reset IKE SA entries: saddump
15:56:39	vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD dump; flush; EO? dump; ? flush; D ? EOD The result of line 1: No SAD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD echo $status 0 target1# kill -TERM `head -1 /var/run/racoon.pid` target1# target1# echo $status 0 target1# /bin/rm -f /var/run/racoon.pid target1# target1# echo $status 0 ~ [EOT]
	Target: Clear SPD entries: spddump
15:56:45	vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD spddump; spdflush? spddump; ; EOD ? spdflush; EOD ? EOD 3ffe:501:ffff:104::/64[any] 3ffe:501:ffff:100::/64[any] any in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require created: Mar 13 16:02:50 2006 lastused: Mar 13 16:02:50 2006 lifetime: 0(s) validtime: 0(s) spid=18701 seq=0 pid=2676 refcnt=1 target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD echo $status 0 ~ [EOT]
	OK
15:56:51	End

Packet Reverse Log

Send 1st message from HOST2(TN) at 15:56:33

Frame_Ether                     (length:146)
| Hdr_Ether                       (length:14)
| | DestinationAddress               = 00:00:02:00:27:cd
| | SourceAddress                    = 00:00:00:00:00:11
| | Type                             = 34525
| Packet_IPv6                     (length:132)
| | Hdr_IPv6                        (length:40)
| | | Version                          = 6
| | | TrafficClass                     = 0
| | | FlowLabel                        = 0
| | | PayloadLength                    = 92
| | | NextHeader                       = 17
| | | HopLimit                         = 64
| | | SourceAddress                    = 3ffe:501:ffff:103::11
| | | DestinationAddress               = 3ffe:501:ffff:102::1
| | Upp_UDP                         (length:92)
| | | Hdr_UDP                         (length:8)
| | | | SourcePort                       = 500
| | | | DestinationPort                  = 500
| | | | Length                           = 92
| | | | Checksum                         = 16616 calc(16616)
| | | Udp_ISAKMP                      (length:84)
| | | | Hdr_ISAKMP                      (length:28)
| | | | | InitiatorCookie                  = 288a7658f435a493
| | | | | ResponderCookie                  = 0000000000000000
| | | | | NextPayload                      = 1
| | | | | MjVer                            = 1
| | | | | MnVer                            = 0
| | | | | ExchangeType                     = 2
| | | | | Reserved                         = 0
| | | | | AFlag                            = 0
| | | | | CFlag                            = 0
| | | | | EFlag                            = 0
| | | | | MessageID                        = 0
| | | | | Length                           = 84
| | | | Pld_ISAKMP_SA_IPsec_ANY         (length:56)
| | | | | NextPayload                      = 0
| | | | | Reserved1                        = 0
| | | | | PayloadLength                    = 56
| | | | | DOI                              = 1
| | | | | Situation                        = 2
| | | | | data                             = 
| | | | |   0000002c 01010001  00000024 01010000  80010005 80020002  80030001 80040002
| | | | |   800b0001 000c0004  00007080