IPv6 Conformance Test For IKE(SGW)

Tool Version :REL_3_0_8
Test Program Version :V6PC_IKE_1_0_3
Start:2006/03/13 13:46:02
End :2006/03/13 17:01:07
No.Title ResultLogScriptPacketDump
(bin)

Initialize




1InitializationPASSXXXLink0

Initiator Test





1 Phase I





1.1 main mode





1.1.1 pre-shared key





1.1.1.1 Sending the first message





1.1.1.1.1 ISAKMP Header




2ISAKMP Header Format ***PASSXXXLink0 Link1

1.1.1.1.2 Security Association Payload




3SA Payload Format ***PASSXXXLink0 Link1

1.1.1.1.3 Proposal Payload




4Proposal Payload Format ***PASSXXXLink0 Link1

1.1.1.1.4 Transform Payload





1.1.1.1.4.1 Transform Payload Format check




5Transform Payload Format ***PASSXXXLink0 Link1
6Transform Payload Format(Multiple Transform Payload) ***Not yet supportedXXXLink0 Link1

1.1.1.1.4.2 Transform Payload SA Attributes check




7Attributes include MD5 ***Not yet supportedXXXLink0 Link1
8Attributes include SHA ***PASSXXXLink0 Link1
9Attributes include DES **Not yet supportedXXXLink0 Link1
10Attributes include 3DES **PASSXXXLink0 Link1
11Attributes include AESNot yet supportedXXXLink0 Link1
12Attributes include PSK ***PASSXXXLink0 Link1
13Attributes include RSA sign **Not yet supportedXXXLink0 Link1
14Attributes include DH1 ***Not yet supportedXXXLink0 Link1
15Attributes include DH2 **PASSXXXLink0 Link1
16Attributes include DH5Not yet supportedXXXLink0 Link1
17Attributes include DH14Not yet supportedXXXLink0 Link1

1.1.1.2 Sending the third message





1.1.1.2.1 Key Exchange Payload




18Key Exchange Payload Format + DH1 ***Not yet supportedXXXLink0 Link1
19Key Exchange Payload Format + DH2 **PASSXXXLink0 Link1
20Key Exchange Payload Format + DH5Not yet supportedXXXLink0 Link1
21Key Exchange Payload Format + DH14Not yet supportedXXXLink0 Link1

1.1.1.2.2 Nonce Payload




22Nonce Payload Format ***PASSXXXLink0 Link1

1.1.1.3 Sending the fifth message





1.1.1.3.1 Encryption of Payload




23Encryption of ISAKMP payload ***PASSXXXLink0 Link1

1.1.1.3.2 Identification Payload




24Identification Payload Format ***PASSXXXLink0 Link1

1.1.1.3.3 HASH Payload




25HASH Payload Format ***PASSXXXLink0 Link1

1.1.1.4 Implementation of Main Mode with pre-shared key




26Implementation of Main Mode with pre-shared key ***PASSXXXLink0 Link1

1.1.2 RSA signature





1.1.2.1 Sending the fifth message





1.1.2.1.1 Signature Payload




27Signature Payload Format ***Not yet supportedXXXLink0 Link1

1.1.2.1.2 Certificate Payload




28Certificate Payload Format ***Not yet supportedXXXLink0 Link1

1.1.2.1.2 Certificate Request Payload




29Certificate Request Payload Format ***Not yet supportedXXXLink0 Link1

1.1.2.2 Implementation of Main Mode with RSA signatures




30Implementation of Main Mode with RSA signatures **Not yet supportedXXXLink0 Link1

1.2 Payload Processing





1.2.1 General Message Processing




31Processing invalid ISAKMP Payload Length *PASSXXXLink0 Link1

1.2.2 ISKAMP Header Processing




32Processing invalid Responder Cookie field *FAILXXXLink0 Link1
33Processing invalid Next Payload field *PASSXXXLink0 Link1
34Processing invalid Major Version field(major 15, minor 0) *FAILXXXLink0 Link1
35Processing invalid Minor Version field(major 1, minor 15) *FAILXXXLink0 Link1
36Processing invalid Exchange Type field *PASSXXXLink0 Link1
37Processing invalid Flags field *PASSXXXLink0 Link1
38Processing invalid Message ID field *PASSXXXLink0 Link1

1.2.3 Generic Payload Header Processing




39Processing invalid RESERVED field *FAILXXXLink0 Link1

1.2.4 Security Association Payload Processing




40Processing invalid Next Payload field *FAILXXXLink0 Link1
41Processing invalid DOI field *PASSXXXLink0 Link1
42Processing invalid Situation field *PASSXXXLink0 Link1
43Processing invalid proposal(Encryption Algorithm) *PASSXXXLink0 Link1
44Processing invalid proposal(Hash Algorithm) *PASSXXXLink0 Link1
45Processing invalid proposal(Authentication method) *PASSXXXLink0 Link1
46Processing invalid proposal(Diffie-Hellman Group) *PASSXXXLink0 Link1
47Processing invalid proposal(Life Type) *PASSXXXLink0 Link1

1.2.5 Proposal Payload Processing




48Processing invalid Protocol-ID field *PASSXXXLink0 Link1
49Processing invalid SPI field *FAILXXXLink0 Link1
50Processing invalid proposal *FAILXXXLink0 Link1

1.2.6 Transform Payload Processing




51Processing invalid Transform-ID field *PASSXXXLink0 Link1
52Processing invalid Transform Payload *PASSXXXLink0 Link1
53Multiple Transform Payloads check(modify proposal) *PASSXXXLink0 Link1

1.2.7 Key Exchange Payload Processing




54Processing invalid Key Exchange Data field *FAILXXXLink0 Link1

1.2.8 Identification Payload Processing




55Processing invalid ID type field *PASSXXXLink0 Link1
56Not include Identification Payload *PASSXXXLink0 Link1
57Invalid Identification Payload recieve *PASSXXXLink0 Link1

1.2.9 Hash Payload Processing




58Processing invalid Hash Payload *PASSXXXLink0 Link1
59Processing invalid Hash Data field *PASSXXXLink0 Link1

1.2.10 Signature Payload Processing




60Processing invalid Signature Payload *Not yet supportedXXXLink0 Link1
61Processing invalid Signature Data field *Not yet supportedXXXLink0 Link1

1.2.11 Certificate Request Payload Processing




62Processing invalid Certificate Encoding field *Not yet supportedXXXLink0 Link1
63Processing invalid Certificate Authority field *Not yet supportedXXXLink0 Link1
64Processing invalid Certificate Type with Certificate Authority *Not yet supportedXXXLink0 Link1

1.2.12 Certificate Payload Processing




65Processing invalid Certificate Encoding field *Not yet supportedXXXLink0 Link1
66Processing invalid Certificate Data field *Not yet supportedXXXLink0 Link1

2 Phase II





2.1 quick mode





2.1.1 Sending the first message





2.1.1.1 Encryption of payload




67Encryption of ISAKMP payload ***PASSXXXLink0 Link1

2.1.1.2 Position of payload




68Position of payload ***PASSXXXLink0 Link1

2.1.1.3 ISAKMP Header




69ISAKMP Header Format ***PASSXXXLink0 Link1

2.1.1.4 HASH(1) Payload




70HASH Payload Format ***PASSXXXLink0 Link1

2.1.1.5 Security Association Payload




71SA Payload Format ***PASSXXXLink0 Link1

2.1.1.6 Proposal Payload




72Proposal Payload Format ***PASSXXXLink0 Link1

2.1.1.7 Transform Payload





2.1.1.7.1 Transform Payload Format check




73Transform Payload Format ***PASSXXXLink0 Link1
74Transform Payload Format(Multiple Transform) ***Not yet supportedXXXLink0 Link1

2.1.1.7.2 Transform Payload SA Attributes check




75ESP_DES,HMAC-MD5 ***Not yet supportedXXXLink0 Link1
76ESP_3DES,HMAC-MD5 **Not yet supportedXXXLink0 Link1
77ESP_3DES,HMAC-SHAPASSXXXLink0 Link1
78ESP_3DES,AES-XCBC-MACNot yet supportedXXXLink0 Link1
79ESP_AES,HMAC-SHANot yet supportedXXXLink0 Link1
80ESP_NULL,HMAC-MD5 ***Not yet supportedXXXLink0 Link1
81ESP_NULL,HMAC-SHA ***Not yet supportedXXXLink0 Link1
82ESP_NULL,AES-XCBC-MACNot yet supportedXXXLink0 Link1
83ESP without Authentication Algorithm(ESP_DES) ***Not yet supportedXXXLink0 Link1
84ESP without Authentication Algorithm(ESP_3DES) ***Not yet supportedXXXLink0 Link1
85ESP without Authentication Algorithm(ESP_AES)Not yet supportedXXXLink0 Link1

2.1.1.8 Transform Payload w/ PFS





2.1.1.8.1 PFS with DH




86enable PFS with DH1 ***Not yet supportedXXXLink0 Link1
87enable PFS with DH2 **Not yet supportedXXXLink0 Link1
88enable PFS with DH5Not yet supportedXXXLink0 Link1
89enable PFS with DH14Not yet supportedXXXLink0 Link1

2.1.1.8.2 consistent of multiple proposal




90consistent of proposal(Diffie-Hellman Group(Transform Payload)) ***Not yet supportedXXXLink0 Link1

2.1.1.9 Key Exchange Payload w/ PFS




91Key Exchange Payload Format +DH1 ***Not yet supportedXXXLink0 Link1
92Key Exchange Payload Format +DH2 **Not yet supportedXXXLink0 Link1
93Key Exchange Payload Format +DH5Not yet supportedXXXLink0 Link1
94Key Exchange Payload Format +DH14Not yet supportedXXXLink0 Link1

2.1.1.10 Nonce Payload




95Nonce Payload Format ***PASSXXXLink0 Link1

2.1.1.11 Key Exchange Payload w/o PFS




96Key Exchange Payload w/o PFSPASSXXXLink0 Link1

2.1.1.12 Identification Payload




97Identification Payload Format(Tunnel mode vs SGW) ***PASSXXXLink0 Link1
98Identification Payload Format(Tunnel mode vs HOST) ***PASSXXXLink0 Link1

2.1.2 Sending the third message





2.1.2.1 HASH(3) Payload




99HASH Payload Format ***PASSXXXLink0 Link1

2.1.3 Receiving the fourth message(Informational Exchange)




100set Commit Bit(CONNECTED Notify Message) ***Not yet supportedXXXLink0 Link1

2.1.4 Implementation of Quick Mode




101ESP_3DES(Tunnel mode vs SGW)Not yet supportedXXXLink0 Link1
102ESP_3DES and HMAC-SHA(Tunnel mode vs SGW) ***PASSXXXLink0 Link1
103ESP_3DES(Tunnel mode vs HOST)Not yet supportedXXXLink0 Link1
104ESP_3DES and HMAC-SHA(Tunnel mode vs HOST) ***PASSXXXLink0 Link1
105ESP_3DES and HMAC-SHA with PFS ***Not yet supportedXXXLink0 Link1

2.1.5 Modification of IPsec SA




106Re-keying of IPsec SAPASSXXXLink0 Link1
107Using new SA for outbound traffic **PASSXXXLink0 Link1
108Accept both old and new SA for incoming traffic **FAILXXXLink0 Link1

2.1.6 Anti-replay




109Increasing Sequence NumberPASSXXXLink0 Link1
110Sequence Number VerificationNot yet supportedXXXLink0 Link1

2.2 Payload Processing





2.2.1 General Message Processing




111Processing invalid ISAKMP Payload Length *PASSXXXLink0 Link1

2.2.2 ISKAMP Header Processing




112Processing invalid Responder Cookie field *PASSXXXLink0 Link1
113Processing invalid Next Payload field *PASSXXXLink0 Link1
114Processing invalid Major Version field(major 15, minor 0)*FAILXXXLink0 Link1
115Processing invalid Minor Version field(major 1, minor 15) *FAILXXXLink0 Link1
116Processing invalid Exchange Type field *PASSXXXLink0 Link1
117Processing invalid Flags field *PASSXXXLink0 Link1
118Processing invalid Message ID field *PASSXXXLink0 Link1

2.2.3 Generic Payload Header Processing




119Processing invalid Next Payload field *PASSXXXLink0 Link1
120Processing invalid RESERVED field *FAILXXXLink0 Link1

2.2.4 Hash Payload Processing




121Processing invalid Hash Payload *PASSXXXLink0 Link1
122Processing invalid Hash Data field *PASSXXXLink0 Link1

2.2.5 Security Association Payload Processing




123Processing invalid Next Payload field *PASSXXXLink0 Link1
124Processing invalid DOI field *PASSXXXLink0 Link1
125Processing invalid Situation field *PASSXXXLink0 Link1
126Processing invalid proposal(ESP Authentication) *PASSXXXLink0 Link1
127Processing invalid proposal(Diffie-Hellman Group) *PASSXXXLink0 Link1
128Processing invalid proposal(Life Type) *PASSXXXLink0 Link1
129Processing invalid proposal(Encapsulation Mode) *PASSXXXLink0 Link1

2.2.6 Proposal Payload Processing




130Processing invalid Protocol-ID field *PASSXXXLink0 Link1
131Processing invalid SPI field *FAILXXXLink0 Link1
132Processing invalid proposal *FAILXXXLink0 Link1

2.2.7 Transform Payload Processing




133Processing invalid Transform-ID field *PASSXXXLink0 Link1
134Processing invalid Transform Payload *PASSXXXLink0 Link1
135Multiple Transform Payloads check(modify proposal) *PASSXXXLink0 Link1

2.2.8 Key Exchange Payload Processing




136Processing invalid Key Exchange Data field *FAILXXXLink0 Link1

2.2.9 Identification Payload Processing




137Processing invalid ID type field *PASSXXXLink0 Link1
138Invalid Identification Payload *PASSXXXLink0 Link1

Responder Test





1 Phase I





1.1 main mode





1.1.1 pre-shared key





1.1.1.1 Sending the second message





1.1.1.1.1 ISAKMP Header




139ISAKMP Header Format ***PASSXXXLink0 Link1

1.1.1.1.2 Security Association Payload




140SA Payload Format ***PASSXXXLink0 Link1

1.1.1.1.3 Proposal Payload




141Proposal Payload Format ***PASSXXXLink0 Link1

1.1.1.1.4 Transform Payload





1.1.1.1.4.1 Transform Payload Format check




142Transform Payload Format ***PASSXXXLink0 Link1

1.1.1.1.4.2 Transform Payload SA Attributes check




143DES,MD5,PSK,DH1 ***Not yet supportedXXXLink0 Link1
144DES,SHA,PSK,DH2 **Not yet supportedXXXLink0 Link1
145AES,SHA,PSK,DH2Not yet supportedXXXLink0
1463DES,MD5,PSK,DH2 **Not yet supportedXXXLink0 Link1
1473DES,SHA,PSK,DH2PASSXXXLink0
1483DES,SHA,RSA sign,DH2 **Not yet supportedXXXLink0 Link1
1493DES,SHA,PSK,DH1 **Not yet supportedXXXLink0 Link1
1503DES,SHA,PSK,DH5Not yet supportedXXXLink0 Link1
1513DES,SHA,PSK,DH14Not yet supportedXXXLink0 Link1

1.1.1.1.4.3 Select proposal




152Multiple Transform Payloads(Select proposal) ***PASSXXXLink0 Link1

1.1.1.2 Sending the forth message





1.1.1.2.1 Key Exchange Payload




153Key Exchange Payload Format + DH1 ***Not yet supportedXXXLink0 Link1
154Key Exchange Payload Format + DH2 **PASSXXXLink0 Link1
155Key Exchange Payload Format + DH5Not yet supportedXXXLink0 Link1
156Key Exchange Payload Format + DH14Not yet supportedXXXLink0 Link1

1.1.1.2.2 Nonce Payload




157Nonce Payload Format ***PASSXXXLink0 Link1

1.1.1.3 Sending the sixth message





1.1.1.3.1 Encryption of Payload




158Encryption of ISAKMP payload ***PASSXXXLink0 Link1

1.1.1.3.2 Identification Payload




159Identification Payload Format ***PASSXXXLink0 Link1

1.1.1.3.3 HASH Payload




160HASH Payload Format ***PASSXXXLink0 Link1

1.1.1.4 Implementation of Main Mode with pre-shared key




161Implementation of Main Mode with pre-shared key ***PASSXXXLink0 Link1

1.1.1.5 Modification of ISAKMP SA




162cookie field **PASSXXXLink0 Link1

1.1.2 RSA signature





1.1.2.1 Sending the fourth message





1.1.2.1.1 Certificate Request Payload




163Certificate Request Payload Format ***Not yet supportedXXXLink0 Link1

1.1.2.2 Sending the sixth message





1.1.2.2.1 Signature Payload




164Signature Payload Format ***Not yet supportedXXXLink0 Link1

1.1.2.2.2 Cartificate Payload




165Certificate Payload Format ***Not yet supportedXXXLink0

1.1.2.3 Implementation of Main Mode with RSA signatures




166Implementation of Main Mode with RSA signatures **Not yet supportedXXXLink0 Link1

1.2 Payload Processing





1.2.1 General Message Processing




167Processing invalid ISAKMP Payload Length *PASSXXXLink0 Link1

1.2.2 ISKAMP Header Processing




168Processing invalid Initiator Cookie field *PASSXXXLink0 Link1
169Processing invalid Next Payload field *PASSXXXLink0 Link1
170Processing invalid Major Version field(major 15, minor 0) *PASSXXXLink0 Link1
171Processing invalid Minor Version field(major 1, minor 15) *PASSXXXLink0 Link1
172Processing invalid Exchange Type field *PASSXXXLink0 Link1
173Processing invalid Flags field *PASSXXXLink0 Link1
174Processing invalid Message ID field *PASSXXXLink0 Link1

1..3 Generic Payload Header Processing




175Processing invalid RESERVED field *FAILXXXLink0 Link1

1.2.4 Security Association Payload Processing




176Processing invalid Next Payload field *FAILXXXLink0 Link1
177Processing invalid DOI field *PASSXXXLink0 Link1
178Processing invalid Situation field *PASSXXXLink0 Link1
179Processing invalid proposal(Encryption Algorithm) *PASSXXXLink0 Link1
180Processing invalid proposal(Hash Algorithm) *PASSXXXLink0 Link1
181Processing invalid proposal(Authentication method) *PASSXXXLink0 Link1
182Processing invalid proposal(Diffie-Hellman Group) *PASSXXXLink0 Link1
183Processing invalid proposal(Life Type) *PASSXXXLink0 Link1
184IPSEC Situation Definition(SIT_SECRECY) *PASSXXXLink0 Link1
185IPSEC Situation Definition(SIT_INTEGRITY) *PASSXXXLink0 Link1

1.2.5 Proposal Payload Processing




186Processing invalid Protocol-ID field *PASSXXXLink0 Link1
187Processing invalid SPI field *PASSXXXLink0 Link1
188Processing invalid proposal *FAILXXXLink0 Link1

1.2.6 Transform Payload Processing




189Processing invalid Transform-ID field *PASSXXXLink0 Link1
190Processing invalid Transform Payload *PASSXXXLink0 Link1
191Multiple Transform Payloads check(reject proposal) *PASSXXXLink0 Link1

1.2.7 Key Exchange Payload Processing




192Processing invalid Key Exchange Data field *PASSXXXLink0 Link1

1.2.8 Identification Payload Processing




193Processing invalid ID type field *PASSXXXLink0 Link1
194Not include Identification Payload *PASSXXXLink0 Link1
195invalid Identification Payload recieve *PASSXXXLink0 Link1

1.2.9 Hash Payload Processing




196Processing invalid Hash Payload *PASSXXXLink0 Link1
197Processing invalid Hash Data field *PASSXXXLink0 Link1

1.2.10 Signature Payload Processing




198Processing invalid Signature Payload *Not yet supportedXXXLink0 Link1
199Processing invalid Signature Data field *Not yet supportedXXXLink0 Link1

1.2.11 Certificate Request Payload Processing




200Processing invalid Certificate Encoding field *Not yet supportedXXXLink0 Link1
201Processing invalid Certificate Authority field *Not yet supportedXXXLink0 Link1
202Processing invalid Certificate Type with Certificate Authority *Not yet supportedXXXLink0 Link1

1.2.12 Certificate Payload Processing




203Processing invalid Certificate Encoding field *Not yet supportedXXXLink0 Link1
204Processing invalid Certificate Data field *Not yet supportedXXXLink0 Link1

2 Phase II





2.1 quick mode





2.1.1 Sendign the second message





2.1.1.1 Encryption of payload




205Encryption of ISAKMP payload ***PASSXXXLink0 Link1

2.1.1.2 Position of payload




206Position of payload ***PASSXXXLink0 Link1

2.1.1.3 ISAKMP Header




207ISAKMP Header Format ***PASSXXXLink0 Link1

2.1.1.4 HASH(2) Payload




208HASH Payload Format ***PASSXXXLink0 Link1

2.1.1.5 Security Association Payload




209SA Payload Format ***PASSXXXLink0 Link1

2.1.1.6 Proposal Payload




210Proposal Payload Format ***PASSXXXLink0 Link1

2.1.1.7 Transform Payload





2.1.1.7.1 Transform Payload Format check




211Transform Payload Format ***PASSXXXLink0 Link1

2.1.1.7.2 Transform Payload SA Attributes check




212ESP_DES,HMAC-MD5 ***Not yet supportedXXXLink0 Link1
213ESP_3DES,HMAC-MD5 **Not yet supportedXXXLink0 Link1
214ESP_3DES,HMAC-SHAPASSXXXLink0 Link1
215ESP_3DES,AES-XCBC-MACNot yet supportedXXXLink0 Link1
216ESP_AES,HMAC-SHANot yet supportedXXXLink0 Link1
217ESP_NULL,HMAC-MD5 ***Not yet supportedXXXLink0 Link1
218ESP_NULL,HMAC-SHA ***Not yet supportedXXXLink0 Link1
219ESP_NULL,AES-XCBC-MACNot yet supportedXXXLink0 Link1
220ESP without Authentication Algorithm(ESP_DES) ***Not yet supportedXXXLink0 Link1
221ESP without Authentication Algorithm(ESP_3DES) ***Not yet supportedXXXLink0 Link1
222ESP without Authentication Algorithm(ESP_AES)Not yet supportedXXXLink0 Link1

2.1.1.7.3 Select proposal




223Multiple Proposal and Transform Payloads (select proposal) ***PASSXXXLink0 Link1

2.1.1.8 Transform Payload w/ PFS




224enable PFS with DH1 ***Not yet supportedXXXLink0 Link1
225enable PFS with DH2 ***Not yet supportedXXXLink0 Link1
226enable PFS with DH5Not yet supportedXXXLink0
227enable PFS with DH14Not yet supportedXXXLink0

2.1.1.9 Key Exchange Payload w/ PFS




228Key Exchange Payload Format + DH1 ***Not yet supportedXXXLink0 Link1
229Key Exchange Payload Format +DH2 **Not yet supportedXXXLink0 Link1
230Key Exchange Payload Format +DH5Not yet supportedXXXLink0 Link1
231Key Exchange Payload Format +DH14Not yet supportedXXXLink0 Link1

2.1.1.10 Nonce Payload




232Nonce Payload Format ***PASSXXXLink0 Link1

2.1.1.11 Key Exchange Payload w/o PFS




233Key Exchange Payload w/o PFSPASSXXXLink0

2.1.1.12 Identification Payload




234Identification Payload Format(Tunnel mode vs SGW) ***PASSXXXLink0 Link1
235Identification Payload Format(Tunnel mode vs HOST) ***PASSXXXLink0 Link1

2.1.2 Receiving the fourth message(Informational Exchange)




236set Commit Bit(CONNECTED Notify Message) ***Not yet supportedXXXLink0 Link1

2.1.3 Implementation of Quick Mode




237ESP_3DES(Tunnel mode vs SGW)Not yet supportedXXXLink0 Link1
238ESP_3DES and HMAC-SHA(Tunnel mode vs SGW) ***PASSXXXLink0 Link1
239ESP_3DES(Tunnel mode vs HOST)Not yet supportedXXXLink0 Link1
240ESP_3DES and HMAC-SHA(Tunnel mode vs HOST) ***PASSXXXLink0 Link1
241ESP_3DES and HMAC-SHA with PFS ***Not yet supportedXXXLink0 Link1

2.1.4 Modification of IPsec SA




242Using new SA for outbound traffic **PASSXXXLink0 Link1
243Accept both old and new SA for incoming traffic **PASSXXXLink0 Link1

2.1.5 Anti-replay




244Increasing Sequence NumberPASSXXXLink0 Link1
245Sequence Number VerificationNot yet supportedXXXLink0 Link1

2.2 Payload Processing





2.2.1 General Message Processing




246Processing invalid ISAKMP Payload Length *PASSX