NAME

HA_2_2_7 - Receiving invalid BU w/ Nonce Indices mobility option

TARGET

Router

TOPOLOGY

       NUT
        |
--------+-------+-------+------- Link0
                |       |
                R0     MN0
                |
        --------+-------+------- Link0X
                        |
                       MN0X

Link0	global	3ffe:501:ffff:100::/64	home link
Link0X	global	3ffe:501:ffff:1100::/64	foreign link
R0 (Link0)	global	3ffe:501:ffff:100::a0a0
	ether	00:00:00:00:a0:a0
MN0	global	3ffe:501:ffff:100:200:ff:fe00:a2a2	home address
MN0X	global	3ffe:501:ffff:1100:200:ff:fe00:a2a2	care-of address

INITIALIZATION

• Reboot NUT (reboot.rmt)
• Enable HA function (mip6EnableHA.rmt)
• Configure routing table of NUT (route.rmt)

Check Link0 routing table

  NUT
(Link0)   MN0X
   |       |
   | <---- | Echo Request
   | ----> | Echo Reply
   |       |

1. MN0X sends Echo Request
2. MN0X receives Echo Reply

• Initialize IPsec configuration (ipsecEnable.rmt, ipsecClearAll.rmt)
• Set IPsec configuration (ipsecSetSAD.rmt, ipsecSetSPD.rmt)
  • ESP transport mode (BU/BA)

TEST PROCEDURE

Check home registration

  NUT
(Link0)   MN0X
   |       |
   | <---- | BU (A=1, lifetime=0x0010)
   | --X   | no response (*1)
   |       |

1. MN0X sends BU
    packet format is:
        IPv6 header (source = care-of address, destination = home agent)
        Destination Options header
            Home Address option (home address)
        ESP header in transport mode
        Mobility header
            Binding Update
                Nonce Indices option
                Alternate Care-of Address option (care-of address)
2. no response (*1)

Check BCE

  NUT
(Link0)   MN0X
   |       |
   | <---- | Echo Request w/ HaO
   | ----> | BE (*2)
   |       |

1. MN0X sends Echo Request w/ HaO
2. MN0X receives BE (*2)

JUDGEMENT

(*1) PASS: no response
(*2) PASS: MN0X receives BE
    packet format is:
        Binding_Error_message_from_HA_to_MN.gif

REFERENCE

   Before accepting a Binding Update, the receiving node MUST validate
   the Binding Update according to the following tests:

(snip)

   If the Home Registration (H) bit is set, the Nonce Indices mobility
   option MUST NOT be present.

For packets carrying Binding Updates that fail to satisfy all of these tests for any reason other than insufficiency of the Sequence Number, registration type change, or expired nonce index values, they MUST be silently discarded.