NAME

HA_2_2_8 - Receiving invalid BU w/ Nonce Indices mobility option

TARGET

Router

TOPOLOGY

                       MN1X
                        |
        --------+-------+------- Link1X
                |
                R1
                |
--------+-------+--------------- Link1
        |
       NUT
        |
--------+---------------+------- Link0
                        |
                       MN0

Link0	global	3ffe:501:ffff:100::/64	home link
Link1	global	3ffe:501:ffff:101::/64	foreign link
Link1X	global	3ffe:501:ffff:1101::/64	foreign link
R1 (Link1)	global	3ffe:501:ffff:101::a1a1
	ether	00:00:00:00:a1:a1
MN0	global	3ffe:501:ffff:100:200:ff:fe00:a2a2	home address
MN1X	global	3ffe:501:ffff:1101:200:ff:fe00:a2a2	care-of address

INITIALIZATION

• Reboot NUT (reboot.rmt)
• Enable HA function (mip6EnableHA.rmt)
• Configure routing table of NUT (route.rmt)

Check Link1 routing table

  NUT
(Link0)   MN1X
   |       |
   | <---- | Echo Request
   | ----> | Echo Reply
   |       |

1. MN1X sends Echo Request
2. MN1X receives Echo Reply

• Initialize IPsec configuration (ipsecEnable.rmt, ipsecClearAll.rmt)
• Set IPsec configuration (ipsecSetSAD.rmt, ipsecSetSPD.rmt)
  • ESP transport mode (BU/BA)

TEST PROCEDURE

Check home registration

  NUT
(Link0)   MN1X
   |       |
   | <---- | BU (A=1, lifetime=0x0010)
   | --X   | no response (*1)
   |       |

1. MN1X sends BU
    packet format is:
        IPv6 header (source = care-of address, destination = home agent)
        Destination Options header
            Home Address option (home address)
        ESP header in transport mode
        Mobility header
            Binding Update
                Nonce Indices option
                Alternate Care-of Address option (care-of address)
2. no response (*1)

Check BCE

  NUT
(Link0)   MN1X
   |       |
   | <---- | Echo Request w/ HaO
   | ----> | BE (*2)
   |       |

1. MN1X sends Echo Request w/ HaO
2. MN1X receives BE (*2)

JUDGEMENT

(*1) PASS: no response
(*2) PASS: MN1X receives BE
    packet format is:
        Binding_Error_message_from_HA_to_MN.gif

REFERENCE

   Before accepting a Binding Update, the receiving node MUST validate
   the Binding Update according to the following tests:

(snip)

   If the Home Registration (H) bit is set, the Nonce Indices mobility
   option MUST NOT be present.

For packets carrying Binding Updates that fail to satisfy all of these tests for any reason other than insufficiency of the Sequence Number, registration type change, or expired nonce index values, they MUST be silently discarded.