Hi, all.
The newest IPsec tester is available now.
This release is focusing to support the passive node.
You may remember that ipsec test tools support IPsec v3 at v1.9.0.
But from v1.9.0,
ping6 application is required
to test the granularity of SPD selector as ICMPv6 type.
This has big impact to test small appliances.
Now, v1.9.1 resolved this problem
with alternate method not to use ping6 application.
If your device doesn't have ping6 application
but you need to test against better granularity of SPD,
please check the newest.
Here is the differences from the previous.
2009/01/08 Yukiyo Akisada
M ipsec.p2/IPSEC.pm
M ipsec.p2/keys.def
M ipsec.p2/keys.pl
M ipsec.p2/p2_ALGO_common.def
M ipsec.p2/p2_HTR_E_ICMP_Type.def
M ipsec.p2/p2_HTR_E_SelectSPD_ICMP_Type.seq
M ipsec.p2/p2_ipsec_config
- support the passive node which doesn't have ping6 application
for Test 5.1.2. Select SPD (ICMP Type) in End-Node Test
- for switching to support the passive node,
add the configurable parameters PASSIVE_NODE and
USE_PORT_UNREACHABLE into p2_ipsec_config
Thanks,
--
Yukiyo Akisada <akisada@tahi.org>