| Subject | 2.6.1 | 26(s20040119) |
|---|---|---|
| Overall | PASS: 47( 77.0%) WARN: 1( 1.6%) FAIL: 13( 21.3%) |
PASS: 44( 72.1%) WARN: 1( 1.6%) FAIL: 16( 26.2%) |
| Set Global Address and Check (Host) | PASS | PASS |
| Outbound AH packet (HMAC-MD5) | PASS | PASS |
| Outbound AH packet (HMAC-SHA1) | PASS | PASS |
| Outbound Header Order (Fragment Header vs AH) | PASS | PASS |
| Connect two SA bundles with different spi, different IPdst | PASS | PASS |
| Connect two SA bundles with same spi, different IPdst | PASS | PASS |
| Inbound AH packet (HMAC-MD5) | PASS | PASS |
| Inbound AH packet (HMAC-SHA1) | FAIL | FAIL |
| Inbound Header Order (Fragment Header vs AH) | PASS | PASS |
| Connect two SA bundles with different spi, different IPsrc | PASS | PASS |
| Connect two SA bundles with different spi, same IPsrc | PASS | PASS |
| Detect modification of IPv6 header IP dst address with AH | PASS | PASS |
| Detect modification of IPv6 header IP src address with AH | PASS | PASS |
| Undetect modification of IPv6 header hoplimit with AH | PASS | PASS |
| Detect modification of IPv6 header IP dst address with Routing header and AH | PASS | PASS |
| Detect modification of Routing header "last router address" with AH | PASS | PASS |
| Detect modification of DstOpt header option type before AH | PASS | PASS |
| Detect modification of DstOpt header option len before AH | PASS | PASS |
| Detect modification of DstOpt header option data before AH | PASS | PASS |
| Detect modification of DstOpt header option data after AH | PASS | PASS |
| Detect modification of HBHOpt header option type with AH | PASS | PASS |
| Detect modification of HBHOpt header option len with AH | PASS | PASS |
| Detect modification of HBHOpt header option data with AH | PASS | PASS |
| Detect modification of payload with AH | PASS | PASS |
| Outbound ESP packet (DES-CBC) | PASS | PASS |
| Outbound ESP packet (3DES-CBC) | PASS | FAIL |
| Outbound ESP packet (NULL, HMAC-MD5) | PASS | FAIL |
| Outbound ESP packet (NULL, HMAC-SHA1) | PASS | FAIL |
| Outbound ESP packet (DES-CBC, HMAC-MD5) | FAIL | PASS |
| Outbound ESP packet (DES-CBC, HMAC-SHA1) | PASS | PASS |
| Outbound ESP packet (3DES-CBC, HMAC-MD5) | FAIL | PASS |
| Outbound ESP packet (3DES-CBC, HMAC-SHA1) | FAIL | PASS |
| Outbound Padding (NULL, HMAC-MD5) | PASS | FAIL |
| Outbound Padding (DES-CBC, HMAC-MD5) | PASS | FAIL |
| Outbound Padding (3DES-CBC, HMAC-MD5) | PASS | PASS |
| Header Order (Fragment Header vs ESP) | PASS | PASS |
| Connect two SA bundles with different spi, different IPdst | PASS | PASS |
| Connect two SA bundles with same spi, different IPdst | PASS | PASS |
| Inbound ESP packet (DES-CBC) | PASS | PASS |
| Inbound ESP packet (3DES-CBC) | FAIL | FAIL |
| Inbound ESP packet (Invalid Encryption Key) | PASS | PASS |
| Inbound ESP packet (NULL, HMAC-MD5) | PASS | PASS |
| Inbound ESP packet (NULL, HMAC-SHA1) | FAIL | FAIL |
| Inbound ESP packet (DES-CBC, HMAC-MD5) | FAIL | FAIL |
| Inbound ESP packet (DES-CBC, HMAC-SHA1) | FAIL | FAIL |
| Inbound ESP packet (3DES-CBC, HMAC-MD5) | FAIL | FAIL |
| Inbound ESP packet (3DES-CBC, HMAC-SHA1) | FAIL | FAIL |
| Inbound ESP packet (Invalid Authentication Key) | FAIL | FAIL |
| Inbound Padding (NULL, HMAC-MD5) | PASS | PASS |
| Inbound Padding (DES-CBC, HMAC-MD5) | FAIL | FAIL |
| Inbound Padding (3DES-CBC, HMAC-MD5) | PASS | PASS |
| Padding Length is 255 (max) | PASS | PASS |
| Invalid Padding | WARN | WARN |
| Header Order (Fragment Header vs ESP) | PASS | FAIL |
| Connect two SA bundles with different spi, different IPsrc | PASS | PASS |
| Connect two SA bundles with different spi, same IPsrc | PASS | PASS |
| Outbound AH-ESP combination | PASS | PASS |
| Inbound AH-ESP combination | PASS | PASS |
| Select SPD entry (policy=discard,none) | PASS | PASS |
| Connect two SA bundles with same spi, same IPsrc, different protocol | FAIL | FAIL |
| Select SPD entry (policy=discard,none) | PASS | PASS |
| Set Global Address and Check (Router) | Router Only | Router Only |
| Outbound AH packet (HMAC-MD5) | Router Only | Router Only |
| Outbound AH packet (HMAC-SHA1) | Router Only | Router Only |
| Connect two SA bundles with different spi, different IPdst | Router Only | Router Only |
| Connect two SA bundles with same spi, different IPdst | Router Only | Router Only |
| Inbound AH Tunnel packet (with SPD entry) | Router Only | Router Only |
| Inbound AH packet (HMAC-MD5) | Router Only | Router Only |
| Inbound AH packet (HMAC-SHA1) | Router Only | Router Only |
| Header Order (Destination Options Header vs AH) | Router Only | Router Only |
| Connect two SA bundles with different spi, different IPsrc | Router Only | Router Only |
| Connect two SA bundles with different spi, same IPsrc | Router Only | Router Only |
| Detect modification of IPv6 header IP dst address with AH | Router Only | Router Only |
| Detect modification of IPv6 header IP src address with AH | Router Only | Router Only |
| Undetect modification of IPv6 header hoplimit with AH | Router Only | Router Only |
| Detect modification of IPv6 header IP dst address with Routing header and AH | Router Only | Router Only |
| Detect modification of Routing header "last router address" with AH | Router Only | Router Only |
| Detect modification of DstOpt header option type before AH | Router Only | Router Only |
| Detect modification of DstOpt header option len before AH | Router Only | Router Only |
| Detect modification of DstOpt header option data before AH | Router Only | Router Only |
| Detect modification of HBHOpt header option type with AH | Router Only | Router Only |
| Detect modification of HBHOpt header option len with AH | Router Only | Router Only |
| Detect modification of HBHOpt header option data with AH | Router Only | Router Only |
| Detect modification of inner IPv6 header hoplimit of AH tunnel | Router Only | Router Only |
| Detect modification of inner payload of AH tunnel | Router Only | Router Only |
| Outbound ESP packet (DES-CBC) | Router Only | Router Only |
| Outbound ESP packet (3DES-CBC) | Router Only | Router Only |
| Outbound ESP packet (NULL, HMAC-MD5) | Router Only | Router Only |
| Outbound ESP packet (NULL, HMAC-SHA1) | Router Only | Router Only |
| Outbound ESP packet (DES-CBC, HMAC-MD5) | Router Only | Router Only |
| Outbound ESP packet (DES-CBC, HMAC-SHA1) | Router Only | Router Only |
| Outbound ESP packet (3DES-CBC, HMAC-MD5) | Router Only | Router Only |
| Outbound ESP packet (3DES-CBC, HMAC-SHA1) | Router Only | Router Only |
| Outbound Padding (NULL, HMAC-MD5) | Router Only | Router Only |
| Outbound Padding (DES-CBC, HMAC-MD5) | Router Only | Router Only |
| Outbound Padding (3DES-CBC, HMAC-MD5) | Router Only | Router Only |
| Connect two SA bundles with different spi, different IPdst | Router Only | Router Only |
| Connect two SA bundles with same spi, different IPdst | Router Only | Router Only |
| Inbound ESP Tunnel packet (with SPD entry) | Router Only | Router Only |
| Inbound ESP packet (DES-CBC) | Router Only | Router Only |
| Inbound ESP packet (3DES-CBC) | Router Only | Router Only |
| Inbound ESP packet (Invalid Encryption Key) | Router Only | Router Only |
| Inbound ESP packet (NULL, HMAC-MD5) | Router Only | Router Only |
| Inbound ESP packet (NULL, HMAC-SHA1) | Router Only | Router Only |
| Inbound ESP packet (DES-CBC, HMAC-MD5) | Router Only | Router Only |
| Inbound ESP packet (DES-CBC, HMAC-SHA1) | Router Only | Router Only |
| Inbound ESP packet (3DES-CBC, HMAC-MD5) | Router Only | Router Only |
| Inbound ESP packet (3DES-CBC, HMAC-SHA1) | Router Only | Router Only |
| Inbound ESP packet (Invalid Authentication Key) | Router Only | Router Only |
| Header Order (Destination Options Header vs ESP) | Router Only | Router Only |
| Inbound Padding (NULL, HMAC-MD5) | Router Only | Router Only |
| Inbound Padding (DES-CBC, HMAC-MD5) | Router Only | Router Only |
| Inbound Padding (3DES-CBC, HMAC-MD5) | Router Only | Router Only |
| Padding Length is 255 (max) | Router Only | Router Only |
| Invalid Padding | Router Only | Router Only |
| Connect two SA bundles with different spi, different IPsrc | Router Only | Router Only |
| Connect two SA bundles with different spi, same IPsrc | Router Only | Router Only |
| Connect two SA bundles with same spi, same IPsrc, different protocol | Router Only | Router Only |