HTR_C_Out_ah_esp - Host Transport Mode AH-ESP Outbound
Host
HTR_C_Out_ah_esp.seq [-tooloption ...] -pkt HTR_C_ah_esp.def -tooloption : v6eval tool option See also HTR_E_common.def and HTR_common.def
For details of Network Topology, see 00README
Set NUT's SAD and SPD as following:
NET5 NET3 HOST1_NET5 -- Router -- NUT <----transport------
Security Association Database (SAD) for AH
source address | NUT_NET3 |
destination address | HOST1_NET5 |
SPI | 0x1000 |
mode | transport |
protocol | AH |
AH algorithm | HMAC-MD5 |
AH algorithm key | 0123456789ABCDEF |
Security Association Database (SAD) for ESP
source address | NUT_NET3 |
destination address | HOST1_NET5 |
SPI | 0x1000 |
mode | transport |
protocol | ESP |
ESP algorithm | DES-CBC |
ESP algorithm key | 01234567 |
Security Policy Database (SPD)
source address | NUT_NET3 |
destination address | HOST1_NET5 |
upper spec | any |
direction | out |
protocol | AH-ESP |
mode | transport |
Tester Target | | |-------------------------->| | ICMP Echo Request | | | |<--------------------------| | ICMP Echo Reply | | (with AH-ESP) | | | v v
ICMP Echo Request
IP Header | Source Address | HOST1_NET5 |
Destination Address | NUT_NET3 | |
ICMP | Type | 128 (Echo Request) |
ICMP Echo Reply with AH-ESP
IP Header | Source Address | NUT_NET3 |
Destination Address | HOST1_NET5 | |
AH | SPI | 0x1000 |
Algorithm | HMAC-MD5 | |
Key | 0123456789ABCDEF | |
ESP | SPI | 0x1000 |
Algorithm | DES-CBC | |
Key | 01234567 | |
ICMP | Type | 129 (Echo Reply) |
PASS: ICMP Echo Reply with AH-ESP received
perldoc V6evalTool
IPSEC.html IPsec Test Common Utility