# NAME

      HTR_A_In_DM_IPv6H_hlim - Host Transport Mode AH Inbound, Undetect modification of IPv6 header hoplimit with AH

# TARGET

      Host

# SYNOPSIS

      HTR_A_In_DM_IPv6H_hlim.seq [-tooloption ...] -pkt HTR_A_DM_IPv6H.def
        -tooloption : v6eval tool option
      See also HTR_A_common.def and HTR_common.def

# INITIALIZATION

For details of Network Topology, see 00README

Set NUT's SAD and SPD as following:

                  NET5      NET3
        HOST1_NET5 -- Router -- NUT
             -----transport----->

Security Association Database (SAD)

source address | HOST1_NET5
destination address | NUT_NET3
SPI | 0x1000
mode | transport
protocol | AH
AH algorithm | HMAC-MD5
AH algorithm key | TAHITEST89ABCDEF

Security Policy Database (SPD)

source address | HOST1_NET5
destination address | NUT_NET3
upper spec | any
direction | in
protocol | AH
mode | transport

# TEST PROCEDURE

     Tester                      Target
       |                           |
       |-------------------------->|
       |      ICMP Echo Request    |
       |         with AH           |
       |                           |
       |<--------------------------|
       |      ICMP Echo Reply      |
       |        Judgement #1       |
       |                           |
       |-------------------------->|
       |      ICMP Echo Request    |
       |         with AH           |
       |  (HopLimit of IPv6H is modified)
       |                           |
       |<--------------------------|
       |      ICMP Echo Reply      |
       |        Judgement #2       |
       |                           |
       v                           v

1. Send ICMP Echo Request with AH
2. Receive ICMP Echo Reply
3. Send ICMP Echo Request with AH (HopLimit of IPv6H is modified)
4. Receive ICMP Echo Reply

ICMP Echo Request with AH

IP Header | Source Address | HOST1_NET5
| Destination Address | NUT_NET3
AH | SPI | 0x1000
| Sequence Number | 1
| Algorithm | HMAC-MD5
| Key | TAHITEST89ABCDEF
ICMP | Type | 128 (Echo Request)

ICMP Echo Reply

IP Header | Source Address | NUT_NET3
| Destination Address | HOST1_NET5
ICMP | Type | 129 (Echo Reply)

ICMP Echo Request with AH (HopLimit of IPv6H is modified)

IP Header | Source Address | HOST1_NET5
| Destination Address | NUT_NET3
| Hop Limit | 15 (64 is original)
AH | SPI | 0x1000
| Sequence Number | 2
| Algorithm | HMAC-MD5
| Key | TAHITEST89ABCDEF
ICMP | Type | 128 (Echo Request)

# JUDGMENT

      Judgement #1:
          Receive ICMP Echo Reply (MUST)
      Judgement #2:
          Receive ICMP Echo Reply (MUST)

# SEE ALSO

      perldoc V6evalTool

      IPSEC.html IPsec Test Common Utility