# NAME

      RTU_E_Out_Padding_null - Router Tunnel Mode ESP Outbound Padding NULL

# TARGET

      Router

# SYNOPSIS

      RTU_E_Out_Padding_null.seq [-tooloption ...] -pkt RTU_E_Padding_null.def
        -tooloption : v6eval tool option
      See also RTU_E_common.def and RTU_common.def

# INITIALIZATION

For details of Network Topology, see 00README

Set NUT's SAD and SPD as following:

                               (Link0) (Link1)
                NET4   NET2      NET0   NET1
      HOST1_NET4 -- SG1 -- Router -- NUT -- HOST1_NET1
                     <====tunnel=======

Security Association Database (SAD)

source address | NUT_NET0
destination address | SG1_NET2
SPI | 0x1000
mode | tunnel
protocol | ESP
ESP algorithm | NULL
ESP authentication algorithm | HMAC-MD5
ESP authentication algorithm key | TAHITEST89ABCDEF

Security Policy Database (SPD)

tunnel source address | NUT_NET0
tunnel destination address | SG1_NET2
source address | NET1
destination address | NET4
upper spec | any
direction | out
protocol | ESP
mode | tunnel

# TEST PROCEDURE

     Tester                      Target                      Tester
                  (Link0)                     (Link1)
       |                           |                           |
       |                           |<--------------------------|
       |                           |      ICMP Echo Reply      |
       |                           |                           |
       |<--------------------------|                           |
       |      ICMP Echo Reply      |                           |
       |        (with ESP)         |                           |
       |                           |                           |
       |                           |                           |
       v                           v                           v

1. Send ICMP Echo Reply to Link1
2. Receive ICMP Echo Reply with ESP from Link0

ICMP Echo Reply to Link1

IP Header | Source Address | HOST1_NET1
| Destination Address | HOST1_NET4
ICMP | Type | 129 (Echo Reply)
| Data Length | 7

ICMP Echo Reply with ESP from Link0

IP Header | Source Address | NUT_NET0
| Destination Address | SG1_NET2
ESP | SPI | 0x1000
| Algorithm | NULL
| Authentication | HMAC-MD5
| Authentication Key | TAHITEST89ABCDEF
| Padding | Sequential
| Padding Length | 3
IP Header | Source Address | HOST1_NET1
| Destination Address | HOST1_NET4
ICMP | Type | 129 (Echo Reply)
| Data Length | 7

# JUDGMENT

      PASS: ICMP Echo Reply with ESP received

# SEE ALSO

      perldoc V6evalTool

      IPSEC.html IPsec Test Common Utility