80 likes | 231 Views
IPv6 IPsec test in connectathon2000. Mar 30, 2000 at IETF47-ipngwg Hiroshi Hoshino TAHI Project www.tahi.org. IPv6 IPsec test in connectathon2000. Interoperability test TAHI IPsec IPv6 conformance test. IPv6 IPsec interoperability test. There are 4 or 5 implementations attended
E N D
IPv6 IPsec test in connectathon2000 Mar 30, 2000 at IETF47-ipngwg Hiroshi Hoshino TAHI Project www.tahi.org
IPv6 IPsec test in connectathon2000 • Interoperability test • TAHI IPsec IPv6 conformance test
IPv6 IPsec interoperability test • There are 4 or 5 implementations attended • KAME have tested with Sun Solaris • Manual keying (no IKE)
IPv6 IPsec interoperability test • ESP is easier than AH • AH common pitfalls: • Mutable/immutable bits • Routing headers • Chained headers • Multiple AH case (not documented well in RFC2402)
TAHI IPsec IPv6 conformance test • Free test suites for IPv6 • The test in connectathon2000http://www.tahi.org/ipsec-demo/ • The test coverage • AH or ESP • transport mode for a host ortunnel mode for a router • Manual keying (no IKE) • IPv6 (IPv4 under development)
TAHI IPsec IPv6 conformance test • Two implementations attended • IBM-AIX 4.3.3 • Sun Solaris