RE: Test tools for IKE

"Peter Gingras" <pgingras@aviancommunications.com> Wed, 24 April 2002 18:51 UTC

Received: from lists.tislabs.com (portal.gw.tislabs.com [192.94.214.101]) by above.proper.com (8.11.6/8.11.3) with ESMTP id g3OIpEa22913; Wed, 24 Apr 2002 11:51:14 -0700 (PDT)
Received: by lists.tislabs.com (8.9.1/8.9.1) id OAA18946 Wed, 24 Apr 2002 14:11:54 -0400 (EDT)
X-MimeOLE: Produced By Microsoft Exchange V6.0.4417.0
content-class: urn:content-classes:message
MIME-Version: 1.0
Subject: RE: Test tools for IKE
Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C1EBB7.BA88EF7A"
Date: Wed, 24 Apr 2002 13:44:48 -0400
Message-ID: <DE6495F924D2304DA0FAD60FC1C006013AD8DD@AVIANSERVER.aviancommunications.com>
Thread-Topic: Test tools for IKE
Thread-Index: AcHrsCIRjEO79gomRqKgySbDG7XkxgABBnyA
From: Peter Gingras <pgingras@aviancommunications.com>
To: James Comen <jcomen@torrentnet.com>, ipseclist <ipsec@lists.tislabs.com>
Sender: owner-ipsec@lists.tislabs.com
Precedence: bulk

Check out the "Researched National Institute of Standards and
Technology" website for IPsec interoperability test tools and platform
support.    

http://csrc.nist.gov/ipsec/ 

Contact NIST and requested copies of the following Linux code:
- Cerberus - adds IP communications security to the system 
- PlutoPlus - conducts secret key negotiations and management

Hopefully you will have better luck than I did.  The code is currently
not available via WWW download so you must request a distribution of the
NIST IPsec Reference Implementation (Cerberus) and IKE Reference
Implementation (PlutoPlus) on a floppy.  I put my request in two months
age; I received confirmation of my request but have yet to receive the
software.

Peter

------------------------------------------------------------------------
------------------------
Peter Gingras			pgingras@avianwireless.com
Avian Communications		67 Forest St., Marlborough, MA
(v) 508-597-0674
------------------------------------------------------------------------
------------------------

 -----Original Message-----
From: 	James Comen [mailto:jcomen@torrentnet.com] 
Sent:	Wednesday, April 24, 2002 10:40 AM
To:	ipseclist
Subject:	Test tools for IKE

Hi,
We're working on an IKE implementation and trying to do interoperability
testing.
Does anyone know of any test tools which we can test our IKE
implementation against?

It would be great if we could find a tool which would allow us to
monitor the skeyid{_*}
creation process on the remote side to compare against our side.

Does such a tool exist?
How does one verify the correctness of their skeyid's? (other than
attempting an IKE negotiation
with an off the shelf product)

Thanks
Jim

-- 
Jim Comen                           jcomen@torrentnet.com
Ericsson IP Infrastructure          Voice (919) 472 - 9932
920 Main Campus Drive, Suite 544    Fax   (919) 472 - 9999
Raleigh, NC 27606