// // Copyright (C) 1999,2000 Yokogawa Electric Corporation and // YDC Corporation. // All rights reserved. // // Redistribution and use of this software in source and binary // forms, with or without modification, are permitted provided that // the following conditions and disclaimer are agreed and accepted // by the user: // // 1. Redistributions of source code must retain the above copyright // notice, this list of conditions and the following disclaimer. // // 2. Redistributions in binary form must reproduce the above copyright // notice, this list of conditions and the following disclaimer in // the documentation and/or other materials provided with // the distribution. // // 3. Neither the names of the copyrighters, the name of the project // which is related to this software (hereinafter referred to as // "project") nor the names of the contributors may be used to // endorse or promote products derived from this software without // specific prior written permission. // // 4. No merchantable use may be permitted without prior written // notification to the copyrighters. // // 5. The copyrighters, the project and the contributors may prohibit // the use of this software at any time. // // THIS SOFTWARE IS PROVIDED BY THE COPYRIGHTERS, THE PROJECT AND // CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING // BUT NOT LIMITED THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS // FOR A PARTICULAR PURPOSE, ARE DISCLAIMED. IN NO EVENT SHALL THE // COPYRIGHTERS, THE PROJECT OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, // INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES // (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR // SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) // HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, // STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING // IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE // POSSIBILITY OF SUCH DAMAGE. // // $Name: $ // // $Id: RTU_A_DM_RH.def,v 1.1.1.1 2000/10/31 22:39:38 sekiya Exp $ // // // Network topology // -----> SG1_NET0 // SG1_NET2 ------> Router -----> NUT // NET2 NET0 #include "./RTU_A_common.def" //====================================================================== // // AH/ESP definition // //====================================================================== // // Routing Header // Hdr_Routing rh_SG1N2_to_R { SegmentsLeft = 1; Address = v6(IPSEC_NUT_NET0_ADDR); } Hdr_Routing rh_R_to_NUT { SegmentsLeft = 0; Address = v6(IPSEC_ROUTER_NET2_ADDR); } Hdr_Routing rh_R_to_SG1N0 { SegmentsLeft = 0; Address = v6(IPSEC_ROUTER_NET2_ADDR); } //====================================================================== // // Real packet definition with IPsec AH // FEM_hdr_ipv6_exth( ahtun_from_sg1_net2_rh_echo_request_from_host1_net4_to_host1_net1_on_net0, hether_router2nut, { _SRC(v6(IPSEC_SG1_NET2_ADDR)); _DST(v6(IPSEC_NUT_NET0_ADDR)); }, { header = _HDR_IPV6_NAME(ahtun_from_sg1_net2_rh_echo_request_from_host1_net4_to_host1_net1_on_net0); exthdr = rh_R_to_NUT; exthdr = ah_from_sg_sn2; upper = _PACKET_IPV6_NAME(echo_request_from_host1_net4_to_host1_net1_on_net0); } ) FEM_hdr_ipv6_exth( ahtun_from_sg1_net2_rh_real1, hether_router2nut, { _SRC(v6(IPSEC_SG1_NET2_ADDR)); _DST(v6(IPSEC_SG1_NET0_ADDR)); // this address will be modified to // _DST(v6(IPSEC_NUT_NET0_ADDR)); // this address in }, { header = _HDR_IPV6_NAME(ahtun_from_sg1_net2_rh_real1); exthdr = rh_R_to_SG1N0; exthdr = ah_from_sg_sn3; upper = _PACKET_IPV6_NAME(echo_request_from_host1_net4_to_host1_net1_on_net0); } ) FEM_hdr_ipv6_exth( ahtun_from_sg1_net2_rh_real2, hether_router2nut, { _SRC(v6(IPSEC_SG1_NET2_ADDR)); _DST(v6(IPSEC_NUT_NET0_ADDR)); }, { header = _HDR_IPV6_NAME(ahtun_from_sg1_net2_rh_real2); exthdr = rh_R_to_NUT; //RH last router address will be modified exthdr = ah_from_sg_sn4; upper = _PACKET_IPV6_NAME(echo_request_from_host1_net4_to_host1_net1_on_net0); } ) //====================================================================== // // Modified packet definition with IPsec AH // // Common use Ether Header Hdr_Ether hether_router2nut_0x86dd { SourceAddress=ether(IPSEC_ROUTER_NET0_MAC_ADDR); DestinationAddress=nutether(); Type=0x86dd; // need to specify IPv6 } // IPv6 Dst address is modified Frame_Ether ahtun_from_sg1_net2_dm_rh_ipv6h_dst_echo_request_from_host1_net4_to_host1_net1_on_net0 { header=hether_router2nut_0x86dd; packet=ahtun_from_sg1_net2_rh_modpkt1; } Payload ahtun_from_sg1_net2_rh_modpkt1 { data=substr(ahtun_from_sg1_net2_rh_real1, 14, 38); data={0xb0,0xb0}; // modify dstaddr IPSEC_SG1_NET0_ADDR -> IPSEC_NUT_NET0_ADDR data=substr(ahtun_from_sg1_net2_rh_real1, 54, 48); //RH,AH data=right(ahtun_from_sg1_net2_rh_real1, 102); //Tunnel Inner packet } // RH last router address is modified Frame_Ether ahtun_from_sg1_net2_dm_rh_lastaddr_echo_request_from_host1_net4_to_host1_net1_on_net0 { header=hether_router2nut_0x86dd; packet=ahtun_from_sg1_net2_rh_modpkt2; } Payload ahtun_from_sg1_net2_rh_modpkt2 { data=substr(ahtun_from_sg1_net2_rh_real2, 14, 62); data={0xc1,0xc1}; // modify dstaddr IPSEC_ROUTER_NET2_ADDR -> IPSEC_HOST1_NET2_ADDR data=substr(ahtun_from_sg1_net2_rh_real2, 78, 24); //AH data=right(ahtun_from_sg1_net2_rh_real2, 102); //Tunnel Inner packet }