// // $Copyright$ // // $Name: $ // // $Id: RTU_A_DM_IPv6H.def,v 1.1.1.1 2000/10/31 22:38:51 sekiya Exp $ // #include "./RTU_A_common.def" //====================================================================== // // AH/ESP definition // //====================================================================== // // Real packet definition with IPsec AH // FEM_hdr_ipv6_exth( ahtun_from_sg1_net2_real1 , hether_router2nut, { _SRC(v6(IPSEC_SG1_NET2_ADDR)); _DST(v6(IPSEC_SG1_NET0_ADDR)); // this address will be modified to // _DST(v6(IPSEC_NUT_NET0_ADDR)); // this address in }, { header = _HDR_IPV6_NAME(ahtun_from_sg1_net2_real1); exthdr = ah_from_sg_sn2; upper = _PACKET_IPV6_NAME(echo_request_from_host1_net4_to_host1_net1_on_net0); } ) FEM_hdr_ipv6_exth( ahtun_from_sg1_net2_real2 , hether_router2nut, { _SRC(v6(IPSEC_SG2_NET2_ADDR)); // this address will be modified to // _SRC(v6(IPSEC_SG1_NET2_ADDR)); // this address in _DST(v6(IPSEC_NUT_NET0_ADDR)); }, { header = _HDR_IPV6_NAME(ahtun_from_sg1_net2_real2); exthdr = ah_from_sg_sn3; upper = _PACKET_IPV6_NAME(echo_request_from_host1_net4_to_host1_net1_on_net0); } ) FEM_hdr_ipv6_exth( ahtun_from_sg1_net2_real3 , hether_router2nut, { _SRC(v6(IPSEC_SG1_NET2_ADDR)); _DST(v6(IPSEC_NUT_NET0_ADDR)); HopLimit=64; }, { header = _HDR_IPV6_NAME(ahtun_from_sg1_net2_real3); exthdr = ah_from_sg_sn4; upper = _PACKET_IPV6_NAME(echo_request_from_host1_net4_to_host1_net1_on_net0); } ) //====================================================================== // // Modified packet definition with IPsec AH // // Common use Ether Header Hdr_Ether hether_router2nut_0x86dd { SourceAddress=ether(IPSEC_ROUTER_NET0_MAC_ADDR); DestinationAddress=nutether(); Type=0x86dd; // need to specify IPv6 } // IPv6 Dst address is modified Frame_Ether ahtun_from_sg1_net2_dm_ipv6h_dst_echo_request_from_host1_net4_to_host1_net1_on_net0 { header=hether_router2nut_0x86dd; packet=ahtun_from_sg1_net2_modpkt1; } Payload ahtun_from_sg1_net2_modpkt1 { data=substr(ahtun_from_sg1_net2_real1, 14, 38); data={0xb0,0xb0}; // modify dstaddr IPSEC_SG1_NET0_ADDR -> IPSEC_NUT_NET0_ADDR data=substr(ahtun_from_sg1_net2_real1, 54, 24); // AH data=right(ahtun_from_sg1_net2_real1, 78); // Tunnel Inner Packet } // IPv6 Src address is modified Frame_Ether ahtun_from_sg1_net2_dm_ipv6h_src_echo_request_from_host1_net4_to_host1_net1_on_net0 { header=hether_router2nut_0x86dd; packet=ahtun_from_sg1_net2_modpkt2; } Payload ahtun_from_sg1_net2_modpkt2 { data=substr(ahtun_from_sg1_net2_real2, 14, 22); data={0xa1,0xa1}; // modify dstaddr IPSEC_SG2_NET2_ADDR -> IPSEC_SG1_NET2_ADDR data=substr(ahtun_from_sg1_net2_real2, 38, 40);// IPdst, AH data=right(ahtun_from_sg1_net2_real2, 78); // Tunnel Inner Packet } // IPv6 hoplimit is modified Frame_Ether ahtun_from_sg1_net2_dm_ipv6h_hlim_echo_request_from_host1_net4_to_host1_net1_on_net0 { header=hether_router2nut_0x86dd; packet=ahtun_from_sg1_net2_modpkt3; } Payload ahtun_from_sg1_net2_modpkt3 { data=substr(ahtun_from_sg1_net2_real3, 14, 7); data=0x0f; // modify HopLimit 64->15 data=substr(ahtun_from_sg1_net2_real3, 22, 56); // IPsrc, IPdst, AH data=right(ahtun_from_sg1_net2_real3, 78); // Tunnel Inner Packet } //end