Login

NetworkTester

-
Layer 4-7 Test Solution

 

IPsec Testing


IPsec Trends

Manufacturers are integrating IPsec into devices ranging from small VPN concentrators and firewalls into multi-function data center appliances, large enterprise routers, and next-generation security gateways that support IPv6 and IPsecv6. With the move to teleworking and site-to-site VPNs, these devices need to support more and more clients. Performance is paramount.

 

New Test Challenges

These trends introduce new test challenges for equipment developers, network operators and service providers:

  • Performance and scalability cannot be characterized by simple vendor specifications. Every network, every configuration, every user profile is different.
  • It is no longer sufficient to test IPsec in isolation. Performance, as experienced by users, must be measured using real, stateful traffic from a mix of applications over multiple tunnels.
  • Many devices require radical redesign of hardware and software to support IPsecv6, IPv4/v6 coexistence and resiliency against IPv6 DoS attacks.

Testing IPsec devices has become more complex but more important than ever.

 

NetworkTester -- An Integrated Solution

By taking an integrated approach to testing, the Agilent NetworkTester accelerates your development or deployment of IPsec-capable devices and networks.
The NetPressure application covers all your network security and content networking test needs:

  • Client & server emulation are integrated in one application. You don't need to re-enter test parameters.
  • Measure performance using real, stateful traffic, from a mix of applications, over IPsec tunnels.
  • Support for IPsec, IPv6 and IPsecv6 are seamlessly integrated into the powerful Test Plan environment. Tere is no need for scripting!

More Information

In Nov 2004, Agilent's NetworkTester verified IPsec / IPv6 interoperability and performance with leading network security vendors at the University of New Hampshire Interoperability Labs (UNH-IOL).
  • Test FIR.6.1: IPsecv6 Tunneling
  • Test FIR.6.2: IPsecv6 Tunnel Establishment
  • Test FIR.6.3: Traffic over IPsecv6 Tunnel
  • Test FIR.6.4: Mixed IPv6 and IPsecv6 traffic
  • Relevant RFCs (Non Agilent Link)