No.Title ResultLogScriptDump

Section EN-I. End Node - Initiator




Sub-Section 1. Endpoint-to-Endpoint Transport



1Global SetupPASSXXLink0

Group 1. The Initial Exchanges




Sub-Group 1. Header and Payload Formats



2Test IKEv2.EN.I.1.1.1.1: Sending IKE_SA_INIT requestPASSXXLink0
3Test IKEv2.EN.I.1.1.1.2: Sending IKE_AUTH requestPASSXXLink0
4Test IKEv2.EN.I.1.1.1.3: Use of CHILD_SAFAILXXLink0

Sub-Group 2. Use of Retransmission Timers



5Test IKEv2.EN.I.1.1.2.1: Retransmission of IKE_SA_INIT requestSKIP-X-
6Test IKEv2.EN.I.1.1.2.2: Stop of retransmission of IKE_SA_INIT requestSKIP-X-
7Test IKEv2.EN.I.1.1.2.3: Retransmission of IKE_AUTH requestSKIP-X-
8Test IKEv2.EN.I.1.1.2.4: Stop of retransmission of IKE_AUTH requestSKIP-X-

Sub-Group 3. State Synchronization and Connection Timeouts



9Test IKEv2.EN.I.1.1.3.1: State Synchronization with ICMP messageSKIP-X-
10Test IKEv2.EN.I.1.1.3.2: State Synchronization with IKE messageSKIP-X-
11Test IKEv2.EN.I.1.1.3.3: Close Connection when repeated attempts failSKIP-X-
12Test IKEv2.EN.I.1.1.3.4: Close Connection when receiving INITIAL_CONTACTSKIP-X-
13Test IKEv2.EN.I.1.1.3.5: Sending Liveness checkSKIP-X-
14Test IKEv2.EN.I.1.1.3.6: Sending Delete Payload for IKE_SASKIP-X-
15Test IKEv2.EN.I.1.1.3.7: Sending Delete Payload for CHILD_SASKIP-X-
16Test IKEv2.EN.I.1.1.3.8: Sending Liveness check with unprotected messagesSKIP-X-

Sub-Group 4. Version Numbers and Forward Compatibility




Test IKEv2.EN.I.1.1.4.1: Unrecognized payload types and critical bit is not set



17Test IKEv2.EN.I.1.1.4.1 Part A: Invalid payload type 1SKIP-X-
18Test IKEv2.EN.I.1.1.4.1 Part B: Invalid payload type 32SKIP-X-
19Test IKEv2.EN.I.1.1.4.1 Part C: Invalid payload type 49SKIP-X-
20Test IKEv2.EN.I.1.1.4.1 Part D: Invalid payload type 255SKIP-X-

Test IKEv2.EN.I.1.1.4.2: Unrecognized payload types and critical bit is set



21Test IKEv2.EN.I.1.1.4.2 Part A: Invalid payload type 1SKIP-X-
22Test IKEv2.EN.I.1.1.4.2 Part B: Invalid payload type 32SKIP-X-
23Test IKEv2.EN.I.1.1.4.2 Part C: Invalid payload type 49SKIP-X-
24Test IKEv2.EN.I.1.1.4.2 Part D: Invalid payload type 255SKIP-X-

Sub-Group 5. Cookies



25Test IKEv2.EN.I.1.1.5.1: Retrying IKE_SA_INIT request with a Notify payload of type COOKIESKIP-X-
26Test IKEv2.EN.I.1.1.5.2: Interaction of COOKIE and INVALID_KE_PAYLOADSKIP-X-
27Test IKEv2.EN.I.1.1.5.3: Interaction of COOKIE and INVALID_KE_PAYLOAD with unoptimized ResponderSKIP-X-

Sub-Group 6. Cryptographic Algorithm Negotiation




Test IKEv2.EN.I.1.1.6.1: Cryptographic Algorithm Negotiation for IKE_SA



28Test IKEv2.EN.I.1.1.6.1 Part A: Encryption Algorithm ENCR_AES_CBCSKIP-X-
29Test IKEv2.EN.I.1.1.6.1 Part B: Encryption Algorithm ENCR_AES_CTRSKIP-X-
30Test IKEv2.EN.I.1.1.6.1 Part C: Pseudo-random Function PRF_AES128_XCBCSKIP-X-
31Test IKEv2.EN.I.1.1.6.1 Part D: Integrity Algorithm AUTH_AES_XCBC_96SKIP-X-
32Test IKEv2.EN.I.1.1.6.1 Part E: D-H Group Group 14SKIP-X-

Test IKEv2.EN.I.1.1.6.2: Cryptographic Algorithm Negotiation for CHILD_SA



33Test IKEv2.EN.I.1.1.6.2 Part A: Encryption Algorithm ENCR_AES_CBCSKIP-X-
34Test IKEv2.EN.I.1.1.6.2 Part B: Encryption Algorithm ENCR_AES_CTRSKIP-X-
35Test IKEv2.EN.I.1.1.6.2 Part C: Encryption Algorithm ENCR_NULLSKIP-X-
36Test IKEv2.EN.I.1.1.6.2 Part D: Integrity Algorithm AUTH_AES_XCBC_96SKIP-X-
37Test IKEv2.EN.I.1.1.6.2 Part E: Integrity Algorithm NONESKIP-X-
38Test IKEv2.EN.I.1.1.6.2 Part F: Extended Sequence NumbersSKIP-X-

Test IKEv2.EN.I.1.1.6.3: Sending Multiple Transforms for IKE_SA



39Test IKEv2.EN.I.1.1.6.3 Part A: Multiple Encryption AlgorithmsSKIP-X-
40Test IKEv2.EN.I.1.1.6.3 Part B: Multiple Pseudo-random FunctionsSKIP-X-
41Test IKEv2.EN.I.1.1.6.3 Part C: Multiple Integrity AlgorithmsSKIP-X-
42Test IKEv2.EN.I.1.1.6.3 Part D: Multiple D-H GroupsSKIP-X-
43Test IKEv2.EN.I.1.1.6.4: Multiple Proposals for IKE_SASKIP-X-

Test IKEv2.EN.I.1.1.6.5: Sending Multiple Transforms for CHILD_SA



44Test IKEv2.EN.I.1.1.6.5 Part A: Multiple Encryption AlgorithmsSKIP-X-
45Test IKEv2.EN.I.1.1.6.5 Part B: Multiple Integrity AlgorithmsSKIP-X-
46Test IKEv2.EN.I.1.1.6.5 Part C: Multiple Extended Sequence NumbersSKIP-X-
47Test IKEv2.EN.I.1.1.6.6: Sending Multiple ProposalsSKIP-X-
48Test IKEv2.EN.I.1.1.6.7: Receipt of INVALID_KE_PAYLOADSKIP-X-
49Test IKEv2.EN.I.1.1.6.8: Receipt of NO_PROPOSAL_CHOSENSKIP-X-
50Test IKEv2.EN.I.1.1.6.9: Response with inconsistent SA Proposal for IKE_SASKIP-X-
51Test IKEv2.EN.I.1.1.6.10: Response with inconsistent SA Proposal for CHILD_SASKIP-X-
52Test IKEv2.EN.I.1.1.6.11 Part A: Receiving IKE_SA_INIT response with INVALID_KE_PAYLOADSKIP-X-
53Test IKEv2.EN.I.1.1.6.11 Part B: Receiving IKE_SA_INIT response with INVALID_KE_PAYLOADSKIP-X-
54Test IKEv2.EN.I.1.1.6.12: Creating an IKE_SA without a CHILD_SASKIP-X-

Sub-Group 7. Traffic Selector Negotiation



55Test IKEv2.EN.I.1.1.7.1: Narrowing the range of members of the set of traffic selectorsSKIP-X-

Sub-Group 8. Error Handling



56Test IKEv2.EN.I.1.1.8.1 Part A: INVALID_IKE_SPI Different IKE_SA Initiator's SPISKIP-X-
57Test IKEv2.EN.I.1.1.8.1 Part B: INVALID_IKE_SPI Different IKE_SA Responder's SPISKIP-X-
58Test IKEv2.EN.I.1.1.8.2: INVALID_SELECTORSSKIP-X-

Sub-Group 10. Authentication of the IKE_SA



59Test IKEv2.EN.I.1.1.10.1: Sending Certificate PayloadSKIP-X-
60Test IKEv2.EN.I.1.1.10.2: Sending Certificate Request PayloadSKIP-X-
61Test IKEv2.EN.I.1.1.10.3: RSA Digital SignatureSKIP-X-
62Test IKEv2.EN.I.1.1.10.4: HEX string PSKSKIP-X-

Sub-Group 11. Invalid Values



63Test IKEv2.EN.I.1.1.11.1: Non zero RESERVED fields in IKE_SA_INIT responseSKIP-X-
64Test IKEv2.EN.I.1.1.11.2: Non zero RESERVED fields in IKE_AUTH responseSKIP-X-
65Test IKEv2.EN.I.1.1.11.3: Version bit is setSKIP-X-
66Test IKEv2.EN.I.1.1.11.4: Unrecognized Notify Message Type of ErrorSKIP-X-
67Test IKEv2.EN.I.1.1.11.5: Unrecognized Notify Message Type of StatusSKIP-X-

Group 2. The CREATE_CHILD_SA Exchange




Sub-Group 1. Header and Payload Formats



68Test IKEv2.EN.I.1.2.1.1: Sending CREATE_CHILD_SA requestSKIP-X-

Sub-Group 2. Use of Retransmission Timers



69Test IKEv2.EN.I.1.2.2.1: Retransmission of CREATE_CHILD_SA requestSKIP-X-
70Test IKEv2.EN.I.1.2.2.2: Stop of retransmission of CREATE_CHILD_SA requestSKIP-X-

Sub-Group 3. Rekeying



71Test IKEv2.EN.I.1.2.3.1: Close the replaced CHILD_SASKIP-X-
72Test IKEv2.EN.I.1.2.3.2: Receipt of cryptographically valid message on the new SASKIP-X-
73Test IKEv2.EN.I.1.2.3.3: Lifetime of CHILD_SA expiresSKIP-X-
74Test IKEv2.EN.I.1.2.3.4 Part A: Sending Multiple Transform for Rekeying CHILD_SASKIP-X-
75Test IKEv2.EN.I.1.2.3.4 Part B: Sending Multiple Transform for Rekeying CHILD_SASKIP-X-
76Test IKEv2.EN.I.1.2.3.4 Part C: Sending Multiple Transform for Rekeying CHILD_SASKIP-X-
77Test IKEv2.EN.I.1.2.3.5: Sending Multiple Proposal for Rekeying CHILD_SASKIP-X-
78Test IKEv2.EN.I.1.2.3.6: Rekeying FailureSKIP-X-
79Test IKEv2.EN.I.1.2.3.7: Perfect Forward SecrecySKIP-X-
80Test IKEv2.EN.I.1.2.3.8: Use of the old CHILD_SASKIP-X-

Sub-Group 4. Rekeying IKE_SAs Using a CREATE_CHILD_SA exchange



81Test IKEv2.EN.I.1.2.4.1: Close the replaced IKE_SASKIP-X-
82Test IKEv2.EN.I.1.2.4.2: Receipt of cryptographically valid message on the new IKE_SASKIP-X-
83Test IKEv2.EN.I.1.2.4.3: Lifetime of IKE_SA expiresSKIP-X-
84Test IKEv2.EN.I.1.2.4.4 Part A: Sending Multiple Transform for Rekeying IKE_SASKIP-X-
85Test IKEv2.EN.I.1.2.4.4 Part B: Sending Multiple Transform for Rekeying IKE_SASKIP-X-
86Test IKEv2.EN.I.1.2.4.4 Part C: Sending Multiple Transform for Rekeying IKE_SASKIP-X-
87Test IKEv2.EN.I.1.2.4.4 Part D: Sending Multiple Transform for Rekeying IKE_SASKIP-X-
88Test IKEv2.EN.I.1.2.4.5: Sending Multiple Proposal for Rekeying IKE_SASKIP-X-
89Test IKEv2.EN.I.1.2.4.6: Use of the old IKE_SASKIP-X-
90Test IKEv2.EN.I.1.2.4.7: Changing PRFs when rekeying IKE_SASKIP-X-

Sub-Group 5. Creating New CHILD_SAs with the CREATE_CHILD_SA Exchange



91Test IKEv2.EN.I.1.2.5.1: Sending CREATE_CHILD_SA requestSKIP-X-
92Test IKEv2.EN.I.1.2.5.2: Receipt of cryptographically valid message on the new SASKIP-X-

Sub-Group 6. Exchange Collisions



93Test IKEv2.EN.I.1.2.6.1: Simulataneous CHILD_SA CloseSKIP-X-
94Test IKEv2.EN.I.1.2.6.2: Simulataneous IKE_SA CloseSKIP-X-
95Test IKEv2.EN.I.1.2.6.3: Simulataneous CHILD_SA RekeyingSKIP-X-
96Test IKEv2.EN.I.1.2.6.4: Simulataneous CHILD_SA Rekeying with retransmissionSKIP-X-
97Test IKEv2.EN.I.1.2.6.5: Simulataneous IKE_SA RekeyingSKIP-X-
98Test IKEv2.EN.I.1.2.6.6: Simulataneous IKE_SA Rekeying with retransmissionSKIP-X-
99Test IKEv2.EN.I.1.2.6.7: Closing and Rekeying CHILD_SASKIP-X-
100Test IKEv2.EN.I.1.2.6.8: Closing a new CHILD_SASKIP-X-
101Test IKEv2.EN.I.1.2.6.9: Rekeying a new CHILD_SASKIP-X-
102Test IKEv2.EN.I.1.2.6.10: Rekeying an IKE_SA with half-open CHILD_SAsSKIP-X-
103Test IKEv2.EN.I.1.2.6.11: Rekeying a CHILD_SA while rekeying an IKE_SASKIP-X-
104Test IKEv2.EN.I.1.2.6.12: Rekeying an IKE_SA with half-closed CHILD_SAsSKIP-X-
105Test IKEv2.EN.I.1.2.6.13: Closing a CHILD_SA while rekeying an IKE_SASKIP-X-
106Test IKEv2.EN.I.1.2.6.14: Closing an IKE_SA while rekeying an IKE_SASKIP-X-
107Test IKEv2.EN.I.1.2.6.15: Rekeying an IKE_SA while closing the IKE_SASKIP-X-

Sub-Group 7. Non zero RESERVED fields



108Test IKEv2.EN.I.1.2.7.1: Non zero RESERVED fields in CREATE_CHILD_SA responseSKIP-X-

Group 3. The INFORMATIONAL Exchange




Sub-Group 1. Header and Payload Formats



109Test IKEv2.EN.I.1.3.1.1: Sending INFORMATIONAL requestSKIP-X-

Sub-Group 2. Use of Retransmission Timers



110Test IKEv2.EN.I.1.3.2.1: Retransmission of INFORMATIONAL requestSKIP-X-
111Test IKEv2.EN.I.1.3.2.2: Stop of retransmission of INFORMATIONAL requestSKIP-X-

Sub-Group 3. Non zero RESERVED fields



112Test IKEv2.EN.I.1.3.3.1: Non zero RESERVED fields in INFORMATIONAL responseSKIP-X-

Sub-Group 4. Error Handling



113Test IKEv2.EN.I.1.3.4.1: INVALID_SPISKIP-X-
114Global CleanupSKIP-X-

Sub-Section 2. Endpoint to Security Gateway Tunnel



115Global SetupSKIP-X-

Group 1. The Initial Exchanges




Sub-Group 1. Header and Payload Formats



116Test IKEv2.EN.I.2.1.1.1: Sending IKE_AUTH requestSKIP-X-
117Test IKEv2.EN.I.2.1.1.2: Use of CHILD_SASKIP-X-

Sub-Group 2. Requesting an Internal Address on a Remote Network



118Test IKEv2.EN.I.2.1.2.1: Sending CFG_REQUESTSKIP-X-
119Test IKEv2.EN.I.2.1.2.2: Receipt of CFG_REPLYSKIP-X-
120Test IKEv2.EN.I.2.1.2.3: Non zero RESERVED fileds in Configuration PayloadSKIP-X-
121Test IKEv2.EN.I.2.1.2.4: Receiving IKE_AUTH response without CFG_REPLYSKIP-X-
122Test IKEv2.EN.I.2.1.2.5: Receiving unrecognized Configuration AttributesSKIP-X-
123Global CleanupSKIP-X-

Section EN-R. End Node - Responder




Sub-Section 1. Endpoint-to-Endpoint Transport



124Global SetupSKIP-X-

Group 1. The Initial Exchanges




Sub-Group 1. Header and Payload Formats



125Test IKEv2.EN.R.1.1.1.1: Sending IKE_SA_INIT responseSKIP-X-
126Test IKEv2.EN.R.1.1.1.2: Sending IKE_AUTH responseSKIP-X-
127Test IKEv2.EN.R.1.1.1.3: Use of CHILD_SASKIP-X-

Sub-Group 2. Use of Retransmission Timers



128Test IKEv2.EN.R.1.1.2.1: Receipt of retransmitted IKE_SA_INIT requestSKIP-X-
129Test IKEv2.EN.R.1.1.2.2: Receipt of retransmitted of IKE_AUTH requestSKIP-X-

Sub-Group 3. State Synchronization and Connection Timeouts



130Test IKEv2.EN.R.1.1.3.1: State Synchronization with ICMP MessageSKIP-X-
131Test IKEv2.EN.R.1.1.3.2: State Synchronization with IKE MessageSKIP-X-
132Test IKEv2.EN.R.1.1.3.3: Close Connections when receiving INITIAL_CONTACTSKIP-X-
133Test IKEv2.EN.R.1.1.3.4: Receiving Liveness checkSKIP-X-
134Test IKEv2.EN.R.1.1.3.5: Receiving Delete Payload for IKE_SASKIP-X-
135Test IKEv2.EN.R.1.1.3.6: Receiving Delete Payload for CHILD_SASKIP-X-

Sub-Group 4. Version Numbers and Forward Compatibility



136Test IKEv2.EN.R.1.1.4.1: Receipt of a larger minor version numberSKIP-X-
137Test IKEv2.EN.R.1.1.4.2: Receipt of a higher major version numberSKIP-X-

Test IKEv2.EN.R.1.1.4.3: Unrecognized payload types and critical bit is not set



138Test IKEv2.EN.R.1.1.4.3 Part A: Invalid payload type 1SKIP-X-
139Test IKEv2.EN.R.1.1.4.3 Part B: Invalid payload type 32SKIP-X-
140Test IKEv2.EN.R.1.1.4.3 Part C: Invalid payload type 49SKIP-X-
141Test IKEv2.EN.R.1.1.4.3 Part D: Invalid payload type 255SKIP-X-

Test IKEv2.EN.R.1.1.4.4: Unrecognized payload types and critical bit is set



142Test IKEv2.EN.R.1.1.4.4 Part A: Invalid payload type 1SKIP-X-
143Test IKEv2.EN.R.1.1.4.4 Part B: Invalid payload type 32SKIP-X-
144Test IKEv2.EN.R.1.1.4.4 Part C: Invalid payload type 49SKIP-X-
145Test IKEv2.EN.R.1.1.4.4 Part D: Invalid payload type 255SKIP-X-
146Test IKEv2.EN.R.1.1.4.5: Invalid Payload OrderSKIP-X-

Sub-Group 5. Cookies£´



147Test IKEv2.EN.R.1.1.5.1: CookiesSKIP-X-
148Test IKEv2.EN.R.1.1.5.2: Invalid CookiesSKIP-X-
149Test IKEv2.EN.R.1.1.5.3: Interaction of COOKIE and INVALID_KE_PAYLOADSKIP-X-
150Test IKEv2.EN.R.1.1.5.4: Interaction of COOKIE and INVALID_KE_PAYLOAD with unoptimized InitiatorSKIP-X-

Sub-Group 6. Cryptographic Algorithm Negotiation




Test IKEv2.EN.R.1.1.6.1: Cryptographic Algorithm Negotiation for IKE_SA



151Test IKEv2.EN.R.1.1.6.1 Part A: Encryption Algorithm ENCR_AES_CBCSKIP-X-
152Test IKEv2.EN.R.1.1.6.1 Part B: Encryption Algorithm ENCR_AES_CTRSKIP-X-
153Test IKEv2.EN.R.1.1.6.1 Part C: Pseudo-random Function PRF_AES128_XCBCSKIP-X-
154Test IKEv2.EN.R.1.1.6.1 Part D: Integrity Algorithm AUTH_AES_XCBC_96SKIP-X-
155Test IKEv2.EN.R.1.1.6.1 Part E: D-H Group Group 14SKIP-X-

Test IKEv2.EN.R.1.1.6.2: Cryptographic Algorithm Negotiation for CHILD_SA



156Test IKEv2.EN.R.1.1.6.2 Part A: Encryption Algorithm ENCR_AES_CBCSKIP-X-
157Test IKEv2.EN.R.1.1.6.2 Part B: Encryption Algorithm ENCR_AES_CTRSKIP-X-
158Test IKEv2.EN.R.1.1.6.2 Part C: Encryption Algorithm ENCR_NULLSKIP-X-
159Test IKEv2.EN.R.1.1.6.2 Part D: Integrity Algorithm AUTH_AES_XCBC_96SKIP-X-
160Test IKEv2.EN.R.1.1.6.2 Part E: Integrity Algorithm NONESKIP-X-
161Test IKEv2.EN.R.1.1.6.2 Part F: Extended Sequence NumberSKIP-X-

Test IKEv2.EN.R.1.1.6.3: Receiving Multiple Transforms for IKE_SA



162Test IKEv2.EN.R.1.1.6.3 Part A: Multiple Encryption AlgorithmsSKIP-X-
163Test IKEv2.EN.R.1.1.6.3 Part B: Multiple Pseudo-Random FunctionsSKIP-X-
164Test IKEv2.EN.R.1.1.6.3 Part C: Multiple Integrity AlgorithmsSKIP-X-
165Test IKEv2.EN.R.1.1.6.3 Part D: Multiple D-H GroupsSKIP-X-

Test IKEv2.EN.R.1.1.6.4: Receiving Multiple Proposals for IKE_SA



166Test IKEv2.EN.R.1.1.6.4 Part A: Multiple Proposals for IKE_SASKIP-X-
167Test IKEv2.EN.R.1.1.6.4 Part B: Multiple Proposals for IKE_SASKIP-X-
168Test IKEv2.EN.R.1.1.6.4 Part C: Multiple Proposals for IKE_SASKIP-X-
169Test IKEv2.EN.R.1.1.6.4 Part D: Multiple Proposals for IKE_SASKIP-X-

Test IKEv2.EN.R.1.1.6.5: Receiving Multiple Transforms for CHILD_SA



170Test IKEv2.EN.R.1.1.6.5 Part A: Multiple Encryption AlgorithmsSKIP-X-
171Test IKEv2.EN.R.1.1.6.5 Part B: Multiple Integrity AlgorithmsSKIP-X-
172Test IKEv2.EN.R.1.1.6.5 Part C: Multiple Extended Sequence NumbersSKIP-X-

Test IKEv2.EN.R.1.1.6.6: Receiving Multiple Proposals for CHILD_SA



173Test IKEv2.EN.R.1.1.6.6 Part A: Receiving Multiple ProposalsSKIP-X-
174Test IKEv2.EN.R.1.1.6.6 Part B: Receiving Multiple ProposalsSKIP-X-
175Test IKEv2.EN.R.1.1.6.6 Part C: Receiving Multiple ProposalsSKIP-X-
176Test IKEv2.EN.R.1.1.6.7: Sending of INVALID_KE_PAYLOADSKIP-X-
177Test IKEv2.EN.R.1.1.6.8: INVALID_KE_PAYLOAD in the Initial ExchangeSKIP-X-
178Test IKEv2.EN.R.1.1.6.9: Creating an IKE_SA without a CHILD_SASKIP-X-

Sub-Group 7. Traffic Selector Negotiation



179Test IKEv2.EN.R.1.1.7.1: Narrowing the range of members of the set of traffic selectorsSKIP-X-
180Test IKEv2.EN.R.1.1.7.2: TS_UNACCEPTABLESKIP-X-
181Test IKEv2.EN.R.1.1.7.3: Narrowing multiple traffic selectorSKIP-X-

Sub-Group 8. Error Handling




Test IKEv2.EN.R.1.1.8.1: INVALID_IKE_SPI



182Test IKEv2.EN.R.1.1.8.1 Part A: Different IKE_SA Initiator's SPISKIP-X-
183Test IKEv2.EN.R.1.1.8.1 Part B: Different IKE_SA Responder's SPISKIP-X-
184Test IKEv2.EN.R.1.1.8.2: INVALID_SYNTAXSKIP-X-
185Test IKEv2.EN.R.1.1.8.3: INVALID_SELECTORSSKIP-X-

Sub-Group 10. Authentication of the IKE_SA



186Test IKEv2.EN.R.1.1.10.1: Sending Certificate PayloadSKIP-X-
187Test IKEv2.EN.R.1.1.10.2: Sending Certificate Request PayloadSKIP-X-
188Test IKEv2.EN.R.1.1.10.3: RSA Digital SignatureSKIP-X-
189Test IKEv2.EN.R.1.1.10.4: HEX string PSKSKIP-X-

Sub-Group 11. Invalid Values



190Test IKEv2.EN.R.1.1.11.1: Non zero RESERVED fields in IKE_SA_INIT responseSKIP-X-
191Test IKEv2.EN.R.1.1.11.2: Non zero RESERVED fields in IKE_AUTH responseSKIP-X-
192Test IKEv2.EN.R.1.1.11.3: Version bit is setSKIP-X-
193Test IKEv2.EN.R.1.1.11.4: Response bit is setSKIP-X-
194Test IKEv2.EN.R.1.1.11.5 Part A: Unrecognized Notify Message TypeSKIP-X-
195Test IKEv2.EN.R.1.1.11.5 Part B: Unrecognized Notify Message TypeSKIP-X-

Group 2. The CREATE_CHILD_SA Exchange




Sub-Group 1. Header and Payload Formats



196Test IKEv2.EN.R.1.2.1.1: Receipt of CREATE_CHILD_SA requestSKIP-X-

Sub-Group 2. Use of Retransmission Timers



197Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA requestSKIP-X-

Sub-Group 3. State Synchronization and Connection Timeouts



198Test IKEv2.EN.R.1.2.3.1: Receiving Delete Payload for Multiple CHILD_SASKIP-X-

Sub-Group 4. Cryptographic Algorithm Negotiation



199Test IKEv2.EN.R.1.2.4.1: Sending NO_PROPOSAL_CHOSEN for CREATE_CHILD_SASKIP-X-

Sub-Group 5. Rekeying



200Test IKEv2.EN.R.1.2.5.1: Close the replaced CHILD_SASKIP-X-
201Test IKEv2.EN.R.1.2.5.2: Receipt of cryptographically protected message on the old SA and the new SASKIP-X-
202Test IKEv2.EN.R.1.2.5.3 Part A: Receiving Multiple Transform for Rekeying CHILD_SASKIP-X-
203Test IKEv2.EN.R.1.2.5.3 Part B: Receiving Multiple Transform for Rekeying CHILD_SASKIP-X-
204Test IKEv2.EN.R.1.2.5.3 Part C: Receiving Multiple Transform for Rekeying CHILD_SASKIP-X-
205Test IKEv2.EN.R.1.2.5.4 Part A: Receiving Multiple Proposal for Rekeying CHILD_SASKIP-X-
206Test IKEv2.EN.R.1.2.5.4 Part B: Receiving Multiple Proposal for Rekeying CHILD_SASKIP-X-
207Test IKEv2.EN.R.1.2.5.4 Part C: Receiving Multiple Proposal for Rekeying CHILD_SASKIP-X-
208Test IKEv2.EN.R.1.2.5.5: Perfect Forward SecrecySKIP-X-
209Test IKEv2.EN.R.1.2.5.6: Use of the old CHILD_SASKIP-X-

Sub-Group 6. Rekeying IKE_SAs Using a CREATE_CHILD_SA exchange



210Test IKEv2.EN.R.1.2.6.1: Sending CREATE_CHILD_SA responseSKIP-X-
211Test IKEv2.EN.R.1.2.6.2: Receipt of cryptographically valid message on the old IKE_SASKIP-X-
212Test IKEv2.EN.R.1.2.6.3: Use of the old IKE_SASKIP-X-
213Test IKEv2.EN.R.1.2.6.4: Close the replaced IKE_SASKIP-X-
214Test IKEv2.EN.R.1.2.6.5 Part A: Receiving Multiple Transform for Rekeying IKE_SASKIP-X-
215Test IKEv2.EN.R.1.2.6.5 Part B: Receiving Multiple Transform for Rekeying IKE_SASKIP-X-
216Test IKEv2.EN.R.1.2.6.5 Part C: Receiving Multiple Transform for Rekeying IKE_SASKIP-X-
217Test IKEv2.EN.R.1.2.6.5 Part D: Receiving Multiple Transform for Rekeying IKE_SASKIP-X-
218Test IKEv2.EN.R.1.2.6.6 Part A: Receiving Multiple Proposal for Rekeying IKE_SASKIP-X-
219Test IKEv2.EN.R.1.2.6.6 Part B: Receiving Multiple Proposal for Rekeying IKE_SASKIP-X-
220Test IKEv2.EN.R.1.2.6.6 Part C: Receiving Multiple Proposal for Rekeying IKE_SASKIP-X-
221Test IKEv2.EN.R.1.2.6.6 Part D: Receiving Multiple Proposal for Rekeying IKE_SASKIP-X-
222Test IKEv2.EN.R.1.2.6.7: Changing PRFs when rekeying the IKE_SASKIP-X-
223Test IKEv2.EN.R.1.2.6.8: D-H Transform NONE when rekeying the iKE_SASKIP-X-

Sub-Group 7. Creating new CHILD_SAs using CREATE_CHILD_SA exchange



224Test IKEv2.EN.R.1.2.7.1: Receipt of cryptographically valid message on the new CHILD_SASKIP-X-

Sub-Group 8. Error Handling




Test IKEv2.EN.R.1.2.8.1: AUTHENTICATION_FAILED



225Test IKEv2.EN.R.1.2.8.1 Part A: Authentication DataSKIP-X-
226Test IKEv2.EN.R.1.2.8.1 Part B: Authentication MethodSKIP-X-

Sub-Group 9. Non zero RESERVED fields



227Test IKEv2.EN.R.1.2.9.1: Non zero RESERVED fields in CREATE_CHILD_SA responseSKIP-X-

Group 3. The INFORMATIONAL Exchange




Sub-Group 1. Header and Payload Formats



228Test IKEv2.EN.R.1.3.1.1: Sending INFORMATIONAL requestSKIP-X-

Sub-Group 2. Use of Retransmission Timers



229Test IKEv2.EN.R.1.3.2.1: Retransmission of INFORMATIONAL requestSKIP-X-

Sub-Group 3. Non zero RESERVED fields



230Test IKEv2.EN.R.1.3.3.1: Non zero RESERVED fields in INFORMATIONAL responseSKIP-X-
231Global CleanupSKIP-X-

Sub-Section 2. Endpoint to Security Gateway Tunnel



232Global SetupSKIP-X-

Group 1. The Initial Exchanges




Sub-Group 1. Header and Payload Formats



233Test IKEv2.EN.R.2.1.1.1: Receipt of IKE_AUTH requestSKIP-X-
234Test IKEv2.EN.R.2.1.1.2: Use of CHILD_SASKIP-X-
235Global CleanupSKIP-X-