1. Institute of Telematics Report from the 3rd NSIS Interop Test – May 9th-11th 2007 University of Karlsruhe, Germany Roland Bless

2. Institut für Telematik Universität Karlsruhe (TH) www.tm.uka.de 1 IETF-69 - Report from 3rd NSIS-Interop Who We Were University of Coimbra GIST, QoS NSLP, NAT/FW (each Draft-13) Uni Göttingen GIST, QoS NSLP, NAT/FW (each Draft-13) Uni Karlsruhe GIST, QoS NSLP, NAT/FW (each Draft-13) Siemens Roke Manor (cancelled) GIST Interop URL https://projekte.tm.uka.de/trac/NSIS/wiki/Interop-20070509 Three days of testing

3. Roland Bless Institut für Telematik Universität Karlsruhe (TH) www.tm.uka.de 2 IETF-69 - Report from 3rd NSIS-Interop General Test Setup We mainly concentrated on testing GIST this protocol is the base for other NSLPs should pass IESG review soon Used test cases for GIST from Christian Dickmann http://user.informatik.uni-goettingen.de/~cdickman/draft- dickmann-nsis-ntlp-interop-00.txt Provided an automated test tool to perform test runs Also tested QoS-NSLP NAT/FW not this time – due to time restrictions

4. Roland Bless Institut für Telematik Universität Karlsruhe (TH) www.tm.uka.de 3 IETF-69 - Report from 3rd NSIS-Interop GIST Tests Tested all major protocol features IPv4 + IPv6 D-Mode Setup C-Mode Setup (incl. transitions and re-use) TCP TLS+TCP Late State Installation Not tested NAT traversal (requires GIST-aware NAT gateway) robustness of implementations

5. Roland Bless Institut für Telematik Universität Karlsruhe (TH) www.tm.uka.de 4 IETF-69 - Report from 3rd NSIS-Interop Tests in More Detail Normal operation D-Mode setup C-Mode setup (not secure) C-Mode setup (secure) MA re-use MA not re-used (different transport req., different peer Transition D-Mode  C-Mode Transition non-secure  secure MA Minding the D-Flag Retransmission of Query/Response Unrecoverable problems Wrong cookies or stack proposals Refreshing sessions Multiple session setup Interception and forwarding...and several more…

6. Roland Bless Institut für Telematik Universität Karlsruhe (TH) www.tm.uka.de 5 IETF-69 - Report from 3rd NSIS-Interop Conclusions We have running code! GIST Spec is comprehensive, but not too complex to implement Different independent implementations, interoperable No major issues found Only some clarifications required Esp. with respect to MA handling Should be fixed in draft-ietf-nsis-ntlp-v14 Lessons learned We should continue interop testing Improve GIST test cases, define NSLP test cases Better preparation, i.e. testing things beforehand locally or remotely Continue to use of automated tools for testing

7. Roland Bless Institut für Telematik Universität Karlsruhe (TH) www.tm.uka.de 6 IETF-69 - Report from 3rd NSIS-Interop See You at the Next NSIS Interop! Thanks for participating!