CDRouter™ Test Coverage

Covers more than 50 IP related protocols

CDRouter supports all the common protocols used by CPE devices as well as common user applications and emerging technologies. This list is constantly growing with each release.

The following is a break down of some the major functional areas covered by CDRouter. A summary of the actual test cases is also available.

Wired LAN/WAN or Wireless LAN interfaces

CDRouter supports both wired Ethernet LAN interfaces and wireless 802.11b/a/g LAN interfaces. Many of the same tests can be run against either LAN interface type. On the WAN side, CDRouter can be run using Ethernet, ATM, or T1/E1 interfaces.

Multiple WAN configurations - DHCP, PPPoE, PPPoA, PPTP, or static IP

The router under test can be configured to run DHCP, PPPoE, PPPoA, PPTP, or static IP addressing. Each WAN protocol has its own test module with protocol specific tests. Other tests can be run over any of the WAN protocols.

WPA and 802.1x Port-Based Network Access Control

CDRouter's wireless interfaces also support WPA and 802.1x allowing you to run all of CDRouter's test cases when the wireless LAN port is authenticated. EAP-MD5, EAP-TLS, EAP-TTLS, EAP-PEAP, EAP-SIM, and EAP-AKA are supported along with WPA-PSK, WPA-RADIUS, and dynamic WEP. CDRouter also has a built-in RADIUS server for authenticating 802.1x sessions over RADIUS. The test suite can be configured to use the built-in RADIUS server or any other third party RADIUS server. There are also several protocol tests for EAPOL and EAP including 802.1x denial of service attacks and the EAP-of-Death attack.

DHCP client and server

The functionality of the DHCP client on the WAN side and the DHCP server on the LAN side is verified. Several tests verify that DHCP options on the WAN side are reflected in the server side behavior.

PPPoE

The test suite can be used to verify the behavior of the PPPoE client on the WAN interface. The PPP implementaion supports LCP and IPCP as well as PPP authentication protocols PAP and CHAP. CDRouter also tests the TCP MSS Clamping functionality that allows LAN clients to safely establish TCP connections accross a PPPoE link.

PPPoA

The test suite can be used to verify the behavior of the PPPoA client on the WAN interface. CDRouter can be run using an ATM PVC connection on test host. The ATM interface can be connected to the ATM uplink of a DSLAM device. Both LLC and VC multiplex encapsulations are supported.

PPTP

The test suite can be used to verify the behavior of the PPTP client on the WAN interface. A PPTP control session is established with the device under test and all data packets are tunneled over Enhanced GRE.

ISP Renumbering Scenarios

Several ISP renumbering scenarios verify that the cable/dsl router remains operational when the ISP WAN configuration changes. This includes IP renumbering, DNS server changes, domain changes, and more. The test suite also looks at the behavior of PPPoE and PPTP when the link is terminated at different PPP layers including LCP echo timeouts, LCP terminates, PPPoE session terminates, PPTP control messages, etc.

NAT

Basic NAPT (Network Address and Port Translation) functionality for TCP, UDP, and ICMP is verified. CDRouter is able to test out the maximum number of NAT connections supported by the Cable/DSL Router using thousands of real stateful tcp and udp connections.

Hotspot Routers

CDRouter can test hotspot routers that require a HTTP or HTTPS login before DHCP clients can access the Internet. CDRouter allows you to configure URLs that can be used to login as well as automatic configuration of user names, passwords, and a backend RADIUS server.

Multicast and IGMP

CDRouter includes a multicast test module that verifies IGMP proxy or IGMP pass through support on the router. LAN clients will attempt to join multicast groups and verify that multicast streams can be forwarded through the router. CDRouter can also verify the maximum number of multicast groups that are supported.

UPnP (Universal Plug and Play)

The CDRouter test suite verifies that the network device can interoperate with UPnP control end points such as Windows XP. Several tests verify the discovery of the UPnP Internet Gateway devices and services using SSDP. The test suite also verifies the behavior of dynamic NAT port mappings and the maximum number of dynamic port mappings that can be created through UPnP.

Applications and ALGs

The CDRouter test suite verifies that common network applications which involve NAT specific functionality work correctly. NAT specific functionality such as the FTP 'PORT' command and DNS are verified. Other ALGs such as H.323 (MS Netmeeting), MSN Messenger, and RTSP are also tested. These applications can be verified to see that they are correctly supported by the Cable/DSL router.

Firewall/Security

Basic firewall functionality is verified to check that connections from the WAN side are not accepted or forwarded on to the LAN. Configurable TCP and UDP port scan tests are run against the router.

IPSEC Pass-Through

The CDRouter suite can test IPSEC pass through for tunnel mode IPSEC connections. Key establishment using IKE and IPv4 fragmentation of IPSEC packets are also tested. CDRouter can verify pass through implementations that support multiple conections to the same VPN endpoint using SPI and ISAKMP tracking as well as scaling the number of IPSEC pass through connections that are supported.

PPTP Pass-Through

The CDRouter suite can verify that PPTP pass through is working for LAN clients. You can also use CDRouter to verify the maximum number of PPTP pass through clients supported.

IP Forwarding

Correct IP forwarding behavior is verified with several RFC 1812 style conformance tests.

Dynamic IPv4 Routing with RIPv1/v2

Dynamic routing with RIPv1 or RIPv2 is verified. The CDRouter suite verifies that the router is able to exchange RIP routes and interoperate with other RIP routers.

Scaling

The CDRouter suite can create a DHCP client for each address in the router's DHCP client address pool. The scaling tests verify that each DHCP can actually obtain an unique IP address and initiate TCP connections.

Virtual Services

The CDRouter suite can verify the virtual service configuration for a router's TCP and UDP virtual services. Incoming requests from the WAN side of the router can be mapped to services running on the private LAN network. The CDRouter test suite can verify up to 4096 virtual TCP and UDP services.

URL Filtering

The CDRouter suite can verify URL filtering or domain blocking functions of any Cable/DSL router. The suite will verify that HTTP GET, HEAD, and POST operations will be blocked from the LAN side of the router.

Port Triggers

The CDRouter suite can verify that special applications can interact with the NAT and firewall functions of the router using port triggers. Up to 4096 different port triggers can configured. The suite exercise each port trigger to verify that inbound connections from the WAN can be established when the corresponding outbound connections are established.

IPSEC Tunnels

CDRouter can emulate IPSEC tunnel endpoints in order to verify that router services such as NAT, ALGS, virtual services, port triggers, etc, work correctly when running over IPSEC. CDRouter also contains test cases to verify the behavior of the ESP header, IPv4 fragmentation issues with IPSEC, and scaling the number of supported IPSEC tunnels.

DynDNS Client

CDRouter supports the Dynamic DNS protocol created by Dynamic Network Services, Inc. The DynDNS test module verifies that a client complies with the DynDNS.org update syntax and specifications.

Other Features

CDRouter also has coverage of several other specialized router functions such as PPPoE pass through connections, Path MTU Discovery, NTP and more. New features are added on a monthly basis. Please check out the current list of test cases for a listing of current test coverage.