《Avalanche测试仪使用指导---IPSEC性能测试》由会员分享，可在线阅读，更多相关《Avalanche测试仪使用指导---IPSEC性能测试（22页珍藏版）》请在金锄头文库上搜索。
1、Avalanche测试仪使用指导-IPSEC性能测试1. IPSECVPN测试指标1.IPSEC最大隧道数2.IPSEC并发隧道数3.单隧道最大吞吐量2.测试配置过程1.IPSEC最大隧道数测试，测试的拓扑图如下TC(port9-Client)DUTTC(port11-server)10.0.0.0/8(模拟分支组)192.168.1.0/24(总部服务器)2. 打开TC【SpirentTestCenterApplication4.40】，选中【Tools】-【FirewireManagement】，将测试使用的port更改为4|7，作为avalanche使用。TEUCentef1417门14
2、17NewTestPackageSLaLgT4匕153Bq乍5hdT4.40.152&9110；1Td.40.152GiginUied4-4D1526sindeed*4401526?incdFirmwaneDirectoryWraioftSal川IFortGroupsmTestFackaae:SelectLccak)riBV1S215SJ155/1nCunenll&slPsage/132.16B.5.15d/2Td4i345iindedFrmwareManageme-nt/1fQ1B5155Vd7X1521515炉SI21黒5155/1阳k宙mlT炉eActivateT1MaduiaPnofi
3、le(UaetoEritchtoadilfensiTtixdilEcfiaifistrnxUei4AcIjvbIeTesiPnckspeUseIcswibchlcbdiHefeniinshllEdIesIpickiceIIratrllBstPackaae(UbeWiratEllbtestpEckEGeonBWslmodu怡.：Instclli：iJse1hrsLcinstiliirareanachasi&湘testmodulesQAdivnltisusedtoswrfchlcbdiHwsnlleslMchfiGs映vbstmcdijiorJ/suppart口禎les3. 打开【SpirentT
4、estCenterLayer4-7Application4.40,选择【Administration】-【SpirentTestCenterChassis|C1.xxx】,添加测试端口。SpirentTestCe-nterChasEislClClOO-MPlVirtual|Equipme-ntJActionProviisionAddCha&s-is-R.ern&veS-eleetedChss-EiE.UserRefreshSelectedChassisAdmirL4.配置IPSEC测试参数，在default中添加【newproject】-【newtest】。FileTookAdministra
5、tionHelpNewProject_jAvalandieCommanderNevjProject.-Step1of1Selectnameandlccationfotyournewproject.ProjectHambIfSECIhreetoryistrator-Appli吐taoaningl,Avalanche,IPSICBrotseAddIhresEtEKFfdE辽曲toITewProject.fifiriishCancelEnter旨forthmprojectandtheIocstionofadirsctoryh理包itsh&uldbfiEtorslTh总directdry*illt邑e
6、rsatzAifitdosEnotalreadyexist.添加【NewTest丿爪恰仙m2Comm軒HelpFileTookAdministrationDefaultpy白兮ChangePathRenameDeleteNewTestNewTest.-Step1of4fJewTest_-Step2of4finishLulcbLJNeiivTest.-Step3of4Selectthe匚ApplicaliADevics-TEstisda-sigriedtc-zunthroiiEhsnesrnc-ze-netmrkdeviDez.AvEltnsh?ezclEtesboththe-clisatsEn
7、dths-ien.eisinthetwsi：!whilethe-devfc&undertestsitsinmiddle.5.配置IPSEC客户端，与DUT建立3000条IPSEC为例配置分支组。先配置IPSEC的subnets,采用【Policygenerator配置向导配置1000条隧道（3000隧道建议采用CM-1G的板卡，配置三个1000条隧道的策略会自动分配到该卡接口的三个CPU处理）；PolicyGeneratorWizardStep3of4AutkeriticationbpeIresharedKeyPrefix：Phase1PolicySpecifications:.Increme
8、ntPresharedKey123456DigitalCertificatesCertificateFile：PrivateKeyFile：CACertsaaaEnablePassftrasePassPhrase*丿丨【“、】rriniE)PolicyG&neratorWizard-Step4of4Phaae2?dLlc7SpecificatiDna：HashAlgorlthm：MD-5Ensryjtioa：ESP-BISIniUstor5IDrjrps；UVii；Addr亡35Subnet*IrdtiatoreIL：pZPvlAddressSuhriet*RespondereID1肝电：Re
9、sponder5ID：192.168.1.0-lffi.168.295.255ResponderIT:S.0.10-192.16S.D.100SufiernetSuiiinarynunlierofTunnele-IODOSapernetKange-10.0.D.0_10.3.231.255LocalUetnaEk-24LocaJS七打“口吕&理罪零-1.1.1.0RenoteStartingITetwork-192.L68.1.DRenoteIktgsik-24确定以后生成IPSEC客户端的相关配置aSfLdflfIH仏;411XhLmL2Iijd(bnW心SrtiMkiriNIfhliSLe
10、tIHIuiCji：$dUkfriiHMr：*ES?H.Lwfa呈“hrl.、liljJiMCk“TF1X11”ftiIraih,E91SIimUj:BmnTefW?Toe*出0Kd?&?山IkhUifWiEiHr2L主1ML嵐HimE4i*Mrrx.mhiindAd且SitfMEir-Mdhrhii-NIkrriiiiKiSpecificationSimuser发送流量的用户Connections/s每秒发送连接数Transactions发送的数据吞吐值0阶段延迟发送数据，TC与DUT之间建立通信链路1阶段（绿色框出部分），在30秒内由0用户增加到1000用户发送流量hi-ilii.duiJ
11、,LiMdIkEtiLEriHSi.盅#ftiHJ-NELIIlin!ji4hi自丿訂nutEiiiHLihLElhATSuilir|*i:业9U戸iiiuwhirHi.i3JllkME-AF5ThHLLclli.5MLOrHi*9ri.iR|5WCFtuxnSlur3阶段以最高性能状态运行300秒，测试出设备承受的最大IPSEC隧道数量，如果设备的性能很高，如为10000条，调节IPSEC隧道数量即可4阶段运行结束时间，通过60秒时间逐步减少流量至0，结束测试9.配置发送流量类型actions,以http流量为例。IdanuI2DAgaricLleLeKt伽H1：F!：n1T-IJLrtlxils-HcCL3宝nra*gCLMPilw二凶比卜liBciLUtsr,1Lail/fli.EllwI、SihrliIliatiMcidi#后面的表达式为写相关流量的格式，如要发送FTP流量，ftp:/192.168.1.2/1m,表示get大小为1M的文件10.配置profile
