Monday, September 29, 2014

IxLoad 802.1x Stored certificates



 In order to use stored certificated you will need to enable the option at plugin level:

























When using the stored certificate option you can authenticate:
- the emulated host (per each MAC address the Ixia port emulates)
- the user that is trying to authenticate (also emulated per each MAC address)
- or both 
These settings can be changed on each 802.1x range, like in the picture below:













None is equivalent to User only authentication
Host only authenticates the host
Host user-both authenticates both the host and the user

In stored certificate scenario,  regardless of the authentication type, the root.pem certificate is needed on the local IxLoad client machine and as the test gets configured, it will be copied to the port.


Additionally, that means that depending on the ‘Host authentication mode’ you need:
-         1 more certificate for each user that you try to authenticate 
-         1 more certificate for each host that you try to authenticate
-         2 more certificates for each host + user pair





Notes :

The Send CA certificate only checkbox makes IxLoad look only for the root.pem 
certificate in the path you provide in Certificate location and copy it only (without any 
additional user certificates) on the port.

The Obtain CA certificate only checkbox only has relevance and works when used with 
Run-Time Certificate Generation





Friday, August 8, 2014

IxLoad HTTP : How to test a real webpage



       By default when requesting  a transaction IxLoad uses  an URL  with  the following format:
http://<IP>/<page/object>:<port_number>

For example when you set  the following in the GET command: Destination (IP or IP:port) =1.1.1.1 
                                                                                            Page/Object= /1b.html                                  
The URI used will be:   URI=1.1.1.1/1b.html                                                                  
        On the real world will not usually see this type of URI. Instead of  IP address will see a host name.
For example: www.blogger.com/login.html


         In the following example I will  explain how to setup  IxLoad  to simulate that  is actually a  HTTP browser opening www.google.com

Configuration  steps:
1. Find out the default object for www.google.com
On an internet browser type www.google.com and se what page it pops-up


2. Set the GET request in the HTTP Client activity  as in the following prinscreen:


3. Assign an IP address to the hostname www.google.com
On HTTP client click on NetTraffic Network2 then on DNS settings DNS2 and add a hostname entry for  your website 























****In case you forget to add the DNS entry you will get an error like this:

Wednesday, June 4, 2014

IxLoad: How to run config from command line

"C:\Program Files (x86)\Ixia\IxLoad\IxLoadVersion\ixLoad.exe" -repository "C:\configlocation.rxf"

Example:
"C:\Program Files (x86)\Ixia\IxLoad\6.40-EA\ixLoad.exe" -repository "C:\Users\spaven\Desktop\b2bHTTP.rxf"

Wednesday, May 14, 2014

IxLoad: How to set custom DSCP value


    In general the DSCP settings are  availabe on the the Activity's Advanced tab (for both client and server)
For example for  HTTP client  is here:
























    On releases  prior  6.40 EA the options defined in the drop down list do not cover all the   possible combination.


In that case, if you would like for example  to use a custom DSCP value you will have to  set  in that box the TOS integer value associated to it.
integer_TOS =integer_DSCP x 4
TOS(8b)=DSCP(6B)+2B

Monday, April 28, 2014

IxLoad IPsec: how to troubleshoot tunnel negotiation


   In order to troubleshoot tunnel negotiation  you will need to Enable Extra Port Logging for IPsec stack as in the  printscreen bellow.

*** enabling Extra Port Logging is affecting the performance numbers; use it only when you need to troubleshoot setup issues.

After you run the test ftp to  card using Internet Explorer
user: root
pass:1x1ac0m.c0m

Follow the direction to open  the directory in Windows Explorer
This will help you coy more files in the same time of you need it.


Go to  the  folder mng_IP/shared/port and search for the last xike.log
This will contain some detailed info about the tunnel setup process.





Friday, April 25, 2014

IxLoad How to create an ARP broadcast storm

   IxLoad was not design to test L2 features ( as ARP)  but in case you do not have available other tools as IxNetwork or IxExplorer  there are some ways on  which you create an ARP  storm.

Scenario:
Let's  say you need to have 1000 ARP  request  sent to your Gateway IP address

Setup:
Create one IP Range having 1000 IP address and set the GW as your DUT.
DUT IP=1.0.0.1
Ixia Port IP= 1.0.0.2+1000/22

Configuration:
1. Create one IP range with 1000 clients

2. Click on IP  plugin on the stack and then  click on Plugin settings in Main ribbon.
     Enable  Gateway ARP for each IP Address

3. Apply the configuration in order to generate the ARP storm,  you do not need to run the configuration.