Commit abf7274f authored by Yann Garcia's avatar Yann Garcia
Browse files

Review TP_5GNAS_AMF_AUT_REQ_04 and TC_5GNAS_AMF_AUT_REQ_04

parent 62c5f0fa

captures/TC_5GNAS_AMF_AUT_REQ_03.pcap

+4.45 KiB (11.1 KiB)

File changed.

No diff preview for this file type.

View original file
View changed file

captures/TC_5GNAS_AMF_AUT_REQ_04.pcap

+1.81 KiB (4.19 KiB)

File changed.

No diff preview for this file type.

View original file
View changed file

etc/Ats_NG_NAS/Ats_NG_NAS_AMF_open5gs.cfg_

+3 −2
Changes for etc/Ats_NG_NAS/Ats_NG_NAS_AMF_open5gs.cfg_: 3 added lines, 2 removed lines.
Original line number Diff line number Diff line
@@ -13,6 +13,7 @@ NGAP_Pics.PICS_NGAP_GNB_IUT := false 


NG_NAS_Pics.PICS_NGNAS         := true

NG_NAS_Pics.PICS_NAS_A4_1_2     := true  # 5G AKA based primary authentication and key agreement (TC_5GNAS_AMF_AUT_REQ_xx)

NG_NAS_Pics.PICS_NAS_A4_1_2_2_1 := false # open5gs: AUTHENTICATION REJECT on #20 MAC failure, no identification (TC_5GNAS_AMF_AUT_REQ_04)



LibNGAP_Pics.PICS_OFFLINE_MODE := false # true to use offline mode with pcap files, false to use online mode with real network functions

LibNGAP_Pics.PICS_USE_OPEN5GS  := false # true to start open5gs, false to not start them
@@ -172,9 +173,9 @@ system.utHttpPort.params := "HTTP/TCP(server=127.0.0.1,port=12200,use_ssl=0,debu 
# Verify that the IUT sends an AUTHENTICATION_REJECT message upon receipt of an AUTHENTICATION_RESPONSE containing an invalid authentication response value, when the UE was identified with SUCI in the initial NAS message

#NG_NAS_TestCases.TC_5GNAS_AMF_AUT_REQ_02

# Verify that the IUT stops re-sending an AUTHENTICATION_REQUEST message if no AUTHENTICATION_RESPONSE message is received on the fifth expire of timer T3560

NG_NAS_TestCases.TC_5GNAS_AMF_AUT_REQ_03

#NG_NAS_TestCases.TC_5GNAS_AMF_AUT_REQ_03

# Verify that the IUT sends an IDENTITY_REQUEST message correctly upon receipt of an AUTHENTICATION_FAILURE message indicating a 5GMM cause value #20 - MAC failure

#NG_NAS_TestCases.TC_5GNAS_AMF_AUT_REQ_04

NG_NAS_TestCases.TC_5GNAS_AMF_AUT_REQ_04

# Verify that the IUT sends a new AUTHENTICATION_REQUEST message with new ngKSI value to re-initiate the 5G AKA based primary authentication upon receipt of an AUTHENTICATION_FAILURE message indicating a 5GMM cause value #71 - ngKSI already in use

#NG_NAS_TestCases.TC_5GNAS_AMF_AUT_REQ_05

# Verify that the IUT sends an IDENTITY_REQUEST message to obtain the SUCI from the UE upon receipt of an AUTHENTICATION_FAILURE message indicating a 5GMM cause value #26 - non-5G authentication unacceptable

test_purposes/TP_AMF_NGNAS.tdltx

+6 −5
Changes for test_purposes/TP_AMF_NGNAS.tdltx: 6 added lines, 5 removed lines.
Original line number Diff line number Diff line
@@ -165,6 +165,7 @@ Package TP_AMF_NGNAS { 
            

            Configuration: CF_AMF_N2N1

            

            PICS: PICS_NAS_A4_1_2_2_1

            

            Initial conditions

            with {
@@ -177,8 +178,8 @@ Package TP_AMF_NGNAS { 
                    when {

                        the IUT entity receives an UPLINK_NAS_TRANSPORT containing {

                            NAS_PDU containing {

                                extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES, //!reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values 

                                security_header_type set to INTEGRITY_PROTECTED,

                                extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,

                                security_header_type set to NOT_SECURITY_PROTECTED, //!no 5G NAS security context yet

                                message_type set to AUTHENTICATION_FAILURE,

                                5GMM_cause set to MAC_failure}}

                        from the GNB entity
@@ -186,10 +187,10 @@ Package TP_AMF_NGNAS { 
                    then {

                        the IUT entity sends an DOWNLINK_NAS_TRANSPORT containing {

                            NAS_PDU containing {

                                extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES, //!reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values 

                                security_header_type set to INTEGRITY_PROTECTED,

                                extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,

                                security_header_type set to NOT_SECURITY_PROTECTED, //!no 5G NAS security context yet

                                message_type set to IDENTITY_REQUEST,

                                identity_type set to SUCI}}

                                identity_type set to SUCI}} //!TS 124 501 clause 9.11.3.3: identity type '001'

                        to the GNB entity

                    }

                }

ttcn/Ats_NG_NAS/NG_NAS_Pics.ttcn

+7 −0
Changes for ttcn/Ats_NG_NAS/NG_NAS_Pics.ttcn: 7 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -24,6 +24,13 @@ module NG_NAS_Pics { 
         */

        modulepar boolean PICS_NAS_A4_1_2 := true;



        /**

         * @desc Does the IUT initiate the identification procedure on receipt of an AUTHENTICATION FAILURE message containing

         *       5GMM cause #20 "MAC failure"? (optional behaviour, TS 24.501 clause 5.4.1.3.7 c))

         * @see  ETSI TS 103 921-1 Table A.4 (PICS_NAS_A4_1_2_2_1)

         */

        modulepar boolean PICS_NAS_A4_1_2_2_1 := false;

   

    } // End of group PICS_



} // End of module NG_NAS_Pics
 
 No newline at end of file