Performance Test Scenario : Benchmarking
AH Tunnel mode: [IP2][AH][IP1]
(Security Gateway)

Last Update : November 29, 1999

This scenario verifies the performance characteristics of a network interconnecting device, when the target ROUTER is attached to the model network.

Then we determine about IP datagram size exclude the Ethernet header in this scenario.

• Subjects :

  Verification of router's performance about packet forwarding of ROUTER under network that a ROUTER works as Security Gateway.

  Authentication Header(AH) tunnel mode.

  Authentication algorithm :

  HMAC-MD5

  MODE :

  tunnel

  Verification Points :

  - Frame loss rate

  Send a specific number of frames at a specific rate through the DUT to be tested and count the frames that are transmitted by the DUT.

  The frame loss rate at each point is calculated using the following equation:

  ( ( input_count - output_count ) * 100 ) / input_count

  - Throughput

  Send a specific number of frames at a specific rate through the DUT and then count the frames that are transmitted by the DUT.
  If the count of offered frames is equal to the count of received frames, the fewer frames are received than were transmitted, the rate of the offered stream is reduced and the test is rerun.
  The throughput is the fastest rate at which the count of test frames transmitted by the DUT is equal to the number of test frames sent to it by the test equipment.

• Detect Protocol :

  UDP

• Physical Network Configuration :

  SGW=Security Gateway
                   HOST-2
                     |
                     |
  -----------+-------+------------ (Net-X) (Prefix 3ffe:501:481d:f003::/64)
             |
             |
          ROUTER-2(SGW)
             |
             |
  ---+-------+-------------------- (Net-Y) (Prefix 3ffe:501:481d:f002::/64)
     |
     |
  ROUTER-1(SGW)
     |
     |
  ---+-------+-------------------- (Net-Z) (Prefix 3ffe:501:481d:f001::/64)
             |
             |
           HOST-1
  

• Test Machine :

• Configuration List :

  *Auth Alg = Authentication Algorithm

• Applications :

  Performance is checked by using application program "tg".

• Performance Check :

Devices Under Test(DUT)

• Matrix :

  - Frame loss rate

When size is 16 byte, if frame loss rates of (4) and (5) are 0%, change the size.

After the trial about all size has been finished, repeat the trial total 5 times.

- Throughput

When size is 16 byte, if frame loss rates of (4) and (5) are 0%, trial is started from 80% of maximum frame rate.

Reduce the frame rate until frame loss rate becames 0%.

After the trial about all size has been finished, repeat the trial total 5 times.

• Reporting format :

  - Frame loss rate

  the X axis is the input frame rate as a percent of the theoretical rate for the media at the specific IP datagram size.
  The Y axis MUST be the percent loss at the particular input rate.

  The left end of the X axis and the bottom of the Y axis MUST be 0 percent.
  the right end of the X axis and the top of the Y axis MUST be 100 percent.

  Multiple lines on the graph MAY used to report the frame loss rate for different IP datagram sizes, protocols, and types of data streams.

  - Throughput

  the x coordinate is the IP datagram size.
  the y coordinate SHOULD be the frame rate.

  There SHOULD be one line showing the theoretical frame rate for the media at the various IP datagram sizes.
  The second line SHOULD be the plot of the test results.

• Appendix A :

  Maximum frame rates reference

Theoretical maximum pps rates for Ethernet and Fast Ethernet were calculated by adding 20 bytes to each frame size to account for 0.96 microsecond inter-frame gap (equivalent to 12 bytes) and preamble (8 bytes).

Thus, the maximum Ethernet frame rate in pps for a IP Datagram of X bytes is:

(10,000,000 Bit/s)/((8 Bits/ Byte)*(X+18+20))

and, the maximum Fast Ethernet frame rate in pps for a IP Datagram of X bytes is:

(100,000,000 Bit/s)/((8 Bits/ Byte)*(X+18+20))
• Appendix B :

  Frame rates reference (Ethernet)

Frame rates reference (Fast Ethernet)