1*a57d7795SbluhmSend IPsec traffic to another machine where it gets processed. 2*a57d7795SbluhmThere the IPsec implementation has to deliver it to the local stack 3*a57d7795Sbluhmor forward it after decryption. By reflecting the packets, the way 4*a57d7795Sbluhmback is also tested. When the response is received at the generating 5*a57d7795Sbluhmmachine, the test is considered successful. 6*a57d7795Sbluhm 7*a57d7795SbluhmCurrently only ICMP ping packets are encrypted with ESP. Transport 8*a57d7795Sbluhmand tunnel mode are tested with all combinations of IPv4 and IPv6. 9*a57d7795Sbluhm 10*a57d7795SbluhmTests for UDP, TCP and path MTU discovery are planned. 11