[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

VPN Interoperability Workshop Oct 26 - 30



Return your application via email and reserve your hotel rooms before
September 25, 1998!

To Networking Product Developers:

The California ISDN Users' Group (CIUG) invites you to participate in
the VPN Interoperability Workshop featuring IPSEC, IKE, and L2TP hosted
by IBM AS/400 Endicott at the Holiday Inn Binghamton Arena in
Binghamton, New York.  The VPN Workshop combines the eighth CIUG PPP
Interoperability Workshop and the sixth IPSEC Interoperability Workshop.

The Workshop will be open to companies with products that implement:

IP Security (IPSEC)
Internet Key Exchange (IKE)
PPP Layer 2 Tunneling Protocol (PPP L2TP)

The Workshop will provide an opportunity to test the interoperability of
your products with products from all of the other companies attending.

The participating companies are asked to bring products that are
released, at beta or near beta level for IPSEC, IKE, and L2TP.

Participants are engineering staff intimately familiar with the software
and hardware that implements the capabilities being tested and are
expected to have a thorough understanding of the protocols.

This Workshop will be open to only the participants. This is not a
spectator event; it is not open to observers. Some participants will be
working with unreleased products and the other attendees are expected to
respect their privacy.

SPONSORSHIP:

IBM AS/400 Endicott is the host for the VPN Interoperability Workshop.
Worldcom Advanced Networks will provide the Backbone Test Ethernet and
access to the real Internet.  In addition to the general test plan,
ICSA, Inc. will work with IPSEC/IKE testing that is based on the ICSA
IPSec 1.1 Certification Model.

PRESS RELEASE:

The CIUG and IBM AS/400 Endicott plan to make a press release announcing
the workshop and listing the participants. There will be no mention of
any specific results of the testing in this release. Please indicate in
the application if you want your company's name included in this release
as a participant. If you include your public relations person in the
application, that contact will be given the opportunity to review the
release in advance.

SCHEDULE:

Monday, October 26

8:00 PM to 9:30 PM Reception

Tuesday, October 27

7:00 AM to 8:30 AM Buffet Breakfast
8:00 AM Setup
12:00 Noon Buffet Lunch
1:00 PM to 9:00 PM Testing

Wednesday, October 28

7:00 AM to 8:30 AM Buffet Breakfast
8:00 AM to 9:00 PM Testing
12:00 Noon Buffet Lunch

Thursday, October 29

7:00 AM to 8:30 AM Buffet Breakfast
8:00 AM to 9:00 PM Testing
12:00 Noon Buffet Lunch
3:00 PM to 5:00 PM Group Meeting
6:00 PM Get Together and Evening Refreshments

Friday, October 30

7:00 AM to 8:30 AM Buffet Breakfast
8:00 AM to 3:00 PM Testing
12:00 Noon Buffet Lunch
3:00 PM to 5:00 PM Break Down Facility

FEES:

Binghamton is a small community nestled in the Catskill Mountains of New
York State.  The Holiday Inn is located in the Arena area of downtown.
As such we have chosen to cater the meals for this interoperability
workshop to insure all of the participants will maximize the value of
their time spent at the workshop.

The charge for the Workshop is $300 per person.  The fee covers the cost
of the meals and organizing the event.  The fee covers the entire week.
Each person attending must pay the full amount. There will be no
provision for a daily rate for those not attending the entire week.
Checks, wire transfers, or credit cards will be accepted. Cash payments
are not available. Payment must be received in advance.   Refunds will
not be made for cancellations after October 16, 1998.  Please fill out
and return the payment form with your payment.

FACILITIES:

Tables and Power:

Each participating company will be provided one 8-foot table, 5 Amps of
power, and one power strip. Bring additional power strips if you need
them. If you know your test setup will require more than 5 Amps please
provide that information in advance on the application form and it will
be available.

Backbone Ethernet Network:

Each participating company will be provided a single RJ-45 cable
attached to the backbone Ethernet network. The backbone Ethernet network
will be a public class C network that is connected to the Internet via a
router with all routes configured statically (no dynamic routing).

In the application you will be asked to specify which of the following
configurations you will need and the quantity. You may request multiple
host or routed network addresses but you must bring your own
switches/hubs to attach more than a single device to the backbone
Ethernet network. Configurations 2 and 3 require you to bring your own
router.

Configuration 1:

Host address; a single IP address assigned from the backbone Ethernet
network (a public class C network).

Configuration 2:

Routed private network address; a single IP address assigned from the
backbone Ethernet network (a public class C network) and a private class
C network (to be assigned) with a static route configured in the
backbone router to the single IP address.

Configuration 3:

Routed private and public network addresses; a single IP address
assigned from the backbone Ethernet network (a public class C network)
and a private class C network (to be assigned) and a public subnetwork
(/29 subnet address to be assigned) with a static route for both
networks configured in the backbone router to the single IP address.

Note: you can not reach the Internet with private network addresses. If
these configurations do not satisfy your requirements, please contact
James Matheke at 614-723-1525 or jmatheke@web.compuserve.com.

File Transfer Servers: Servers will be available for file transfers as
defined in the test procedures.

ISDN Lines: BRI and PRI lines will be provided for testing from a Madge
switch.  The BRI lines will be provisioned as NI-1 with CSV/D on each B
channel.  The BRI lines may be either a U or S/T interface.  There will
be a limited number of PRI lines available. The PRI lines will be
assigned to those companies with products that do not support BRI. If
you request a PRI line, please bring a CSU to terminate the T1
interface. The PRI lines will be NI-2.

Telephone Service: There will be a telephone on each table in the
workshop for voice service provided by a networked PBX.

SHIPPING EQUIPMENT TO HOLIDAY INN BINGHAMTON ARENA, BINGHAMTON, NY:

Participants will be responsible for bringing workstations and network
equipment. You may ship your equipment to:

Your Name
Holiday Inn Binghamton Arena
2-8 Hawley Street
Binghamton, NY 13901
607-722-1212

Please mark "VPN"

Schedule your equipment to arrive at the Holiday Inn Binghamton Arena
between October 19 and October 23, 1998. Please provide shipping
information, such as date shipped, tracking number, and number of boxes
as well as your room reservation confirmation number, to the Holiday Inn
Binghamton Arena so receipt of your shipment may be confirmed and
accepted.

IMPORTANT: Please bring the shipping documents for the return of your
equipment back to your company. These documents include the carrier
form. International shipments must include all appropriate documents,
including carrier forms and invoices.

Additionally, please make arrangements with your carrier in advance for
pickup of the equipment at the Holiday Inn Binghamton Arena on Friday,
October 30, 1998.

These two points are very important. Neither IBM AS/400 Endicott nor the
Holiday Inn Binghamton Arena will be able to provide shipping forms or
customs forms to you. You have to bring your own. Also neither IBM
AS/400 Endicott nor the Holiday Inn Binghamton Arena will be able to
store your equipment past Friday, October 30, 1998. It is your
responsibility to make arrangements to have everything picked up by that
day.

ACCOMMODATIONS:

Be sure to register by September 25, 1998 to insure that rooms will be
available for you and your group.  The block of rooms is available at

Holiday Inn Binghamton Arena
2-8 Hawley Street
Binghamton, NY 13901
607-722-1212

Register under "VPN Bakeoff Lab" to get the Workshop rate of $81.00 plus
tax per night with no charge for parking.

Rooms are available for check in October 26, 1998 through check out
October 30, 1998.  Check in time is 4:00 PM and check out time is 12:00
Noon.

A deposit equal to one night's stay must accompany the hotel room
reservations.  The Holiday Inn Binghamton Arena will accept personal
checks, AMEX, MC, VISA, DC, DIS, or Vouchers.

Airport Access:

Jet service is available to Binghamton (BGM) by USAir through
Pittsburgh, PA.  Other airlines have jet service to Syracuse, New York
(SYR).

Directions:

To the Holiday Inn Binghamton Arena from the Syracuse International
Airport:

Syracuse International Airport is located just north of central upstate
New York's city of Syracuse.  Exit from Syracuse Airport and take
Interstate Route 81 South for 80 miles to Binghamton, NY.  Upon
approaching Binghamton, just past Exit 5, take the fork to the right
from Interstate Route 81 South to New York State (NYS) Route 17 West.
Proceed to directions labeled 2) below.

To the Holiday Inn Binghamton Arena from the Binghamton Regional
Airport:

Binghamton Regional Airport is located in southern upstate New York's
Broome County, just north of the city of Binghamton.  Exit Binghamton
Airport and keep left (south) onto two-lane asphalt "Airport Road".
Proceed for approximately 7 miles to the first traffic light and Airport
Road will turn into a four-lane divided highway.  After passing through
the second traffic light, about 2 miles, take an immediate right onto
the entrance ramp to New York State (NYS) Route 17 West.

2) Proceed on NYS Route 17 West past the Oakdale Mall Exit and take exit
70S, NYS Route 201, which will lead to and then turn into NYS Route 201
South.  First look for the overhead sign with Vestal and Binghamton BOTH
contained, and then look for the overhead sign with just Vestal
contained.

Once on the bridge over the Susquehanna River begin looking for overhead
signs with Binghamton and NYS Route 434 East.  (NYS Route 434 West goes
to the Vestal Town Mall).  Loop around to the right from NYS Route 201
South to NYS Route 434 East towards Binghamton.  Once on Route 434 East,
proceed for 5-6 miles.

Upon entering Downtown Binghamton, you cross over a concrete bridge
(Conklin Bridge) with a 90-degree turn to the left.  At the next traffic
light turn left and the Holiday Inn Binghamton Arena is straight ahead.
Just before entering the Conklin Bridge, the Number Five Restaurant is
on the right.

REGISTRATION:

This will be a "self organizing" event. It will be your responsibility
to develop your own test plan and to arrange your own testing partners.
This method has worked well in the past and we believe that it provides
the most productive environment for testing. In the application you will
be asked to list the days you will be available for testing. Please be
accurate so everyone has an opportunity to test with you.

Please fill out the Product Section of the application carefully. We
will use the information to put together a binder of data to assist when
you are testing with partners.

To register for the VPN Interoperability Workshop fill out the following
application and return it by email immediately to reserve your place.
The email address is <bob@larribeau.com>.

If you have any questions, send email or call

Bob Larribeau, bob@larribeau.com ,  415-241-9920

Based on past workshops, expected attendance is 60 companies.  Get the
reservation in early to assure yourself a place.


------------------------------ PAYMENT FORM----------------------------
PLEASE RETURN THIS APPLICATION VIA EMAIL.

Name: __________________________________

Company: _______________________________

Address: _________________________________

__________________________________________

City, State, Zip ________________________________

Country: _____________________________________

Phone: _________________________________

Fax: ___________________________________

Email: _________________________________

Number of Attendees: _________ x $300.00 = Total Payment $_____________

Refunds will not be made for cancellations after October 16, 1998.

Pay by credit card:

Fill out the form below and fax it to the CIUG at (415) 753-6942.

Credit Card Type (Circle One): American Express, Visa, Master Charge,
JCB

Credit Card Number: ______________________________

Expiration Date: _________________________________

Name: ____________________________________________

Signature: _______________________________________

Pay by check:

Send a check made out to the CIUG for $300 for each participant to:

California ISDN Users' Group PO Box 27901-391 San Francisco, CA 94127

Wire funds to:

California ISDN Users' Group Account Number 02882 07752 Bank of America
#0288 288 West Portal Avenue San Francisco, CA 94127 USA
-----------------------------------------------------------------------
APPLICATION

PLEASE RETURN THIS APPLICATION VIA EMAIL.


Please enter the name of the Workshop Coordinator who will coordinate
your registration. We will send emails to this person to give the latest
information on the workshop and to verify your registration.

Name: __________________________________

Address: _________________________________

__________________________________________

City, State, Zip ________________________________

Country: _____________________________________

Phone: _________________________________

Fax: ___________________________________

Email: _________________________________

Do you want your company's name included in the CIUG and IBM AS/400
Endicott press release as a participant?  Yes or No

Provide the name, address, phone, fax, and email of your public
relations contact. We will give this person an opportunity to review the
release in advance.


Names of ALL Participants and Shirt size (including the Workshop
Coordinator listed above if they will attend):

Name_____________________ Shirt size M  L  XL  XXL

Name_____________________ Shirt size M  L  XL  XXL




Monday Evening Reception (Yes or No)

Days available for testing: Tu W Th F

Number of tables:

IP Addresses-

Number of Host addresses (configuration 1):

Number of Routed private network addresses (configuration 2):

Number of Routed private and public network addresses (configuration 3):

Additional Power Requirements:

Number of BRI lines: 1 2 More than 2 (please specify)

S/T or U interface:

PRI (Yes or No):

Additional Madge Switch Requirements:

Will you be testing:

IPSEC (Y/N)

IKE (Y/N)

L2TP (Y/N)

L2TP with IPSEC (Y/N)

Will you be providing:

CA services (Y/N)
----------------------------------------------------

Product Section: Fill out a Product Section for each device you are
testing.

Product Name:

Software Version:

Product Type, check all that apply:

Router_____ Firewall_____ IPSEC Gateway_____ IPSEC Host_____

Client Software_____ Other________________________


For IPSEC and IKE ------------------------------------------------------

IPSEC:

IPSEC manual keys (Y/N)

AH tunnel (Y/N)

AH transport (Y/N)

ESP tunnel (Y/N)

ESP transport (Y/N)

Transport adjacency (Y/N)

Nested tunneling (Y/N)

Iterated tunneling (Y/N)

ESP cipher algorithms-

DES-CBC mandatory (Y/N)

3DES optional (Y/N)

RC5 optional (Y/N)

CAST optional (Y/N)

NULL optional (Y/N)

ESP authenticators-

HMAC-MD-5 mandatory (Y/N)

HMAC-SHA-1 mandatory (Y/N)

AH-

HMAC-MD-5 mandatory (Y/N)

HMAC-SHA-1 mandatory (Y/N)

IPPCP optional-

LZS (Y/N)

DEFLATE (Y/N)


IKE:

Exchanges-

Main mode (identity protect) (Y/N)

Aggressive mode (Y/N)

Quick mode (Y/N)

Authentication methods-

Preshared keys (Y/N)

RSA signature (Y/N)

DSS signature (Y/N)

RSA Encryption (Y/N)

Revised RSA encryption (Y/N)

Certificate Validation (Y/N)

No CA infrastructure (Y/N)

CA hierarchy supported (Y/N)

CA cross-cert supported (Y/N)

Encryption algorithms-

DES mandatory (Y/N)

Triple DES (Y/N)

CAST (Y/N)

RC5 (Y/N)

Other___________

Hash algorithms-

MD-5 (Y/N)

Sha-1 (Y/N)

Other___________

Optional payloads-

Cert (Y/N)

Vendor-ID (Y/N)

Cert request (Y/N)

Other___________

Commit bit (Y/N)

CA Interoperability-

PKIX part3 (Y/N)

PKCS 10/7 (Y/N)
-Manual (Y/N)
-SMTP (Y/N)
-HTTP (Y/N)

Test roles, check all that apply-

Gateway to Gateway____ Gateway to Host____ Host to Host____

NAT (Y/N)

L2TP as NAT bypass (Y/N)


For L2TP---------------------------------------------------------------

LCP Options:

Default MRU__________________________

Default MRRU_________________________


Authentication:

PAP authenticator (Y/N)

PAP authenticatee (Y/N)

CHAP authenticator (Y/N)

CHAP authenticatee (Y/N)

CHAP Re-challenge (Y/N)

MS CHAP (Y/N)


L2TP:

LAC (Y/N)

LNS (Y/N)

L2TP Client (Y/N)


L2TP Options - LAC:

Proxy LCP (Y/N)

Proxy Authentication PAP (Y/N)

Proxy Authentication CHAP (Y/N)

Proxy Authentication MS-CHAP (Y/N)

Tunnel Authentication (Y/N)

Hidden AVPs (Y/N)

Outgoing Calls (Y/N)

Flow Control/Sequencing (Y/N)

L2TPSEC (Y/N)

IPSEC (Y/N)


L2TP Options - LNS:

Proxy LCP (Y/N)

Proxy Authentication PAP (Y/N)

Proxy Authentication CHAP (Y/N)

Proxy Authentication MS-CHAP (Y/N)

Tunnel Authentication (Y/N)

Hidden AVPs (Y/N)

Outgoing Calls (Y/N)

Flow Control/Sequencing (Y/N)

MP (bundle tunneled links) (Y/N)

ECP (Y/N)

CCP (Y/N)

Algorithms______________________________

CBCP (Y/N)

L2TPSEC (Y/N)

IPSEC (Y/N)

Tunnel Types-

Voluntary (Y/N)

Compulsory (Y/N)


L2TP Options - Client:

Proxy LCP (Y/N)

Proxy Authentication PAP (Y/N)

Proxy Authentication CHAP (Y/N)

Proxy Authentication MS-CHAP (Y/N)

Tunnel Authentication (Y/N)

Hidden AVPs (Y/N)

Outgoing Calls (Y/N)

Flow Control/Sequencing (Y/N)

L2TPSEC (Y/N)

IPSEC (Y/N)


IPCP:

Numbered links (Y/N)

Un-numbered links (Y/N)

Tx if Un-numbered____________

Options supported____________

IP assignment (Y/N)

IP Pool (Y/N)

DHCP (Y/N)


IPXCP:

Numbered links (Y/N)

Un-numbered links (Y/N)

Tx if Un-numbered____________

Options supported____________








Follow-Ups: