firewall-enabled ipv6/net2net-ip4-in-ip6-ikev2 scenario

2009-12-17 18:50:45 +01:00
parent ad858aee15
commit 02ee613325
6 changed files with 9 additions and 4 deletions
@@ -22,6 +22,7 @@ conn host-host
 	left=PH_IP6_MOON
 	leftcert=moonCert.pem
 	[email protected]
+	leftfirewall=yes
 	right=PH_IP6_SUN
 	[email protected]
 	auto=add
@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file

 charon {
-  load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 hmac xcbc stroke kernel-netlink
+  load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 hmac xcbc stroke kernel-netlink updown
 }
@@ -22,6 +22,7 @@ conn host-host
 	left=PH_IP6_SUN
 	leftcert=sunCert.pem
 	[email protected]
+	leftfirewall=yes
 	right=PH_IP6_MOON
 	[email protected]
 	auto=add
@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file

 charon {
-  load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 hmac xcbc stroke kernel-netlink
+  load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 hmac xcbc stroke kernel-netlink updown
 }
@@ -1,2 +1,4 @@
 moon::ipsec stop
 sun::ipsec stop
+moon::/etc/init.d/iptables stop 2> /dev/null
+sun::/etc/init.d/iptables stop 2> /dev/null
@@ -1,6 +1,7 @@
-moon::echo 1 > /proc/sys/net/ipv4/ip_forward
-sun::echo 1 > /proc/sys/net/ipv4/ip_forward
+moon::/etc/init.d/iptables start 2> /dev/null
+sun::/etc/init.d/iptables start 2> /dev/null
 moon::ipsec start
 sun::ipsec start
 moon::sleep 2 
 moon::ipsec up net-net
+moon::sleep 2