firewall-enabled ipv6/net2net-ip4-in-ip6-ikev2 scenario
This commit is contained in:
@@ -22,6 +22,7 @@ conn host-host
|
|||||||
left=PH_IP6_MOON
|
left=PH_IP6_MOON
|
||||||
leftcert=moonCert.pem
|
leftcert=moonCert.pem
|
||||||
[email protected]
|
[email protected]
|
||||||
|
leftfirewall=yes
|
||||||
right=PH_IP6_SUN
|
right=PH_IP6_SUN
|
||||||
[email protected]
|
[email protected]
|
||||||
auto=add
|
auto=add
|
||||||
|
|||||||
@@ -1,5 +1,5 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
charon {
|
charon {
|
||||||
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 hmac xcbc stroke kernel-netlink
|
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 hmac xcbc stroke kernel-netlink updown
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -22,6 +22,7 @@ conn host-host
|
|||||||
left=PH_IP6_SUN
|
left=PH_IP6_SUN
|
||||||
leftcert=sunCert.pem
|
leftcert=sunCert.pem
|
||||||
[email protected]
|
[email protected]
|
||||||
|
leftfirewall=yes
|
||||||
right=PH_IP6_MOON
|
right=PH_IP6_MOON
|
||||||
[email protected]
|
[email protected]
|
||||||
auto=add
|
auto=add
|
||||||
|
|||||||
@@ -1,5 +1,5 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
charon {
|
charon {
|
||||||
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 hmac xcbc stroke kernel-netlink
|
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 hmac xcbc stroke kernel-netlink updown
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,2 +1,4 @@
|
|||||||
moon::ipsec stop
|
moon::ipsec stop
|
||||||
sun::ipsec stop
|
sun::ipsec stop
|
||||||
|
moon::/etc/init.d/iptables stop 2> /dev/null
|
||||||
|
sun::/etc/init.d/iptables stop 2> /dev/null
|
||||||
|
|||||||
@@ -1,6 +1,7 @@
|
|||||||
moon::echo 1 > /proc/sys/net/ipv4/ip_forward
|
moon::/etc/init.d/iptables start 2> /dev/null
|
||||||
sun::echo 1 > /proc/sys/net/ipv4/ip_forward
|
sun::/etc/init.d/iptables start 2> /dev/null
|
||||||
moon::ipsec start
|
moon::ipsec start
|
||||||
sun::ipsec start
|
sun::ipsec start
|
||||||
moon::sleep 2
|
moon::sleep 2
|
||||||
moon::ipsec up net-net
|
moon::ipsec up net-net
|
||||||
|
moon::sleep 2
|
||||||
|
|||||||
Reference in New Issue
Block a user