testing: Migrated p2pnat/behind-same-nat scenario to vici

2021-03-30 22:12:00 +02:00
parent 68154033bb
commit 03e1272ff2
16 changed files with 166 additions and 134 deletions
@@ -0,0 +1,54 @@
+connections {
+
+   medsrv {
+      remote_addrs  = 192.168.0.100
+
+      local {
+         auth = psk
+         id = [email protected]
+      }
+      remote {
+         auth = pubkey
+         id = [email protected]
+      }
+
+      version = 2
+      mobike = no
+      mediation = yes
+      proposals = aes128-sha256-x25519
+   }
+
+   peer {
+      local {
+         auth = pubkey
+         certs = aliceCert.pem
+         id = [email protected]
+      }
+      remote {
+         auth = pubkey
+         id = venus.strongswan.org
+      }
+      children {
+         peer {
+            remote_ts = 10.1.0.20
+
+            start_action = start
+            updown = /usr/local/libexec/ipsec/_updown iptables
+            esp_proposals = aes128gcm128-x25519
+         }
+      }
+      version = 2
+      mobike = no
+      mediated_by = medsrv
+      mediation_peer = [email protected]
+      proposals = aes128-sha256-x25519
+  }
+}
+
+secrets {
+
+   ike-medsrv {
+      id = [email protected]
+      secret = 0sBAXz/6cSITttd0CzF9799p859Pi4LPnP
+   }
+}