testing: Migrated p2pnat/behind-same-nat scenario to vici

2021-03-30 22:12:00 +02:00
parent 68154033bb
commit 03e1272ff2
16 changed files with 166 additions and 134 deletions
@@ -1,24 +0,0 @@
-# /etc/ipsec.conf - strongSwan IPsec configuration file
-
-config setup
-
-conn %default
-	ikelifetime=60m
-	keylife=20m
-	rekeymargin=3m
-	keyingtries=1
-	keyexchange=ikev2
-	mobike=no
-	dpdaction=clear
-	dpddelay=60s
-
-conn medsrv
-	left=PH_IP_CAROL
-	leftcert=carolCert.pem
-	[email protected]
-	leftauth=pubkey
-	leftfirewall=yes
-	right=%any
-	rightauth=psk
-	mediation=yes
-	auto=add
@@ -1,11 +0,0 @@
-# /etc/ipsec.secrets - strongSwan IPsec secrets file
-
-: RSA carolKey.pem "nH5ZQEWtku0RJEZ6"
-
-# Mediation clients with random IDs
-
-[email protected] : PSK "BAXz/6cSITttd0CzF9799p859Pi4LPnP"
-
-[email protected] : PSK "9tb3wiUGqUwCSRIRAwLFWfkdA8u6hHA8"
-
-[email protected] : PSK "ZVm3FLOiweS1ywUDpR/L9FvpwNYp9svt"
@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file

 charon {
-  load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac stroke kernel-netlink socket-default updown
+  load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac vici kernel-netlink socket-default updown
 }
@@ -0,0 +1,36 @@
+connections {
+
+   medsrv {
+      local_addrs  = 192.168.0.100
+
+      local {
+         auth = pubkey
+         certs = carolCert.pem
+         id = [email protected]
+      }
+      remote {
+         auth = psk
+      }
+
+      version = 2
+      mobike = no
+      mediation = yes
+      proposals = aes128-sha256-x25519
+   }
+}
+
+secrets {
+
+   ike-1 {
+      id = [email protected]
+      secret = 0sBAXz/6cSITttd0CzF9799p859Pi4LPnP
+   }
+   ike-2 {
+      id = [email protected]
+      secret = 0s9tb3wiUGqUwCSRIRAwLFWfkdA8u6hHA8
+   }
+   ike-3 {
+      id = [email protected]
+      secret = 0sZVm3FLOiweS1ywUDpR/L9FvpwNYp9svt
+   }
+}