check for selected IKE proposal
This commit is contained in:
@@ -1,7 +1,9 @@
|
||||
moon::ipsec statusall::rw.*INSTALLED::YES
|
||||
carol::ipsec statusall::home.*INSTALLED::YES
|
||||
moon::ipsec statusall::AES_CBC-256/AES_XCBC_96::YES
|
||||
carol::ipsec statusall::AES_CBC-256/AES_XCBC_96::YES
|
||||
moon::ipsec statusall::rw.*IKE proposal.*AES_CBC-256/AES_XCBC_96/PRF_AES128_CBC/MODP_2048_BIT::YES
|
||||
carol::ipsec statusall::home.*IKE proposal.*AES_CBC-256/AES_XCBC_96/PRF_AES128_CBC/MODP_2048_BIT::YES
|
||||
moon::ipsec statusall::rw.*AES_CBC-256/AES_XCBC_96,::YES
|
||||
carol::ipsec statusall::home.*AES_CBC-256/AES_XCBC_96,::YES
|
||||
moon::ip xfrm state::auth xcbc(aes)::YES
|
||||
carol::ip xfrm state::auth xcbc(aes)::YES
|
||||
carol::ping -c 1 -s 120 -p deadbeef 10.1.0.10::128 bytes from 10.1.0.10: icmp_seq=1::YES
|
||||
|
||||
@@ -2,7 +2,9 @@ carol::cat /var/log/daemon.log::ECP_256_BIT.*ECP_384_BIT::YES
|
||||
dave::cat /var/log/daemon.log::ECP_256_BIT.*ECP_521_BIT::YES
|
||||
moon::ipsec statusall::rw.*ESTABLISHED::YES
|
||||
carol::ipsec statusall::home.*ESTABLISHED::YES
|
||||
carol::ipsec statusall::home.*AES_CBC-192/AUTH_HMAC_SHA2_384_192/PRF_HMAC_SHA2_384/ECP_384_BIT::YES
|
||||
dave::ipsec statusall::home.*ESTABLISHED::YES
|
||||
dave::ipsec statusall::home.*AES_CBC-256/AUTH_HMAC_SHA2_512_256/PRF_HMAC_SHA2_512/ECP_521_BIT::YES
|
||||
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
||||
dave::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
||||
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
|
||||
|
||||
@@ -2,7 +2,9 @@ carol::cat /var/log/daemon.log::ECP_192_BIT.*ECP_224_BIT::YES
|
||||
dave::cat /var/log/daemon.log::ECP_192_BIT.*ECP_256_BIT::YES
|
||||
moon::ipsec statusall::rw.*ESTABLISHED::YES
|
||||
carol::ipsec statusall::home.*ESTABLISHED::YES
|
||||
carol::ipsec statusall::home.*AES_CBC-128/AUTH_HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/ECP_224_BIT::YES
|
||||
dave::ipsec statusall::home.*ESTABLISHED::YES
|
||||
dave::ipsec statusall::home.*AES_CBC-128/AUTH_HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/ECP_256_BIT::YES
|
||||
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
||||
dave::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
||||
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
|
||||
|
||||
Reference in New Issue
Block a user