denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Converted ipv6/net2net-ip6-in-ip4-ikev1 to swanctl

Browse Source
This commit is contained in:
Andreas Steffen
2017-11-10 13:54:50 +01:00
parent f0476c4a82
commit 12dbca721e
11 changed files with 112 additions and 63 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/description.txt
+8 -6
View File
@@ -1,6 +1,8 @@
An IPv6 ESP tunnel connection between the gateways <b>moon</b> and <b>sun</b> is successfully set up.
It connects the two subnets hiding behind their respective gateways. The authentication is based on
X.509 certificates. Upon the successful establishment of the IPsec tunnel, <b>leftfirewall=yes</b>
automatically inserts ip6tables-based firewall rules that let pass the tunneled traffic.
In order to test both the net-to-net tunnel and the firewall rules, client <b>alice</b> behind <b>moon</b>
sends an IPv6 ICMP request to client <b>bob</b> behind <b>sun</b> using the ping6 command.
An IPv6 ESP tunnel connection between the gateways <b>moon</b> and <b>sun</b> is
successfully set up. It connects the two subnets hiding behind their respective
gateways. The authentication is based on X.509 certificates. Upon the successful
establishment of the IPsec tunnel, automatically inserted ip6tables-based firewall
rules let pass the tunneled traffic.
In order to test both the net-to-net tunnel and the firewall rules, client
<b>alice</b> behind <b>moon</b> sends an IPv6 ICMP request to client <b>bob</b>
behind <b>sun</b> using the ping6 command.