upgraded ikev1 scenarios to 5.0.0

This commit is contained in:
Andreas Steffen
2012-05-23 14:45:15 +02:00
parent 3c475660c5
commit 148b643880
973 changed files with 1476 additions and 13035 deletions
@@ -1,5 +1,3 @@
In IKE phase 2 the roadwarrior <b>carol</b> proposes to gateway <b>moon</b>
the ESP NULL encryption algorithm with SHA-1 authentication. <b>moon</b> must
explicitly accept the choice of this insecure algorithm by setting the strict
flag '!' in <b>esp=null-sha1!</b>. The tunnel is tested by <b>carol</b>
sending a ping to client <b>alice</b> behind gateway <b>moon</b>.
Roadwarrior <b>carol</b> proposes to gateway <b>moon</b> the ESP cipher suite
<b>NULL / HMAC_SHA1_96</b> by defining <b>esp=null-sha1</b> in ipsec.conf.
A ping from <b>carol</b> to <b>alice</b> successfully checks the established tunnel.