expanded ikev2/ip-two-pools-db to a spoke-to-hub network using virtual IP addresses

This commit is contained in:
Andreas Steffen
2008-07-11 15:24:02 +00:00
parent ef3f717bfe
commit 174960bedc
13 changed files with 197 additions and 21 deletions
@@ -1,14 +1,31 @@
carol::ipsec status::home.*INSTALLED::YES
dave::ipsec status::home.*INSTALLED::YES
alice::ipsec status::home.*INSTALLED::YES
venus::ipsec status::home.*INSTALLED::YES
moon::ipsec status::ext.*ESTABLISHED.*[email protected]::YES
moon::ipsec status::ext.*ESTABLISHED.*[email protected]::YES
moon::ipsec status::int.*ESTABLISHED.*[email protected]::YES
moon::ipsec pool --status::extpool.*10.3.0.1.*10.3.255.254.*48h.*1::YES
moon::ipsec pool --status::intpool.*10.4.0.1.*10.4.255.254.*static.*1::YES
moon::ipsec status::int.*ESTABLISHED.*venus.strongswan.org::YES
moon::ipsec pool --status::extpool.*10.3.0.1.*10.3.255.254.*48h.*2::YES
moon::ipsec pool --status::intpool.*10.4.0.1.*10.4.255.254.*static.*2::YES
moon::ipsec pool --leases --filter pool=extpool,addr=10.3.0.1,[email protected]::online::YES
moon::ipsec pool --leases --filter pool=extpool,addr=10.3.0.2,[email protected]::online::YES
moon::ipsec pool --leases --filter pool=intpool,addr=10.4.0.1,[email protected]::online::YES
carol::ping -c 1 PH_IP_MOON::64 bytes from PH_IP_MOON: icmp_seq=1::YES
alice::ping -c 1 PH_IP_MOON1::64 bytes from PH_IP_MOON1: icmp_seq=1::YES
carol::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
carol::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES
moon::ipsec pool --leases --filter pool=intpool,addr=10.4.0.2,id=venus.strongswan.org::online::YES
carol::cat /var/log/daemon.log::installing new virtual IP 10.3.0.1::YES
dave::cat /var/log/daemon.log::installing new virtual IP 10.3.0.2::YES
alice::cat /var/log/daemon.log::installing new virtual IP 10.4.0.1::YES
venus::cat /var/log/daemon.log::installing new virtual IP 10.4.0.2::YES
alice::ping -c 1 PH_IP_CAROL1::64 bytes from PH_IP_CAROL1: icmp_seq=1::YES
dave::ping -c 1 PH_IP_CAROL1::64 bytes from PH_IP_CAROL1: icmp_seq=1::YES
alice::ping -c 1 10.4.0.2::64 bytes from 10.4.0.2: icmp_seq=1::YES
dave::ping -c 1 10.4.0.2::64 bytes from 10.4.0.2: icmp_seq=1::YES
alice::tcpdump::IP alice.strongswan.org > moon1.strongswan.org: ESP::YES
alice::tcpdump::IP moon1.strongswan.org > alice.strongswan.org: ESP::YES
dave::tcpdump::IP dave.strongswan.org > moon.strongswan.org: ESP::YES
dave::tcpdump::IP moon.strongswan.org > dave.strongswan.org: ESP::YES
carol::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES
carol::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
venus::tcpdump::IP moon1.strongswan.org > venus.strongswan.org: ESP::YES
venus::tcpdump::IP venus.strongswan.org > moon1.strongswan.org: ESP::YES