denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Fix IKE proposal in swanctl/net2net-gw scenario

Browse Source 
Also simplify config by using references.
This commit is contained in:
Tobias Brunner
2018-06-28 18:46:42 +02:00
parent 187a01cc9f
commit 1ecac75f37
1 changed files with 4 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/swanctl/net2net-gw/hosts/carol/etc/swanctl/swanctl.conf
+4 -15
View File
@@ -11,7 +11,7 @@ connections {
id = moon.strongswan.org id = moon.strongswan.org
} }
children { children {
net-moon { net {
local_ts = 10.2.0.0/16 local_ts = 10.2.0.0/16
remote_ts = 10.1.0.0/16 remote_ts = 10.1.0.0/16
@@ -23,27 +23,16 @@ connections {
mobike = no mobike = no
proposals = aes128-sha256-x25519 proposals = aes128-sha256-x25519
} }
gw-sun {
local { gw-sun : connections.gw-moon {
auth = pubkey
certs = carolCert.pem
id = [email protected]
}
remote { remote {
auth = pubkey
id = sun.strongswan.org id = sun.strongswan.org
} }
children { children {
net-sun { net {
local_ts = 10.1.0.0/16 local_ts = 10.1.0.0/16
remote_ts = 10.2.0.0/16 remote_ts = 10.2.0.0/16
updown = /usr/local/libexec/ipsec/_updown iptables
esp_proposals = aes128gcm128-modp3072
} }
} }
version = 2
mobike = no
proposals = aes128-sha256-modp3072
} }
} }