denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

corrected description of shunt-policies scenario

Browse Source
This commit is contained in:
Andreas Steffen
2011-07-05 22:07:42 +02:00
parent 06b5b61838
commit 1f3b5c7778
11 changed files with 226 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/shunt-policies/description.txt
+2 -2
View File
@@ -7,5 +7,5 @@ by adding <b>install_routes = no</b> to the charon section of <b>strongswan.conf
<p/>
In order to demonstrate the use of <b>type=drop</b> shunt policies, the
<b>venus-icmp</b> connection prevents ICMP traffic to and from <b>venus</b>
to use the IPsec tunnel by dropping such packets. Thanks to the <b>local-net</b>
pass shunt, <b>venus</b> and <b>moon</b> can still ping each other, though.
to use the IPsec tunnel by dropping such packets. Since this policy does not
apply to the localnet, <b>venus</b> and <b>moon</b> can still ping each other.