denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Enable firewall for ikev2/compress scenario

Browse Source 
Additionally, send a regular (small) ping as the kernel does not
compress small packets and handles those differently inbound.
This commit is contained in:
Tobias Brunner
2014-01-23 10:27:13 +01:00
parent fe2a2d1885
commit 1fde30cc23
8 changed files with 14 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/compress/evaltest.dat
+2 -2
View File
@@ -6,7 +6,7 @@ moon:: cat /var/log/daemon.log::IKE_AUTH request.*N(IPCOMP_SUP)::YES
moon:: cat /var/log/daemon.log::IKE_AUTH response.*N(IPCOMP_SUP)::YES
moon:: ip xfrm state::proto comp spi::YES
carol::ip xfrm state::proto comp spi::YES
carol::ping -n -c 2 -s 8184 -p deadbeef PH_IP_ALICE::8192 bytes from PH_IP_ALICE::YES
carol::ping -n -c 1 -s 8184 -p deadbeef PH_IP_ALICE::8192 bytes from PH_IP_ALICE::YES
carol::ping -n -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE::YES
moon::tcpdump::carol.strongswan.org > moon.strongswan.org: ESP::YES
moon::tcpdump::moon.strongswan.org > carol.strongswan.org: ESP::YES