testing: Enable firewall for ikev2/compress scenario

Additionally, send a regular (small) ping as the kernel does not
compress small packets and handles those differently inbound.
This commit is contained in:
Tobias Brunner
2014-01-23 10:27:13 +01:00
parent fe2a2d1885
commit 1fde30cc23
8 changed files with 14 additions and 7 deletions
@@ -9,6 +9,7 @@ conn %default
keyingtries=1
keyexchange=ikev2
compress=yes
leftfirewall=yes
conn home
left=PH_IP_CAROL
@@ -1,5 +1,5 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default updown
}
@@ -9,6 +9,7 @@ conn %default
keyingtries=1
keyexchange=ikev2
compress=yes
leftfirewall=yes
conn rw
left=PH_IP_MOON
@@ -1,5 +1,5 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default updown
}