denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

enabled ip6tables-based firewalling in first two IPv6 scenarios

Browse Source
This commit is contained in:
Andreas Steffen
2007-11-07 16:41:57 +00:00
parent 141d0506fa
commit 361deb6f76
11 changed files with 415 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ipv6/host2host-ikev1/description.txt
+4 -2
View File
@@ -1,3 +1,5 @@
An IPv6 ESP connection between the hosts <b>moon</b> and <b>sun</b> is successfully set up.
The authentication is based on X.509 certificates. In order to test the host-to-host tunnel
<b>moon</b> sends an IPv6 ICMP request to <b>sun</b> using the ping6 command.
The authentication is based on X.509 certificates. Upon the successful establishment of
the IPsec tunnel, <b>leftfirewall=yes</b> automatically inserts ip6tables-based firewall
rules that let pass the tunneled traffic. In order to test both the host-to-host tunnel
and the firewall rules, <b>moon</b> sends an IPv6 ICMP request to <b>sun</b> using the ping6 command.