adapted openssl-ikev2/alg scenarios
This commit is contained in:
@@ -1,16 +1,16 @@
|
|||||||
moon::ipsec statusall::rw.*ESTABLISHED::YES
|
moon::ipsec statusall::rw.*ESTABLISHED::YES
|
||||||
carol::ipsec statusall::home.*ESTABLISHED::YES
|
carol::ipsec statusall::home.*ESTABLISHED::YES
|
||||||
carol::ipsec statusall::IKE proposal: BLOWFISH_CBC_256::YES
|
carol::ipsec statusall::IKE proposal: BLOWFISH_CBC_256/HMAC_SHA2_512_256::YES
|
||||||
carol::ipsec statusall::BLOWFISH_CBC_192.*,::YES
|
carol::ping -c 1 -s 120 -p deadbeef PH_IP_ALICE::128 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
||||||
|
carol::ipsec statusall::BLOWFISH_CBC_192/HMAC_SHA2_256_128,::YES
|
||||||
carol::ip -s xfrm state::enc cbc(blowfish).*(192 bits)::YES
|
carol::ip -s xfrm state::enc cbc(blowfish).*(192 bits)::YES
|
||||||
dave::ipsec statusall::home.*ESTABLISHED::YES
|
dave::ipsec statusall::home.*ESTABLISHED::YES
|
||||||
dave::ipsec statusall::IKE proposal: BLOWFISH_CBC_128::YES
|
dave::ipsec statusall::IKE proposal: BLOWFISH_CBC_128/HMAC_SHA2_256_128::YES
|
||||||
dave::ipsec statusall::BLOWFISH_CBC_128.*,::YES
|
dave::ping -c 1 -s 120 -p deadbeef PH_IP_ALICE::128 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
||||||
|
dave::ipsec statusall::BLOWFISH_CBC_128/HMAC_SHA1_96,::YES
|
||||||
dave::ip -s xfrm state::enc cbc(blowfish).*(128 bits)::YES
|
dave::ip -s xfrm state::enc cbc(blowfish).*(128 bits)::YES
|
||||||
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP.*length 184::YES
|
||||||
dave::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP.*length 184::YES
|
||||||
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
|
moon::tcpdump::IP dave.strongswan.org > moon.strongswan.org: ESP.*length 180::YES
|
||||||
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES
|
moon::tcpdump::IP moon.strongswan.org > dave.strongswan.org: ESP.*length 180::YES
|
||||||
moon::tcpdump::IP dave.strongswan.org > moon.strongswan.org: ESP::YES
|
|
||||||
moon::tcpdump::IP moon.strongswan.org > dave.strongswan.org: ESP::YES
|
|
||||||
|
|
||||||
|
|||||||
@@ -2,8 +2,10 @@ moon::ipsec statusall::rw.*INSTALLED::YES
|
|||||||
carol::ipsec statusall::home.*INSTALLED::YES
|
carol::ipsec statusall::home.*INSTALLED::YES
|
||||||
moon::ipsec statusall::IKE proposal: CAMELLIA_CBC_256/HMAC_SHA2_512_256/PRF_HMAC_SHA2_512/MODP_2048::YES
|
moon::ipsec statusall::IKE proposal: CAMELLIA_CBC_256/HMAC_SHA2_512_256/PRF_HMAC_SHA2_512/MODP_2048::YES
|
||||||
carol::ipsec statusall::IKE proposal: CAMELLIA_CBC_256/HMAC_SHA2_512_256/PRF_HMAC_SHA2_512/MODP_2048::YES
|
carol::ipsec statusall::IKE proposal: CAMELLIA_CBC_256/HMAC_SHA2_512_256/PRF_HMAC_SHA2_512/MODP_2048::YES
|
||||||
|
carol::ping -c 1 -s 120 -p deadbeef PH_IP_ALICE::128 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
||||||
moon::ipsec statusall::CAMELLIA_CBC_192/HMAC_SHA1_96::YES
|
moon::ipsec statusall::CAMELLIA_CBC_192/HMAC_SHA1_96::YES
|
||||||
carol::ipsec statusall::CAMELLIA_CBC_192/HMAC_SHA1_96::YES
|
carol::ipsec statusall::CAMELLIA_CBC_192/HMAC_SHA1_96::YES
|
||||||
moon::ip xfrm state::enc cbc(camellia)::YES
|
moon::ip xfrm state::enc cbc(camellia)::YES
|
||||||
carol::ip xfrm state::enc cbc(camellia)::YES
|
carol::ip xfrm state::enc cbc(camellia)::YES
|
||||||
carol::ping -c 1 -s 120 -p deadbeef 10.1.0.10::128 bytes from 10.1.0.10: icmp_seq=1::YES
|
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP.*length 196::YES
|
||||||
|
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP.*length 196::YES
|
||||||
|
|||||||
@@ -13,7 +13,7 @@ DIAGRAM="m-c-w.png"
|
|||||||
|
|
||||||
# UML instances on which tcpdump is to be started
|
# UML instances on which tcpdump is to be started
|
||||||
#
|
#
|
||||||
TCPDUMPHOSTS=""
|
TCPDUMPHOSTS="moon"
|
||||||
|
|
||||||
# UML instances on which IPsec is started
|
# UML instances on which IPsec is started
|
||||||
# Used for IPsec logging purposes
|
# Used for IPsec logging purposes
|
||||||
|
|||||||
Reference in New Issue
Block a user