denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added ikev2/nat-virtual-ip scenario

Browse Source
This commit is contained in:
Andreas Steffen
2010-06-05 13:42:28 +02:00
parent b2be7dd621
commit 4321d19d1e
11 changed files with 333 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/nat-virtual-ip/description.txt
+6
View File
@@ -0,0 +1,6 @@
The router <b>moon</b> sets up a connection to gateway <b>sun</b> in order
to reach the subnet hidden behind <b>sun</b>. The gateway <b>sun</b> assigns a
virtual IP address to router <b>moon</b>. A special updown script on <b>moon</b>
specified by <b>leftupdown=/etc/nat_updown</b> dynamically inserts a source NAT rule
which maps the IP address of client <b>alice</b> to the virtual IP of <b>moon</b>.
This allows <b>alice</b> to access client <b>bob</b> via the established IPsec tunnel.