denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added two scenarios testing repeated authentication (RFC 4478)

Browse Source
This commit is contained in:
Andreas Steffen
2007-11-25 15:47:58 +00:00
parent 17d6e9aa00
commit 4c125ea26d
14 changed files with 184 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/reauth-early/description.txt
+7
View File
@@ -0,0 +1,7 @@
This scenario tests <b>repeated authentication</b> according to RFC 4478.
The iniator <b>carol</b> sets a large <b>ikelifetime=20m</b> but the responder
<b>moon</b> defining a much shorter <b>ikelifetime=30s</b> proposes this
value via an AUTH_LIFETIME notification to the initiator. Thus the
IKE reauthentication takes places after less than 30s. A ping from
<b>carol</b> to client <b>alice</b> hiding in the subnet behind <b>moon</b>
tests if the CHILD_SA has been inherited by the new IKE_SA.