ikev2/rw-eap-tnc-11-radius scenario now uses a PA-TNC IMC/IMV pair
This commit is contained in:
@@ -1 +1,10 @@
|
||||
# /etc/strongswan.conf - strongSwan configuration file
|
||||
|
||||
libimcv {
|
||||
debug_level = 3
|
||||
plugins {
|
||||
imv-test {
|
||||
rounds = 1
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
@@ -0,0 +1,15 @@
|
||||
# Set root logger level to DEBUG and its appenders to A1 and A2.
|
||||
log4j.rootLogger=DEBUG, A1, A2
|
||||
|
||||
# A1 is set to be a ConsoleAppender.
|
||||
log4j.appender.A1=org.apache.log4j.ConsoleAppender
|
||||
log4j.appender.A1.layout=org.apache.log4j.PatternLayout
|
||||
log4j.appender.A1.layout.ConversionPattern=[FHH] %m%n
|
||||
|
||||
# A2 is set to be a SyslogAppender
|
||||
log4j.appender.A2=org.apache.log4j.net.SyslogAppender
|
||||
log4j.appender.A2.Facility=DAEMON
|
||||
log4j.appender.A2.SyslogHost=localhost
|
||||
log4j.appender.A2.Threshold=DEBUG
|
||||
log4j.appender.A2.layout=org.apache.log4j.PatternLayout
|
||||
log4j.appender.A2.layout.ConversionPattern=[FHH] %m%n
|
||||
@@ -1,3 +1,3 @@
|
||||
#IMV configuration file for TNC@FHH-TNC-Server
|
||||
|
||||
IMV "Dummy" /usr/local/lib/libdummyimv.so.0.7.0
|
||||
IMV "Test" /usr/local/libexec/ipsec/plugins/libstrongswan-imv-test.so
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|
||||
config setup
|
||||
plutostart=no
|
||||
charondebug="tnc 3"
|
||||
charondebug="tnc 3, imc 3"
|
||||
|
||||
conn %default
|
||||
ikelifetime=60m
|
||||
|
||||
@@ -4,3 +4,11 @@ charon {
|
||||
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 revocation hmac xcbc stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnccs-11 updown
|
||||
multiple_authentication=no
|
||||
}
|
||||
|
||||
libimcv {
|
||||
plugins {
|
||||
imc-test {
|
||||
command = allow
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
@@ -1 +0,0 @@
|
||||
allow
|
||||
@@ -1,3 +1,3 @@
|
||||
#IMC configuration file for strongSwan client
|
||||
|
||||
IMC "Dummy" /usr/local/lib/libdummyimc.so
|
||||
IMC "Test" /usr/local/libexec/ipsec/plugins/libstrongswan-imc-test.so
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|
||||
config setup
|
||||
plutostart=no
|
||||
charondebug="tnc 3"
|
||||
charondebug="tnc 3, imc 3"
|
||||
|
||||
conn %default
|
||||
ikelifetime=60m
|
||||
|
||||
@@ -4,3 +4,11 @@ charon {
|
||||
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 revocation hmac xcbc stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnccs-11 updown
|
||||
multiple_authentication=no
|
||||
}
|
||||
|
||||
libimcv {
|
||||
plugins {
|
||||
imc-test {
|
||||
command = isolate
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
@@ -1 +0,0 @@
|
||||
isolate
|
||||
@@ -1,3 +1,3 @@
|
||||
#IMC configuration file for strongSwan client
|
||||
|
||||
IMC "Dummy" /usr/local/lib/libdummyimc.so
|
||||
IMC "Test" /usr/local/libexec/ipsec/plugins/libstrongswan-imc-test.so
|
||||
|
||||
Reference in New Issue
Block a user