- applied patch from andreas

- added charonstart option to config - new ikev2 tests for UML
2006-05-06 07:09:45 +00:00
parent 9820c0e208
commit 65cf07ac1d
16 changed files with 684 additions and 723 deletions
@@ -1,6 +1,5 @@
-A connection between the subnets behind the gateways <b>moon</b> and <b>sun</b> is set up.
-The authentication is based on <b>X.509 certificates</b>. Upon the successful
-establishment of the IPsec tunnel, <b>leftfirewall=yes</b> automatically
-inserts iptables-based firewall rules that let pass the tunneled traffic.
-In order to test both tunnel and firewall, client <b>alice</b> behind gateway <b>moon</b>
+A connection between the subnets behind the gateways <b>moon</b> and <b>sun</b>
+is set up using the IKEv2 key exchange protocol. The authentication is based on
+locally importerd <b>X.509 certificates</b>.
+In order to test the established tunnel, client <b>alice</b> behind gateway <b>moon</b>
 pings client <b>bob</b> located behind gateway <b>sun</b>.
@@ -2,6 +2,9 @@

 version	2.0	# conforms to second version of ipsec.conf specification

+config setup
+	plutostart=no
+
 conn net-net 
 	left=192.168.0.1
 	leftcert=moonCert.pem
@@ -2,6 +2,9 @@

 version	2.0	# conforms to second version of ipsec.conf specification

+config setup
+	plutostart=no
+
 conn net-net 
 	left=192.168.0.2
 	leftcert=sunCert.pem