tests with subdirectory structure

This commit is contained in:
Andreas Steffen
2006-07-03 07:11:30 +00:00
parent 92069df82f
commit 6db2ac30c7
607 changed files with 9414 additions and 0 deletions
@@ -0,0 +1,3 @@
This scenario is the same as test <b><a href="../rw-cert">rw-cert</a></b> but
uses the <b>also</b> parameter in <b>moon</b>'s ipsec.conf in order to define
the connections in a modular form.
@@ -0,0 +1,5 @@
carol::ipsec status::home.*STATE_QUICK_I2.*IPsec SA established::YES
moon::ipsec status::rw.*STATE_QUICK_R2.*IPsec SA established::YES
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES
+46
View File
@@ -0,0 +1,46 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
conn net-net
also=host-host
also=moon-net
also=sun-net
conn host-host
also=moon
also=sun
auto=add
conn rw
right=%any
also=moon
also=moon-net
auto=add
conn moon
left=PH_IP_MOON
leftnexthop=%direct
leftcert=moonCert.pem
[email protected]
leftfirewall=yes
conn moon-net
leftsubnet=10.1.0.0/16
conn sun
right=PH_IP_SUN
[email protected]
conn sun-net
rightsubnet=10.2.0.0/16
@@ -0,0 +1,6 @@
moon::iptables -v -n -L
carol::iptables -v -n -L
moon::ipsec stop
carol::ipsec stop
moon::/etc/init.d/iptables stop 2> /dev/null
carol::/etc/init.d/iptables stop 2> /dev/null
@@ -0,0 +1,6 @@
moon::/etc/init.d/iptables start 2> /dev/null
carol::/etc/init.d/iptables start 2> /dev/null
carol::ipsec start
moon::ipsec start --debug-all
sleep 2
carol::ipsec up home
@@ -0,0 +1,21 @@
#!/bin/bash
#
# This configuration file provides information on the
# UML instances used for this test
# All UML instances that are required for this test
#
UMLHOSTS="alice moon carol winnetou"
# Corresponding block diagram
#
DIAGRAM="a-m-c-w.png"
# UML instances on which tcpdump is to be started
#
TCPDUMPHOSTS="moon"
# UML instances on which IPsec is started
# Used for IPsec logging purposes
#
IPSECHOSTS="moon carol"