tests with subdirectory structure
This commit is contained in:
@@ -0,0 +1,4 @@
|
||||
This scenario is the same as test <b><a href="../rw-cert">rw-cert</a></b> but
|
||||
uses the <b>also</b> parameter in <b>moon</b>'s ipsec.conf in order to define
|
||||
the connections in a modular form. A closed also loop created by including
|
||||
<b>conn host-host</b> in <b>conn moon</b> is successfully detected.
|
||||
@@ -0,0 +1,3 @@
|
||||
moon::cat /var/log/auth.log::detected also loop::YES
|
||||
moon::cat /var/log/auth.log::errors in config::YES
|
||||
|
||||
@@ -0,0 +1,47 @@
|
||||
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
||||
|
||||
config setup
|
||||
plutodebug=control
|
||||
crlcheckinterval=180
|
||||
strictcrlpolicy=no
|
||||
charonstart=no
|
||||
|
||||
conn %default
|
||||
ikelifetime=60m
|
||||
keylife=20m
|
||||
rekeymargin=3m
|
||||
keyingtries=1
|
||||
|
||||
conn net-net
|
||||
also=host-host
|
||||
also=moon-net
|
||||
also=sun-net
|
||||
|
||||
conn host-host
|
||||
also=moon
|
||||
also=sun
|
||||
auto=add
|
||||
|
||||
conn rw
|
||||
right=%any
|
||||
also=moon
|
||||
also=moon-net
|
||||
auto=add
|
||||
|
||||
conn moon
|
||||
left=PH_IP_MOON
|
||||
leftnexthop=%direct
|
||||
leftcert=moonCert.pem
|
||||
[email protected]
|
||||
leftfirewall=yes
|
||||
also=host-host
|
||||
|
||||
conn moon-net
|
||||
leftsubnet=10.1.0.0/16
|
||||
|
||||
conn sun
|
||||
right=PH_IP_SUN
|
||||
[email protected]
|
||||
|
||||
conn sun-net
|
||||
rightsubnet=10.2.0.0/16
|
||||
@@ -0,0 +1 @@
|
||||
moon::ipsec start --debug-all
|
||||
@@ -0,0 +1,21 @@
|
||||
#!/bin/bash
|
||||
#
|
||||
# This configuration file provides information on the
|
||||
# UML instances used for this test
|
||||
|
||||
# All UML instances that are required for this test
|
||||
#
|
||||
UMLHOSTS="alice moon carol winnetou"
|
||||
|
||||
# Corresponding block diagram
|
||||
#
|
||||
DIAGRAM="a-m-c-w.png"
|
||||
|
||||
# UML instances on which tcpdump is to be started
|
||||
#
|
||||
TCPDUMPHOSTS=""
|
||||
|
||||
# UML instances on which IPsec is started
|
||||
# Used for IPsec logging purposes
|
||||
#
|
||||
IPSECHOSTS="moon"
|
||||
Reference in New Issue
Block a user