denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added force-udp-encaps scenario

Browse Source
This commit is contained in:
Andreas Steffen
2007-10-02 20:24:13 +00:00
parent 7b315fcd1f
commit 701ece07fb
8 changed files with 184 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/force-udp-encaps/description.txt
+6
View File
@@ -0,0 +1,6 @@
The roadwarrior <b>alice</b> sitting behind the NAT router <b>moon</b> sets up a tunnel to
gateway <b>sun</b>. Since the firewall on <b>sun</b> blocks the ESP protocol, enforced UDP
encapsulation (<b>forceencaps=yes</b>) is used by <b>alice</b> to punch through this hurdle.
<b>leftfirewall=yes</b> automatically inserts iptables-based firewall rules that let pass
the tunneled traffic. In order to test the tunnel, host <b>alice</b> pings the
client <b>bob</b> behind the gateway <b>sun</b>.