denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Added swanctl/xauth-rsa scenario

Browse Source
This commit is contained in:
Andreas Steffen
2016-03-06 12:28:55 +01:00
parent 99b794a4cf
commit 70ff382e41
11 changed files with 211 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/swanctl/xauth-rsa/description.txt
+9
View File
@@ -0,0 +1,9 @@
The roadwarriors <b>carol</b> and <b>dave</b> set up a connection to gateway <b>moon</b>.
The authentication is based on RSA public key signatures (<b>pubkey</b>) using X.509 certificates
in the first round followed by extended authentication (<b>xauth</b>) of <b>carol</b> and <b>dave</b>
based on user names equal to the <b>IKEv1 identity</b> (<b>[email protected]</b> and
<b>[email protected]</b>, respectively) and corresponding <b>XAuth</b> user passwords.
<p>
Upon the successful establishment of the IPsec tunnel, automatically inserted iptables-based
firewall rules let pass the tunneled traffic. In order to test both tunnel and firewall,
<b>carol</b> and <b>dave</b> ping the client <b>alice</b> behind the gateway <b>moon</b>.