denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Converted ipv6/net2net-ikev2 to swanctl

Browse Source
This commit is contained in:
Andreas Steffen
2017-11-10 11:49:40 +01:00
parent e94db2b4ad
commit 7812b6e6cf
11 changed files with 119 additions and 84 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ipv6/net2net-ikev2/description.txt
+7 -6
View File
@@ -1,6 +1,7 @@
An IPv6 ESP tunnel connection between the gateways <b>moon</b> and <b>sun</b> is successfully set up.
It connects the two subnets hiding behind their respective gateways. The authentication is based on
X.509 certificates. Upon the successful establishment of the IPsec tunnel, <b>leftfirewall=yes</b>
automatically inserts ip6tables-based firewall rules that let pass the tunneled traffic.
In order to test both the net-to-net tunnel and the firewall rules, client <b>alice</b> behind <b>moon</b>
sends an IPv6 ICMP request to client <b>bob</b> behind <b>sun</b> using the ping6 command.
An IPv6 ESP tunnel connection between the gateways <b>moon</b> and <b>sun</b>
is successfully set up. It connects the two subnets hiding behind their respective
gateways. The authentication is based on X.509 certificates. Upon the successful
establishment of the IPsec tunnel, automatically inserted ip6tables-based firewall
rules let pass the tunneled traffic. In order to test both the net-to-net tunnel
and the firewall rules, client <b>alice</b> behind <b>moon</b> sends an IPv6 ICMP
request to client <b>bob</b> behind <b>sun</b> using the ping6 command.