denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added three RFC 3779 scenarios

Browse Source
This commit is contained in:
Andreas Steffen
2009-12-25 11:20:59 +01:00
parent e98a4d8028
commit 7c697964d3
56 changed files with 1502 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ipv6/rw-rfc3779-ikev2/description.txt
+12
View File
@@ -0,0 +1,12 @@
The roadwarriors <b>carol</b> and <b>dave</b> set up an IPv6 connection each
to gateway <b>moon</b>. The authentication is based on <b>X.509 certificates</b>
containing <b>RFC 3779 IP address block constraints</b>. All three hosts set
<b>rightsubnet=::/0</b> thus allowing the peers to narrow down the address range to
their actual subnets or IP addresses. These unilaterally proposed traffic selectors
must be validated by corresponding IP address block constraints.
<p/>
Upon the successful establishment of the IPv6 ESP tunnels, <b>leftfirewall=yes</b>
automatically inserts ip6tables-based firewall rules that let pass the tunneled traffic.
In order to test both tunnel and firewall, both <b>carol</b> and <b>dave</b> send
an IPv6 ICMP request to the client <b>alice</b> behind the gateway <b>moon</b>
using the ping6 command.