Added tnc/tnccs-20-pt-tls scenario

This commit is contained in:
Andreas Steffen
2015-03-27 20:56:43 +01:00
parent bc1876bc9a
commit 85aa509e84
24 changed files with 114 additions and 5 deletions
@@ -0,0 +1,23 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
charondebug="tnc 2, imc 2, imv 2"
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
keyexchange=ikev2
conn host-host
left=PH_IP_SUN
leftcert=sunCert.pem
leftid=sun.strongswan.org
leftauth=eap-ttls
leftfirewall=yes
right=PH_IP_MOON
rightid=moon.strongswan.org
rightauth=eap-ttls
rightsendcert=never
auto=add
@@ -0,0 +1,28 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
load = x509 openssl pem pkcs1 random nonce curl revocation stroke kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-tnccs tnc-imc tnc-imv tnccs-20 updown
multiple_authentication = no
plugins {
eap-ttls {
request_peer_auth = yes
phase2_piggyback = yes
phase2_tnc =yes
}
tnccs-20 {
mutual = yes
}
}
}
libimcv {
plugins {
imc-test {
command = allow
}
imv-test {
rounds = 1
}
}
}
@@ -0,0 +1,4 @@
#IMC/IMV configuration file for strongSwan endpoint
IMC "Test" /usr/local/lib/ipsec/imcvs/imc-test.so
IMV "Test" /usr/local/lib/ipsec/imcvs/imv-test.so