denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Modified ikev2/net2net-rfc3779 scenario

Browse Source
This commit is contained in:
Andreas Steffen
2022-01-10 21:14:11 +01:00
parent cd0c9919d9
commit 85d626e9ae
7 changed files with 31 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/swanctl/swanctl.conf
+8 -4
View File
@@ -1,6 +1,6 @@
connections {
gw-gw {
host {
local_addrs = 192.168.0.1
remote_addrs = 192.168.0.2
@@ -14,9 +14,13 @@ connections {
id = sun.strongswan.org
}
children {
net-net {
local_ts = 10.1.0.0/16
remote_ts = 10.2.0.0/16
host {
updown = /usr/local/libexec/ipsec/_updown iptables
esp_proposals = aes128gcm128-x25519
}
net {
local_ts = 10.0.0.0/14
remote_ts = 0.0.0.0/0
updown = /usr/local/libexec/ipsec/_updown iptables
rekey_time = 5400
testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/swanctl/swanctl.conf
+7 -7
View File
@@ -1,22 +1,22 @@
connections {
gw-gw {
host {
local_addrs = 192.168.0.2
remote_addrs = 192.168.0.1
local {
auth = pubkey
certs = sunCert.pem
id = sun.strongswan.org
}
remote {
auth = pubkey
id = moon.strongswan.org
}
children {
net-net {
host {
updown = /usr/local/libexec/ipsec/_updown iptables
esp_proposals = aes128gcm128-x25519
}
net {
local_ts = 10.2.0.0/16
remote_ts = 10.1.0.0/16
remote_ts = 0.0.0.0/0
updown = /usr/local/libexec/ipsec/_updown iptables
rekey_time = 5400