upgrade p2pnat scenarios to 5.0.0
This commit is contained in:
@@ -1,11 +1,11 @@
|
|||||||
alice::ipsec statusall::medsrv.*ESTABLISHED::YES
|
alice::ipsec status 2> /dev/null::medsrv.*ESTABLISHED.*[email protected].*[email protected]::YES
|
||||||
venus::ipsec statusall::medsrv.*ESTABLISHED::YES
|
venus::ipsec status 2> /dev/null::medsrv.*ESTABLISHED.*[email protected].*[email protected]::YES
|
||||||
carol::ipsec statusall::medsrv.*ESTABLISHED.*PH_IP_MOON.*[email protected]::YES
|
carol::ipsec status 2> /dev/null::medsrv.*ESTABLISHED.*PH_IP_MOON.*[email protected]::YES
|
||||||
carol::ipsec statusall::medsrv.*ESTABLISHED.*PH_IP_MOON.*[email protected]::YES
|
carol::ipsec status 2> /dev/null::medsrv.*ESTABLISHED.*PH_IP_MOON.*[email protected]::YES
|
||||||
alice::cat /var/log/daemon.log::received ME_CALLBACK::YES
|
alice::cat /var/log/daemon.log::received ME_CALLBACK::YES
|
||||||
alice::ipsec statusall::peer.*ESTABLISHED::YES
|
alice::ipsec status 2> /dev/null::peer.*ESTABLISHED.*[email protected].*venus.strongswan.org::YES
|
||||||
venus::ipsec statusall::peer.*ESTABLISHED::YES
|
venus::ipsec status 2> /dev/null::peer.*ESTABLISHED.*venus.strongswan.org.*[email protected]::YES
|
||||||
alice::ipsec statusall::peer.*INSTALLED::YES
|
alice::ipsec status 2> /dev/null::peer.*INSTALLED, TUNNEL::YES
|
||||||
venus::ipsec statusall::peer.*INSTALLED::YES
|
venus::ipsec status 2> /dev/null::peer.*INSTALLED, TUNNEL::YES
|
||||||
alice::ping -c 1 PH_IP_VENUS::64 bytes from PH_IP_VENUS: icmp_seq=1::YES
|
alice::ping -c 1 PH_IP_VENUS::64 bytes from PH_IP_VENUS: icmp_seq=1::YES
|
||||||
venus::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
venus::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
||||||
|
|||||||
@@ -1,8 +1,6 @@
|
|||||||
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
||||||
|
|
||||||
config setup
|
config setup
|
||||||
crlcheckinterval=180
|
|
||||||
strictcrlpolicy=no
|
|
||||||
plutostart=no
|
plutostart=no
|
||||||
|
|
||||||
conn %default
|
conn %default
|
||||||
@@ -19,10 +17,11 @@ conn %default
|
|||||||
|
|
||||||
conn medsrv
|
conn medsrv
|
||||||
[email protected]
|
[email protected]
|
||||||
|
leftauth=psk
|
||||||
right=PH_IP_CAROL
|
right=PH_IP_CAROL
|
||||||
[email protected]
|
[email protected]
|
||||||
|
rightauth=pubkey
|
||||||
mediation=yes
|
mediation=yes
|
||||||
authby=psk
|
|
||||||
auto=add
|
auto=add
|
||||||
|
|
||||||
conn peer
|
conn peer
|
||||||
|
|||||||
@@ -1,8 +1,6 @@
|
|||||||
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
||||||
|
|
||||||
config setup
|
config setup
|
||||||
crlcheckinterval=180
|
|
||||||
strictcrlpolicy=no
|
|
||||||
plutostart=no
|
plutostart=no
|
||||||
|
|
||||||
conn %default
|
conn %default
|
||||||
@@ -19,7 +17,9 @@ conn medsrv
|
|||||||
left=PH_IP_CAROL
|
left=PH_IP_CAROL
|
||||||
leftcert=carolCert.pem
|
leftcert=carolCert.pem
|
||||||
[email protected]
|
[email protected]
|
||||||
|
leftauth=pubkey
|
||||||
leftfirewall=yes
|
leftfirewall=yes
|
||||||
right=%any
|
right=%any
|
||||||
|
rightauth=psk
|
||||||
mediation=yes
|
mediation=yes
|
||||||
auto=add
|
auto=add
|
||||||
|
|||||||
@@ -1,8 +1,6 @@
|
|||||||
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
||||||
|
|
||||||
config setup
|
config setup
|
||||||
crlcheckinterval=180
|
|
||||||
strictcrlpolicy=no
|
|
||||||
plutostart=no
|
plutostart=no
|
||||||
|
|
||||||
conn %default
|
conn %default
|
||||||
@@ -19,9 +17,10 @@ conn %default
|
|||||||
|
|
||||||
conn medsrv
|
conn medsrv
|
||||||
[email protected]
|
[email protected]
|
||||||
|
leftauth=psk
|
||||||
right=PH_IP_CAROL
|
right=PH_IP_CAROL
|
||||||
[email protected]
|
[email protected]
|
||||||
authby=psk
|
rightauth=pubkeye
|
||||||
mediation=yes
|
mediation=yes
|
||||||
auto=start
|
auto=start
|
||||||
|
|
||||||
|
|||||||
@@ -1,12 +1,12 @@
|
|||||||
alice::ipsec statusall::medsrv.*ESTABLISHED::YES
|
alice::ipsec status 2> /dev/null::medsrv.*ESTABLISHED.*[email protected].*[email protected]::YES
|
||||||
bob::ipsec statusall::medsrv.*ESTABLISHED::YES
|
bob:: ipsec status 2> /dev/null::medsrv.*ESTABLISHED.*[email protected].*[email protected]::YES
|
||||||
carol::ipsec statusall::medsrv.*ESTABLISHED.*PH_IP_MOON.*[email protected]::YES
|
carol::ipsec status 2> /dev/null::medsrv.*ESTABLISHED.*PH_IP_MOON.*[email protected]::YES
|
||||||
carol::ipsec statusall::medsrv.*ESTABLISHED.*PH_IP_SUN.*[email protected]::YES
|
carol::ipsec status 2> /dev/null::medsrv.*ESTABLISHED.*PH_IP_SUN.*[email protected]::YES
|
||||||
alice::ipsec statusall::peer.*ESTABLISHED::YES
|
alice::ipsec status 2> /dev/null::peer.*ESTABLISHED.*[email protected].*[email protected]::YES
|
||||||
bob::ipsec statusall::peer.*ESTABLISHED::YES
|
bob:: ipsec status 2> /dev/null::peer.*ESTABLISHED.*[email protected].*[email protected]::YES
|
||||||
alice::ipsec statusall::peer.*INSTALLED::YES
|
alice::ipsec status 2> /dev/null::peer.*INSTALLED, TUNNEL::YES
|
||||||
bob::ipsec statusall::peer.*INSTALLED::YES
|
bob:: ipsec status 2> /dev/null::peer.*INSTALLED, TUNNEL::YES
|
||||||
alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
|
alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
|
||||||
bob::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
bob:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
||||||
moon::tcpdump::IP moon.strongswan.org.* > sun.strongswan.org.*: UDP::YES
|
moon::tcpdump::IP moon.strongswan.org.* > sun.strongswan.org.*: UDP::YES
|
||||||
moon::tcpdump::IP sun.strongswan.org.* > moon.strongswan.org.*: UDP::YES
|
moon::tcpdump::IP sun.strongswan.org.* > moon.strongswan.org.*: UDP::YES
|
||||||
|
|||||||
@@ -1,8 +1,6 @@
|
|||||||
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
||||||
|
|
||||||
config setup
|
config setup
|
||||||
crlcheckinterval=180
|
|
||||||
strictcrlpolicy=no
|
|
||||||
plutostart=no
|
plutostart=no
|
||||||
|
|
||||||
conn %default
|
conn %default
|
||||||
@@ -19,10 +17,11 @@ conn %default
|
|||||||
|
|
||||||
conn medsrv
|
conn medsrv
|
||||||
[email protected]
|
[email protected]
|
||||||
|
leftauth=psk
|
||||||
right=PH_IP_CAROL
|
right=PH_IP_CAROL
|
||||||
[email protected]
|
[email protected]
|
||||||
|
rightauth=pubkey
|
||||||
mediation=yes
|
mediation=yes
|
||||||
authby=psk
|
|
||||||
auto=add
|
auto=add
|
||||||
|
|
||||||
conn peer
|
conn peer
|
||||||
|
|||||||
@@ -1,8 +1,6 @@
|
|||||||
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
||||||
|
|
||||||
config setup
|
config setup
|
||||||
crlcheckinterval=180
|
|
||||||
strictcrlpolicy=no
|
|
||||||
plutostart=no
|
plutostart=no
|
||||||
|
|
||||||
conn %default
|
conn %default
|
||||||
@@ -19,9 +17,10 @@ conn %default
|
|||||||
|
|
||||||
conn medsrv
|
conn medsrv
|
||||||
[email protected]
|
[email protected]
|
||||||
|
leftauth=psk
|
||||||
right=PH_IP_CAROL
|
right=PH_IP_CAROL
|
||||||
[email protected]
|
[email protected]
|
||||||
authby=psk
|
rightauth=pubkey
|
||||||
mediation=yes
|
mediation=yes
|
||||||
auto=start
|
auto=start
|
||||||
|
|
||||||
|
|||||||
@@ -1,8 +1,6 @@
|
|||||||
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
||||||
|
|
||||||
config setup
|
config setup
|
||||||
crlcheckinterval=180
|
|
||||||
strictcrlpolicy=no
|
|
||||||
plutostart=no
|
plutostart=no
|
||||||
|
|
||||||
conn %default
|
conn %default
|
||||||
@@ -19,7 +17,9 @@ conn medsrv
|
|||||||
left=PH_IP_CAROL
|
left=PH_IP_CAROL
|
||||||
leftcert=carolCert.pem
|
leftcert=carolCert.pem
|
||||||
[email protected]
|
[email protected]
|
||||||
|
leftauth=pubkey
|
||||||
leftfirewall=yes
|
leftfirewall=yes
|
||||||
right=%any
|
right=%any
|
||||||
|
rightauth=psk
|
||||||
mediation=yes
|
mediation=yes
|
||||||
auto=add
|
auto=add
|
||||||
|
|||||||
Reference in New Issue
Block a user