denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

upgraded ikev2 scenarios to 5.0.0

Browse Source
This commit is contained in:
Andreas Steffen
2012-05-11 11:00:32 +02:00
parent 0e1c6fa2a9
commit a56fdff194
475 changed files with 1161 additions and 1704 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/rw-eap-sim-radius/evaltest.dat
+9 -9
View File
@@ -1,15 +1,15 @@
carol::cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with RSA signature successful::YES
carol::cat /var/log/daemon.log::server requested EAP_SIM authentication::YES
carol::cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with EAP successful::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::ipsec statusall::rw-eap.*ESTABLISHED.*[email protected]::YES
carol::ipsec statusall::home.*ESTABLISHED::YES
moon:: cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon:: ipsec status 2> /dev/null::rw-eap.*ESTABLISHED.*moon.strongswan.org.*[email protected]::YES
carol::ipsec status 2> /dev/null::home.*ESTABLISHED.*[email protected].*moon.strongswan.org::YES
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES
moon::cat /var/log/daemon.log::RADIUS authentication of '[email protected]' failed::YES
moon::cat /var/log/daemon.log::EAP method EAP_SIM failed for peer [email protected]::YES
moon::ipsec statusall::rw-eap.*ESTABLISHED.*[email protected]::NO
dave::cat /var/log/daemon.log::received EAP_FAILURE, EAP authentication failed::YES
dave::ipsec statusall::home.*ESTABLISHED::NO
dave::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::NO
moon:: cat /var/log/daemon.log::RADIUS authentication of '[email protected]' failed::YES
moon:: cat /var/log/daemon.log::EAP method EAP_SIM failed for peer [email protected]::YES
moon:: ipsec status 2> /dev/null::rw-eap.*ESTABLISHED.*moon.strongswan.org.*[email protected]::NO
dave:: cat /var/log/daemon.log::received EAP_FAILURE, EAP authentication failed::YES
dave:: ipsec status 2> /dev/null::home.*ESTABLISHED::NO
dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::NO
testing/tests/ikev2/rw-eap-sim-radius/hosts/carol/etc/ipsec.conf
+2 -1
View File
@@ -9,13 +9,14 @@ conn %default
rekeymargin=3m
keyingtries=1
keyexchange=ikev2
authby=eap
conn home
left=PH_IP_CAROL
[email protected]
leftauth=eap
leftfirewall=yes
right=PH_IP_MOON
[email protected]
rightauth=pubkey
rightsubnet=10.1.0.0/16
auto=add
testing/tests/ikev2/rw-eap-sim-radius/hosts/dave/etc/ipsec.conf
+2 -1
View File
@@ -9,13 +9,14 @@ conn %default
rekeymargin=3m
keyingtries=1
keyexchange=ikev2
authby=eap
conn home
left=PH_IP_DAVE
[email protected]
leftauth=eap
leftfirewall=yes
right=PH_IP_MOON
[email protected]
rightauth=pubkey
rightsubnet=10.1.0.0/16
auto=add
testing/tests/ikev2/rw-eap-sim-radius/hosts/moon/etc/ipsec.conf
+2 -2
View File
@@ -1,7 +1,6 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
strictcrlpolicy=no
plutostart=no
conn %default
@@ -13,13 +12,14 @@ conn %default
conn rw-eap
authby=rsasig
eap=radius
left=PH_IP_MOON
leftsubnet=10.1.0.0/16
[email protected]
leftauth=pubkey
leftcert=moonCert.pem
leftfirewall=yes
rightid=*@strongswan.org
rightauth=eap-radius
rightsendcert=never
right=%any
auto=add