denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Add scenarios to test ICMP forwarding

Browse Source
This commit is contained in:
Tobias Brunner
2026-02-12 16:21:37 +01:00
parent 22e502b286
commit a7c03a415e
26 changed files with 692 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ipv6/net2net-icmp-forward-ikev2/pretest.dat
+27
View File
@@ -0,0 +1,27 @@
venus::iptables-restore < /etc/iptables.drop
moon::iptables-restore < /etc/iptables.drop
sun::iptables-restore < /etc/iptables.drop
venus::ip6tables-restore < /etc/ip6tables.rules
moon::ip6tables-restore < /etc/ip6tables.rules
sun::ip6tables-restore < /etc/ip6tables.rules
venus::systemctl start --no-block strongswan
moon::systemctl start --no-block strongswan
sun::systemctl start --no-block strongswan
alice::"ip route add fec2:\:/16 via fec1:\:1"
venus::"ip route add fec2:\:/16 via fec1:\:1"
moon::"ip route add fec2:\:/16 via fec0:\:2"
sun::"ip route add fec1:\:/16 via fec0:\:1"
bob::"ip route add fec1:\:/16 via fec2:\:1"
venus::"ip route add fec0:\:/16 via fec1:\:1"
winnetou::"ip route add fec1:\:/16 via fec0:\:1"
# add a route for part of the private subnet via bob
sun::"ip route add fec2:\:20/126 via fec2:\:10"
# force a lower MTU for traffic to bob
sun::"ip route add fec2:\:10/128 dev eth1 src fec2:\:1 mtu 1280"
# allow decrypted ICMPv6s from any source IP (rules for sun and moon are in ip6tables.rules)
venus::ip6tables -A INPUT -p icmpv6 -m policy --dir in -j ACCEPT
venus::expect-connection rw
moon::expect-connection net-net
sun::expect-connection net-net
moon::swanctl --initiate --child net-net
venus::swanctl --initiate --child rw