denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Add route-based/net2net-gre scenario

Browse Source
This commit is contained in:
Tobias Brunner
2017-12-22 10:22:47 +01:00
parent f007bc9ff4
commit b3a793541d
9 changed files with 150 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/route-based/net2net-gre/description.txt
+12
View File
@@ -0,0 +1,12 @@
A connection between the subnets behind the gateways <b>moon</b> and <b>sun</b>
is set up using GRE interfaces.
<p/>
The gateways use <b>route-based forwarding</b> with <b>GRE tunnels</b>, with
firewall rules to allow traffic to pass. The IPsec traffic selector is limited
to the GRE protocol, specific routing is achieved with routes on the GRE
interfaces. The IKE daemon is configured to not install routes with
<em>charon.install_routes=0</em>, and static routes are installed for the
target subnets on the VTI interfaces.
<p/>
Client <b>alice</b> behind gateway <b>moon</b> pings client <b>bob</b> located
behind gateway <b>sun</b>.