denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Converted ipv6/rw-ip6-in-ip4-ikev1 to swanctl

Browse Source
This commit is contained in:
Andreas Steffen
2017-11-10 13:54:50 +01:00
parent da5aa6ae6a
commit b3ccfcd05e
14 changed files with 158 additions and 96 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ipv6/rw-ip6-in-ip4-ikev1/description.txt
+9 -9
View File
@@ -1,10 +1,10 @@
The roadwarriors <b>carol</b> and <b>dave</b> set up an IPv6-in-IPv4 tunnel connection each
to gateway <b>moon</b>. The authentication is based on <b>X.509 certificates</b>.
Both <b>carol</b> and <b>dave</b> request a virtual IPv6 address from <b>moon</b> via
the IKEv1 mode config payload.
The roadwarriors <b>carol</b> and <b>dave</b> set up an IPv6-in-IPv4 tunnel
connection each to gateway <b>moon</b>. The authentication is based on <b>X.509
certificates</b>. Both <b>carol</b> and <b>dave</b> request a virtual IPv6
address from <b>moon</b> via the IKEv1 mode config payload.
<p/>
Upon the successful establishment of the ESP tunnels, <b>leftfirewall=yes</b>
automatically inserts ip6tables-based firewall rules that let pass the tunneled traffic.
In order to test both tunnel and firewall, both <b>carol</b> and <b>dave</b> send
an IPv6 ICMP request to the client <b>alice</b> behind the gateway <b>moon</b>
using the ping6 command.
Upon the successful establishment of the ESP tunnels, automatically inserted
ip6tables-based firewall rules let pass the tunneled traffic. In order to test
both tunnel and firewall, both <b>carol</b> and <b>dave</b> send an IPv6 ICMP
request to the client <b>alice</b> behind the gateway <b>moon</b> using the
ping6 command.