testing: Add ikev2/trap-any scenario

This commit is contained in:
Tobias Brunner
2015-08-19 11:34:25 +02:00
parent 301a0bad09
commit bb1d9e454d
17 changed files with 181 additions and 0 deletions
@@ -0,0 +1,16 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
charondebug="knl 2"
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
conn trap-any
right=%any
type=transport
authby=psk
auto=add
@@ -0,0 +1 @@
: PSK 0sv+NkxY9LLZvwj4qCC2o/gGrWDF2d21jL
@@ -0,0 +1,6 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default updown
multiple_authentication = no
}
@@ -0,0 +1,18 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
charondebug="knl 2"
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
conn trap-any
right=%any
rightsubnet=192.168.0.0/30
type=transport
authby=psk
auto=route
@@ -0,0 +1 @@
: PSK 0sv+NkxY9LLZvwj4qCC2o/gGrWDF2d21jL
@@ -0,0 +1,6 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default updown
multiple_authentication = no
}
@@ -0,0 +1,24 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
charondebug="knl 2"
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
# to access the host via SSH in the test environment
conn pass-ssh
authby=never
leftsubnet=0.0.0.0/0[tcp/22]
rightsubnet=0.0.0.0/0[tcp]
type=pass
auto=route
conn trap-any
right=%any
type=transport
authby=psk
auto=route
@@ -0,0 +1 @@
: PSK 0sv+NkxY9LLZvwj4qCC2o/gGrWDF2d21jL
@@ -0,0 +1,6 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default updown
multiple_authentication = no
}
@@ -0,0 +1,25 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
charondebug="knl 2"
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
# to access the host via SSH in the test environment
conn pass-ssh
authby=never
leftsubnet=0.0.0.0/0[tcp/22]
rightsubnet=0.0.0.0/0[tcp]
type=pass
auto=route
conn trap-any
right=%any
type=transport
authby=psk
auto=route
@@ -0,0 +1 @@
: PSK 0sv+NkxY9LLZvwj4qCC2o/gGrWDF2d21jL
@@ -0,0 +1,6 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default updown
multiple_authentication = no
}