denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

updated ikev2/rw-eap-tnc scenarios

Browse Source
This commit is contained in:
Andreas Steffen
2011-04-01 19:44:25 +02:00
parent fc16b361ef
commit bf2233b32d
11 changed files with 29 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/rw-eap-tnc-11/evaltest.dat
+4 -2
View File
@@ -6,9 +6,11 @@ dave::cat /var/log/daemon.log::TNCCS-Recommendation.*isolate::YES
dave::cat /var/log/daemon.log::EAP method EAP_TTLS succeeded, MSK established ::YES
dave::cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with EAP successful::YES
dave::cat /var/log/daemon.log::CHILD_SA home{1} established.*TS 192.168.0.200/32 === 10.1.0.16/28::YES
moon::cat /var/log/daemon.log::added group membership 'allow'::YES
moon::cat /var/log/auth.log::policy enforced on peer '[email protected]' is 'allow'::YES
moon::cat /var/log/daemon.log::policy enforcement point added group membership 'allow'::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::cat /var/log/daemon.log::added group membership 'isolate'::YES
moon::cat /var/log/auth.log::policy enforced on peer '[email protected]' is 'isolate'::YES
moon::cat /var/log/daemon.log::policy enforcement point added group membership 'isolate'::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::ipsec statusall::rw-allow.*10.1.0.0/28 === 192.168.0.100/32::YES
moon::ipsec statusall::rw-isolate.*10.1.0.16/28 === 192.168.0.200/32::YES
testing/tests/ikev2/rw-eap-tnc-20-block/evaltest.dat
+4 -2
View File
@@ -5,8 +5,10 @@ carol::cat /var/log/daemon.log::CHILD_SA home{1} established.*TS 192.168.0.100/3
dave::cat /var/log/daemon.log::PB-TNC access recommendation is 'Access Denied'::YES
dave::cat /var/log/daemon.log::received EAP_FAILURE, EAP authentication failed::YES
dave::cat /var/log/daemon.log::CHILD_SA home{1} established.*TS 192.168.0.200/32 === 10.1.0.0/16::NO
moon::cat /var/log/daemon.log::added group membership 'allow'::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::cat /var/log/auth.log::policy enforced on peer '[email protected]' is 'allow'::YES
moon::cat /var/log/daemon.log::policy enforcement point added group membership 'allow'::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::cat /var/log/auth.log::policy enforced on peer '[email protected]' is 'no access'::YES
moon::cat /var/log/daemon.log::EAP method EAP_TTLS failed for peer [email protected]::YES
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
dave::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_VENUS: icmp_seq=1::NO
testing/tests/ikev2/rw-eap-tnc-20-block/hosts/moon/etc/tnc/dummyimv.policy
+1
View File
@@ -0,0 +1 @@
0
testing/tests/ikev2/rw-eap-tnc-20-tls/evaltest.dat
+5 -3
View File
@@ -6,9 +6,11 @@ dave::cat /var/log/daemon.log::PB-TNC access recommendation is 'Quarantined'::YE
dave::cat /var/log/daemon.log::EAP method EAP_TTLS succeeded, MSK established ::YES
dave::cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with EAP successful::YES
dave::cat /var/log/daemon.log::CHILD_SA home{1} established.*TS 192.168.0.200/32 === 10.1.0.16/28::YES
moon::cat /var/log/daemon.log::added group membership 'allow'::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::cat /var/log/daemon.log::added group membership 'isolate'::YES
moon::cat /var/log/auth.log::policy enforced on peer '[email protected]' is 'allow'::YES
moon::cat /var/log/daemon.log::policy enforcement point added group membership 'allow'::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::cat /var/log/auth.log::policy enforced on peer '[email protected]' is 'isolate'::YES
moon::cat /var/log/daemon.log::policy enforcement point added group membership 'isolate'::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::ipsec statusall::rw-allow.*10.1.0.0/28 === 192.168.0.100/32::YES
moon::ipsec statusall::rw-isolate.*10.1.0.16/28 === 192.168.0.200/32::YES
testing/tests/ikev2/rw-eap-tnc-20-tls/hosts/moon/etc/tnc/dummyimv.policy
+1
View File
@@ -0,0 +1 @@
0
testing/tests/ikev2/rw-eap-tnc-20/evaltest.dat
+4 -2
View File
@@ -6,9 +6,11 @@ dave::cat /var/log/daemon.log::PB-TNC access recommendation is 'Quarantined'::YE
dave::cat /var/log/daemon.log::EAP method EAP_TTLS succeeded, MSK established ::YES
dave::cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with EAP successful::YES
dave::cat /var/log/daemon.log::CHILD_SA home{1} established.*TS 192.168.0.200/32 === 10.1.0.16/28::YES
moon::cat /var/log/daemon.log::added group membership 'allow'::YES
moon::cat /var/log/auth.log::policy enforced on peer '[email protected]' is 'allow'::YES
moon::cat /var/log/daemon.log::policy enforcement point added group membership 'allow'::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::cat /var/log/daemon.log::added group membership 'isolate'::YES
moon::cat /var/log/auth.log::policy enforced on peer '[email protected]' is 'isolate'::YES
moon::cat /var/log/daemon.log::policy enforcement point added group membership 'isolate'::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::ipsec statusall::rw-allow.*10.1.0.0/28 === 192.168.0.100/32::YES
moon::ipsec statusall::rw-isolate.*10.1.0.16/28 === 192.168.0.200/32::YES
testing/tests/ikev2/rw-eap-tnc-dynamic/evaltest.dat
+6 -4
View File
@@ -8,14 +8,16 @@ dave::cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with EAP
dave::cat /var/log/daemon.log::CHILD_SA home{1} established.*TS 192.168.0.200/32 === 10.1.0.16/28::YES
moon::cat /var/log/daemon.log::TNCCS 1.1 protocol detected dynamically::YES
moon::cat /var/log/daemon.log::assigned TNCCS Connection ID 1::YES
moon::cat /var/log/daemon.log::Final recommendation is 'allow' and evaluation is 'compliant'::YES
moon::cat /var/log/daemon.log::added group membership 'allow'::YES
moon::cat /var/log/daemon.log::final recommendation is 'allow' and evaluation is 'compliant'::YES
moon::cat /var/log/auth.log::policy enforced on peer '[email protected]' is 'allow'::YES
moon::cat /var/log/daemon.log::policy enforcement point added group membership 'allow'::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::cat /var/log/daemon.log::removed TNCCS Connection ID 1::YES
moon::cat /var/log/daemon.log::TNCCS 2.0 protocol detected dynamically::YES
moon::cat /var/log/daemon.log::assigned TNCCS Connection ID 2::YES
moon::cat /var/log/daemon.log::Final recommendation is 'isolate' and evaluation is 'non-compliant minor'::YES
moon::cat /var/log/daemon.log::added group membership 'isolate'::YES
moon::cat /var/log/daemon.log::final recommendation is 'isolate' and evaluation is 'non-compliant minor'::YES
moon::cat /var/log/auth.log::policy enforced on peer '[email protected]' is 'isolate'::YES
moon::cat /var/log/daemon.log::policy enforcement point added group membership 'isolate'::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::cat /var/log/daemon.log::removed TNCCS Connection ID 2::YES
moon::ipsec statusall::rw-allow.*10.1.0.0/28 === 192.168.0.100/32::YES
testing/tests/ikev2/rw-eap-tnc-dynamic/hosts/carol/etc/tnc_config
+1 -1
View File
@@ -1,4 +1,4 @@
#IMC configuration file for strongSwan client
IMC "Dummy" /usr/local/lib/libdummyimc.so
IMC "HostScanner" /usr/local/lib/libhostscannerimc.so
#IMC "HostScanner" /usr/local/lib/libhostscannerimc.so
testing/tests/ikev2/rw-eap-tnc-dynamic/hosts/dave/etc/tnc_config
+1 -1
View File
@@ -1,4 +1,4 @@
#IMC configuration file for strongSwan client
IMC "Dummy" /usr/local/lib/libdummyimc.so
IMC "HostScanner" /usr/local/lib/libhostscannerimc.so
#IMC "HostScanner" /usr/local/lib/libhostscannerimc.so
testing/tests/ikev2/rw-eap-tnc-dynamic/hosts/moon/etc/tnc/dummyimv.policy
+1
View File
@@ -0,0 +1 @@
1
testing/tests/ikev2/rw-eap-tnc-dynamic/hosts/moon/etc/tnc_config
+1 -1
View File
@@ -1,4 +1,4 @@
#IMV configuration file for strongSwan server
IMV "Dummy" /usr/local/lib/libdummyimv.so
IMV "HostScanner" /usr/local/lib/libhostscannerimv.so
#IMV "HostScanner" /usr/local/lib/libhostscannerimv.so