denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

switched mobike-nat and mobike-virtual-ip scenarios to a virtual IP of 10.3.0.3

Browse Source
This commit is contained in:
Andreas Steffen
2007-10-02 19:23:12 +00:00
parent 9c7aac664c
commit cd45c2faf3
6 changed files with 16 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/mobike-nat/description.txt
+1 -1
View File
@@ -4,4 +4,4 @@ via an additional <b>eth1</b> interface. <b>alice</b> builds up a tunnel to gate
in order to reach <b>bob</b> in the subnet behind. When the <b>eth1</b> interface in order to reach <b>bob</b> in the subnet behind. When the <b>eth1</b> interface
goes away, <b>alice</b> switches to <b>eth0</b> and signals the IP address change goes away, <b>alice</b> switches to <b>eth0</b> and signals the IP address change
via a MOBIKE ADDRESS_UPDATE notification to peer <b>sun</b>. <b>alice</b> sets via a MOBIKE ADDRESS_UPDATE notification to peer <b>sun</b>. <b>alice</b> sets
a virtual IP of PH_IP_ALICE, so that the IPsec policies don't have to be changed. a virtual IP of 10.3.0.3, so that the IPsec policies don't have to be changed.
testing/tests/ikev2/mobike-nat/evaltest.dat
+6 -6
View File
@@ -1,16 +1,16 @@
alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE1.*PH_IP_SUN::YES alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE1.*PH_IP_SUN::YES
sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_ALICE1::YES sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_ALICE1::YES
alice::ipsec statusall::PH_IP_ALICE/32 === 10.2.0.0/16::YES alice::ipsec statusall::10.3.0.3/32 === 10.2.0.0/16::YES
sun::ipsec statusall::10.2.0.0/16 === PH_IP_ALICE/32::YES sun::ipsec statusall::10.2.0.0/16 === 10.3.0.3/32::YES
alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
alice::/etc/init.d/net.eth1 stop::No output expected::NO alice::/etc/init.d/net.eth1 stop::No output expected::NO
alice::sleep 1::No output expected::NO alice::sleep 1::No output expected::NO
alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE.*PH_IP_SUN::YES alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE.*PH_IP_SUN::YES
sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_MOON::YES sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_MOON::YES
alice::ipsec statusall::PH_IP_ALICE/32 === 10.2.0.0/16::YES alice::ipsec statusall::10.3.0.3/32 === 10.2.0.0/16::YES
sun::ipsec statusall::10.2.0.0/16 === PH_IP_ALICE/32::YES sun::ipsec statusall::10.2.0.0/16 === 10.3.0.3/32::YES
alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
moon::tcpdump::moon.strongswan.org.*sun.strongswan.org.*: UDP-encap: ESP::YES moon::tcpdump::moon.strongswan.org.*sun.strongswan.org.*: UDP-encap: ESP::YES
moon::tcpdump::sun.strongswan.org.*moon.strongswan.org.*: UDP-encap: ESP::YES moon::tcpdump::sun.strongswan.org.*moon.strongswan.org.*: UDP-encap: ESP::YES
bob::tcpdump::alice.strongswan.org.*bob.strongswan.org.*ICMP echo request::YES bob::tcpdump::10.3.0.3.*bob.strongswan.org.*ICMP echo request::YES
bob::tcpdump::bob.strongswan.org.*alice.strongswan.org.*ICMP echo reply::YES bob::tcpdump::bob.strongswan.org.*10.3.0.3.*ICMP echo reply::YES
testing/tests/ikev2/mobike-nat/hosts/alice/etc/ipsec.conf
+1 -1
View File
@@ -14,7 +14,7 @@ conn %default
conn mobike conn mobike
left=PH_IP_ALICE1 left=PH_IP_ALICE1
leftsourceip=PH_IP_ALICE leftsourceip=10.3.0.3
leftcert=aliceCert.pem leftcert=aliceCert.pem
[email protected] [email protected]
leftfirewall=yes leftfirewall=yes
testing/tests/ikev2/mobike-virtual-ip/description.txt
+1 -1
View File
@@ -4,4 +4,4 @@ via an additional <b>eth1</b> interface. <b>alice</b> builds up a tunnel to gate
in order to reach <b>bob</b> in the subnet behind. When the <b>eth1</b> interface in order to reach <b>bob</b> in the subnet behind. When the <b>eth1</b> interface
goes away, <b>alice</b> switches to <b>eth0</b> and signals the IP address change goes away, <b>alice</b> switches to <b>eth0</b> and signals the IP address change
via a MOBIKE ADDRESS_UPDATE notification to peer <b>sun</b>. <b>alice</b> sets via a MOBIKE ADDRESS_UPDATE notification to peer <b>sun</b>. <b>alice</b> sets
a virtual IP of PH_IP_ALICE, so that the IPsec policies don't have to be changed. a virtual IP of 10.3.0.3, so that the IPsec policies don't have to be changed.
testing/tests/ikev2/mobike-virtual-ip/evaltest.dat
+6 -6
View File
@@ -1,16 +1,16 @@
alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE1.*PH_IP_SUN::YES alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE1.*PH_IP_SUN::YES
sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_ALICE1::YES sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_ALICE1::YES
alice::ipsec statusall::PH_IP_ALICE/32 === 10.2.0.0/16::YES alice::ipsec statusall::10.3.0.3/32 === 10.2.0.0/16::YES
sun::ipsec statusall::10.2.0.0/16 === PH_IP_ALICE/32::YES sun::ipsec statusall::10.2.0.0/16 === 10.3.0.3/32::YES
alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
alice::/etc/init.d/net.eth1 stop::No output expected::NO alice::/etc/init.d/net.eth1 stop::No output expected::NO
alice::sleep 1::No output expected::NO alice::sleep 1::No output expected::NO
alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE.*PH_IP_SUN::YES alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE.*PH_IP_SUN::YES
sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_ALICE::YES sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_ALICE::YES
alice::ipsec statusall::PH_IP_ALICE/32 === 10.2.0.0/16::YES alice::ipsec statusall::10.3.0.3/32 === 10.2.0.0/16::YES
sun::ipsec statusall::10.2.0.0/16 === PH_IP_ALICE/32::YES sun::ipsec statusall::10.2.0.0/16 === 10.3.0.3/32::YES
alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
moon::tcpdump::alice.strongswan.org.*sun.strongswan.org.*: ESP::YES moon::tcpdump::alice.strongswan.org.*sun.strongswan.org.*: ESP::YES
moon::tcpdump::sun.strongswan.org.*alice.strongswan.org.*: ESP::YES moon::tcpdump::sun.strongswan.org.*alice.strongswan.org.*: ESP::YES
bob::tcpdump::alice.strongswan.org.*bob.strongswan.org.*ICMP echo request::YES bob::tcpdump::10.3.0.3.*bob.strongswan.org.*ICMP echo request::YES
bob::tcpdump::bob.strongswan.org.*alice.strongswan.org.*ICMP echo reply::YES bob::tcpdump::bob.strongswan.org.*10.3.0.3.*ICMP echo reply::YES
testing/tests/ikev2/mobike-virtual-ip/hosts/alice/etc/ipsec.conf
+1 -1
View File
@@ -14,7 +14,7 @@ conn %default
conn mobike conn mobike
left=PH_IP_ALICE1 left=PH_IP_ALICE1
leftsourceip=PH_IP_ALICE leftsourceip=10.3.0.3
leftcert=aliceCert.pem leftcert=aliceCert.pem
[email protected] [email protected]
leftfirewall=yes leftfirewall=yes