denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

the ikev2/nat-two-rw-mark and ikev2/rw-mark-in-out scenarios use the PLUTO_MARK_IN and PLUTO_ESP_ENC variables in the mark_update script

Browse Source
This commit is contained in:
Andreas Steffen
2010-07-17 16:32:47 +02:00
parent 16c97c8e59
commit d2d7ed9227
21 changed files with 1262 additions and 58 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/nat-two-rw-mark/description.txt
+4 -3
View File
@@ -10,6 +10,7 @@ the <b>mark</b> parameter in ipsec.conf.
<b>iptables -t mangle</b> rules are then used in the PREROUTING chain to mark the traffic to
and from <b>alice</b> and <b>venus</b>, respectively.
<p/>
<b>leftfirewall=yes</b> automatically inserts iptables-based firewall rules that let pass
the tunneled traffic. In order to test the tunnel, the NAT-ed hosts <b>alice</b> and <b>venus</b>
ping the client <b>bob</b> behind the gateway <b>sun</b>.
The iptables script designated by <b>leftupdown=/etc/mark_updown</b> automatically inserts
inbound mangle rules that mark the inbound ESP_IN_UDP packets as well as the IPsec-policy rules
that let pass the tunneled traffic. In order to test the tunnel, the NAT-ed hosts <b>alice</b>
and <b>venus</b> ping the client <b>bob</b> behind the gateway <b>sun</b>.