the ikev2/nat-two-rw-mark and ikev2/rw-mark-in-out scenarios use the PLUTO_MARK_IN and PLUTO_ESP_ENC variables in the mark_update script
This commit is contained in:
@@ -0,0 +1,16 @@
|
||||
alice::ipsec statusall::home.*INSTALLED::YES
|
||||
venus::ipsec statusall::home.*INSTALLED::YES
|
||||
sun::ipsec statusall::alice.*ESTABLISHED.*[email protected]::YES
|
||||
sun::ipsec statusall::venus.*ESTABLISHED.*venus.strongswan.org::YES
|
||||
sun::ipsec statusall::alice.*10.2.0.0/16 === 10.1.0.0/25::YES
|
||||
sun::ipsec statusall::venus.*10.2.0.0/16 === 10.1.0.0/25::YES
|
||||
alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
|
||||
venus::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
|
||||
moon::tcpdump::IP alice.strongswan.org > sun.strongswan.org: ESP::YES
|
||||
moon::tcpdump::IP venus.strongswan.org > sun.strongswan.org: ESP::YES
|
||||
moon::tcpdump::IP sun.strongswan.org > alice.strongswan.org: ESP::YES
|
||||
moon::tcpdump::IP sun.strongswan.org > venus.strongswan.org: ESP::YES
|
||||
bob::tcpdump::10.3.0.10 > bob.strongswan.org: ICMP echo request::YES
|
||||
bob::tcpdump::10.3.0.20 > bob.strongswan.org: ICMP echo request::YES
|
||||
bob::tcpdump::bob.strongswan.org > 10.3.0.10: ICMP echo reply::YES
|
||||
bob::tcpdump::bob.strongswan.org > 10.3.0.20: ICMP echo reply::YES
|
||||
Reference in New Issue
Block a user