denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed

Browse Source
This commit is contained in:
Tobias Brunner
2008-03-26 18:40:19 +00:00
parent 685232670a
commit dc04b7c743
47 changed files with 522 additions and 522 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/p2pnat/behind-same-nat/evaltest.dat
+5 -5
View File
@@ -2,10 +2,10 @@ alice::ipsec statusall::medsrv.*ESTABLISHED::YES
venus::ipsec statusall::medsrv.*ESTABLISHED::YES
carol::ipsec statusall::medsrv.*ESTABLISHED.*PH_IP_MOON.*[email protected]::YES
carol::ipsec statusall::medsrv.*ESTABLISHED.*PH_IP_MOON.*[email protected]::YES
alice::cat /var/log/daemon.log::received P2P_CALLBACK::YES
alice::ipsec statusall::p2p.*ESTABLISHED::YES
venus::ipsec statusall::p2p.*ESTABLISHED::YES
alice::ipsec statusall::p2p.*INSTALLED::YES
venus::ipsec statusall::p2p.*INSTALLED::YES
alice::cat /var/log/daemon.log::received ME_CALLBACK::YES
alice::ipsec statusall::peer.*ESTABLISHED::YES
venus::ipsec statusall::peer.*ESTABLISHED::YES
alice::ipsec statusall::peer.*INSTALLED::YES
venus::ipsec statusall::peer.*INSTALLED::YES
alice::ping -c 1 PH_IP_VENUS::64 bytes from PH_IP_VENUS: icmp_seq=1::YES
venus::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
testing/tests/p2pnat/behind-same-nat/hosts/alice/etc/init.d/iptables
+1 -1
View File
@@ -25,7 +25,7 @@ start() {
iptables -A INPUT -i eth0 -p udp --sport 500 --dport 500 -j ACCEPT
iptables -A OUTPUT -o eth0 -p udp --dport 500 --sport 500 -j ACCEPT
# allow NAT-T including P2P
# allow NAT-T
iptables -A INPUT -i eth0 -p udp --dport 4500 -j ACCEPT
iptables -A OUTPUT -o eth0 -p udp --sport 4500 -j ACCEPT
testing/tests/p2pnat/behind-same-nat/hosts/alice/etc/ipsec.conf
+1 -1
View File
@@ -25,7 +25,7 @@ conn medsrv
authby=psk
auto=add
conn p2p
conn peer
leftcert=aliceCert.pem
[email protected]
right=%any
testing/tests/p2pnat/behind-same-nat/hosts/venus/etc/init.d/iptables
+1 -1
View File
@@ -25,7 +25,7 @@ start() {
iptables -A INPUT -i eth0 -p udp --sport 500 --dport 500 -j ACCEPT
iptables -A OUTPUT -o eth0 -p udp --dport 500 --sport 500 -j ACCEPT
# allow NAT-T including P2P
# allow NAT-T
iptables -A INPUT -i eth0 -p udp --dport 4500 -j ACCEPT
iptables -A OUTPUT -o eth0 -p udp --sport 4500 -j ACCEPT
testing/tests/p2pnat/behind-same-nat/hosts/venus/etc/ipsec.conf
+1 -1
View File
@@ -25,7 +25,7 @@ conn medsrv
p2p_mediation=yes
auto=start
conn p2p
conn peer
leftcert=venusCert.pem
[email protected]
right=%any
testing/tests/p2pnat/medsrv-psk/evaltest.dat
+4 -4
View File
@@ -2,10 +2,10 @@ alice::ipsec statusall::medsrv.*ESTABLISHED::YES
bob::ipsec statusall::medsrv.*ESTABLISHED::YES
carol::ipsec statusall::medsrv.*ESTABLISHED.*PH_IP_MOON.*[email protected]::YES
carol::ipsec statusall::medsrv.*ESTABLISHED.*PH_IP_SUN.*[email protected]::YES
alice::ipsec statusall::p2p.*ESTABLISHED::YES
bob::ipsec statusall::p2p.*ESTABLISHED::YES
alice::ipsec statusall::p2p.*INSTALLED::YES
bob::ipsec statusall::p2p.*INSTALLED::YES
alice::ipsec statusall::peer.*ESTABLISHED::YES
bob::ipsec statusall::peer.*ESTABLISHED::YES
alice::ipsec statusall::peer.*INSTALLED::YES
bob::ipsec statusall::peer.*INSTALLED::YES
alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
bob::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
moon::tcpdump::IP moon.strongswan.org.* > sun.strongswan.org.*: UDP::YES
testing/tests/p2pnat/medsrv-psk/hosts/alice/etc/init.d/iptables
+1 -1
View File
@@ -21,7 +21,7 @@ start() {
iptables -A INPUT -i eth0 -p udp --sport 500 --dport 500 -j ACCEPT
iptables -A OUTPUT -o eth0 -p udp --dport 500 --sport 500 -j ACCEPT
# allow NAT-T including P2P
# allow NAT-T
iptables -A INPUT -i eth0 -p udp --dport 4500 -j ACCEPT
iptables -A OUTPUT -o eth0 -p udp --sport 4500 -j ACCEPT
testing/tests/p2pnat/medsrv-psk/hosts/alice/etc/ipsec.conf
+1 -1
View File
@@ -25,7 +25,7 @@ conn medsrv
authby=psk
auto=add
conn p2p
conn peer
leftcert=aliceCert.pem
[email protected]
right=%any
testing/tests/p2pnat/medsrv-psk/hosts/bob/etc/ipsec.conf
+1 -1
View File
@@ -25,7 +25,7 @@ conn medsrv
p2p_mediation=yes
auto=start
conn p2p
conn peer
leftcert=bobCert.pem
[email protected]
right=%any