updated ikev1/xauth-psk scenario to support xauth plugin

This commit is contained in:
Andreas Steffen
2010-05-18 20:04:02 +02:00
parent 8d7fffc942
commit dc5d63a599
10 changed files with 15 additions and 8 deletions
@@ -1,5 +1,7 @@
carol::cat /var/log/auth.log::extended authentication was successful::YES carol::cat /var/log/auth.log::extended authentication was successful::YES
dave::cat /var/log/auth.log::extended authentication was successful::YES dave::cat /var/log/auth.log::extended authentication was successful::YES
moon::cat /var/log/auth.log::xauth user name is .*[email protected]::YES
moon::cat /var/log/auth.log::xauth user name is .*[email protected]::YES
moon::cat /var/log/auth.log::extended authentication was successful::YES moon::cat /var/log/auth.log::extended authentication was successful::YES
carol::ipsec status::home.*STATE_QUICK_I2.*IPsec SA established::YES carol::ipsec status::home.*STATE_QUICK_I2.*IPsec SA established::YES
dave::ipsec status::home.*STATE_QUICK_I2.*IPsec SA established::YES dave::ipsec status::home.*STATE_QUICK_I2.*IPsec SA established::YES
@@ -15,7 +15,9 @@ conn %default
conn home conn home
left=PH_IP_CAROL left=PH_IP_CAROL
[email protected]
leftfirewall=yes leftfirewall=yes
right=PH_IP_MOON right=PH_IP_MOON
rightid=moon.strongswan.org
rightsubnet=10.1.0.0/16 rightsubnet=10.1.0.0/16
auto=add auto=add
@@ -2,4 +2,4 @@
: PSK 0sv+NkxY9LLZvwj4qCC2o/gGrWDF2d21jL : PSK 0sv+NkxY9LLZvwj4qCC2o/gGrWDF2d21jL
: XAUTH carol "4iChxLT3" [email protected] : XAUTH "4iChxLT3"
@@ -1,7 +1,7 @@
# /etc/strongswan.conf - strongSwan configuration file # /etc/strongswan.conf - strongSwan configuration file
pluto { pluto {
load = sha1 sha2 md5 aes des hmac gmp random load = sha1 sha2 md5 aes des hmac gmp random xauth
} }
# pluto uses optimized DH exponent sizes (RFC 3526) # pluto uses optimized DH exponent sizes (RFC 3526)
@@ -15,7 +15,9 @@ conn %default
conn home conn home
left=PH_IP_DAVE left=PH_IP_DAVE
[email protected]
leftfirewall=yes leftfirewall=yes
right=PH_IP_MOON right=PH_IP_MOON
rightid=moon.strongswan.org
rightsubnet=10.1.0.0/16 rightsubnet=10.1.0.0/16
auto=add auto=add
@@ -2,4 +2,4 @@
: PSK 0sv+NkxY9LLZvwj4qCC2o/gGrWDF2d21jL : PSK 0sv+NkxY9LLZvwj4qCC2o/gGrWDF2d21jL
: XAUTH dave "ryftzG4A" [email protected] : XAUTH "ryftzG4A"
@@ -1,7 +1,7 @@
# /etc/strongswan.conf - strongSwan configuration file # /etc/strongswan.conf - strongSwan configuration file
pluto { pluto {
load = sha1 sha2 md5 aes des hmac gmp random load = sha1 sha2 md5 aes des hmac gmp random xauth
} }
# pluto uses optimized DH exponent sizes (RFC 3526) # pluto uses optimized DH exponent sizes (RFC 3526)
@@ -16,6 +16,7 @@ conn %default
conn rw conn rw
left=PH_IP_MOON left=PH_IP_MOON
leftid=moon.strongswan.org
leftsubnet=10.1.0.0/16 leftsubnet=10.1.0.0/16
leftfirewall=yes leftfirewall=yes
right=%any right=%any
@@ -1,7 +1,7 @@
# /etc/ipsec.secrets - strongSwan IPsec secrets file # /etc/ipsec.secrets - strongSwan IPsec secrets file
PH_IP_MOON %any : PSK 0sv+NkxY9LLZvwj4qCC2o/gGrWDF2d21jL moon.strongswan.org %any : PSK 0sv+NkxY9LLZvwj4qCC2o/gGrWDF2d21jL
: XAUTH carol "4iChxLT3" [email protected] : XAUTH "4iChxLT3"
: XAUTH dave "ryftzG4A" [email protected] : XAUTH "ryftzG4A"
@@ -1,7 +1,7 @@
# /etc/strongswan.conf - strongSwan configuration file # /etc/strongswan.conf - strongSwan configuration file
pluto { pluto {
load = sha1 sha2 md5 aes des hmac gmp random load = sha1 sha2 md5 aes des hmac gmp random xauth
} }
# pluto uses optimized DH exponent sizes (RFC 3526) # pluto uses optimized DH exponent sizes (RFC 3526)