denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Add route-based/net2net-vti scenario

Browse Source
This commit is contained in:
Robin McCorkell
2017-12-22 10:22:47 +01:00
committed by Tobias Brunner
parent ff7129ee6a
commit e71593d91c
9 changed files with 152 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/route-based/net2net-vti/description.txt
+12
View File
@@ -0,0 +1,12 @@
A connection between the subnets behind the gateways <b>moon</b> and <b>sun</b>
is set up using VTI interfaces.
<p/>
The gateways use <b>route-based forwarding</b> with <b>VTI tunnels</b>, with
firewall rules to allow traffic to pass. The IPsec traffic selector used is
0.0.0.0/0, however specific routing is achieved with routes on the VTI
interfaces. The IKE daemon is configured to not install routes with
<em>charon.install_routes=0</em>, and static routes are installed for the
target subnets on the VTI interfaces.
<p/>
Client <b>alice</b> behind gateway <b>moon</b> pings client <b>bob</b> located
behind gateway <b>sun</b>.