denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Converted ipv6/net2net-ikev1 to swanctl

Browse Source
This commit is contained in:
Andreas Steffen
2017-11-10 11:49:40 +01:00
parent 47ec3326e7
commit e94db2b4ad
11 changed files with 118 additions and 82 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ipv6/net2net-ikev1/description.txt
+7 -6
View File
@@ -1,6 +1,7 @@
An IPv6 ESP tunnel connection between the gateways <b>moon</b> and <b>sun</b> is successfully set up.
It connects the two subnets hiding behind their respective gateways. The authentication is based on
X.509 certificates. Upon the successful establishment of the IPsec tunnel, <b>leftfirewall=yes</b>
automatically inserts ip6tables-based firewall rules that let pass the tunneled traffic.
In order to test both the net-to-net tunnel and the firewall rules, client <b>alice</b> behind <b>moon</b>
sends an IPv6 ICMP request to client <b>bob</b> behind <b>sun</b> using the ping6 command.
An IPv6 ESP tunnel connection between the gateways <b>moon</b> and <b>sun</b> is
successfully set up. It connects the two subnets hiding behind their respective
gateways. The authentication is based on X.509 certificates. Upon the successful
establishment of the IPsec tunnel, automatically inserted ip6tables-based firewall
rules let pass the tunneled traffic. In order to test both the net-to-net tunnel
and the firewall rules, client <b>alice</b> behind <b>moon</b> sends an IPv6 ICMP
request to client <b>bob</b> behind <b>sun</b> using the ping6 command.