denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Migrate ikev2-stroke-bye scenarios to vici

Browse Source
This commit is contained in:
Andreas Steffen
2021-06-22 10:23:06 +02:00
parent 706c58b291
commit eba2622587
931 changed files with 5934 additions and 5925 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/host2host-transport-connmark/description.txt
+8
View File
@@ -0,0 +1,8 @@
An IPsec <b>transport-mode</b> connection between the natted host <b>alice</b>
and gateway <b>sun</b> is successfully set up. The client <b>venus</b> behind
the same NAT as client <b>alice</b> also establishes the same <b>transport-mode</b>
connection. <b>sun</b> uses the connmark plugin and a <b>%unique</b> mark on
the CHILD_SAs to select the correct return path SA using connection tracking.
This allows <b>sun</b> to talk to both nodes for client initiated flows, even
if the SAs are actually both over <b>moon</b>.<br/>
To test the connection, both hosts establish an SSH connection to <b>sun</b>.