denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Migrate ikev2-stroke-bye scenarios to vici

Browse Source
This commit is contained in:
Andreas Steffen
2021-06-22 10:23:06 +02:00
parent 706c58b291
commit eba2622587
931 changed files with 5934 additions and 5925 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/protoport-trap/description.txt
+9
View File
@@ -0,0 +1,9 @@
Using <b>[&lt;protocol&gt;/&lt;port&gt;]</b> selectors in the
<b>local_ts</b> and <b>remote_ts</b> child parameters, two IPsec tunnels
between the roadwarrior <b>carol</b> and the gateway <b>moon</b> are defined.
The first CHILD_SA is restricted to ICMP packets and the second
covers TCP-based SSH connections.
<p/>
By sending a ping to the client <b>alice</b> behind <b>moon</b>, the ICMP trap
is triggered and the corresponding IPsec tunnel is set up. In the same
way an ssh session to <b>alice</b> over the second IPsec SA is established.