denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Migrate ikev2-stroke-bye scenarios to vici

Browse Source
This commit is contained in:
Andreas Steffen
2021-06-22 10:23:06 +02:00
parent 706c58b291
commit eba2622587
931 changed files with 5934 additions and 5925 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/trap-any/description.txt
+8
View File
@@ -0,0 +1,8 @@
The hosts <b>moon</b>, <b>sun</b> and <b>dave</b> install <b>transport-mode</b> trap
policies with <b>remote_addrs=%any</b>. The remote host is dynamically determined
based on the acquires received from the kernel. Host <b>dave</b> additionally limits
the remote hosts to <b>moon</b> and <b>sun</b> with <b>remote_ts</b>. This is tested by
pinging <b>sun</b> and <b>carol</b> from <b>moon</b>, <b>carol</b> from <b>sun</b>, and
<b>sun</b> and <b>moon</b> from <b>dave</b>. The latter also pings <b>carol</b>, which
is not going to be encrypted as <b>carol</b> is not part of the configured
<b>remote_ts</b>.