testing: Adapt tests to retransmission settings and reduce DPD delay/timeout
This commit is contained in:
@@ -1,5 +1,5 @@
|
||||
The roadwarrior <b>carol</b> sets up an IPsec tunnel connection to the gateway <b>moon</b>
|
||||
which in turn activates <b>Dead Peer Detection</b> (DPD) with a polling interval of 10 s.
|
||||
When the network connectivity between <b>carol</b> and <b>moon</b> is forcefully disrupted,
|
||||
<b>moon</b> clears the connection after 4 unsuccessful retransmits.
|
||||
<b>moon</b> clears the connection after a number of unsuccessful retransmits.
|
||||
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
carol::ipsec status 2> /dev/null::home.*INSTALLED, TUNNEL::YES
|
||||
moon:: ipsec status 2> /dev/null::rw.*INSTALLED, TUNNEL::YES
|
||||
carol::iptables -A INPUT -i eth0 -s PH_IP_MOON -j DROP::no output expected::NO
|
||||
moon:: sleep 60::no output expected::NO
|
||||
moon:: sleep 16::no output expected::NO
|
||||
moon:: cat /var/log/daemon.log::sending DPD request::YES
|
||||
moon::cat /var/log/daemon.log::DPD check timed out, enforcing DPD action::YES
|
||||
moon:: cat /var/log/daemon.log::DPD check timed out, enforcing DPD action::YES
|
||||
moon:: ipsec status 2> /dev/null::rw.*INSTALLED::NO
|
||||
|
||||
@@ -9,8 +9,8 @@ conn %default
|
||||
keyingtries=1
|
||||
keyexchange=ikev1
|
||||
dpdaction=clear
|
||||
dpddelay=10
|
||||
dpdtimeout=45
|
||||
dpddelay=5
|
||||
dpdtimeout=15
|
||||
|
||||
conn rw
|
||||
left=PH_IP_MOON
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
The roadwarrior <b>carol</b> sets up an IPsec tunnel connection to the gateway
|
||||
<b>moon</b>. Both end points activate <b>Dead Peer Detection</b> (DPD) with a
|
||||
polling interval of 10 s. When the network connectivity between <b>carol</b>
|
||||
and <b>moon</b> is forcefully disrupted for a duration of 100 s, <b>moon</b>
|
||||
clears the connection after 4 unsuccessful retransmits whereas <b>carol</b>
|
||||
polling interval of 10s. When the network connectivity between <b>carol</b>
|
||||
and <b>moon</b> is forcefully disrupted for a duration of 100s, <b>moon</b>
|
||||
clears the connection after a number of unsuccessful retransmits whereas <b>carol</b>
|
||||
also takes down the connection but immediately tries to reconnect which succeeds
|
||||
as soon as the connection becomes available again.
|
||||
|
||||
@@ -2,12 +2,12 @@ carol::ipsec status 2> /dev/null::home.*INSTALLED, TUNNEL::YES
|
||||
moon:: ipsec status 2> /dev/null::rw.*INSTALLED, TUNNEL::YES
|
||||
moon:: iptables -A INPUT -i eth0 -s PH_IP_CAROL -j DROP::no output expected::NO
|
||||
carol::iptables -A INPUT -i eth0 -s PH_IP_MOON -j DROP::no output expected::NO
|
||||
carol::sleep 60::no output expected::NO
|
||||
carol::sleep 16::no output expected::NO
|
||||
carol::cat /var/log/daemon.log::sending DPD request::YES
|
||||
carol::cat /var/log/daemon.log::DPD check timed out, enforcing DPD action::YES
|
||||
carol::cat /var/log/daemon.log::restarting CHILD_SA home::YES
|
||||
carol::iptables -D INPUT -i eth0 -s PH_IP_MOON -j DROP::no output expected::NO
|
||||
moon:: iptables -D INPUT -i eth0 -s PH_IP_CAROL -j DROP::no output expected::NO
|
||||
carol::sleep 10::no output expected::NO
|
||||
carol::sleep 1::no output expected::NO
|
||||
carol::ipsec status 2> /dev/null::home.*INSTALLED, TUNNEL::YES
|
||||
moon:: ipsec status 2> /dev/null::rw.*INSTALLED, TUNNEL::YES
|
||||
|
||||
@@ -9,8 +9,8 @@ conn %default
|
||||
keyingtries=1
|
||||
keyexchange=ikev1
|
||||
dpdaction=restart
|
||||
dpddelay=10
|
||||
dpdtimeout=45
|
||||
dpddelay=5
|
||||
dpdtimeout=15
|
||||
|
||||
conn home
|
||||
left=PH_IP_CAROL
|
||||
|
||||
@@ -2,8 +2,4 @@
|
||||
|
||||
charon {
|
||||
load = test-vectors aes des sha1 sha2 md5 pem pkcs1 pkcs8 gmp random nonce x509 curl revocation hmac xcbc cmac ctr ccm gcm stroke kernel-netlink socket-default updown
|
||||
|
||||
retransmit_timeout = 2
|
||||
retransmit_base = 1.5
|
||||
retransmit_tries = 3
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user