denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Adapt tests to retransmission settings and reduce DPD delay/timeout

Browse Source
This commit is contained in:
Tobias Brunner
2015-11-09 15:18:34 +01:00
parent 50a43fbb97
commit f36b6d49af
26 changed files with 43 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/dpd-clear/description.txt
+1 -1
View File
@@ -1,5 +1,5 @@
The roadwarrior <b>carol</b> sets up an IPsec tunnel connection to the gateway <b>moon</b>
which in turn activates <b>Dead Peer Detection</b> (DPD) with a polling interval of 10 s.
When the network connectivity between <b>carol</b> and <b>moon</b> is forcefully disrupted,
<b>moon</b> clears the connection after 4 unsuccessful retransmits.
<b>moon</b> clears the connection after a number of unsuccessful retransmits.
testing/tests/ikev2/dpd-clear/evaltest.dat
+2 -2
View File
@@ -1,8 +1,8 @@
carol::ipsec status 2> /dev/null::home.*INSTALLED, TUNNEL::YES
moon:: ipsec status 2> /dev/null::rw.*INSTALLED, TUNNEL::YES
carol::iptables -A INPUT -i eth0 -s PH_IP_MOON -j DROP::no output expected::NO
moon:: sleep 180::no output expected::NO
moon:: sleep 13::no output expected::NO
moon:: cat /var/log/daemon.log::sending DPD request::YES
moon:: cat /var/log/daemon.log::retransmit.*of request::YES
moon:: cat /var/log/daemon.log::giving up after 5 retransmits::YES
moon:: cat /var/log/daemon.log::giving up after.*retransmits::YES
moon:: ipsec status 2> /dev/null::rw.*INSTALLED::NO