denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

some reformulations

Browse Source
This commit is contained in:
Andreas Steffen
2010-07-17 17:19:26 +02:00
parent d2d7ed9227
commit f5baa5c4cf
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/nat-two-rw-mark/description.txt
+2 -2
View File
@@ -10,7 +10,7 @@ the <b>mark</b> parameter in ipsec.conf.
<b>iptables -t mangle</b> rules are then used in the PREROUTING chain to mark the traffic to <b>iptables -t mangle</b> rules are then used in the PREROUTING chain to mark the traffic to
and from <b>alice</b> and <b>venus</b>, respectively. and from <b>alice</b> and <b>venus</b>, respectively.
<p/> <p/>
The iptables script designated by <b>leftupdown=/etc/mark_updown</b> automatically inserts The script designated by <b>leftupdown=/etc/mark_updown</b> automatically inserts
inbound mangle rules that mark the inbound ESP_IN_UDP packets as well as the IPsec-policy rules iptables mangle rules that mark the inbound ESP_IN_UDP packets as well as iptables IPsec-policy rules
that let pass the tunneled traffic. In order to test the tunnel, the NAT-ed hosts <b>alice</b> that let pass the tunneled traffic. In order to test the tunnel, the NAT-ed hosts <b>alice</b>
and <b>venus</b> ping the client <b>bob</b> behind the gateway <b>sun</b>. and <b>venus</b> ping the client <b>bob</b> behind the gateway <b>sun</b>.
testing/tests/ikev2/rw-mark-in-out/description.txt
+2 -2
View File
@@ -10,7 +10,7 @@ the <b>mark_in</b> and <b>mark_out</b> parameters in ipsec.conf.
<b>iptables -t mangle</b> rules are then used in the PREROUTING chain to mark the traffic to <b>iptables -t mangle</b> rules are then used in the PREROUTING chain to mark the traffic to
and from <b>alice</b> and <b>venus</b>, respectively. and from <b>alice</b> and <b>venus</b>, respectively.
<p/> <p/>
The iptables script designated by <b>leftupdown=/etc/mark_updown</b> automatically inserts The script designated by <b>leftupdown=/etc/mark_updown</b> automatically inserts
inbound mangle rules that mark the inbound ESP packets as well as the IPsec-policy rules iptables mangle rules that mark the inbound ESP packets as well as iptables IPsec-policy rules
that let pass the tunneled traffic. In order to test the tunnel, the hosts <b>alice</b> that let pass the tunneled traffic. In order to test the tunnel, the hosts <b>alice</b>
and <b>venus</b> ping the client <b>bob</b> behind the gateway <b>sun</b>. and <b>venus</b> ping the client <b>bob</b> behind the gateway <b>sun</b>.