denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

created IPv6 environment

Browse Source
This commit is contained in:
Andreas Steffen
2006-06-06 05:41:21 +00:00
parent 32b6500fbf
commit fc0afb6810
49 changed files with 227 additions and 150 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/double-nat-net/evaltest.dat
+1 -1
View File
@@ -1,5 +1,5 @@
alice::ipsec status::nat-t.*STATE_QUICK_I2.*IPsec SA established::YES
bob::ipsec status::nat-t.*STATE_QUICK_R2.*IPsec SA established::YES
alice::ping -c 1 PH_IP1_SUN::64 bytes from PH_IP1_SUN: icmp_seq=1::YES
alice::ping -c 1 PH_IP_SUN1::64 bytes from PH_IP_SUN1: icmp_seq=1::YES
moon::tcpdump::IP moon.strongswan.org.* > sun.strongswan.org.ipsec-nat-t: UDP::YES
moon::tcpdump::IP sun.strongswan.org.ipsec-nat-t > moon.strongswan.org.*: UDP::YES
testing/tests/ikev2-host2host/hosts/moon/etc/ipsec.conf
+6 -4
View File
@@ -6,9 +6,11 @@ config setup
plutostart=no
conn host-host
left=PH_IP_SUN
leftcert=sunCert.pem
right=PH_IP_MOON
rightcert=moonCert.pem
left=PH_IP_MOON
leftcert=moonCert.pem
[email protected]
right=PH_IP_SUN
rightcert=sunCert.pem
[email protected]
keyexchange=ikev2
auto=add
testing/tests/ikev2-host2host/hosts/sun/etc/ipsec.conf
+6 -4
View File
@@ -6,9 +6,11 @@ config setup
plutostart=no
conn host-host
left=PH_IP_MOON
leftcert=moonCert.pem
right=PH_IP_SUN
rightcert=sunCert.pem
left=PH_IP_SUN
leftcert=sunCert.pem
[email protected]
right=PH_IP_MOON
rightcert=moonCert.pem
[email protected]
keyexchange=ikev2
auto=add
testing/tests/ikev2-ikev1-mixed/hosts/moon/etc/ipsec.conf
+7
View File
@@ -2,8 +2,15 @@
version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
crlcheckinterval=180
conn %default
ikelifetime=60m
keylife=20m
left=PH_IP_MOON
leftnexthop=%direct
leftcert=moonCert.pem
[email protected]
leftsubnet=10.1.0.0/16
testing/tests/mode-config-swapped/hosts/moon/etc/ipsec.conf
+3 -3
View File
@@ -15,7 +15,7 @@ conn %default
keyingtries=1
right=PH_IP_MOON
rightsubnet=10.1.0.0/16
rightsourceip=PH_IP1_MOON
rightsourceip=PH_IP_MOON1
rightnexthop=%direct
rightcert=moonCert.pem
[email protected]
@@ -24,11 +24,11 @@ conn %default
conn rw-carol
left=%any
[email protected]
leftsourceip=PH_IP1_CAROL
leftsourceip=PH_IP_CAROL1
auto=add
conn rw-dave
left=%any
[email protected]
leftsourceip=PH_IP1_DAVE
leftsourceip=PH_IP_DAVE1
auto=add
testing/tests/mode-config-swapped/posttest.dat
+2 -2
View File
@@ -7,5 +7,5 @@ dave::ipsec stop
moon::/etc/init.d/iptables stop 2> /dev/null
carol::/etc/init.d/iptables stop 2> /dev/null
dave::/etc/init.d/iptables stop 2> /dev/null
carol::ip addr del PH_IP1_CAROL/32 dev eth0
dave::ip addr del PH_IP1_DAVE/32 dev eth0
carol::ip addr del PH_IP_CAROL1/32 dev eth0
dave::ip addr del PH_IP_DAVE1/32 dev eth0
testing/tests/mode-config/hosts/moon/etc/ipsec.conf
+3 -3
View File
@@ -15,7 +15,7 @@ conn %default
keyingtries=1
left=PH_IP_MOON
leftsubnet=10.1.0.0/16
leftsourceip=PH_IP1_MOON
leftsourceip=PH_IP_MOON1
leftnexthop=%direct
leftcert=moonCert.pem
[email protected]
@@ -24,11 +24,11 @@ conn %default
conn rw-carol
right=%any
[email protected]
rightsourceip=PH_IP1_CAROL
rightsourceip=PH_IP_CAROL1
auto=add
conn rw-dave
right=%any
[email protected]
rightsourceip=PH_IP1_DAVE
rightsourceip=PH_IP_DAVE1
auto=add
testing/tests/mode-config/posttest.dat
+2 -2
View File
@@ -7,5 +7,5 @@ dave::ipsec stop
moon::/etc/init.d/iptables stop 2> /dev/null
carol::/etc/init.d/iptables stop 2> /dev/null
dave::/etc/init.d/iptables stop 2> /dev/null
carol::ip addr del PH_IP1_CAROL/32 dev eth0
dave::ip addr del PH_IP1_DAVE/32 dev eth0
carol::ip addr del PH_IP_CAROL1/32 dev eth0
dave::ip addr del PH_IP_DAVE1/32 dev eth0
testing/tests/mode-config/pretest.dat
+1
View File
@@ -7,3 +7,4 @@ moon::ipsec start
carol::sleep 2
carol::ipsec up home
dave::ipsec up home
carol::sleep 1
testing/tests/protoport-dual/evaltest.dat
+1 -1
View File
@@ -1,7 +1,7 @@
carol::ipsec status::home.*STATE_QUICK_I2.*IPsec SA established::YES
moon::ipsec status::rw.*STATE_QUICK_R2.*IPsec SA established::YES
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
carol::ping -c 1 PH_IP1_MOON::64 bytes from PH_IP1_MOON: icmp_seq=1::YES
carol::ping -c 1 PH_IP_MOON1::64 bytes from PH_IP_MOON1: icmp_seq=1::YES
carol::ssh -o ConnectTimeout=5 PH_IP_ALICE hostname::alice::YES
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES
testing/tests/protoport-pass/evaltest.dat
+1 -1
View File
@@ -1,7 +1,7 @@
carol::ipsec status::home.*STATE_QUICK_I2.*IPsec SA established::YES
moon::ipsec status::rw.*STATE_QUICK_R2.*IPsec SA established::YES
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
carol::ping -c 1 PH_IP1_MOON::64 bytes from PH_IP1_MOON: icmp_seq=1::YES
carol::ping -c 1 PH_IP_MOON1::64 bytes from PH_IP_MOON1: icmp_seq=1::YES
carol::ssh -o ConnectTimeout=5 PH_IP_ALICE hostname::alice::YES
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES
testing/tests/protoport-route/evaltest.dat
+1 -1
View File
@@ -1,5 +1,5 @@
carol::ping -c 2 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq::YES
carol::ping -c 2 PH_IP1_MOON::64 bytes from PH_IP1_MOON: icmp_seq::YES
carol::ping -c 2 PH_IP_MOON1::64 bytes from PH_IP_MOON1: icmp_seq::YES
carol::ssh PH_IP_ALICE hostname::alice::YES
carol::cat /var/log/auth.log::initiate on demand::YES
carol::ipsec status::home.*STATE_QUICK_I2.*IPsec SA established::YES
testing/tests/starter-includes/hosts/moon/etc/ipsec.host
+1 -1
View File
@@ -3,7 +3,7 @@
conn %default
left=PH_IP_MOON
leftsubnet=10.1.0.0/16
leftsourceip=PH_IP1_MOON
leftsourceip=PH_IP_MOON1
leftnexthop=%direct
leftcert=moonCert.pem
[email protected]
testing/tests/starter-includes/hosts/moon/etc/ipsec.peers/ipsec.carol
+1 -1
View File
@@ -3,6 +3,6 @@
conn rw-carol
right=%any
[email protected]
rightsourceip=PH_IP1_CAROL
rightsourceip=PH_IP_CAROL1
auto=add
testing/tests/starter-includes/hosts/moon/etc/ipsec.peers/ipsec.dave
+1 -1
View File
@@ -3,6 +3,6 @@
conn rw-dave
right=%any
[email protected]
rightsourceip=PH_IP1_DAVE
rightsourceip=PH_IP_DAVE1
auto=add
testing/tests/starter-includes/posttest.dat
+2 -2
View File
@@ -7,7 +7,7 @@ dave::ipsec stop
moon::/etc/init.d/iptables stop 2> /dev/null
carol::/etc/init.d/iptables stop 2> /dev/null
dave::/etc/init.d/iptables stop 2> /dev/null
carol::ip addr del PH_IP1_CAROL/32 dev eth0
dave::ip addr del PH_IP1_DAVE/32 dev eth0
carol::ip addr del PH_IP_CAROL1/32 dev eth0
dave::ip addr del PH_IP_DAVE1/32 dev eth0
moon::rm /etc/ipsec.connections /etc/ipsec.host
moon::rm -r /etc/ipsec.peers
testing/tests/starter-includes/pretest.dat
+1
View File
@@ -8,3 +8,4 @@ moon::ipsec start --debug-all
carol::sleep 2
carol::ipsec up home
dave::ipsec up home
carol::sleep 1
testing/tests/virtual-ip-swapped/evaltest.dat
+2 -2
View File
@@ -1,8 +1,8 @@
carol::ipsec status::home.*STATE_QUICK_I2.*IPsec SA established::YES
moon::ipsec status::rw.*STATE_QUICK_R2.*IPsec SA established::YES
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
carol::ping -c 1 PH_IP1_MOON::64 bytes from PH_IP1_MOON: icmp_seq=1::YES
moon::ping -c 1 PH_IP1_CAROL::64 bytes from PH_IP1_CAROL: icmp_seq=1::YES
carol::ping -c 1 PH_IP_MOON1::64 bytes from PH_IP_MOON1: icmp_seq=1::YES
moon::ping -c 1 PH_IP_CAROL1::64 bytes from PH_IP_CAROL1: icmp_seq=1::YES
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES
alice::tcpdump::IP carol1.strongswan.org > alice.strongswan.org: icmp::YES
testing/tests/virtual-ip-swapped/hosts/carol/etc/ipsec.conf
+1 -1
View File
@@ -16,7 +16,7 @@ conn %default
conn home
right=PH_IP_CAROL
rightsourceip=PH_IP1_CAROL
rightsourceip=PH_IP_CAROL1
rightnexthop=%direct
rightcert=carolCert.pem
[email protected]
testing/tests/virtual-ip-swapped/hosts/moon/etc/ipsec.conf
+1 -1
View File
@@ -16,7 +16,7 @@ conn %default
conn rw
right=PH_IP_MOON
rightsourceip=PH_IP1_MOON
rightsourceip=PH_IP_MOON1
rightnexthop=%direct
rightcert=moonCert.pem
[email protected]
testing/tests/virtual-ip-swapped/posttest.dat
+1 -1
View File
@@ -4,4 +4,4 @@ moon::ipsec stop
carol::ipsec stop
moon::/etc/init.d/iptables stop 2> /dev/null
carol::/etc/init.d/iptables stop 2> /dev/null
carol::ip addr del PH_IP1_CAROL/32 dev eth0
carol::ip addr del PH_IP_CAROL1/32 dev eth0
testing/tests/virtual-ip/evaltest.dat
+2 -2
View File
@@ -1,8 +1,8 @@
carol::ipsec status::home.*STATE_QUICK_I2.*IPsec SA established::YES
moon::ipsec status::rw.*STATE_QUICK_R2.*IPsec SA established::YES
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
carol::ping -c 1 PH_IP1_MOON::64 bytes from PH_IP1_MOON: icmp_seq=1::YES
moon::ping -c 1 PH_IP1_CAROL::64 bytes from PH_IP1_CAROL: icmp_seq=1::YES
carol::ping -c 1 PH_IP_MOON1::64 bytes from PH_IP_MOON1: icmp_seq=1::YES
moon::ping -c 1 PH_IP_CAROL1::64 bytes from PH_IP_CAROL1: icmp_seq=1::YES
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES
alice::tcpdump::IP carol1.strongswan.org > alice.strongswan.org: icmp::YES
testing/tests/virtual-ip/hosts/carol/etc/ipsec.conf
+1 -1
View File
@@ -16,7 +16,7 @@ conn %default
conn home
left=PH_IP_CAROL
leftsourceip=PH_IP1_CAROL
leftsourceip=PH_IP_CAROL1
leftnexthop=%direct
leftcert=carolCert.pem
[email protected]
testing/tests/virtual-ip/hosts/moon/etc/ipsec.conf
+1 -1
View File
@@ -16,7 +16,7 @@ conn %default
conn rw
left=PH_IP_MOON
leftsourceip=PH_IP1_MOON
leftsourceip=PH_IP_MOON1
leftnexthop=%direct
leftcert=moonCert.pem
[email protected]
testing/tests/virtual-ip/posttest.dat
+1 -1
View File
@@ -4,4 +4,4 @@ moon::ipsec stop
carol::ipsec stop
moon::/etc/init.d/iptables stop 2> /dev/null
carol::/etc/init.d/iptables stop 2> /dev/null
carol::ip addr del PH_IP1_CAROL/32 dev eth0
carol::ip addr del PH_IP_CAROL1/32 dev eth0
testing/tests/virtual-ip/pretest.dat
+1
View File
@@ -4,3 +4,4 @@ carol::ipsec start
moon::ipsec start
carol::sleep 2
carol::ipsec up home
carol::sleep 1
testing/tests/wlan/evaltest.dat
+1 -1
View File
@@ -3,7 +3,7 @@ venus::ipsec status::wlan.*STATE_QUICK_I2.*IPsec SA established::YES
moon::ipsec status::alice.*STATE_QUICK_R2.*IPsec SA established::YES
moon::ipsec status::venus.*STATE_QUICK_R2.*IPsec SA established::YES
alice::ping -c 1 PH_IP_VENUS::64 bytes from PH_IP_VENUS: icmp_seq=1::YES
alice::ping -c 1 PH_IP1_MOON::64 bytes from PH_IP1_MOON: icmp_seq=1::YES
alice::ping -c 1 PH_IP_MOON1::64 bytes from PH_IP_MOON1: icmp_seq=1::YES
alice::ping -c 1 PH_IP_MOON::64 bytes from PH_IP_MOON: icmp_seq=1::YES
alice::ping -c 1 PH_IP_SUN::64 bytes from PH_IP_SUN: icmp_seq=1::YES
venus::ping -c 1 PH_IP_SUN::64 bytes from PH_IP_SUN: icmp_seq=1::YES
testing/tests/wlan/hosts/alice/etc/ipsec.conf
+1 -1
View File
@@ -31,7 +31,7 @@ conn wlan
leftcert=aliceCert.pem
[email protected]
leftfirewall=yes
right=PH_IP1_MOON
right=PH_IP_MOON1
[email protected]
rightsubnet=0.0.0.0/0
auto=add
testing/tests/wlan/hosts/moon/etc/ipsec.conf
+1 -1
View File
@@ -28,7 +28,7 @@ conn venus
auto=add
conn wlan
left=PH_IP1_MOON
left=PH_IP_MOON1
leftnexthop=%direct
leftsubnet=0.0.0.0/0
leftcert=moonCert.pem
testing/tests/wlan/hosts/venus/etc/ipsec.conf
+1 -1
View File
@@ -31,7 +31,7 @@ conn wlan
leftcert=venusCert.pem
[email protected]
leftfirewall=yes
right=PH_IP1_MOON
right=PH_IP_MOON1
[email protected]
rightsubnet=0.0.0.0/0
auto=add