Tobias Brunner
8f9016b1e2
The scenarios will work with new or old base images as long as the version in use is included as product in the master data (src/libimcv/imv/data.sql).
21 lines
1.7 KiB
Plaintext
21 lines
1.7 KiB
Plaintext
carol::cat /var/log/daemon.log::PB-TNC access recommendation is 'Access Allowed'::YES
|
|
carol::cat /var/log/daemon.log::EAP method EAP_TTLS succeeded, MSK established::YES
|
|
carol::cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with EAP successful::YES
|
|
carol::cat /var/log/daemon.log::CHILD_SA home{1} established.*TS 192.168.0.100/32 === 10.1.0.0/28::YES
|
|
dave:: cat /var/log/daemon.log::PB-TNC access recommendation is 'Quarantined'::YES
|
|
dave:: cat /var/log/daemon.log::EAP method EAP_TTLS succeeded, MSK established::YES
|
|
dave:: cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with EAP successful::YES
|
|
dave:: cat /var/log/daemon.log::CHILD_SA home{1} established.*TS 192.168.0.200/32 === 10.1.0.16/28::YES
|
|
moon:: ipsec attest --sessions 2> /dev/null::Debian.*x86_64.*[email protected] - allow::YES
|
|
moon:: cat /var/log/daemon.log::added group membership 'allow'::YES
|
|
moon:: cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
|
|
moon:: ipsec attest --sessions 2> /dev/null::Debian.*x86_64.*[email protected] - isolate::YES
|
|
moon:: cat /var/log/daemon.log::added group membership 'isolate'::YES
|
|
moon:: cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
|
|
moon:: ipsec statusall 2> /dev/null::rw-allow.*10.1.0.0/28 === 192.168.0.100/32::YES
|
|
moon:: ipsec statusall 2> /dev/null::rw-isolate.*10.1.0.16/28 === 192.168.0.200/32::YES
|
|
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_req=1::YES
|
|
carol::ping -c 1 PH_IP_VENUS::64 bytes from PH_IP_VENUS: icmp_req=1::NO
|
|
dave:: ping -c 1 PH_IP_VENUS::64 bytes from PH_IP_VENUS: icmp_req=1::YES
|
|
dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_req=1::NO
|