check ip xfrm state in IKEv1 and IKEv2 transport mode scenarios

This commit is contained in:
Andreas Steffen 2007-12-19 00:47:21 +00:00
parent 6a49300c55
commit 1f490cb1ec
4 changed files with 7 additions and 0 deletions

View File

@ -1,5 +1,7 @@
moon::ipsec status::host-host.*STATE_QUICK_I2.*IPsec SA established::YES
sun::ipsec status::host-host.*STATE_QUICK_R2.*IPsec SA established::YES
moon::ip xfrm state::mode transport::YES
sun::ip xfrm state::mode transport::YES
moon::ping -c 1 PH_IP_SUN::64 bytes from PH_IP_SUN: icmp_seq=1::YES
sun::tcpdump::IP moon.strongswan.org > sun.strongswan.org: ESP::YES
sun::tcpdump::IP sun.strongswan.org > moon.strongswan.org: ESP::YES

View File

@ -1,5 +1,8 @@
moon::cat /var/log/daemon.log::received USE_TRANSPORT_MODE notify::YES
moon::ipsec status::host-host.*INSTALLED.*TRANSPORT::YES
sun::ipsec status::host-host.*INSTALLED.*TRANSPORT::YES
moon::ip xfrm state::mode transport::YES
sun::ip xfrm state::mode transport::YES
moon::ping -c 1 PH_IP_SUN::64 bytes from PH_IP_SUN: icmp_seq=1::YES
sun::tcpdump::IP moon.strongswan.org > sun.strongswan.org: ESP::YES
sun::tcpdump::IP sun.strongswan.org > moon.strongswan.org: ESP::YES

View File

@ -10,6 +10,7 @@ conn %default
keylife=20m
rekeymargin=3m
keyingtries=1
mobike=no
keyexchange=ikev2
conn host-host

View File

@ -10,6 +10,7 @@ conn %default
keylife=20m
rekeymargin=3m
keyingtries=1
mobike=no
keyexchange=ikev2
conn host-host