mirror of
https://github.com/strongswan/strongswan.git
synced 2025-11-30 00:00:23 -05:00
check ip xfrm state in IKEv1 and IKEv2 transport mode scenarios
This commit is contained in:
parent
6a49300c55
commit
1f490cb1ec
@ -1,5 +1,7 @@
|
|||||||
moon::ipsec status::host-host.*STATE_QUICK_I2.*IPsec SA established::YES
|
moon::ipsec status::host-host.*STATE_QUICK_I2.*IPsec SA established::YES
|
||||||
sun::ipsec status::host-host.*STATE_QUICK_R2.*IPsec SA established::YES
|
sun::ipsec status::host-host.*STATE_QUICK_R2.*IPsec SA established::YES
|
||||||
|
moon::ip xfrm state::mode transport::YES
|
||||||
|
sun::ip xfrm state::mode transport::YES
|
||||||
moon::ping -c 1 PH_IP_SUN::64 bytes from PH_IP_SUN: icmp_seq=1::YES
|
moon::ping -c 1 PH_IP_SUN::64 bytes from PH_IP_SUN: icmp_seq=1::YES
|
||||||
sun::tcpdump::IP moon.strongswan.org > sun.strongswan.org: ESP::YES
|
sun::tcpdump::IP moon.strongswan.org > sun.strongswan.org: ESP::YES
|
||||||
sun::tcpdump::IP sun.strongswan.org > moon.strongswan.org: ESP::YES
|
sun::tcpdump::IP sun.strongswan.org > moon.strongswan.org: ESP::YES
|
||||||
|
|||||||
@ -1,5 +1,8 @@
|
|||||||
|
moon::cat /var/log/daemon.log::received USE_TRANSPORT_MODE notify::YES
|
||||||
moon::ipsec status::host-host.*INSTALLED.*TRANSPORT::YES
|
moon::ipsec status::host-host.*INSTALLED.*TRANSPORT::YES
|
||||||
sun::ipsec status::host-host.*INSTALLED.*TRANSPORT::YES
|
sun::ipsec status::host-host.*INSTALLED.*TRANSPORT::YES
|
||||||
|
moon::ip xfrm state::mode transport::YES
|
||||||
|
sun::ip xfrm state::mode transport::YES
|
||||||
moon::ping -c 1 PH_IP_SUN::64 bytes from PH_IP_SUN: icmp_seq=1::YES
|
moon::ping -c 1 PH_IP_SUN::64 bytes from PH_IP_SUN: icmp_seq=1::YES
|
||||||
sun::tcpdump::IP moon.strongswan.org > sun.strongswan.org: ESP::YES
|
sun::tcpdump::IP moon.strongswan.org > sun.strongswan.org: ESP::YES
|
||||||
sun::tcpdump::IP sun.strongswan.org > moon.strongswan.org: ESP::YES
|
sun::tcpdump::IP sun.strongswan.org > moon.strongswan.org: ESP::YES
|
||||||
|
|||||||
@ -10,6 +10,7 @@ conn %default
|
|||||||
keylife=20m
|
keylife=20m
|
||||||
rekeymargin=3m
|
rekeymargin=3m
|
||||||
keyingtries=1
|
keyingtries=1
|
||||||
|
mobike=no
|
||||||
keyexchange=ikev2
|
keyexchange=ikev2
|
||||||
|
|
||||||
conn host-host
|
conn host-host
|
||||||
|
|||||||
@ -10,6 +10,7 @@ conn %default
|
|||||||
keylife=20m
|
keylife=20m
|
||||||
rekeymargin=3m
|
rekeymargin=3m
|
||||||
keyingtries=1
|
keyingtries=1
|
||||||
|
mobike=no
|
||||||
keyexchange=ikev2
|
keyexchange=ikev2
|
||||||
|
|
||||||
conn host-host
|
conn host-host
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user