mirror of
https://github.com/strongswan/strongswan.git
synced 2025-10-06 00:00:47 -04:00
added rw-ikev1 IPv6 scenario
This commit is contained in:
parent
e2d1f05f0e
commit
7430f44c47
5
testing/tests/ipv6/rw-ikev1/description.txt
Normal file
5
testing/tests/ipv6/rw-ikev1/description.txt
Normal file
@ -0,0 +1,5 @@
|
||||
The roadwarrior <b>carol</b> sets up a connection to gateway <b>moon</b>.
|
||||
The authentication is based on <b>X.509 certificates</b>.
|
||||
In order to test the IPv6 ESP tunnel, <b>carol</b> sends an IPv6 ICMP request
|
||||
to the client <b>alice</b> behind the gateway <b>moon</b> using the ping6
|
||||
command.
|
5
testing/tests/ipv6/rw-ikev1/evaltest.dat
Normal file
5
testing/tests/ipv6/rw-ikev1/evaltest.dat
Normal file
@ -0,0 +1,5 @@
|
||||
carol::ipsec status::home.*STATE_QUICK_I2.*IPsec SA established::YES
|
||||
moon::ipsec status::rw.*STATE_QUICK_R2.*IPsec SA established::YES
|
||||
carol::ping6 -c 1 ip6-alice.strongswan.org::64 bytes from ip6-alice.strongswan.org: icmp_seq=1::YES
|
||||
moon::tcpdump::IP6 ip6-carol.strongswan.org > ip6-moon.strongswan.org: ESP::YES
|
||||
moon::tcpdump::IP6 ip6-moon.strongswan.org > ip6-carol.strongswan.org: ESP::YES
|
28
testing/tests/ipv6/rw-ikev1/hosts/carol/etc/ipsec.conf
Executable file
28
testing/tests/ipv6/rw-ikev1/hosts/carol/etc/ipsec.conf
Executable file
@ -0,0 +1,28 @@
|
||||
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
||||
|
||||
config setup
|
||||
plutodebug=control
|
||||
crlcheckinterval=180
|
||||
strictcrlpolicy=no
|
||||
charonstart=no
|
||||
|
||||
conn %default
|
||||
ikelifetime=60m
|
||||
keylife=20m
|
||||
rekeymargin=3m
|
||||
keyingtries=1
|
||||
|
||||
conn home
|
||||
left=PH_IP6_CAROL
|
||||
leftnexthop=0::0
|
||||
leftcert=carolCert.pem
|
||||
leftid=carol@strongswan.org
|
||||
right=PH_IP6_MOON
|
||||
rightnexthop=0::0
|
||||
rightsubnet=fec1::/16
|
||||
rightid=@moon.strongswan.org
|
||||
auto=add
|
||||
|
||||
|
||||
|
||||
|
23
testing/tests/ipv6/rw-ikev1/hosts/moon/etc/ipsec.conf
Executable file
23
testing/tests/ipv6/rw-ikev1/hosts/moon/etc/ipsec.conf
Executable file
@ -0,0 +1,23 @@
|
||||
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
||||
|
||||
config setup
|
||||
plutodebug=control
|
||||
crlcheckinterval=180
|
||||
strictcrlpolicy=no
|
||||
charonstart=no
|
||||
|
||||
conn %default
|
||||
ikelifetime=60m
|
||||
keylife=20m
|
||||
rekeymargin=3m
|
||||
keyingtries=1
|
||||
|
||||
conn rw
|
||||
left=PH_IP6_MOON
|
||||
leftnexthop=0::0
|
||||
leftcert=moonCert.pem
|
||||
leftid=@moon.strongswan.org
|
||||
leftsubnet=fec1::/16
|
||||
right=%any
|
||||
rightnexthop=0::0
|
||||
auto=add
|
3
testing/tests/ipv6/rw-ikev1/posttest.dat
Normal file
3
testing/tests/ipv6/rw-ikev1/posttest.dat
Normal file
@ -0,0 +1,3 @@
|
||||
moon::ipsec stop
|
||||
carol::ipsec stop
|
||||
alice::"ip route del fec0:\:/16 via fec1:\:1"
|
6
testing/tests/ipv6/rw-ikev1/pretest.dat
Normal file
6
testing/tests/ipv6/rw-ikev1/pretest.dat
Normal file
@ -0,0 +1,6 @@
|
||||
moon::echo "1" >/proc/sys/net/ipv6/conf/all/forwarding
|
||||
alice::"ip route add fec0:\:/16 via fec1:\:1"
|
||||
carol::ipsec start
|
||||
moon::ipsec start
|
||||
carol::sleep 2
|
||||
carol::ipsec up home
|
21
testing/tests/ipv6/rw-ikev1/test.conf
Normal file
21
testing/tests/ipv6/rw-ikev1/test.conf
Normal file
@ -0,0 +1,21 @@
|
||||
#!/bin/bash
|
||||
#
|
||||
# This configuration file provides information on the
|
||||
# UML instances used for this test
|
||||
|
||||
# All UML instances that are required for this test
|
||||
#
|
||||
UMLHOSTS="alice moon carol winnetou"
|
||||
|
||||
# Corresponding block diagram
|
||||
#
|
||||
DIAGRAM="a-m-c-w.png"
|
||||
|
||||
# UML instances on which tcpdump is to be started
|
||||
#
|
||||
TCPDUMPHOSTS="moon"
|
||||
|
||||
# UML instances on which IPsec is started
|
||||
# Used for IPsec logging purposes
|
||||
#
|
||||
IPSECHOSTS="moon carol"
|
Loading…
x
Reference in New Issue
Block a user