mirror of
https://github.com/strongswan/strongswan.git
synced 2025-10-07 00:01:49 -04:00
added rw-ikev1 IPv6 scenario
This commit is contained in:
parent
e2d1f05f0e
commit
7430f44c47
5
testing/tests/ipv6/rw-ikev1/description.txt
Normal file
5
testing/tests/ipv6/rw-ikev1/description.txt
Normal file
@ -0,0 +1,5 @@
|
|||||||
|
The roadwarrior <b>carol</b> sets up a connection to gateway <b>moon</b>.
|
||||||
|
The authentication is based on <b>X.509 certificates</b>.
|
||||||
|
In order to test the IPv6 ESP tunnel, <b>carol</b> sends an IPv6 ICMP request
|
||||||
|
to the client <b>alice</b> behind the gateway <b>moon</b> using the ping6
|
||||||
|
command.
|
5
testing/tests/ipv6/rw-ikev1/evaltest.dat
Normal file
5
testing/tests/ipv6/rw-ikev1/evaltest.dat
Normal file
@ -0,0 +1,5 @@
|
|||||||
|
carol::ipsec status::home.*STATE_QUICK_I2.*IPsec SA established::YES
|
||||||
|
moon::ipsec status::rw.*STATE_QUICK_R2.*IPsec SA established::YES
|
||||||
|
carol::ping6 -c 1 ip6-alice.strongswan.org::64 bytes from ip6-alice.strongswan.org: icmp_seq=1::YES
|
||||||
|
moon::tcpdump::IP6 ip6-carol.strongswan.org > ip6-moon.strongswan.org: ESP::YES
|
||||||
|
moon::tcpdump::IP6 ip6-moon.strongswan.org > ip6-carol.strongswan.org: ESP::YES
|
28
testing/tests/ipv6/rw-ikev1/hosts/carol/etc/ipsec.conf
Executable file
28
testing/tests/ipv6/rw-ikev1/hosts/carol/etc/ipsec.conf
Executable file
@ -0,0 +1,28 @@
|
|||||||
|
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
||||||
|
|
||||||
|
config setup
|
||||||
|
plutodebug=control
|
||||||
|
crlcheckinterval=180
|
||||||
|
strictcrlpolicy=no
|
||||||
|
charonstart=no
|
||||||
|
|
||||||
|
conn %default
|
||||||
|
ikelifetime=60m
|
||||||
|
keylife=20m
|
||||||
|
rekeymargin=3m
|
||||||
|
keyingtries=1
|
||||||
|
|
||||||
|
conn home
|
||||||
|
left=PH_IP6_CAROL
|
||||||
|
leftnexthop=0::0
|
||||||
|
leftcert=carolCert.pem
|
||||||
|
leftid=carol@strongswan.org
|
||||||
|
right=PH_IP6_MOON
|
||||||
|
rightnexthop=0::0
|
||||||
|
rightsubnet=fec1::/16
|
||||||
|
rightid=@moon.strongswan.org
|
||||||
|
auto=add
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
23
testing/tests/ipv6/rw-ikev1/hosts/moon/etc/ipsec.conf
Executable file
23
testing/tests/ipv6/rw-ikev1/hosts/moon/etc/ipsec.conf
Executable file
@ -0,0 +1,23 @@
|
|||||||
|
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
||||||
|
|
||||||
|
config setup
|
||||||
|
plutodebug=control
|
||||||
|
crlcheckinterval=180
|
||||||
|
strictcrlpolicy=no
|
||||||
|
charonstart=no
|
||||||
|
|
||||||
|
conn %default
|
||||||
|
ikelifetime=60m
|
||||||
|
keylife=20m
|
||||||
|
rekeymargin=3m
|
||||||
|
keyingtries=1
|
||||||
|
|
||||||
|
conn rw
|
||||||
|
left=PH_IP6_MOON
|
||||||
|
leftnexthop=0::0
|
||||||
|
leftcert=moonCert.pem
|
||||||
|
leftid=@moon.strongswan.org
|
||||||
|
leftsubnet=fec1::/16
|
||||||
|
right=%any
|
||||||
|
rightnexthop=0::0
|
||||||
|
auto=add
|
3
testing/tests/ipv6/rw-ikev1/posttest.dat
Normal file
3
testing/tests/ipv6/rw-ikev1/posttest.dat
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
moon::ipsec stop
|
||||||
|
carol::ipsec stop
|
||||||
|
alice::"ip route del fec0:\:/16 via fec1:\:1"
|
6
testing/tests/ipv6/rw-ikev1/pretest.dat
Normal file
6
testing/tests/ipv6/rw-ikev1/pretest.dat
Normal file
@ -0,0 +1,6 @@
|
|||||||
|
moon::echo "1" >/proc/sys/net/ipv6/conf/all/forwarding
|
||||||
|
alice::"ip route add fec0:\:/16 via fec1:\:1"
|
||||||
|
carol::ipsec start
|
||||||
|
moon::ipsec start
|
||||||
|
carol::sleep 2
|
||||||
|
carol::ipsec up home
|
21
testing/tests/ipv6/rw-ikev1/test.conf
Normal file
21
testing/tests/ipv6/rw-ikev1/test.conf
Normal file
@ -0,0 +1,21 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
#
|
||||||
|
# This configuration file provides information on the
|
||||||
|
# UML instances used for this test
|
||||||
|
|
||||||
|
# All UML instances that are required for this test
|
||||||
|
#
|
||||||
|
UMLHOSTS="alice moon carol winnetou"
|
||||||
|
|
||||||
|
# Corresponding block diagram
|
||||||
|
#
|
||||||
|
DIAGRAM="a-m-c-w.png"
|
||||||
|
|
||||||
|
# UML instances on which tcpdump is to be started
|
||||||
|
#
|
||||||
|
TCPDUMPHOSTS="moon"
|
||||||
|
|
||||||
|
# UML instances on which IPsec is started
|
||||||
|
# Used for IPsec logging purposes
|
||||||
|
#
|
||||||
|
IPSECHOSTS="moon carol"
|
Loading…
x
Reference in New Issue
Block a user