sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-04 00:00:14 -04:00
Code Issues Projects Releases Wiki Activity

removed in favour of tests from NAT team

Browse Source
This commit is contained in:
Martin Willi 2006-07-13 12:00:36 +00:00
parent 4c04f30a51
commit be247b817b
7 changed files with 0 additions and 98 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
testing/tests/ikev2/nat-one-rw/description.txt
View File

@ -1,4 +0,0 @@
The roadwarrior <b>alice</b> sitting behind the NAT router <b>moon</b> sets up a tunnel to
gateway <b>sun</b>. UDP encapsulation is used to traverse the NAT router.
In order to test the tunnel, the NAT-ed host <b>alice</b> pings the
client <b>bob</b> behind the gateway <b>sun</b>.

5
testing/tests/ikev2/nat-one-rw/evaltest.dat
View File

@ -1,5 +0,0 @@
alice::ipsec statusall::nat-t.*IKE_SA_ESTABLISHED::YES
sun::ipsec statusall::nat-t.*IKE_SA_ESTABLISHED::YES
alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
moon::tcpdump::IP moon.strongswan.org.* > sun.strongswan.org.ipsec-nat-t: UDP::YES
moon::tcpdump::IP sun.strongswan.org.ipsec-nat-t > moon.strongswan.org.*: UDP::YES

21
testing/tests/ikev2/nat-one-rw/hosts/alice/etc/ipsec.conf
View File

@ -1,21 +0,0 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
strictcrlpolicy=no
plutostart=no
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
conn nat-t
left=%defaultroute
leftcert=aliceCert.pem
leftid=alice@strongswan.org
right=PH_IP_SUN
rightid=@sun.strongswan.org
rightsubnet=10.2.0.0/16
keyexchange=ikev2
auto=add

33
testing/tests/ikev2/nat-one-rw/hosts/sun/etc/ipsec.conf
View File

@ -1,33 +0,0 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
strictcrlpolicy=no
plutostart=no
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
keyexchange=ikev2
left=PH_IP_SUN
leftcert=sunCert.pem
leftid=@sun.strongswan.org
conn net-net
leftsubnet=10.2.0.0/16
right=PH_IP_MOON
rightsubnet=10.1.0.0/16
rightid=@moon.strongswan.org
auto=add
conn host-host
right=PH_IP_MOON
rightid=@moon.strongswan.org
auto=add
conn nat-t
leftsubnet=10.2.0.0/16
right=%any
rightsubnetwithin=10.1.0.0/16
auto=add

4
testing/tests/ikev2/nat-one-rw/posttest.dat
View File

@ -1,4 +0,0 @@
alice::ipsec stop
sun::ipsec stop
moon::iptables -t nat -F

10
testing/tests/ikev2/nat-one-rw/pretest.dat
View File

@ -1,10 +0,0 @@
sun::echo 1 > /proc/sys/net/ipv4/ip_forward
moon::echo 1 > /proc/sys/net/ipv4/ip_forward
moon::iptables -t nat -A POSTROUTING -o eth0 -s 10.1.0.0/16 -p udp -j SNAT --to-source PH_IP_MOON:1024-1100
moon::iptables -t nat -A POSTROUTING -o eth0 -s 10.1.0.0/16 -p tcp -j SNAT --to-source PH_IP_MOON:2000-2100
alice::ipsec start
sun::ipsec start
alice::sleep 4
alice::ipsec up nat-t
alice::sleep 1

21
testing/tests/ikev2/nat-one-rw/test.conf
View File

@ -1,21 +0,0 @@
#!/bin/bash
#
# This configuration file provides information on the
# UML instances used for this test
# All UML instances that are required for this test
#
UMLHOSTS="alice moon winnetou sun bob"
# Corresponding block diagram
#
DIAGRAM="a-m-w-s-b.png"
# UML instances on which tcpdump is to be started
#
TCPDUMPHOSTS="moon"
# UML instances on which IPsec is started
# Used for IPsec logging purposes
#
IPSECHOSTS="alice sun"