sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-12-15 00:00:26 -05:00
Code Issues Projects Releases Wiki Activity

switched mobike-nat and mobike-virtual-ip scenarios to a virtual IP of 10.3.0.3

Browse Source
This commit is contained in:
Andreas Steffen 2007-10-02 19:23:12 +00:00
parent 9c7aac664c
commit cd45c2faf3
6 changed files with 16 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
testing/tests/ikev2/mobike-nat/description.txt
View File

@ -4,4 +4,4 @@ via an additional <b>eth1</b> interface. <b>alice</b> builds up a tunnel to gate
in order to reach <b>bob</b> in the subnet behind. When the <b>eth1</b> interface
goes away, <b>alice</b> switches to <b>eth0</b> and signals the IP address change
via a MOBIKE ADDRESS_UPDATE notification to peer <b>sun</b>. <b>alice</b> sets
a virtual IP of PH_IP_ALICE, so that the IPsec policies don't have to be changed.
a virtual IP of 10.3.0.3, so that the IPsec policies don't have to be changed.

12
testing/tests/ikev2/mobike-nat/evaltest.dat
View File

@ -1,16 +1,16 @@
alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE1.*PH_IP_SUN::YES
sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_ALICE1::YES
alice::ipsec statusall::PH_IP_ALICE/32 === 10.2.0.0/16::YES
sun::ipsec statusall::10.2.0.0/16 === PH_IP_ALICE/32::YES
alice::ipsec statusall::10.3.0.3/32 === 10.2.0.0/16::YES
sun::ipsec statusall::10.2.0.0/16 === 10.3.0.3/32::YES
alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
alice::/etc/init.d/net.eth1 stop::No output expected::NO
alice::sleep 1::No output expected::NO
alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE.*PH_IP_SUN::YES
sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_MOON::YES
alice::ipsec statusall::PH_IP_ALICE/32 === 10.2.0.0/16::YES
sun::ipsec statusall::10.2.0.0/16 === PH_IP_ALICE/32::YES
alice::ipsec statusall::10.3.0.3/32 === 10.2.0.0/16::YES
sun::ipsec statusall::10.2.0.0/16 === 10.3.0.3/32::YES
alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
moon::tcpdump::moon.strongswan.org.*sun.strongswan.org.*: UDP-encap: ESP::YES
moon::tcpdump::sun.strongswan.org.*moon.strongswan.org.*: UDP-encap: ESP::YES
bob::tcpdump::alice.strongswan.org.*bob.strongswan.org.*ICMP echo request::YES
bob::tcpdump::bob.strongswan.org.*alice.strongswan.org.*ICMP echo reply::YES
bob::tcpdump::10.3.0.3.*bob.strongswan.org.*ICMP echo request::YES
bob::tcpdump::bob.strongswan.org.*10.3.0.3.*ICMP echo reply::YES

2
testing/tests/ikev2/mobike-nat/hosts/alice/etc/ipsec.conf
View File

@ -14,7 +14,7 @@ conn %default
conn mobike
left=PH_IP_ALICE1
leftsourceip=PH_IP_ALICE
leftsourceip=10.3.0.3
leftcert=aliceCert.pem
leftid=alice@strongswan.org
leftfirewall=yes

2
testing/tests/ikev2/mobike-virtual-ip/description.txt
View File

@ -4,4 +4,4 @@ via an additional <b>eth1</b> interface. <b>alice</b> builds up a tunnel to gate
in order to reach <b>bob</b> in the subnet behind. When the <b>eth1</b> interface
goes away, <b>alice</b> switches to <b>eth0</b> and signals the IP address change
via a MOBIKE ADDRESS_UPDATE notification to peer <b>sun</b>. <b>alice</b> sets
a virtual IP of PH_IP_ALICE, so that the IPsec policies don't have to be changed.
a virtual IP of 10.3.0.3, so that the IPsec policies don't have to be changed.

12
testing/tests/ikev2/mobike-virtual-ip/evaltest.dat
View File

@ -1,16 +1,16 @@
alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE1.*PH_IP_SUN::YES
sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_ALICE1::YES
alice::ipsec statusall::PH_IP_ALICE/32 === 10.2.0.0/16::YES
sun::ipsec statusall::10.2.0.0/16 === PH_IP_ALICE/32::YES
alice::ipsec statusall::10.3.0.3/32 === 10.2.0.0/16::YES
sun::ipsec statusall::10.2.0.0/16 === 10.3.0.3/32::YES
alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
alice::/etc/init.d/net.eth1 stop::No output expected::NO
alice::sleep 1::No output expected::NO
alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE.*PH_IP_SUN::YES
sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_ALICE::YES
alice::ipsec statusall::PH_IP_ALICE/32 === 10.2.0.0/16::YES
sun::ipsec statusall::10.2.0.0/16 === PH_IP_ALICE/32::YES
alice::ipsec statusall::10.3.0.3/32 === 10.2.0.0/16::YES
sun::ipsec statusall::10.2.0.0/16 === 10.3.0.3/32::YES
alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
moon::tcpdump::alice.strongswan.org.*sun.strongswan.org.*: ESP::YES
moon::tcpdump::sun.strongswan.org.*alice.strongswan.org.*: ESP::YES
bob::tcpdump::alice.strongswan.org.*bob.strongswan.org.*ICMP echo request::YES
bob::tcpdump::bob.strongswan.org.*alice.strongswan.org.*ICMP echo reply::YES
bob::tcpdump::10.3.0.3.*bob.strongswan.org.*ICMP echo request::YES
bob::tcpdump::bob.strongswan.org.*10.3.0.3.*ICMP echo reply::YES

2
testing/tests/ikev2/mobike-virtual-ip/hosts/alice/etc/ipsec.conf
View File

@ -14,7 +14,7 @@ conn %default
conn mobike
left=PH_IP_ALICE1
leftsourceip=PH_IP_ALICE
leftsourceip=10.3.0.3
leftcert=aliceCert.pem
leftid=alice@strongswan.org
leftfirewall=yes