sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-08 00:02:03 -04:00
Code Issues Projects Releases Wiki Activity

updated ikev2/rw-eap-tnc-radius scenario

Browse Source
This commit is contained in:
Andreas Steffen 2010-10-05 07:56:57 +02:00
parent 0cfdbaff2c
commit e7104a6ec9
9 changed files with 38 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
testing/tests/ikev2/rw-eap-tnc-radius/hosts/alice/etc/raddb/sites-available/inner-tunnel-second
View File

@ -15,6 +15,19 @@ session {
}
post-auth {
if (control:TNC-Status == "Access") {
update reply {
Tunnel-Type := ESP
Filter-Id := "rw-access"
}
}
elsif (control:TNC-Status == "Isolate") {
update reply {
Tunnel-Type := ESP
Filter-Id := "rw-isolate"
}
}
Post-Auth-Type REJECT {
attr_filter.access_reject
}

2
testing/tests/ikev2/rw-eap-tnc-radius/hosts/dave/etc/ipsec.secrets
View File

@ -1,3 +1,3 @@
# /etc/ipsec.secrets - strongSwan IPsec secrets file
dave@strongswan.org : EAP "UgaM65Va"
dave@strongswan.org : EAP "W7R0g3do"

2
testing/tests/ikev2/rw-eap-tnc-radius/hosts/dave/etc/strongswan.conf
View File

@ -1,6 +1,6 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 revocation hmac xcbc stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc updown
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 revocation hmac xcbc stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnccs-11 updown
multiple_authentication=no
}

3
testing/tests/ikev2/rw-eap-tnc-radius/hosts/dave/etc/tnc_config Normal file
View File

@ -0,0 +1,3 @@
#IMC configuration file for strongSwan client
IMC "Dummy" /usr/local/lib/libdummyimc.so

12
testing/tests/ikev2/rw-eap-tnc-radius/hosts/moon/etc/ipsec.conf
View File

@ -11,9 +11,18 @@ conn %default
keyingtries=1
keyexchange=ikev2
conn rw-allow
leftsubnet=10.1.0.0/28
also=rw-eap
auto=add
conn rw-isolate
leftsubnet=10.1.0.16/28
also=rw-eap
auto=add
conn rw-eap
left=PH_IP_MOON
leftsubnet=10.1.0.0/16
leftcert=moonCert.pem
leftid=@moon.strongswan.org
leftauth=pubkey
@ -22,4 +31,3 @@ conn rw-eap
rightid=*@strongswan.org
rightsendcert=never
right=%any
auto=add

1
testing/tests/ikev2/rw-eap-tnc-radius/hosts/moon/etc/strongswan.conf
View File

@ -7,6 +7,7 @@ charon {
eap-radius {
secret = gv6URkSs
server = PH_IP_ALICE
filter_id = yes
}
}
}

2
testing/tests/ikev2/rw-eap-tnc-radius/posttest.dat
View File

@ -1,6 +1,8 @@
moon::ipsec stop
carol::ipsec stop
dave::ipsec stop
alice::/etc/init.d/radiusd stop
alice::rm /etc/raddb/sites-enabled/inner-tunnel-second
moon::/etc/init.d/iptables stop 2> /dev/null
carol::/etc/init.d/iptables stop 2> /dev/null
dave::/etc/init.d/iptables stop 2> /dev/null

5
testing/tests/ikev2/rw-eap-tnc-radius/pretest.dat
View File

@ -1,9 +1,12 @@
moon::/etc/init.d/iptables start 2> /dev/null
carol::/etc/init.d/iptables start 2> /dev/null
dave::/etc/init.d/iptables start 2> /dev/null
alice::ln -s /etc/raddb/sites-available/inner-tunnel-second /etc/raddb/sites-enabled/inner-tunnel-second
alice::/etc/init.d/radiusd start
moon::ipsec start
carol::ipsec start
dave::ipsec start
carol::sleep 1
carol::ipsec up home
carol::sleep 1
dave::ipsec up home
dave::sleep 1

6
testing/tests/ikev2/rw-eap-tnc-radius/test.conf
View File

@ -5,11 +5,11 @@
# All UML instances that are required for this test
#
UMLHOSTS="alice carol winnetou moon"
UMLHOSTS="alice moon carol winnetou dave"
# Corresponding block diagram
#
DIAGRAM="a-m-c-w.png"
DIAGRAM="a-m-c-w-dv.png"
# UML instances on which tcpdump is to be started
#
@ -18,7 +18,7 @@ TCPDUMPHOSTS="moon"
# UML instances on which IPsec is started
# Used for IPsec logging purposes
#
IPSECHOSTS="moon carol"
IPSECHOSTS="moon carol dave"
# UML instances on which FreeRadius is started
#