mirror of
https://github.com/strongswan/strongswan.git
synced 2025-10-05 00:00:45 -04:00
35392aa869
While the alias is available after enabling the unit, we don't actually do that in our testing environment (adding a symlink manually would work too, then again, why not just use the proper name?).
20 lines
854 B
Plaintext
20 lines
854 B
Plaintext
moon::iptables-restore < /etc/iptables.rules
|
|
sun::iptables-restore < /etc/iptables.rules
|
|
moon::ip tunnel add vti-moon local PH_IP_MOON remote PH_IP_SUN mode vti key 42
|
|
moon::sysctl -w net.ipv4.conf.vti-moon.disable_policy=1
|
|
moon::ip link set vti-moon up
|
|
moon::ip route add 10.2.0.0/16 dev vti-moon
|
|
moon::iptables -A FORWARD -i vti-moon -j ACCEPT
|
|
moon::iptables -A FORWARD -o vti-moon -j ACCEPT
|
|
sun::ip tunnel add vti-sun local PH_IP_SUN remote PH_IP_MOON mode vti key 1337
|
|
sun::sysctl -w net.ipv4.conf.vti-sun.disable_policy=1
|
|
sun::ip link set vti-sun up
|
|
sun::ip route add 10.1.0.0/16 dev vti-sun
|
|
sun::iptables -A FORWARD -i vti-sun -j ACCEPT
|
|
sun::iptables -A FORWARD -o vti-sun -j ACCEPT
|
|
moon::systemctl start strongswan
|
|
sun::systemctl start strongswan
|
|
moon::expect-connection gw-gw
|
|
sun::expect-connection gw-gw
|
|
moon::swanctl --initiate --child net-net
|