aboutsummaryrefslogtreecommitdiffstats
path: root/testing/tests/ikev2/dynamic-two-peers
diff options
context:
space:
mode:
authorAndreas Steffen <andreas.steffen@strongswan.org>2012-06-22 09:53:25 +0200
committerAndreas Steffen <andreas.steffen@strongswan.org>2012-06-22 09:53:37 +0200
commitfc1629639128f2955d47e7ec4567957e2102695e (patch)
treee0753f754ce06a0699b8f3816f23d98dbd5c0a03 /testing/tests/ikev2/dynamic-two-peers
parentaa8898bc455cae6920694c841e7e1dacab862bcf (diff)
downloadstrongswan-fc1629639128f2955d47e7ec4567957e2102695e.tar.bz2
strongswan-fc1629639128f2955d47e7ec4567957e2102695e.tar.xz
adapted description to IKEv2
Diffstat (limited to 'testing/tests/ikev2/dynamic-two-peers')
-rw-r--r--testing/tests/ikev2/dynamic-two-peers/description.txt7
1 files changed, 3 insertions, 4 deletions
diff --git a/testing/tests/ikev2/dynamic-two-peers/description.txt b/testing/tests/ikev2/dynamic-two-peers/description.txt
index 56a1c0754..a1616011e 100644
--- a/testing/tests/ikev2/dynamic-two-peers/description.txt
+++ b/testing/tests/ikev2/dynamic-two-peers/description.txt
@@ -3,10 +3,9 @@ so that the remote end is defined symbolically by <b>right=%&lt;hostname&gt;</b>
The ipsec starter resolves the fully-qualified hostname into the current IP address
via a DNS lookup (simulated by an /etc/hosts entry). Since the peer IP addresses are
expected to change over time, the prefix '%' is used as an implicit alternative to the
-explicit <b>rightallowany=yes</b> option which will allow an IKE
-main mode rekeying to arrive from an arbitrary IP address under the condition that
-the peer identity remains unchanged. When this happens the old tunnel is replaced
-by an IPsec connection to the new origin.
+explicit <b>rightallowany=yes</b> option which will allow an IKE_SA rekeying to arrive
+from an arbitrary IP address under the condition that the peer identity remains unchanged.
+When this happens the old tunnel is replaced by an IPsec connection to the new origin.
<p>
In this scenario both <b>carol</b> and <b>dave</b> initiate a tunnel to
<b>moon</b> which has a named connection definition for each peer. Although