diff options
author | Andreas Steffen <andreas.steffen@strongswan.org> | 2012-06-22 09:53:25 +0200 |
---|---|---|
committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2012-06-22 09:53:37 +0200 |
commit | fc1629639128f2955d47e7ec4567957e2102695e (patch) | |
tree | e0753f754ce06a0699b8f3816f23d98dbd5c0a03 /testing/tests/ikev2/dynamic-two-peers | |
parent | aa8898bc455cae6920694c841e7e1dacab862bcf (diff) | |
download | strongswan-fc1629639128f2955d47e7ec4567957e2102695e.tar.bz2 strongswan-fc1629639128f2955d47e7ec4567957e2102695e.tar.xz |
adapted description to IKEv2
Diffstat (limited to 'testing/tests/ikev2/dynamic-two-peers')
-rw-r--r-- | testing/tests/ikev2/dynamic-two-peers/description.txt | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/testing/tests/ikev2/dynamic-two-peers/description.txt b/testing/tests/ikev2/dynamic-two-peers/description.txt index 56a1c0754..a1616011e 100644 --- a/testing/tests/ikev2/dynamic-two-peers/description.txt +++ b/testing/tests/ikev2/dynamic-two-peers/description.txt @@ -3,10 +3,9 @@ so that the remote end is defined symbolically by <b>right=%<hostname></b> The ipsec starter resolves the fully-qualified hostname into the current IP address via a DNS lookup (simulated by an /etc/hosts entry). Since the peer IP addresses are expected to change over time, the prefix '%' is used as an implicit alternative to the -explicit <b>rightallowany=yes</b> option which will allow an IKE -main mode rekeying to arrive from an arbitrary IP address under the condition that -the peer identity remains unchanged. When this happens the old tunnel is replaced -by an IPsec connection to the new origin. +explicit <b>rightallowany=yes</b> option which will allow an IKE_SA rekeying to arrive +from an arbitrary IP address under the condition that the peer identity remains unchanged. +When this happens the old tunnel is replaced by an IPsec connection to the new origin. <p> In this scenario both <b>carol</b> and <b>dave</b> initiate a tunnel to <b>moon</b> which has a named connection definition for each peer. Although |