diff options
| author | Martin Willi <martin@revosec.ch> | 2014-11-18 11:33:28 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2015-02-20 16:34:54 +0100 |
| commit | 9ed09d5f771727a05df20df9a1cd0f48af9cef40 (patch) | |
| tree | 20d58ce15ade365a64b12631b949404aade9935b /testing/tests/ikev2/host2host-transport-connmark/evaltest.dat | |
| parent | 15f392d9edbad4c062a5de64850d91080842cf08 (diff) | |
| download | strongswan-9ed09d5f771727a05df20df9a1cd0f48af9cef40.tar.bz2 strongswan-9ed09d5f771727a05df20df9a1cd0f48af9cef40.tar.xz | |
testing: Add a connmark plugin test
In this test two hosts establish a transport mode connection from behind
moon. sun uses the connmark plugin to distinguish the flows.
This is an example that shows how one can terminate L2TP/IPsec connections
from two hosts behind the same NAT. For simplification of the test, we use
an SSH connection instead, but this works for any connection initiated flow
that conntrack can track.
Diffstat (limited to 'testing/tests/ikev2/host2host-transport-connmark/evaltest.dat')
| -rw-r--r-- | testing/tests/ikev2/host2host-transport-connmark/evaltest.dat | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/testing/tests/ikev2/host2host-transport-connmark/evaltest.dat b/testing/tests/ikev2/host2host-transport-connmark/evaltest.dat new file mode 100644 index 000000000..04a35c10c --- /dev/null +++ b/testing/tests/ikev2/host2host-transport-connmark/evaltest.dat @@ -0,0 +1,7 @@ +sun:: ipsec status 2> /dev/null::nat-t.*ESTABLISHED.*sun.strongswan.org.*venus.strongswan.org::YES +sun:: ipsec status 2> /dev/null::nat-t.*ESTABLISHED.*sun.strongswan.org.*alice@strongswan.org::YES +alice::ipsec status 2> /dev/null::nat-t.*INSTALLED, TRANSPORT, reqid 1::YES +venus::ipsec status 2> /dev/null::nat-t.*INSTALLED, TRANSPORT, reqid 1::YES +alice::ssh 192.168.0.2 'echo alice-echo && exit'::alice-echo::YES +venus::ssh 192.168.0.2 'echo venus-echo && exit'::venus-echo::YES +sun::iptables -t mangle -L -n -v |