From 7812b6e6cfac212236b24ded8d85fb4b483832a3 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Thu, 19 Oct 2017 21:03:53 +0200 Subject: testing: Converted ipv6/net2net-ikev2 to swanctl --- .../hosts/sun/etc/swanctl/swanctl.conf | 36 ++++++++++++++++++++++ 1 file changed, 36 insertions(+) create mode 100644 testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/swanctl/swanctl.conf (limited to 'testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/swanctl/swanctl.conf') diff --git a/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/swanctl/swanctl.conf b/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/swanctl/swanctl.conf new file mode 100644 index 000000000..73480f112 --- /dev/null +++ b/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/swanctl/swanctl.conf @@ -0,0 +1,36 @@ +connections { + + net-net { + local_addrs = fec0::2 + remote_addrs = fec0::1 + + local { + auth = pubkey + certs = sunCert.pem + id = sun.strongswan.org + } + remote { + auth = pubkey + id = moon.strongswan.org + } + children { + net-net { + local_ts = fec2::0/16 + remote_ts = fec1::0/16 + + updown = /usr/local/libexec/ipsec/_updown iptables + esp_proposals = aes128-sha256-x25519 + } + } + version = 2 + mobike = no + proposals = aes128-sha256-x25519 + } +} + +authorities { + strongswan { + cacert = strongswanCert.pem + crl_uris = http://ip6-winnetou.strongswan.org/strongswan.crl + } +} -- cgit v1.2.3