diff options
| author | Yves-Alexis Perez <corsac@debian.org> | 2013-11-01 13:32:07 +0100 |
|---|---|---|
| committer | Yves-Alexis Perez <corsac@debian.org> | 2013-11-01 13:32:07 +0100 |
| commit | 5313d2d78ca150515f7f5eb39801c100690b6b29 (patch) | |
| tree | c78e420367283bb1b16f14210b12687cdfbd26eb /testing/tests/libipsec/host2host-cert/description.txt | |
| parent | 6b99c8d9cff7b3e8ae8f3204b99e7ea40f791349 (diff) | |
| download | vyos-strongswan-5313d2d78ca150515f7f5eb39801c100690b6b29.tar.gz vyos-strongswan-5313d2d78ca150515f7f5eb39801c100690b6b29.zip | |
Imported Upstream version 5.1.1
Diffstat (limited to 'testing/tests/libipsec/host2host-cert/description.txt')
| -rw-r--r-- | testing/tests/libipsec/host2host-cert/description.txt | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/testing/tests/libipsec/host2host-cert/description.txt b/testing/tests/libipsec/host2host-cert/description.txt new file mode 100644 index 000000000..b240515fb --- /dev/null +++ b/testing/tests/libipsec/host2host-cert/description.txt @@ -0,0 +1,10 @@ +A connection between the hosts <b>moon</b> and <b>sun</b> is set up. +The authentication is based on <b>X.509 certificates</b> and the <b>kernel-libipsec</b> +plugin is used for userland IPsec ESP encryption. <b>Firewall marks</b> are used to make +the direct ESP connection possible and still allow IKE traffic to flow freely between +the two hosts. +<p/> +Upon the successful establishment of the IPsec tunnel, an updown script automatically +inserts iptables-based firewall rules that let pass the traffic tunneled via the +<b>ipsec0</b> tun interface. In order to test both host-to-host tunnel and firewall, +<b>moon</b> pings <b>sun</b>. |