diff options
author | Rene Mayrhofer <rene@mayrhofer.eu.org> | 2006-11-06 19:05:06 +0000 |
---|---|---|
committer | Rene Mayrhofer <rene@mayrhofer.eu.org> | 2006-11-06 19:05:06 +0000 |
commit | 4f4d9f7a0e48ee9caa58a9e6ec62485a917a3924 (patch) | |
tree | cf694ee1ec25dda600bb3b238d159261aaadccde /testing/tests/mode-config-push/description.txt | |
parent | 77383bab0a15747e1f55fedf8db732840fcc953f (diff) | |
download | vyos-strongswan-4f4d9f7a0e48ee9caa58a9e6ec62485a917a3924.tar.gz vyos-strongswan-4f4d9f7a0e48ee9caa58a9e6ec62485a917a3924.zip |
- New upstream release.
Diffstat (limited to 'testing/tests/mode-config-push/description.txt')
-rw-r--r-- | testing/tests/mode-config-push/description.txt | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/testing/tests/mode-config-push/description.txt b/testing/tests/mode-config-push/description.txt new file mode 100644 index 000000000..387c3b409 --- /dev/null +++ b/testing/tests/mode-config-push/description.txt @@ -0,0 +1,10 @@ +The roadwarriors <b>carol</b> and <b>dave</b> set up a connection each to gateway <b>moon</b>. +Both <b>carol</b> and <b>dave</b> request a <b>virtual IP</b> via the IKE Mode Config protocol +by using the <b>leftsourceip=%modeconfig</b> parameter. By setting the option <b>modeconfig=push</b> +on both the roadwarriors and the gateway, the Mode Config server <b>moon</b> will actively push +the configuration down to <b>carol</b> and <b>dave</b>. +<p> +<b>leftfirewall=yes</b> automatically inserts iptables-based firewall rules that let pass the +tunneled traffic. In order to test the tunnels, <b>carol</b> and <b>dave</b> then ping the client +<b>alice</b> behind the gateway <b>moon</b>. The source IP addresses of the two pings will +be the virtual IPs <b>carol1</b> and <b>dave1</b>, respectively. |