diff options
| author | Yves-Alexis Perez <corsac@debian.org> | 2014-07-11 07:23:31 +0200 |
|---|---|---|
| committer | Yves-Alexis Perez <corsac@debian.org> | 2014-07-11 07:23:31 +0200 |
| commit | 81c63b0eed39432878f78727f60a1e7499645199 (patch) | |
| tree | 82387d8fecd1c20788fd8bd784a9b0bde091fb6b /testing/tests/sql/shunt-policies/description.txt | |
| parent | c5ebfc7b9c16551fe825dc1d79c3f7e2f096f6c9 (diff) | |
| download | vyos-strongswan-81c63b0eed39432878f78727f60a1e7499645199.tar.gz vyos-strongswan-81c63b0eed39432878f78727f60a1e7499645199.zip | |
Imported Upstream version 5.2.0
Diffstat (limited to 'testing/tests/sql/shunt-policies/description.txt')
| -rw-r--r-- | testing/tests/sql/shunt-policies/description.txt | 11 |
1 files changed, 0 insertions, 11 deletions
diff --git a/testing/tests/sql/shunt-policies/description.txt b/testing/tests/sql/shunt-policies/description.txt deleted file mode 100644 index 269e7957c..000000000 --- a/testing/tests/sql/shunt-policies/description.txt +++ /dev/null @@ -1,11 +0,0 @@ -All traffic from the clients <b>alice</b> and <b>venus</b> is tunneled -by default gateway <b>moon</b> to VPN gateway <b>sun</b>. In order to -prevent local traffic within the <b>10.1.0.0/16</b> subnet to enter the -tunnel, a <b>local-net</b> shunt policy with <b>type=pass</b> is set up. -In order for the shunt to work, automatic route insertion must be disabled -by adding <b>install_routes = no</b> to the charon section of <b>strongswan.conf</b>. -<p/> -In order to demonstrate the use of <b>type=drop</b> shunt policies, the -<b>venus-icmp</b> connection prevents ICMP traffic to and from <b>venus</b> -to use the IPsec tunnel by dropping such packets. Thanks to the <b>local-net</b> -pass shunt, <b>venus</b> and <b>moon</b> can still ping each other, though. |