summaryrefslogtreecommitdiff
path: root/testing/tests/esp-ah-transport/description.txt
blob: c7918fa38221ad0ca063e561f85e9542b69d664f (plain)
1
2
3
4
5
In IKE phase 2 the roadwarrior <b>carol</b> proposes to gateway <b>moon</b>
the ESP AES 128 bit encryption algorithm combined with AH SHA-1 authentication.
In order to accept the AH and ESP encapsulated plaintext packets, the iptables firewall
marks all incoming AH packets with the ESP mark. The transport mode connection is
tested by <b>carol</b> sending a ping to gateway <b>moon</b>.