pass eroutes now need explicit routes

diff --git a/testing/tests/ikev1/protoport-pass/posttest.dat b/testing/tests/ikev1/protoport-pass/posttest.dat
index 94a4006..d6f0148 100644 (file)
--- a/testing/tests/ikev1/protoport-pass/posttest.dat
+++ b/testing/tests/ikev1/protoport-pass/posttest.dat
@@ -1,4 +1,5 @@
 moon::ipsec stop
 carol::ipsec stop
 moon::ipsec stop
 carol::ipsec stop

+carol::ip route del 10.1.0.0/16 via PH_IP_MOON

 moon::/etc/init.d/iptables stop 2> /dev/null
 carol::/etc/init.d/iptables stop 2> /dev/null
 moon::/etc/init.d/iptables stop 2> /dev/null
 carol::/etc/init.d/iptables stop 2> /dev/null

diff --git a/testing/tests/ikev1/protoport-pass/pretest.dat b/testing/tests/ikev1/protoport-pass/pretest.dat
index 13b4ad4..37f5450 100644 (file)
--- a/testing/tests/ikev1/protoport-pass/pretest.dat
+++ b/testing/tests/ikev1/protoport-pass/pretest.dat
@@ -4,6 +4,7 @@ moon::iptables -I FORWARD -o eth0 -p tcp -s 10.1.0.0/16 --sport ssh -jACCEPT
 carol::/etc/init.d/iptables start 2> /dev/null
 carol::iptables -I INPUT  -i eth0 -p tcp -s 10.1.0.0/16 --sport ssh -d PH_IP_CAROL -jACCEPT
 carol::iptables -I OUTPUT -o eth0 -p tcp -d 10.1.0.0/16 --dport ssh -s PH_IP_CAROL -jACCEPT
 carol::/etc/init.d/iptables start 2> /dev/null
 carol::iptables -I INPUT  -i eth0 -p tcp -s 10.1.0.0/16 --sport ssh -d PH_IP_CAROL -jACCEPT
 carol::iptables -I OUTPUT -o eth0 -p tcp -d 10.1.0.0/16 --dport ssh -s PH_IP_CAROL -jACCEPT

+carol::ip route add 10.1.0.0/16 via PH_IP_MOON

 moon::ipsec start
 carol::ipsec start
 carol::sleep 2
 moon::ipsec start
 carol::ipsec start
 carol::sleep 2