check ip xfrm state in IKEv1 and IKEv2 transport mode scenarios
authorAndreas Steffen <andreas.steffen@strongswan.org>
Wed, 19 Dec 2007 00:47:21 +0000 (00:47 -0000)
committerAndreas Steffen <andreas.steffen@strongswan.org>
Wed, 19 Dec 2007 00:47:21 +0000 (00:47 -0000)
testing/tests/ikev1/host2host-transport/evaltest.dat
testing/tests/ikev2/host2host-transport/evaltest.dat
testing/tests/ikev2/host2host-transport/hosts/moon/etc/ipsec.conf
testing/tests/ikev2/host2host-transport/hosts/sun/etc/ipsec.conf

index d19f970..04c0eb3 100644 (file)
@@ -1,5 +1,7 @@
 moon::ipsec status::host-host.*STATE_QUICK_I2.*IPsec SA established::YES
 sun::ipsec status::host-host.*STATE_QUICK_R2.*IPsec SA established::YES
+moon::ip xfrm state::mode transport::YES
+sun::ip xfrm state::mode transport::YES
 moon::ping -c 1 PH_IP_SUN::64 bytes from PH_IP_SUN: icmp_seq=1::YES
 sun::tcpdump::IP moon.strongswan.org > sun.strongswan.org: ESP::YES
 sun::tcpdump::IP sun.strongswan.org > moon.strongswan.org: ESP::YES
index a46e4e4..2dd58c9 100644 (file)
@@ -1,5 +1,8 @@
+moon::cat /var/log/daemon.log::received USE_TRANSPORT_MODE notify::YES
 moon::ipsec status::host-host.*INSTALLED.*TRANSPORT::YES
 sun::ipsec status::host-host.*INSTALLED.*TRANSPORT::YES
+moon::ip xfrm state::mode transport::YES
+sun::ip xfrm state::mode transport::YES
 moon::ping -c 1 PH_IP_SUN::64 bytes from PH_IP_SUN: icmp_seq=1::YES
 sun::tcpdump::IP moon.strongswan.org > sun.strongswan.org: ESP::YES
 sun::tcpdump::IP sun.strongswan.org > moon.strongswan.org: ESP::YES
index b80aa80..7f6c5a5 100755 (executable)
@@ -10,6 +10,7 @@ conn %default
        keylife=20m
        rekeymargin=3m
        keyingtries=1
+       mobike=no
        keyexchange=ikev2
 
 conn host-host
index dd18110..af52fb2 100755 (executable)
@@ -10,6 +10,7 @@ conn %default
        keylife=20m
        rekeymargin=3m
        keyingtries=1
+       mobike=no
        keyexchange=ikev2
 
 conn host-host