switched mobike-nat and mobike-virtual-ip scenarios to a virtual IP of 10.3.0.3
authorAndreas Steffen <andreas.steffen@strongswan.org>
Tue, 2 Oct 2007 19:23:12 +0000 (19:23 -0000)
committerAndreas Steffen <andreas.steffen@strongswan.org>
Tue, 2 Oct 2007 19:23:12 +0000 (19:23 -0000)
testing/tests/ikev2/mobike-nat/description.txt
testing/tests/ikev2/mobike-nat/evaltest.dat
testing/tests/ikev2/mobike-nat/hosts/alice/etc/ipsec.conf
testing/tests/ikev2/mobike-virtual-ip/description.txt
testing/tests/ikev2/mobike-virtual-ip/evaltest.dat
testing/tests/ikev2/mobike-virtual-ip/hosts/alice/etc/ipsec.conf

index dd8a3a1..ba8fc5b 100644 (file)
@@ -4,4 +4,4 @@ via an additional <b>eth1</b> interface. <b>alice</b> builds up a tunnel to gate
 in order to reach <b>bob</b> in the subnet behind. When the <b>eth1</b> interface
 goes away, <b>alice</b> switches to <b>eth0</b> and signals the IP address change 
 via a MOBIKE ADDRESS_UPDATE notification to peer <b>sun</b>. <b>alice</b> sets
-a virtual IP of PH_IP_ALICE, so that the IPsec policies don't have to be changed.
+a virtual IP of 10.3.0.3, so that the IPsec policies don't have to be changed.
index f6259cf..541b218 100644 (file)
@@ -1,16 +1,16 @@
 alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE1.*PH_IP_SUN::YES
 sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_ALICE1::YES
-alice::ipsec statusall::PH_IP_ALICE/32 === 10.2.0.0/16::YES
-sun::ipsec statusall::10.2.0.0/16 === PH_IP_ALICE/32::YES
+alice::ipsec statusall::10.3.0.3/32 === 10.2.0.0/16::YES
+sun::ipsec statusall::10.2.0.0/16 === 10.3.0.3/32::YES
 alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
 alice::/etc/init.d/net.eth1 stop::No output expected::NO
 alice::sleep 1::No output expected::NO
 alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE.*PH_IP_SUN::YES
 sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_MOON::YES
-alice::ipsec statusall::PH_IP_ALICE/32 === 10.2.0.0/16::YES
-sun::ipsec statusall::10.2.0.0/16 === PH_IP_ALICE/32::YES
+alice::ipsec statusall::10.3.0.3/32 === 10.2.0.0/16::YES
+sun::ipsec statusall::10.2.0.0/16 === 10.3.0.3/32::YES
 alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
 moon::tcpdump::moon.strongswan.org.*sun.strongswan.org.*: UDP-encap: ESP::YES
 moon::tcpdump::sun.strongswan.org.*moon.strongswan.org.*: UDP-encap: ESP::YES
-bob::tcpdump::alice.strongswan.org.*bob.strongswan.org.*ICMP echo request::YES
-bob::tcpdump::bob.strongswan.org.*alice.strongswan.org.*ICMP echo reply::YES
+bob::tcpdump::10.3.0.3.*bob.strongswan.org.*ICMP echo request::YES
+bob::tcpdump::bob.strongswan.org.*10.3.0.3.*ICMP echo reply::YES
index e05356b..e9abfda 100755 (executable)
@@ -14,7 +14,7 @@ conn %default
 
 conn mobike
        left=PH_IP_ALICE1
-       leftsourceip=PH_IP_ALICE
+       leftsourceip=10.3.0.3
        leftcert=aliceCert.pem
        leftid=alice@strongswan.org
        leftfirewall=yes
index 997c7f3..df56127 100644 (file)
@@ -4,4 +4,4 @@ via an additional <b>eth1</b> interface. <b>alice</b> builds up a tunnel to gate
 in order to reach <b>bob</b> in the subnet behind. When the <b>eth1</b> interface
 goes away, <b>alice</b> switches to <b>eth0</b> and signals the IP address change 
 via a MOBIKE ADDRESS_UPDATE notification to peer <b>sun</b>. <b>alice</b> sets
-a virtual IP of PH_IP_ALICE, so that the IPsec policies don't have to be changed.
+a virtual IP of 10.3.0.3, so that the IPsec policies don't have to be changed.
index 482cef8..5be507d 100644 (file)
@@ -1,16 +1,16 @@
 alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE1.*PH_IP_SUN::YES
 sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_ALICE1::YES
-alice::ipsec statusall::PH_IP_ALICE/32 === 10.2.0.0/16::YES
-sun::ipsec statusall::10.2.0.0/16 === PH_IP_ALICE/32::YES
+alice::ipsec statusall::10.3.0.3/32 === 10.2.0.0/16::YES
+sun::ipsec statusall::10.2.0.0/16 === 10.3.0.3/32::YES
 alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
 alice::/etc/init.d/net.eth1 stop::No output expected::NO
 alice::sleep 1::No output expected::NO
 alice::ipsec statusall::ESTABLISHED.*PH_IP_ALICE.*PH_IP_SUN::YES
 sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_ALICE::YES
-alice::ipsec statusall::PH_IP_ALICE/32 === 10.2.0.0/16::YES
-sun::ipsec statusall::10.2.0.0/16 === PH_IP_ALICE/32::YES
+alice::ipsec statusall::10.3.0.3/32 === 10.2.0.0/16::YES
+sun::ipsec statusall::10.2.0.0/16 === 10.3.0.3/32::YES
 alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
 moon::tcpdump::alice.strongswan.org.*sun.strongswan.org.*: ESP::YES
 moon::tcpdump::sun.strongswan.org.*alice.strongswan.org.*: ESP::YES
-bob::tcpdump::alice.strongswan.org.*bob.strongswan.org.*ICMP echo request::YES
-bob::tcpdump::bob.strongswan.org.*alice.strongswan.org.*ICMP echo reply::YES
+bob::tcpdump::10.3.0.3.*bob.strongswan.org.*ICMP echo request::YES
+bob::tcpdump::bob.strongswan.org.*10.3.0.3.*ICMP echo reply::YES
index e05356b..e9abfda 100755 (executable)
@@ -14,7 +14,7 @@ conn %default
 
 conn mobike
        left=PH_IP_ALICE1
-       leftsourceip=PH_IP_ALICE
+       leftsourceip=10.3.0.3
        leftcert=aliceCert.pem
        leftid=alice@strongswan.org
        leftfirewall=yes