testing: Add a test scenario for make-before-break reauth using a virtual IP

This commit is contained in:
Martin Willi committed 2015-02-20 13:34:58 +01:00
1 parent ae3fdf2603
commit b1ff437bbc
9 files changed
+100

No files matched your search

@@ -0,0 +1,8 @@
This scenario tests <b>make-before-break reauthentication</b> using overlapping
IKE_SAs by setting the <i>make_before_break</i> strongswan.conf option for
clients using an assigned virtual IP. The initiator <b>carol</b> reauthenticates
the IKE_SA with host <b>moon</b> using <b>ikelifetime=10s</b>, but does not
close the old IKE_SA before the replacement CHILD_SA using the same virtual IP
is in place. A constant ping from <b>carol</b> to client <b>alice</b>
hiding in the subnet behind <b>moon</b> tests if the CHILD_SA works during the
whole procedure.