28 lines
1.1 KiB
Plaintext
28 lines
1.1 KiB
Plaintext
alice::sed -i s/Restart=on-abnormal/Restart=no/ /lib/systemd/system/strongswan.service
|
|
alice::systemctl daemon-reload
|
|
moon::sed -i s/Restart=on-abnormal/Restart=no/ /lib/systemd/system/strongswan.service
|
|
moon::systemctl daemon-reload
|
|
moon::ip addr add 192.168.0.5/24 dev eth0
|
|
moon::ip addr add 10.1.0.5/16 dev eth1
|
|
alice::ifup eth1
|
|
alice::ip addr add 192.168.0.5/24 dev eth1
|
|
alice::ip addr add 10.1.0.5/16 dev eth0
|
|
venus::ip route del default via 10.1.0.1 dev eth0
|
|
venus::ip route add default via 10.1.0.5 dev eth0
|
|
moon::iptables-restore < /etc/iptables.rules
|
|
alice::iptables-restore < /etc/iptables.rules
|
|
carol::iptables-restore < /etc/iptables.rules
|
|
dave::iptables-restore < /etc/iptables.rules
|
|
moon::cd /etc/swanctl; rm rsa/moonKey.pem x509/moonCert.pem
|
|
alice::cd /etc/swanctl; rm rsa/aliceKey.pem x509/aliceCert.pem
|
|
moon::systemctl start strongswan
|
|
alice::systemctl start strongswan
|
|
moon::sleep 2
|
|
alice::echo "+1" > /var/run/charon.ha
|
|
carol::systemctl start strongswan
|
|
dave::systemctl start strongswan
|
|
carol::expect-connection home
|
|
dave::expect-connection home
|
|
carol::swanctl --initiate --child home
|
|
dave::swanctl --initiate --child home
|