Tobias Brunner
35392aa869
While the alias is available after enabling the unit, we don't actually do that in our testing environment (adding a symlink manually would work too, then again, why not just use the proper name?).
31 lines
1.5 KiB
Plaintext
Executable File
31 lines
1.5 KiB
Plaintext
Executable File
moon::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql > /etc/db.d/ipsec.sql
|
|
moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
|
|
moon::ipsec pool --add extpool --start 10.3.0.1 --end 10.3.1.244 --timeout 48 2> /dev/null
|
|
moon::ipsec pool --add intpool --start 10.4.0.1 --end 10.4.1.244 --timeout 0 2> /dev/null
|
|
moon::ipsec pool --addattr dns --server PH_IP_VENUS --pool intpool --identity venus.strongswan.org 2> /dev/null
|
|
moon::ipsec pool --addattr dns --server PH_IP_ALICE --pool intpool --identity alice@strongswan.org 2> /dev/null
|
|
moon::ipsec pool --addattr dns --server PH_IP_WINNETOU --pool extpool 2> /dev/null
|
|
moon::ipsec pool --statusattr 2> /dev/null
|
|
moon::ip route add 10.3.0.0/16 via PH_IP_MOON
|
|
moon::ip route add 10.4.0.0/16 via PH_IP_MOON1
|
|
moon::iptables-restore < /etc/iptables.rules
|
|
carol::iptables-restore < /etc/iptables.rules
|
|
dave::iptables-restore < /etc/iptables.rules
|
|
alice::iptables-restore < /etc/iptables.rules
|
|
venus::iptables-restore < /etc/iptables.rules
|
|
moon::systemctl start strongswan
|
|
carol::systemctl start strongswan
|
|
dave::systemctl start strongswan
|
|
alice::systemctl start strongswan
|
|
venus::systemctl start strongswan
|
|
moon::expect-connection int
|
|
moon::expect-connection ext
|
|
carol::expect-connection home
|
|
carol::swanctl --initiate --child home 2> /dev/null
|
|
dave::expect-connection home
|
|
dave::swanctl --initiate --child home 2> /dev/null
|
|
alice::expect-connection home
|
|
alice::swanctl --initiate --child home 2> /dev/null
|
|
venus::expect-connection home
|
|
venus::swanctl --initiate --child home 2> /dev/null
|