Reto Buerki
117375ed00
A connection between the hosts moon and sun is set up. The host moon uses the Trusted Key Manager (TKM) and is the initiator of the transport connection. The authentication is based on X.509 certificates.
13 lines
962 B
Plaintext
13 lines
962 B
Plaintext
moon::ipsec stroke status 2> /dev/null::conn1.*ESTABLISHED.*moon.strongswan.org.*sun.strongswan.org::YES
|
|
sun::ipsec status 2> /dev/null::host-host.*ESTABLISHED.*sun.strongswan.org.*moon.strongswan.org::YES
|
|
moon::ipsec stroke status 2> /dev/null::conn1.*INSTALLED, TRANSPORT::YES
|
|
sun::ipsec status 2> /dev/null::host-host.*INSTALLED, TRANSPORT::YES
|
|
moon::ping -c 1 PH_IP_SUN::64 bytes from PH_IP_SUN: icmp_req=1::YES
|
|
sun::tcpdump::IP moon.strongswan.org > sun.strongswan.org: ESP::YES
|
|
sun::tcpdump::IP sun.strongswan.org > moon.strongswan.org: ESP::YES
|
|
moon::cat /tmp/tkm.log::RSA private key '/etc/tkm/moonKey.der' loaded::YES
|
|
moon::cat /tmp/tkm.log::Adding policy \[ 1, 192.168.0.1 <-> 192.168.0.2 \]::YES
|
|
moon::cat /tmp/tkm.log::Checked CA certificate of CC context 1::YES
|
|
moon::cat /tmp/tkm.log::Authentication of ISA context 1 successful::YES
|
|
moon::cat /tmp/tkm.log::Adding SA \[ 1, 192.168.0.1 <-> 192.168.0.2, SPI_in.*, SPI_out.*, soft 30, hard 60 \]::YES
|