Tobias Brunner
6d8890767c
This also restores the test as it was before the referenced commit so it
again, as written in the description, demonstrates that venus is unable
to ping sun without IPsec tunnel.
Fixes: f27fb58ae0 ("testing: Update description and test evaluation of host2host-transport-nat")
13 lines
570 B
Plaintext
13 lines
570 B
Plaintext
alice::iptables-restore < /etc/iptables.rules
|
|
moon::iptables-restore < /etc/iptables.rules
|
|
sun::iptables-restore < /etc/iptables.rules
|
|
moon::iptables -t nat -A POSTROUTING -o eth0 -s 10.1.0.0/16 -j MASQUERADE
|
|
moon::iptables -A FORWARD -i eth1 -o eth0 -s 10.1.0.0/16 -j ACCEPT
|
|
moon::iptables -A FORWARD -i eth0 -o eth1 -d 10.1.0.0/16 -j ACCEPT
|
|
sun::systemctl start strongswan
|
|
alice::systemctl start strongswan
|
|
venus::systemctl start strongswan
|
|
sun::expect-connection host-host
|
|
alice::expect-connection host-host
|
|
alice::swanctl --initiate --child host-host 2> /dev/null
|