For documentation purposes the new folders ikev1-algs, ikev2-algs, ikev1-multi-ca and ikev2-multi-ca have been created. Most of the test cases have now been converted to the vici interface. The remaining legacy stroke scenarios yet to be converted have been put into the ikev2-stroke-bye folder. For documentation purposes some legacy stroke scenarios will be kept in the ikev1-stroke, ikev2-stroke and ipv6-stroke folders.
31 lines
1.5 KiB
Plaintext
Executable File
31 lines
1.5 KiB
Plaintext
Executable File
moon::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql > /etc/db.d/ipsec.sql
|
|
moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
|
|
moon::ipsec pool --add extpool --start 10.3.0.1 --end 10.3.1.244 --timeout 48 2> /dev/null
|
|
moon::ipsec pool --add intpool --start 10.4.0.1 --end 10.4.1.244 --timeout 0 2> /dev/null
|
|
moon::ipsec pool --addattr dns --server PH_IP_VENUS --pool intpool --identity venus.strongswan.org 2> /dev/null
|
|
moon::ipsec pool --addattr dns --server PH_IP_ALICE --pool intpool --identity alice@strongswan.org 2> /dev/null
|
|
moon::ipsec pool --addattr dns --server PH_IP_WINNETOU --pool extpool 2> /dev/null
|
|
moon::ipsec pool --statusattr 2> /dev/null
|
|
moon::ip route add 10.3.0.0/16 via PH_IP_MOON
|
|
moon::ip route add 10.4.0.0/16 via PH_IP_MOON1
|
|
moon::iptables-restore < /etc/iptables.rules
|
|
carol::iptables-restore < /etc/iptables.rules
|
|
dave::iptables-restore < /etc/iptables.rules
|
|
alice::iptables-restore < /etc/iptables.rules
|
|
venus::iptables-restore < /etc/iptables.rules
|
|
moon::systemctl start strongswan
|
|
carol::systemctl start strongswan
|
|
dave::systemctl start strongswan
|
|
alice::systemctl start strongswan
|
|
venus::systemctl start strongswan
|
|
moon::expect-connection int
|
|
moon::expect-connection ext
|
|
carol::expect-connection home
|
|
carol::swanctl --initiate --child home 2> /dev/null
|
|
dave::expect-connection home
|
|
dave::swanctl --initiate --child home 2> /dev/null
|
|
alice::expect-connection home
|
|
alice::swanctl --initiate --child home 2> /dev/null
|
|
venus::expect-connection home
|
|
venus::swanctl --initiate --child home 2> /dev/null
|