Files
strongswan-ext/testing/tests/ikev2/mobike-nat-mappings/description.txt
T
Tobias Brunner 2b5c743952 testing: Migrate MOBIKE tests to vici
Note that the mobike-nat test has been removed as it basically did the same
as the mobike-virtual-ip-nat test.  Instead, the mobike-nat-mapping scenario
is added, which simulates a NAT router restart.
2021-06-21 12:03:36 +02:00

7 lines
477 B
Plaintext

The roadwarrior <b>alice</b> is sitting behind the NAT router <b>moon</b>.
<b>alice</b> builds up a tunnel to gateway <b>sun</b> in order to reach <b>bob</b>
in the subnet behind. When the NAT router <b>moon</b> is restarted, the NAT
mappings change. <b>alice</b> notices this when sending a DPD and signals the
change via a MOBIKE ADDRESS_UPDATE notification to peer <b>sun</b>. <b>alice</b> sets
a virtual IP of 10.3.0.3, so that the IPsec policies don't have to be changed.