Tobias Brunner
35392aa869
While the alias is available after enabling the unit, we don't actually do that in our testing environment (adding a symlink manually would work too, then again, why not just use the proper name?).
18 lines
675 B
Plaintext
18 lines
675 B
Plaintext
moon::iptables-restore < /etc/iptables.drop
|
|
carol::iptables-restore < /etc/iptables.drop
|
|
dave::iptables-restore < /etc/iptables.drop
|
|
moon::ip6tables-restore < /etc/ip6tables.rules
|
|
carol::ip6tables-restore < /etc/ip6tables.rules
|
|
dave::ip6tables-restore < /etc/ip6tables.rules
|
|
alice::"ip route add fec0:\:/16 via fec1:\:1"
|
|
carol::"ip route add fec1:\:/16 via fec0:\:1"
|
|
dave::"ip route add fec1:\:/16 via fec0:\:1"
|
|
moon::systemctl start strongswan
|
|
carol::systemctl start strongswan
|
|
dave::systemctl start strongswan
|
|
moon::expect-connection rw
|
|
carol::expect-connection home
|
|
dave::expect-connection home
|
|
carol::swanctl --initiate --child home
|
|
dave::swanctl --initiate --child home
|