strongSwan KVM Tests / ikev2 / rw-psk-no-idr
Test ikev2/rw-psk-no-idrDescriptionThe roadwarriors carol and dave set up a connection each to gateway moon. The authentication is based on distinct pre-shared keys and fully qualified domain names. By setting the wildcard remote.id=@*.strongswan.org on carol and dave, no IDr payloads are sent by the roadwarriors.Upon the successful establishment of the IPsec tunnels, the updown-script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test both tunnel and firewall, both carol and dave ping the client alice behind the gateway moon. ![]() mooncaroldavetcpdump |