strongSwan KVM Tests / ikev2 / rw-psk-no-idr

Test ikev2/rw-psk-no-idr

Description

The roadwarriors carol and dave set up a connection each to gateway moon. The authentication is based on distinct pre-shared keys and fully qualified domain names. By setting the wildcard remote.id=@*.strongswan.org on carol and dave, no IDr payloads are sent by the roadwarriors.

Upon the successful establishment of the IPsec tunnels, the updown-script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test both tunnel and firewall, both carol and dave ping the client alice behind the gateway moon.

alice moon carol winnetou dave

moon

 

carol

 

dave

 

tcpdump