strongSwan KVM Tests / ikev2 / host2host-ah

Test ikev2/host2host-ah

Description

An IPsec AH transport-mode connection using AES-XCBC between the hosts moon and sun is set up.The authentication is based on X.509 certificates.

Upon the successful establishment of the IPsec tunnel, the updown script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test both tunnel and firewall, client alice behind gateway moon pings client bob located behind gateway sun.

moon winnetou sun

moon

 

sun

 

tcpdump