strongSwan KVM Tests / ikev2 / rw-initiator-only

Test ikev2/rw-initiator-only

Description

The roadwarrior dave tries to set up a connection to roadwarrior carol but because carol has set the strongswan.conf option initiator_only = yes she ignores the repeated IKE requests sent by dave.

After the failed connection attempt by dave, roadwarrior carol sets up a connection to gateway moon. The authentication is based on X.509 certificates.

The updown script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test the tunnel, carol pings the client alice behind the gateway moon.

alice moon carol winnetou dave

moon

 

carol

 

dave

 

tcpdump