strongSwan KVM Tests / ikev2 / rw-psk-rsa-mixed

Test ikev2/rw-psk-rsa-mixed

Description

The roadwarriors carol and dave each set up a connection to gateway moon. carol's authentication is based on a Pre-Shared Key (PSK) whereas dave's is based on an Public key signature (Pubkey). Gateway moon supports both authentication modes and selects the correct roadwarrior connection definition based on the gateway ID requested by the roadwarrior.

Upon the successful establishment of the IPsec tunnels, the updown-script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test both tunnel and firewall, both carol and dave ping the client alice behind the gateway moon.

alice moon carol winnetou dave

moon

 

carol

 

dave

 

tcpdump