strongSwan KVM Tests / ikev2 / rw-whitelist
Test ikev2/rw-whitelist
Description
The roadwarriors carol and dave set up a connection each to gateway moon. moon uses whitelisting to grant access to carol with ID carol@strongswan.org whereas since ID dave@strongswan.org is not listed, dave gets rejected. Upon the successful establishment of the IPsec tunnels, the updown script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test both tunnel and firewall, carol can successfully ping the client alice behind the gateway moon whereas dave fails.