strongSwan KVM Tests / ipv6 / rw-rfc3779-ikev2
Test ipv6/rw-rfc3779-ikev2
Description
The roadwarriors carol and dave set up an IPv6 connection each to gateway moon. The authentication is based on X.509 certificates containing RFC 3779 IP address block constraints. All three hosts set rightsubnet=::/0 thus allowing the peers to narrow down the address range to their actual subnets or IP addresses. These unilaterally proposed traffic selectors must be validated by corresponding IP address block constraints. Upon the successful establishment of the IPv6 ESP tunnels, leftfirewall=yes automatically inserts ip6tables-based firewall rules that let pass the tunneled traffic. In order to test both tunnel and firewall, both carol and dave send an IPv6 ICMP request to the client alice behind the gateway moon using the ping6 command.