strongSwan KVM Tests / pfkey / alg-aes-xcbc
Test pfkey/alg-aes-xcbc
Description
Roadwarrior carol proposes to gateway moon the ESP cipher suite AES_CBC_128 / AES_XCBC_96 by defining esp=aes128-aesxcbc-modp2048! in ipsec.conf. The same cipher suite is used for IKE. A ping from carol to alice successfully checks the established tunnel.