strongSwan KVM Tests / pfkey / alg-sha384

Test pfkey/alg-sha384

Description

Roadwarrior carol proposes to gateway moon the ESP cipher suite AES_CBC_192 / HMAC_SHA2_384_192 by defining esp=aes192-sha384-modp3072! in ipsec.conf. The same cipher suite is used for IKE. A ping from carol to alice successfully checks the established tunnel. alice moon carol winnetou

moon

carol

tcpdump