strongSwan KVM Tests / route-based / rw-shared-vti
Test route-based/rw-shared-vti
Description
The roadwarriors carol and dave set up a connection each to gateway moon. Both carol and dave request a virtual IP via the IKEv2 configuration payload. The gateway moon uses route-based forwarding with VTI tunnels, with firewall rules to allow traffic to pass. The IKE daemon is configured to not install routes with charon.install_routes=0, and a static route is installed for the virtual IP subnet on the VTI device. Both carol and dave ping the client alice behind the gateway moon. The source IP addresses of the two pings will be the virtual IPs carol1 and dave1, respectively.