strongSwan KVM Tests / ikev1 / xauth-id-rsa-aggressive

Test ikev1/xauth-id-rsa-aggressive

Description

he roadwarriors carol and dave set up a connection to gateway moon using IKEv1 Aggressive Mode. The authentication is based on RSA signatures using X.509 certificates followed by extended authentication (XAUTH) of carol and dave based on user names defined by the xauth_identity and corresponding user passwords defined and stored in ipsec.secrets.

Upon the successful establishment of the IPsec tunnel, the updown-script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test both tunnel and firewall, carol and dave ping the client alice behind the gateway moon.

alice moon carol winnetou dave

moon

 

carol

 

dave

 

tcpdump