ims-volte-vowifi
/
strongswan
9
0
Fork 0
Code Pull Requests Releases Activity

testing: Adapted ha/both-active scenario to new jhash values

This commit is contained in:
Andreas Steffen 2015-07-31 14:43:40 +02:00
parent 1f406f3e6e
commit 493ad293b7
6 changed files with 11 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
testing/tests/ha/both-active/evaltest.dat
View File

@ -1,6 +1,6 @@
alice::ipsec status 2> /dev/null::rw\[1].*ESTABLISHED.*mars.strongswan.org.*carol@strongswan.org::YES
alice::ipsec status 2> /dev/null::rw\[1].*PASSIVE.*mars.strongswan.org.*carol@strongswan.org::YES
alice::ipsec status 2> /dev/null::rw\[2].*ESTABLISHED.*mars.strongswan.org.*dave@strongswan.org::YES
moon:: ipsec status 2> /dev/null::rw\[1].*PASSIVE.*mars.strongswan.org.*carol@strongswan.org::YES
moon:: ipsec status 2> /dev/null::rw\[1].*ESTABLISHED.*mars.strongswan.org.*carol@strongswan.org::YES
moon:: ipsec status 2> /dev/null::rw\[2].*PASSIVE.*mars.strongswan.org.*dave@strongswan.org::YES
carol::ipsec status 2> /dev/null::home.*ESTABLISHED.*carol@strongswan.org.*mars.strongswan.org::YES
dave:: ipsec status 2> /dev/null::home.*ESTABLISHED.*dave@strongswan.org.*mars.strongswan.org::YES

4
testing/tests/ha/both-active/hosts/alice/etc/iptables.rules
View File

@ -11,8 +11,8 @@
-A FORWARD -o eth1 -m policy --dir out --pol ipsec --proto esp -j ACCEPT
# clusterip rules
-A INPUT -i eth1 -d 192.168.0.5 -j CLUSTERIP --new --hashmode sourceip --clustermac 01:00:c0:a8:00:05 --total-nodes 2 --local-node 2
-A INPUT -i eth0 -d 10.1.0.5 -j CLUSTERIP --new --hashmode sourceip --clustermac 01:00:0a:01:00:05 --total-nodes 2 --local-node 2
-A INPUT -i eth1 -d 192.168.0.5 -j CLUSTERIP --new --hashmode sourceip --clustermac 01:00:c0:a8:00:05 --total-nodes 2 --local-node 0
-A INPUT -i eth0 -d 10.1.0.5 -j CLUSTERIP --new --hashmode sourceip --clustermac 01:00:0a:01:00:05 --total-nodes 2 --local-node 0
# allow esp
-A INPUT -p 50 -j ACCEPT

3
testing/tests/ha/both-active/hosts/alice/etc/strongswan.conf
View File

@ -5,8 +5,9 @@ charon {
plugins {
ha {
local = PH_IP_ALICE
remote = PH_IP_MOON1
remote = PH_IP_MOON1
segment_count = 2
autobalance = 10
fifo_interface = yes
monitor = yes
}

4
testing/tests/ha/both-active/hosts/moon/etc/iptables.rules
View File

@ -11,8 +11,8 @@
-A FORWARD -m policy -o eth0 --dir out --pol ipsec --proto esp -j ACCEPT
# clusterip rules
-A INPUT -i eth0 -d 192.168.0.5 -j CLUSTERIP --new --hashmode sourceip --clustermac 01:00:c0:a8:00:05 --total-nodes 2 --local-node 1
-A INPUT -i eth1 -d 10.1.0.5 -j CLUSTERIP --new --hashmode sourceip --clustermac 01:00:0a:01:00:05 --total-nodes 2 --local-node 1
-A INPUT -i eth0 -d 192.168.0.5 -j CLUSTERIP --new --hashmode sourceip --clustermac 01:00:c0:a8:00:05 --total-nodes 2 --local-node 0
-A INPUT -i eth1 -d 10.1.0.5 -j CLUSTERIP --new --hashmode sourceip --clustermac 01:00:0a:01:00:05 --total-nodes 2 --local-node 0
# allow esp
-A INPUT -p 50 -j ACCEPT

3
testing/tests/ha/both-active/hosts/moon/etc/strongswan.conf
View File

@ -5,8 +5,9 @@ charon {
plugins {
ha {
local = PH_IP_MOON1
remote = PH_IP_ALICE
remote = PH_IP_ALICE
segment_count = 2
autobalance = 10
fifo_interface = yes
monitor = yes
}

1
testing/tests/ha/both-active/pretest.dat
View File

@ -11,6 +11,7 @@ carol::iptables-restore < /etc/iptables.rules
dave::iptables-restore < /etc/iptables.rules
moon::ipsec start
alice::ipsec start
alice::sleep 1
carol::ipsec start
dave::ipsec start
carol::sleep 1