fixed virtual-ip scenario
This commit is contained in:
parent
ea7f3e1bca
commit
fc92116296
|
@ -4,7 +4,8 @@ carol::ipsec statusall::home.*INSTALLED::YES
|
|||
dave::ipsec statusall::home.*INSTALLED::YES
|
||||
moon::cat /var/log/daemon.log::peer requested virtual IP PH_IP_CAROL1::YES
|
||||
moon::cat /var/log/daemon.log::peer requested virtual IP PH_IP_DAVE1::YES
|
||||
moon::cat /var/log/daemon.log::not assigning a virtual IP to peer::YES
|
||||
moon::cat /var/log/daemon.log::assigning virtual IP PH_IP_CAROL1 to peer::YES
|
||||
moon::cat /var/log/daemon.log::assigning virtual IP PH_IP_DAVE1 to peer::YES
|
||||
carol::ip addr list dev eth0::PH_IP_CAROL1::YES
|
||||
carol::ip route list dev eth0::src PH_IP_CAROL1::YES
|
||||
dave::ip addr list dev eth0::PH_IP_DAVE1::YES
|
||||
|
@ -14,7 +15,7 @@ carol::ping -c 1 PH_IP_MOON1::64 bytes from PH_IP_MOON1: icmp_seq=1::YES
|
|||
dave::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
||||
dave::ping -c 1 PH_IP_MOON1::64 bytes from PH_IP_MOON1: icmp_seq=1::YES
|
||||
moon::ping -c 1 PH_IP_CAROL1::64 bytes from PH_IP_CAROL1: icmp_seq=1::YES
|
||||
moon::ping -c 1 PH_IP_DAVE1::64 bytes from PH_IP_CAROL1: icmp_seq=1::YES
|
||||
moon::ping -c 1 PH_IP_DAVE1::64 bytes from PH_IP_DAVE1: icmp_seq=1::YES
|
||||
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
|
||||
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES
|
||||
moon::tcpdump::IP dave.strongswan.org > moon.strongswan.org: ESP::YES
|
||||
|
|
|
@ -20,5 +20,5 @@ conn rw
|
|||
leftfirewall=yes
|
||||
lefthostaccess=yes
|
||||
right=%any
|
||||
rightsubnet=10.3.0.0/16
|
||||
rightsourceip=%config
|
||||
auto=add
|
||||
|
|
Loading…
Reference in New Issue