Return to sample-policy02.cf CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / ipsec-tools / src / setkey

Annotation of embedaddon/ipsec-tools/src/setkey/sample-policy02.cf, revision 1.1

1.1     ! misho       1: #
        !             2: # this is test configuration for unique policy on loopback.
        !             3: #
        !             4: 
        !             5: spdflush;
        !             6: # connection to 9999 encrypted, reverse no encrypted.
        !             7: spdadd ::1 ::1[9999] tcp
        !             8:        -P out ipsec
        !             9:        esp/transport//unique:2 ;
        !            10: 
        !            11: # Session encrypted.  Inbound policy check takes place non-strictly.
        !            12: spdadd ::1 ::1[9998] tcp
        !            13:        -P out ipsec
        !            14:        esp/transport//unique:1 ;
        !            15: spdadd ::1[9998] ::1 tcp
        !            16:        -P in ipsec
        !            17:        esp/transport//unique:2 ;
        !            18: spdadd ::1[9998] ::1 tcp
        !            19:        -P out ipsec
        !            20:        esp/transport//unique:1 ;
        !            21: 
        !            22: # Cause new SA to be acquired.
        !            23: spdadd ::1 ::1[9997] tcp
        !            24:        -P out ipsec
        !            25:        esp/transport//unique ;
        !            26: 
        !            27: # Used proper SA.
        !            28: spdadd ::1 ::1[9996] tcp
        !            29:        -P out ipsec
        !            30:        esp/transport//require ;
        !            31: 
        !            32: # reqid will be updated by kernel.
        !            33: spdadd ::1 ::1[9995] tcp
        !            34:        -P out ipsec
        !            35:        esp/transport//unique:28000 ;
        !            36: 
        !            37: flush;
        !            38: add ::1 ::1 esp 0x1001
        !            39:        -u 1
        !            40:        -E des-cbc "kamekame";
        !            41: add ::1 ::1 esp 0x1002
        !            42:        -u 2
        !            43:        -E des-cbc "hogehoge";