Return to description.txt CVS log | Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / testing / tests / ikev1 / alg-modp-subgroup |
1.1 misho 1: The roadwarriors <b>carol</b> and <b>dave</b> set up a connection each 2: to gateway <b>moon</b> using the <b>MODP Diffie-Hellman Groups 22, 23, and 24</b> 3: with <b>Prime Order Subgroups</b>. 4: <p/> 5: <b>carol</b> proposes the DH groups MODP_2048_224 and MODP_1024_160 whereas 6: <b>dave</b> proposes MODP_2048_224 and MODP_2048_256. 7: Since <b>moon</b> does not support MODP_2048_224 the roadwarriors fall back to 8: MODP_1024_160 and MODP_2048_256, respectively. 9: <p/> 10: Upon the successful establishment of the IPsec tunnels, <b>leftfirewall=yes</b> 11: automatically inserts iptables-based firewall rules that let pass the tunneled traffic. 12: In order to test both tunnel and firewall, both <b>carol</b> and <b>dave</b> ping 13: the client <b>alice</b> behind the gateway <b>moon</b>. 14: