Return to description.txt CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / testing / tests / ikev2 / net2net-psk-dscp

Annotation of embedaddon/strongswan/testing/tests/ikev2/net2net-psk-dscp/description.txt, revision 1.1

1.1     ! misho       1: In order to support <b>Differentiated Services</b> (DiffServ), two parallel IPsec
        !             2: connections between the subnets behind the gateways <b>moon</b> and <b>sun</b> are
        !             3: set up. Using <b>XFRM marks</b> one IPsec SA is designated for <b>Best Effort</b> (BE)
        !             4: traffic and the second SA for <b>Expedited Forwarding</b> (EF) traffic.
        !             5: <p/>
        !             6: The authentication is based on a <b>pre-shared key</b> (PSK). In order to guarantee that
        !             7: the CHILD_SA with the correct mark is selected on the responder side, each CHILD_SA is
        !             8: bound to an IKE_SA of its own with a distinct IKEv2 ID but sharing the same PSK.
        !             9: <p/>
        !            10: Upon the successful establishment of the IPsec tunnel, <b>leftfirewall=yes</b> automatically
        !            11: inserts iptables-based firewall rules that let pass the tunneled traffic.
        !            12: In order to test both tunnel and firewall, client <b>alice</b> behind gateway <b>moon</b>
        !            13: pings client <b>bob</b> located behind gateway <b>sun</b>.