Return to description.txt CVS log | Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / testing / tests / ikev2 / trap-any |
1.1 misho 1: The hosts <b>moon</b>, <b>sun</b> and <b>dave</b> install <b>transport-mode</b> trap 2: policies with <b>right=%any</b>. The remote host is dynamically determined based on 3: the acquires received from the kernel. Host <b>dave</b> additionally limits the remote 4: hosts to <b>moon</b> and <b>sun</b> with <b>rightsubnet</b>. This is tested by 5: pinging <b>sun</b> and <b>carol</b> from <b>moon</b>, <b>carol</b> from <b>sun</b>, and 6: <b>sun</b> and <b>moon</b> from <b>dave</b>. The latter also pings <b>carol</b>, which 7: is not going to be encrypted as <b>carol</b> is not part of the configured <b>rightsubnet</b>.