1: The roadwarriors <b>carol</b> and <b>dave</b> set up a connection each
2: to gateway <b>moon</b>. The authentication is based on <b>raw public keys</b>
3: and IKEv2 key IDs. Gateway <b>moon</b> accepts all peers possessing a
4: public key a copy of which is stored in the <b>/etc/swanctl/pubkey</b> directory.
5: <p/>
6: Upon the successful establishment of the IPsec tunnels, the updown script
7: automatically inserts iptables-based firewall rules that let pass the tunneled traffic.
8: In order to test both tunnel and firewall, both <b>carol</b> and <b>dave</b> ping
9: the client <b>alice</b> behind the gateway <b>moon</b>.
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>