Strongswan workshop: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
(→Setup) |
(→Tests) |
||
| Zeile 15: | Zeile 15: | ||
--- 10.82.244.1 ping statistics --- | --- 10.82.244.1 ping statistics --- | ||
| + | ;root@fw2:~# tcpdump -ni eth0 esp | ||
| + | tcpdump: verbose output suppressed, use -v[v]... for full protocol decode | ||
| + | listening on eth0, link-type EN10MB (Ethernet), snapshot length 262144 bytes | ||
| + | 08:55:33.436945 IP 10.82.227.12 > 10.82.227.22: ESP(spi=0xc4de821a,seq=0x10), length 136 | ||
| + | 08:55:33.437107 IP 10.82.227.22 > 10.82.227.12: ESP(spi=0xcef198fc,seq=0x10), length 136 | ||
| + | 08:55:34.438319 IP 10.82.227.12 > 10.82.227.22: ESP(spi=0xc4de821a,seq=0x11), length 136 | ||
| + | 08:55:34.438501 IP 10.82.227.22 > 10.82.227.12: ESP(spi=0xcef198fc,seq=0x11), length 136 | ||
| + | 08:55:35.439782 IP 10.82.227.12 > 10.82.227.22: ESP(spi=0xc4de821a,seq=0x12), length 136 | ||
| + | 08:55:35.439970 IP 10.82.227.22 > 10.82.227.12: ESP(spi=0xcef198fc,seq=0x12), length 136 | ||
=Beispiele= | =Beispiele= | ||
*[[strongswan zu strongswan]] | *[[strongswan zu strongswan]] | ||
*[[strongswan zu strongswan ikev2 site to site]] | *[[strongswan zu strongswan ikev2 site to site]] | ||
Version vom 5. September 2022, 08:57 Uhr
Allgemein
- strongswan grundlagen
- strongswan Installation
- strongswan Dateien und Verzeichnisse
- strongswan ipsec tool
Setup
Schaubild
![Bearbeiten](javascript:editDrawio("2038996956", "strongswan-workshop-1.drawio.png", "png", false, false, false, true, "https://embed.diagrams.net")){kind=link}
Tests
- root@fw1
- ~# ping -c 3 -I 10.82.243.1 10.82.244.1
PING 10.82.244.1 (10.82.244.1) from 10.82.243.1 : 56(84) bytes of data. 64 bytes from 10.82.244.1: icmp_seq=1 ttl=64 time=0.923 ms 64 bytes from 10.82.244.1: icmp_seq=2 ttl=64 time=0.978 ms 64 bytes from 10.82.244.1: icmp_seq=3 ttl=64 time=0.767 ms
--- 10.82.244.1 ping statistics ---
- root@fw2
- ~# tcpdump -ni eth0 esp
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode listening on eth0, link-type EN10MB (Ethernet), snapshot length 262144 bytes 08:55:33.436945 IP 10.82.227.12 > 10.82.227.22: ESP(spi=0xc4de821a,seq=0x10), length 136 08:55:33.437107 IP 10.82.227.22 > 10.82.227.12: ESP(spi=0xcef198fc,seq=0x10), length 136 08:55:34.438319 IP 10.82.227.12 > 10.82.227.22: ESP(spi=0xc4de821a,seq=0x11), length 136 08:55:34.438501 IP 10.82.227.22 > 10.82.227.12: ESP(spi=0xcef198fc,seq=0x11), length 136 08:55:35.439782 IP 10.82.227.12 > 10.82.227.22: ESP(spi=0xc4de821a,seq=0x12), length 136 08:55:35.439970 IP 10.82.227.22 > 10.82.227.12: ESP(spi=0xcef198fc,seq=0x12), length 136