diff options
| -rw-r--r-- | regress/sbin/ipsecctl/ike60.in | 6 | ||||
| -rw-r--r-- | regress/sbin/ipsecctl/ike60.ok | 114 |
2 files changed, 33 insertions, 87 deletions
diff --git a/regress/sbin/ipsecctl/ike60.in b/regress/sbin/ipsecctl/ike60.in index 11d3b51077e..6e29f82a6a5 100644 --- a/regress/sbin/ipsecctl/ike60.in +++ b/regress/sbin/ipsecctl/ike60.in @@ -1,3 +1,3 @@ -ike from egress to any main enc aes-128 quick enc aes-128 -ike from egress to any main enc aes-192 quick enc aes-192 -ike from egress to any main enc aes-256 quick enc aes-256 +ike from 10.0.0.1 to any main enc aes-128 quick enc aes-128 +ike from 10.0.0.2 to any main enc aes-192 quick enc aes-192 +ike from 10.0.0.3 to any main enc aes-256 quick enc aes-256 diff --git a/regress/sbin/ipsecctl/ike60.ok b/regress/sbin/ipsecctl/ike60.ok index e9f653d90d9..2d0b5724e04 100644 --- a/regress/sbin/ipsecctl/ike60.ok +++ b/regress/sbin/ipsecctl/ike60.ok @@ -3,106 +3,52 @@ C set [peer-default]:Phase=1 force C set [peer-default]:Configuration=phase1-peer-default force C set [phase1-peer-default]:EXCHANGE_TYPE=ID_PROT force C add [phase1-peer-default]:Transforms=AES-128-SHA-RSA_SIG force -C set [from-sk0-to-0.0.0.0/0]:Phase=2 force -C set [from-sk0-to-0.0.0.0/0]:ISAKMP-peer=peer-default force -C set [from-sk0-to-0.0.0.0/0]:Configuration=phase2-from-sk0-to-0.0.0.0/0 force -C set [from-sk0-to-0.0.0.0/0]:Local-ID=from-sk0 force -C set [from-sk0-to-0.0.0.0/0]:Remote-ID=to-0.0.0.0/0 force -C set [phase2-from-sk0-to-0.0.0.0/0]:EXCHANGE_TYPE=QUICK_MODE force -C set [phase2-from-sk0-to-0.0.0.0/0]:Suites=QM-ESP-AES-128-SHA2-256-PFS-SUITE force -C set [from-sk0]:ID-type=IPV4_ADDR force -C set [from-sk0]:Address=sk0 force +C set [from-10.0.0.1-to-0.0.0.0/0]:Phase=2 force +C set [from-10.0.0.1-to-0.0.0.0/0]:ISAKMP-peer=peer-default force +C set [from-10.0.0.1-to-0.0.0.0/0]:Configuration=phase2-from-10.0.0.1-to-0.0.0.0/0 force +C set [from-10.0.0.1-to-0.0.0.0/0]:Local-ID=from-10.0.0.1 force +C set [from-10.0.0.1-to-0.0.0.0/0]:Remote-ID=to-0.0.0.0/0 force +C set [phase2-from-10.0.0.1-to-0.0.0.0/0]:EXCHANGE_TYPE=QUICK_MODE force +C set [phase2-from-10.0.0.1-to-0.0.0.0/0]:Suites=QM-ESP-AES-128-SHA2-256-PFS-SUITE force +C set [from-10.0.0.1]:ID-type=IPV4_ADDR force +C set [from-10.0.0.1]:Address=10.0.0.1 force C set [to-0.0.0.0/0]:ID-type=IPV4_ADDR_SUBNET force C set [to-0.0.0.0/0]:Network=0.0.0.0 force C set [to-0.0.0.0/0]:Netmask=0.0.0.0 force -C add [Phase 2]:Connections=from-sk0-to-0.0.0.0/0 -C set [Phase 1]:Default=peer-default force -C set [peer-default]:Phase=1 force -C set [peer-default]:Configuration=phase1-peer-default force -C set [phase1-peer-default]:EXCHANGE_TYPE=ID_PROT force -C add [phase1-peer-default]:Transforms=AES-128-SHA-RSA_SIG force -C set [from-sk0-to-0.0.0.0/0]:Phase=2 force -C set [from-sk0-to-0.0.0.0/0]:ISAKMP-peer=peer-default force -C set [from-sk0-to-0.0.0.0/0]:Configuration=phase2-from-sk0-to-0.0.0.0/0 force -C set [from-sk0-to-0.0.0.0/0]:Local-ID=from-sk0 force -C set [from-sk0-to-0.0.0.0/0]:Remote-ID=to-0.0.0.0/0 force -C set [phase2-from-sk0-to-0.0.0.0/0]:EXCHANGE_TYPE=QUICK_MODE force -C set [phase2-from-sk0-to-0.0.0.0/0]:Suites=QM-ESP-AES-128-SHA2-256-PFS-SUITE force -C set [from-sk0]:ID-type=IPV4_ADDR force -C set [from-sk0]:Address=sk0 force -C set [to-0.0.0.0/0]:ID-type=IPV4_ADDR_SUBNET force -C set [to-0.0.0.0/0]:Network=0.0.0.0 force -C set [to-0.0.0.0/0]:Netmask=0.0.0.0 force -C add [Phase 2]:Connections=from-sk0-to-0.0.0.0/0 -C set [Phase 1]:Default=peer-default force -C set [peer-default]:Phase=1 force -C set [peer-default]:Configuration=phase1-peer-default force -C set [phase1-peer-default]:EXCHANGE_TYPE=ID_PROT force -C add [phase1-peer-default]:Transforms=AES-192-SHA-RSA_SIG force -C set [from-sk0-to-0.0.0.0/0]:Phase=2 force -C set [from-sk0-to-0.0.0.0/0]:ISAKMP-peer=peer-default force -C set [from-sk0-to-0.0.0.0/0]:Configuration=phase2-from-sk0-to-0.0.0.0/0 force -C set [from-sk0-to-0.0.0.0/0]:Local-ID=from-sk0 force -C set [from-sk0-to-0.0.0.0/0]:Remote-ID=to-0.0.0.0/0 force -C set [phase2-from-sk0-to-0.0.0.0/0]:EXCHANGE_TYPE=QUICK_MODE force -C set [phase2-from-sk0-to-0.0.0.0/0]:Suites=QM-ESP-AES-192-SHA2-256-PFS-SUITE force -C set [from-sk0]:ID-type=IPV4_ADDR force -C set [from-sk0]:Address=sk0 force -C set [to-0.0.0.0/0]:ID-type=IPV4_ADDR_SUBNET force -C set [to-0.0.0.0/0]:Network=0.0.0.0 force -C set [to-0.0.0.0/0]:Netmask=0.0.0.0 force -C add [Phase 2]:Connections=from-sk0-to-0.0.0.0/0 +C add [Phase 2]:Connections=from-10.0.0.1-to-0.0.0.0/0 C set [Phase 1]:Default=peer-default force C set [peer-default]:Phase=1 force C set [peer-default]:Configuration=phase1-peer-default force C set [phase1-peer-default]:EXCHANGE_TYPE=ID_PROT force C add [phase1-peer-default]:Transforms=AES-192-SHA-RSA_SIG force -C set [from-sk0-to-0.0.0.0/0]:Phase=2 force -C set [from-sk0-to-0.0.0.0/0]:ISAKMP-peer=peer-default force -C set [from-sk0-to-0.0.0.0/0]:Configuration=phase2-from-sk0-to-0.0.0.0/0 force -C set [from-sk0-to-0.0.0.0/0]:Local-ID=from-sk0 force -C set [from-sk0-to-0.0.0.0/0]:Remote-ID=to-0.0.0.0/0 force -C set [phase2-from-sk0-to-0.0.0.0/0]:EXCHANGE_TYPE=QUICK_MODE force -C set [phase2-from-sk0-to-0.0.0.0/0]:Suites=QM-ESP-AES-192-SHA2-256-PFS-SUITE force -C set [from-sk0]:ID-type=IPV4_ADDR force -C set [from-sk0]:Address=sk0 force -C set [to-0.0.0.0/0]:ID-type=IPV4_ADDR_SUBNET force -C set [to-0.0.0.0/0]:Network=0.0.0.0 force -C set [to-0.0.0.0/0]:Netmask=0.0.0.0 force -C add [Phase 2]:Connections=from-sk0-to-0.0.0.0/0 -C set [Phase 1]:Default=peer-default force -C set [peer-default]:Phase=1 force -C set [peer-default]:Configuration=phase1-peer-default force -C set [phase1-peer-default]:EXCHANGE_TYPE=ID_PROT force -C add [phase1-peer-default]:Transforms=AES-256-SHA-RSA_SIG force -C set [from-sk0-to-0.0.0.0/0]:Phase=2 force -C set [from-sk0-to-0.0.0.0/0]:ISAKMP-peer=peer-default force -C set [from-sk0-to-0.0.0.0/0]:Configuration=phase2-from-sk0-to-0.0.0.0/0 force -C set [from-sk0-to-0.0.0.0/0]:Local-ID=from-sk0 force -C set [from-sk0-to-0.0.0.0/0]:Remote-ID=to-0.0.0.0/0 force -C set [phase2-from-sk0-to-0.0.0.0/0]:EXCHANGE_TYPE=QUICK_MODE force -C set [phase2-from-sk0-to-0.0.0.0/0]:Suites=QM-ESP-AES-256-SHA2-256-PFS-SUITE force -C set [from-sk0]:ID-type=IPV4_ADDR force -C set [from-sk0]:Address=sk0 force +C set [from-10.0.0.2-to-0.0.0.0/0]:Phase=2 force +C set [from-10.0.0.2-to-0.0.0.0/0]:ISAKMP-peer=peer-default force +C set [from-10.0.0.2-to-0.0.0.0/0]:Configuration=phase2-from-10.0.0.2-to-0.0.0.0/0 force +C set [from-10.0.0.2-to-0.0.0.0/0]:Local-ID=from-10.0.0.2 force +C set [from-10.0.0.2-to-0.0.0.0/0]:Remote-ID=to-0.0.0.0/0 force +C set [phase2-from-10.0.0.2-to-0.0.0.0/0]:EXCHANGE_TYPE=QUICK_MODE force +C set [phase2-from-10.0.0.2-to-0.0.0.0/0]:Suites=QM-ESP-AES-192-SHA2-256-PFS-SUITE force +C set [from-10.0.0.2]:ID-type=IPV4_ADDR force +C set [from-10.0.0.2]:Address=10.0.0.2 force C set [to-0.0.0.0/0]:ID-type=IPV4_ADDR_SUBNET force C set [to-0.0.0.0/0]:Network=0.0.0.0 force C set [to-0.0.0.0/0]:Netmask=0.0.0.0 force -C add [Phase 2]:Connections=from-sk0-to-0.0.0.0/0 +C add [Phase 2]:Connections=from-10.0.0.2-to-0.0.0.0/0 C set [Phase 1]:Default=peer-default force C set [peer-default]:Phase=1 force C set [peer-default]:Configuration=phase1-peer-default force C set [phase1-peer-default]:EXCHANGE_TYPE=ID_PROT force C add [phase1-peer-default]:Transforms=AES-256-SHA-RSA_SIG force -C set [from-sk0-to-0.0.0.0/0]:Phase=2 force -C set [from-sk0-to-0.0.0.0/0]:ISAKMP-peer=peer-default force -C set [from-sk0-to-0.0.0.0/0]:Configuration=phase2-from-sk0-to-0.0.0.0/0 force -C set [from-sk0-to-0.0.0.0/0]:Local-ID=from-sk0 force -C set [from-sk0-to-0.0.0.0/0]:Remote-ID=to-0.0.0.0/0 force -C set [phase2-from-sk0-to-0.0.0.0/0]:EXCHANGE_TYPE=QUICK_MODE force -C set [phase2-from-sk0-to-0.0.0.0/0]:Suites=QM-ESP-AES-256-SHA2-256-PFS-SUITE force -C set [from-sk0]:ID-type=IPV4_ADDR force -C set [from-sk0]:Address=sk0 force +C set [from-10.0.0.3-to-0.0.0.0/0]:Phase=2 force +C set [from-10.0.0.3-to-0.0.0.0/0]:ISAKMP-peer=peer-default force +C set [from-10.0.0.3-to-0.0.0.0/0]:Configuration=phase2-from-10.0.0.3-to-0.0.0.0/0 force +C set [from-10.0.0.3-to-0.0.0.0/0]:Local-ID=from-10.0.0.3 force +C set [from-10.0.0.3-to-0.0.0.0/0]:Remote-ID=to-0.0.0.0/0 force +C set [phase2-from-10.0.0.3-to-0.0.0.0/0]:EXCHANGE_TYPE=QUICK_MODE force +C set [phase2-from-10.0.0.3-to-0.0.0.0/0]:Suites=QM-ESP-AES-256-SHA2-256-PFS-SUITE force +C set [from-10.0.0.3]:ID-type=IPV4_ADDR force +C set [from-10.0.0.3]:Address=10.0.0.3 force C set [to-0.0.0.0/0]:ID-type=IPV4_ADDR_SUBNET force C set [to-0.0.0.0/0]:Network=0.0.0.0 force C set [to-0.0.0.0/0]:Netmask=0.0.0.0 force -C add [Phase 2]:Connections=from-sk0-to-0.0.0.0/0 +C add [Phase 2]:Connections=from-10.0.0.3-to-0.0.0.0/0 |