blob: 55bed875dea2dd8e7688afe9f34809b0e3c036e1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
|
Send IPsec traffic to another machine where it gets processed.
There the IPsec implementation has to deliver it to the local stack
or forward it after decryption. By reflecting the packets, the way
back is also tested. When the response is received at the generating
machine, the test is considered successful.
Currently ICMP ping, UDP and TCP packets are encrypted with ESP.
Transport and tunnel mode are tested with all combinations of IPv4
and IPv6.
TODO:
Tests for AH/IPCOMP/IPIP and path MTU discovery are planned.
BPF output of enc0 and pflog0 should be checked.
|
