File: description.txt

package info (click to toggle)
openswan 1%3A2.4.6%2Bdfsg.2-1.1%2Betch2
  • links: PTS
  • area: main
  • in suites: etch
  • size: 25,000 kB
  • ctags: 16,877
  • sloc: ansic: 121,112; sh: 19,782; xml: 9,699; asm: 4,422; perl: 4,087; makefile: 3,367; tcl: 713; exp: 657; yacc: 396; pascal: 328; lex: 289; sed: 265; awk: 124; lisp: 3
file content (18 lines) | stat: -rw-r--r-- 614 bytes parent folder | download | duplicates (8)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
This tests the RFC3706 DPD implementation, with dpdaction=hold on east,
and dpdaction=hold on west.

This means both sides with %trap the eroute awaiting a new packet to
trigger reestablishment of the tunnel.

Order of Operations:

1) East sets up for tunnel
2) West initiates tunnel to east
3) We idle for 20 seconds, to prove that DPD R_U_THERE/R_U_THERE_ACKs work.
4) West blocks traffic on eth0
5) Both sides trigger a DPD Timeout:
	East puts the eroute into %trap
	West puts the eroute into %trap
6) West removes the traffic block
7) West sends icmp packets to east, triggering a renegotiation of the tunnel