?? description.txt
字號(hào):
This test demonstrates the problem that a machine has trying to be the initiator of two tunnels to two different systems. The combinationis that of having an extrusion of some kind (i.e. wavesec) as well as havingattempting to do Opportunistic Encryption.The situation looks like: japan west east OE-rw wavesec-gw OE-peer#1 <***wavesec******>------------------------|#2 <*****************************************>There is no problem on wavesec-gw, which has no problem terminating the singleextrusion to japan.There is also no problem on OE-peer if west is not OE enabled. (If it is, then this is another instance of co-terminal-01)The problem is on jpan, where the eroute table has to contain:#1 japan/32 0.0.0.0/0 tunnel via OE-gw#2 japan/32 0.0.0.0/0 %trap for OE.The desire is that japan will have just the %trap (#2).When pluto determines that it can do OE, then it should producean SA like: japan/32 OE-peer/32 tunnel-via-wavesec-gw tunnel-via-OE-peerWhen pluto determines that it can not do OE, then it should producean SA like: japan/32 OE-peer/32 tunnel-via-wavesec-gw In this test, we have three nodes involves, plus DNS.The non-OE enabled node is an alias on NIC.
?? 快捷鍵說明
復(fù)制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號(hào)
Ctrl + =
減小字號(hào)
Ctrl + -