diff options
Diffstat (limited to 'recipes-connectivity/ipsec-demo/ipsec-demo/test_setkey/right.conf-aes-sha1-transport')
-rwxr-xr-x | recipes-connectivity/ipsec-demo/ipsec-demo/test_setkey/right.conf-aes-sha1-transport | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/recipes-connectivity/ipsec-demo/ipsec-demo/test_setkey/right.conf-aes-sha1-transport b/recipes-connectivity/ipsec-demo/ipsec-demo/test_setkey/right.conf-aes-sha1-transport new file mode 100755 index 00000000..d9c65a45 --- /dev/null +++ b/recipes-connectivity/ipsec-demo/ipsec-demo/test_setkey/right.conf-aes-sha1-transport | |||
@@ -0,0 +1,22 @@ | |||
1 | #!/usr/sbin/setkey -f | ||
2 | #I am 200.200.200.20 | ||
3 | |||
4 | flush; | ||
5 | spdflush; | ||
6 | |||
7 | # ESP SAs doing encryption using 192 bit long keys (168 + 24 parity) | ||
8 | # and hmac-sha1 authentication using 160 bit long keys | ||
9 | add 200.200.200.10 200.200.200.20 esp 0x10513 | ||
10 | -E aes-cbc 0x7aeaca3f87d060a12f4a4487d5a5c3355920fae69a96c831 | ||
11 | -A hmac-sha1 0xe9c43acd5e8d779b6e09c87347852708ab49bdd3; | ||
12 | |||
13 | add 200.200.200.20 200.200.200.10 esp 0x10514 | ||
14 | -E aes-cbc 0xf6ddb555acfd9d77b03ea3843f2653255afe8eb5573965df | ||
15 | -A hmac-sha1 0xea6856479330dc9c17b8f6c37e2a895363d83f21; | ||
16 | |||
17 | # Security policies | ||
18 | spdadd 200.200.200.20 200.200.200.10 any -P out ipsec | ||
19 | esp/transport//require; | ||
20 | |||
21 | spdadd 200.200.200.10 200.200.200.20 any -P in ipsec | ||
22 | esp/transport//require; | ||