Distribution EOLE

Test Squash-TM¶

SP-T02-001 - Monter un tunnel entre un module Amon (2.7.0-b1)

pas 7¶

Le diagnose est vide :

root@amon:~# ipsec statusall
Status of IKE charon daemon (strongSwan 5.6.2, Linux 4.15.0-35-generic, x86_64):
  uptime: 17 hours, since Sep 26 17:16:13 2018
  malloc: sbrk 5410816, mmap 532480, used 1975872, free 3434944
  worker threads: 27 of 32 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 4
  loaded plugins: charon test-vectors unbound ldap pkcs11 tpm aes rc2 sha2 sha1 md4 md5 mgf1 random nonce x509 revocation constraints acert pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey dnscert ipseckey pem openssl gcrypt af-alg fips-prf gmp curve25519 agent chapoly xcbc cmac hmac ctr ccm gcm ntru bliss curl soup mysql sqlite attr kernel-netlink resolve socket-default connmark stroke updown eap-identity eap-sim eap-sim-pcsc eap-aka eap-aka-3gpp2 eap-simaka-pseudonym eap-simaka-reauth eap-md5 eap-gtc eap-dynamic eap-radius eap-tls eap-ttls eap-peap eap-tnc xauth-eap xauth-pam xauth-noauth tnc-tnccs tnccs-20 tnccs-11 tnccs-dynamic whitelist lookip error-notify certexpire led radattr addrblock unity counters
Listening IP addresses:
  192.168.0.31
  10.1.3.1
  10.1.1.1
  10.1.15.1
  10.1.16.1
  10.1.2.1
  10.1.21.1
  10.1.22.1
Connections:
etb1.amon-default-2.7.0-aca.sphynx-default-2.7.0_1-admin-agriates:  192.168.0.31...192.168.0.11  IKEv1/2, dpddelay=120s
etb1.amon-default-2.7.0-aca.sphynx-default-2.7.0_1-admin-agriates:   local:  [C=FR, L=Dijon, O=Education Nationale, OU=0002 110043015, CN=etb1.amon-default-2.7.0.ac-test.fr] uses public key authentication
etb1.amon-default-2.7.0-aca.sphynx-default-2.7.0_1-admin-agriates:    cert:  "C=FR, L=Dijon, O=Education Nationale, OU=0002 110043015, CN=etb1.amon-default-2.7.0.ac-test.fr" 
etb1.amon-default-2.7.0-aca.sphynx-default-2.7.0_1-admin-agriates:   remote: [C=FR, L=Dijon, O=Education Nationale, OU=0002 110043015, CN=sphynx] uses public key authentication
etb1.amon-default-2.7.0-aca.sphynx-default-2.7.0_1-admin-agriates:   child:  10.1.1.0/24 === 172.30.101.0/24 TUNNEL, dpdaction=restart
Security Associations (1 up, 0 connecting):
etb1.amon-default-2.7.0-aca.sphynx-default-2.7.0_1-admin-agriates[7]: ESTABLISHED 78 minutes ago, 192.168.0.31[C=FR, L=Dijon, O=Education Nationale, OU=0002 110043015, CN=etb1.amon-default-2.7.0.ac-test.fr]...192.168.0.11[C=FR, L=Dijon, O=Education Nationale, OU=0002 110043015, CN=sphynx]
etb1.amon-default-2.7.0-aca.sphynx-default-2.7.0_1-admin-agriates[7]: IKEv2 SPIs: 9ff63a684d680a9f_i* c8c9237a997f5351_r, public key reauthentication in 76 minutes
etb1.amon-default-2.7.0-aca.sphynx-default-2.7.0_1-admin-agriates[7]: IKE proposal: AES_CBC_128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048
etb1.amon-default-2.7.0-aca.sphynx-default-2.7.0_1-admin-agriates{26}:  INSTALLED, TUNNEL, reqid 7, ESP SPIs: c50c5252_i c2a7e9fb_o
etb1.amon-default-2.7.0-aca.sphynx-default-2.7.0_1-admin-agriates{26}:  AES_GCM_16_128, 0 bytes_i, 0 bytes_o, rekeying in 6 minutes
etb1.amon-default-2.7.0-aca.sphynx-default-2.7.0_1-admin-agriates{26}:   10.1.1.0/24 === 172.30.101.0/24

Exécution Squash-TM¶

• https://dev-eole.ac-dijon.fr/squash/executions/7574