freeswan/klips/test/110/105

   1 #!/bin/sh
   2 #
   3 # RCSID $Id: 105,v 1.8 1999/04/06 04:54:34 rgb Exp $
   4 #
   5
   6 net1=192.168.4.0
   7 net2=192.168.0.0
   8 gw1=192.168.2.110
   9 gw2=192.168.2.105
  10 hmask=255.255.255.255
  11 nmask=255.255.255.0
  12
  13 case "$1" in
  14         # Setup module and interface
  15         setup)
  16                 # Load the module
  17 #               depmod -a
  18 #               modprobe ipsec
  19                 # Attach and configure the interface
  20                 ipsec tncfg attach ipsec0 eth0
  21                 ifconfig ipsec0 $gw1
  22                 ;;
  23         unload)
  24                 ifconfig ipsec0 down
  25                 ifconfig ipsec1 down
  26 #               rmmod ipsec
  27                 ;;
  28         # Transport mode
  29         tresp3desmd5)
  30                 ipsec spi --edst $gw1 --spi 0x525 --esp 3des-md5-96 \
  31                         --iv 0x1000000000000001  \
  32                         --enckey 0x010203040506070809101112131415161718192021222324 \
  33                         --authkey 0x25262728293031323334353637383940
  34
  35                 route del $gw2
  36                 route add -host $gw2 dev ipsec0
  37
  38                 ipsec eroute --add --src $gw1/$hmask \
  39                         --dst $gw2/$hmask \
  40                         --edst $gw2 --spi 0x535
  41                 ipsec spi --edst $gw2 --spi 0x535 --esp 3des-md5-96 \
  42                         --iv 0x1000000000000001  \
  43                         --enckey 0x414243444546474849505152535455565758596061626364 \
  44                         --authkey 0x65666768697071727374757677787980
  45                 ;;
  46         tresp3desmd5del)
  47                 ipsec spi --edst $gw1 --spi 0x525 --del
  48
  49                 ipsec spi --edst $gw2 --spi 0x535 --del
  50
  51
  52                 ipsec eroute --del --src $gw1/$hmask --dst $gw2/$hmask
  53
  54
  55                 route del $gw2
  56                 ;;
  57         tresp3des)
  58                 ipsec spi --edst $gw1 --spi 0x525 --esp 3des \
  59                         --iv 0x1000000000000001  \
  60                         --enckey 0x010203040506070809101112131415161718192021222324
  61
  62                 route del $gw2
  63                 route add -host $gw2 dev ipsec0
  64
  65                 ipsec eroute --add --src $gw1/$hmask \
  66                         --dst $gw2/$hmask \
  67                         --edst $gw2 --spi 0x535
  68                 ipsec spi --edst $gw2 --spi 0x535 --esp 3des \
  69                         --iv 0x1000000000000001  \
  70                         --enckey 0x414243444546474849505152535455565758596061626364
  71                 ;;
  72         tresp3desdel)
  73                 ipsec spi --edst $gw1 --spi 0x525 --del
  74
  75                 ipsec spi --edst $gw2 --spi 0x535 --del
  76
  77
  78                 ipsec eroute --del --src $gw1/$hmask --dst $gw2/$hmask
  79
  80
  81                 route del $gw2
  82                 ;;
  83         tresp3dessha1)
  84                 ipsec spi --edst $gw1 --spi 0x525 --esp 3des-sha1-96 \
  85                         --iv 0x1000000000000001  \
  86                         --enckey 0x010203040506070809101112131415161718192021222324 \
  87                         --authkey 0x2526272829303132333435363738394041424344
  88
  89                 route del $gw2
  90                 route add -host $gw2 dev ipsec0
  91
  92                 ipsec eroute --add --src $gw1/$hmask \
  93                         --dst $gw2/$hmask \
  94                         --edst $gw2 --spi 0x535
  95                 ipsec spi --edst $gw2 --spi 0x535 --esp 3des-sha1-96 \
  96                         --iv 0x1000000000000001  \
  97                         --enckey 0x414243444546474849505152535455565758596061626364 \
  98                         --authkey 0x6566676869707172737475767778798081828384
  99                 ;;
 100         tresp3dessha1del)
 101                 ipsec spi --edst $gw1 --spi 0x525 --del
 102
 103                 ipsec spi --edst $gw2 --spi 0x535 --del
 104
 105
 106                 ipsec eroute --del --src $gw1/$hmask --dst $gw2/$hmask
 107
 108
 109                 route del $gw2
 110                 ;;
 111         trespdesmd5)
 112                 ipsec spi --edst $gw1 --spi 0x565 --esp des-md5-96 \
 113                         --iv 0x1000000000000001  \
 114                         --enckey 0xb3b4b5b6b7b8b9c0 \
 115                         --authkey 0xc1c2c3c4c5c6c7c8c9d0d1d2d3d4d5d6
 116
 117                 route del $gw2
 118                 route add -host $gw2 dev ipsec0
 119
 120                 ipsec eroute --add --src $gw1/$hmask \
 121                         --dst $gw2/$hmask \
 122                         --edst $gw2 --spi 0x575
 123                 ipsec spi --edst $gw2 --spi 0x575 --esp des-md5-96 \
 124                         --iv 0x1000000000000001  \
 125                         --enckey 0xd7d8d9e0e1e2e3e4 \
 126                         --authkey 0xe5e6e7e8e9f0f1f2f3f4f5f6f7f8f900
 127                 ;;
 128         trespdesmd5del)
 129                 ipsec spi --edst $gw1 --spi 0x565 --del
 130
 131                 ipsec spi --edst $gw2 --spi 0x575 --del
 132
 133
 134                 ipsec eroute --del --src $gw1/$hmask --dst $gw2/$hmask
 135
 136
 137                 route del $gw2
 138                 ;;
 139         trespdes)
 140                 ipsec spi --edst $gw1 --spi 0x565 --proto esp --esp des \
 141                         --iv 0x1000000000000001  \
 142                         --enckey 0xb3b4b5b6b7b8b9c0
 143
 144                 ipsec spi --edst $gw2 --spi 0x575 --proto esp --esp des \
 145                         --iv 0x1000000000000001  \
 146                         --enckey 0xd7d8d9e0e1e2e3e4
 147                 ipsec eroute --add --src $gw1/$hmask \
 148                         --dst $gw2/$hmask \
 149                         --edst $gw2 --spi 0x575 --proto esp
 150                 route del $gw2
 151                 route add -host $gw2 dev ipsec0
 152                 ;;
 153         trespdesdel)
 154                 ipsec spi --edst $gw1 --spi 0x565 --proto esp --del
 155
 156                 route del $gw2
 157                 ipsec eroute --del --src $gw1/$hmask --dst $gw2/$hmask
 158                 ipsec spi --edst $gw2 --spi 0x575 --proto esp --del
 159                 ;;
 160         trespdessha1)
 161                 ipsec spi --edst $gw1 --spi 0x565 --esp des-sha1-96 \
 162                         --iv 0x1000000000000001  \
 163                         --enckey 0xb3b4b5b6b7b8b9c0 \
 164                         --authkey 0xc1c2c3c4c5c6c7c8c9d0d1d2d3d4d5d6d7d8d9e0
 165
 166                 route del $gw2
 167                 route add -host $gw2 dev ipsec0
 168
 169                 ipsec eroute --add --src $gw1/$hmask \
 170                         --dst $gw2/$hmask \
 171                         --edst $gw2 --spi 0x575
 172                 ipsec spi --edst $gw2 --spi 0x575 --esp des-sha1-96 \
 173                         --iv 0x1000000000000001  \
 174                         --enckey 0xd7d8d9e0e1e2e3e4 \
 175                         --authkey 0xe5e6e7e8e9f0f1f2f3f4f5f6f7f8f90001020304
 176                 ;;
 177         trespdessha1del)
 178                 ipsec spi --edst $gw1 --spi 0x565 --del
 179
 180                 ipsec spi --edst $gw2 --spi 0x575 --del
 181
 182
 183                 ipsec eroute --del --src $gw1/$hmask --dst $gw2/$hmask
 184
 185
 186                 route del $gw2
 187                 ;;
 188         trahmd5)
 189                 ipsec spi --edst $gw1 --spi 0x545 --ah hmac-md5 \
 190                         --authkey 0x81828384858687888990919293949596
 191
 192                 route del $gw2
 193                 route add -host $gw2 dev ipsec0
 194
 195                 ipsec eroute --add --src $gw1/$hmask \
 196                         --dst $gw2/$hmask \
 197                         --edst $gw2 --spi 0x555
 198                 ipsec spi --edst $gw2 --spi 0x555 --ah hmac-md5 \
 199                         --authkey 0x979899a0a1a2a3a4a5a6a7a8a9b0b1b2
 200                 ;;
 201
 202         trahmd5del)
 203                 ipsec spi --edst $gw1 --spi 0x545 --del
 204
 205                 ipsec spi --edst $gw2 --spi 0x555 --del
 206
 207
 208                 ipsec eroute --del --src $gw1/$hmask --dst $gw2/$hmask
 209
 210
 211                 route del $gw2
 212                 ;;
 213         trahsha1)
 214                 ipsec spi --edst $gw1 --spi 0x585 --proto ah --ah hmac-sha1 \
 215                         --authkey 0x0a0b0c0d0e0f1a1b1c1d1e1f2a2b2c2d2e2f3a3b
 216                 ipsec spi --edst $gw2 --spi 0x595 --proto ah --ah hmac-sha1 \
 217                         --authkey 0x3c3d3e3f4a4b4c4d4e4f5a5b5c5d5e5f6a6b6c6d
 218                 ipsec eroute --add --src $gw1/$hmask \
 219                         --dst $gw2/$hmask \
 220                         --edst $gw2 --spi 0x595 --proto ah
 221                 route del $gw2
 222                 route add -host $gw2 dev ipsec0
 223                 ;;
 224
 225         trahsha1del)
 226                 ipsec spi --edst $gw1 --spi 0x585 --proto ah --del
 227
 228                 route del $gw2
 229                 ipsec eroute --del --src $gw1/$hmask --dst $gw2/$hmask
 230                 ipsec spi --edst $gw2 --spi 0x595 --proto ah --del
 231                 ;;
 232         trespdes)
 233                 ipsec spi --edst $gw1 --spi 0x565 --esp des \
 234                         --iv 0x6630663066306631 \
 235                         --enckey 0xb3b4b5b6b7b8b9c0
 236
 237                 route del $gw2
 238                 route add -host $gw2 dev ipsec0
 239
 240                 ipsec eroute --add --src $gw1/$hmask \
 241                         --dst $gw2/$hmask \
 242                         --edst $gw2 --spi 0x575
 243                 ipsec spi --edst $gw2 --spi 0x575 --esp des \
 244                         --iv 0x6630663066306631 \
 245                         --enckey 0xd7d8d9e0e1e2e3e4
 246                 ;;
 247         trespdesdel)
 248                 ipsec spi --edst $gw1 --spi 0x565 --del
 249
 250                 ipsec spi --edst $gw2 --spi 0x575 --del
 251
 252
 253                 ipsec eroute --del --src $gw1/$hmask --dst $gw2/$hmask
 254
 255
 256                 route del $gw2
 257                 ;;
 258
 259         trtu)
 260                 route del $gw2
 261                 route add -host $gw2 dev ipsec0
 262
 263                 ipsec eroute --add --src $gw1/$hmask \
 264                         --dst $gw2/$hmask \
 265                         --edst $gw2 --spi 0x135
 266                 ipsec spi --edst $gw2 --spi 0x135 ip4 \
 267                         $gw1 $gw2
 268                 ;;
 269         # Tunnel mode
 270         tuespdesahmd5)
 271                 # return path
 272                 ipsec spi --edst $gw1 --spi 0x105 --esp des \
 273                         --iv 0x6630663066306631 \
 274                         --enckey 0x6630663066303132
 275                 ipsec spi --edst $gw1 --spi 0x106 --ah md5 \
 276                         --authkey 0x66306630663031326630663066303132
 277
 278                 route del $net2
 279                 route add -net $net2 dev ipsec0 gw $gw2
 280
 281                 # forward path
 282                 ipsec eroute --add --src $net1/$nmask \
 283                         --dst $net2/$nmask \
 284                         --edst $gw2 --spi 0x113
 285
 286                 ipsec spi --edst $gw2 --spi 0x113 ip4 \
 287                         $gw1 $gw2
 288                 ipsec spi --edst $gw2 --spi 0x115 --esp des \
 289                         --iv 0x6630663066306631 \
 290                         --enckey 0x6630663066303133
 291                 ipsec spi --edst $gw2 --spi 0x116 --ah md5 \
 292                         --authkey 0x66306630663031326630663066303133
 293
 294                 ipsec spigrp $gw2 0x113 \
 295                         $gw2 0x115 \
 296                         $gw2 0x116
 297                 ;;
 298         turoad)
 299                 # return path
 300                 ipsec spi --edst $gw1 --spi 0x105 --esp des \
 301                         --iv 0x6630663066306631 \
 302                         --enckey 0x6630663066303130
 303                 ipsec spi --edst $gw1 --spi 0x106 --ah md5 \
 304                         --authkey 0x66306630663031326630663066303130
 305
 306                 route del $gw2
 307                 route add -host $gw2 dev ipsec0 gw 192.168.2.103
 308
 309                 # forward path
 310                 ipsec eroute --add --src $net1/$nmask \
 311                         --dst $gw2/$hmask \
 312                         --edst $gw2 --spi 0x113
 313
 314                 ipsec spi --edst $gw2 --spi 0x113 ip4 \
 315                         $gw1 $gw2
 316                 ipsec spi --edst $gw2 --spi 0x115 --esp des \
 317                         --iv 0x6630663066306631 \
 318                         --enckey 0x6630663066303131
 319                 ipsec spi --edst $gw2 --spi 0x116 --ah md5 \
 320                         --authkey 0x66306630663031326630663066303131
 321
 322                 ipsec spigrp $gw2 0x113 \
 323                         $gw2 0x115 \
 324                         $gw2 0x116
 325                 ;;
 326         turoad2)
 327                 # return path
 328                 ipsec spi --edst $gw1 --spi 0x105 --esp des \
 329                         --iv 0x6630663066306631 \
 330                         --enckey 0x6630663066303130
 331                 ipsec spi --edst $gw1 --spi 0x106 --ah md5 \
 332                         --authkey 0x66306630663031326630663066303130
 333
 334                 route del $net2
 335                 route add -net $net2 dev ipsec0 gw $gw2
 336
 337                 # forward path
 338                 ipsec ipsec ipsec eroute --add --src $gw1/$hmask \
 339                         --dst $net2/$nmask \
 340                         --edst $gw2 --spi 0x113
 341
 342                 ipsec spi --edst $gw2 --spi 0x113 ip4 \
 343                         $gw1 $gw2
 344                 ipsec spi --edst $gw2 --spi 0x115 --esp des \
 345                         --iv 0x6630663066306631 \
 346                         --enckey 0x6630663066303131
 347                 ipsec spi --edst $gw2 --spi 0x116 --ah md5 \
 348                         --authkey 0x66306630663031326630663066303131
 349
 350                 ipsec spigrp $gw2 0x113 \
 351                         $gw2 0x115 \
 352                         $gw2 0x116
 353                 ;;
 354         tugw)
 355                 # return path
 356                 ipsec spi --edst $gw1 --spi 0x105 --esp des \
 357                         --iv 0x6630663066306631 \
 358                         --enckey 0x6630663066303138
 359                 ipsec spi --edst $gw1 --spi 0x106 --ah md5 \
 360                         --authkey 0x66306630663031326630663066303138
 361
 362                 route del $gw2
 363                 route add -host $gw2 dev ipsec0
 364
 365                 # forward path
 366                 ipsec eroute --add --src $gw1/$hmask \
 367                         --dst $gw2/$hmask \
 368                         --edst $gw2 --spi 0x113
 369
 370                 ipsec spi --edst $gw2 --spi 0x113 ip4 \
 371                         $gw1 $gw2
 372                 ipsec spi --edst $gw2 --spi 0x115 --esp des \
 373                         --iv 0x6630663066306631 \
 374                         --enckey 0x6630663066303139
 375                 ipsec spi --edst $gw2 --spi 0x116 --ah md5 \
 376                         --authkey 0x66306630663031326630663066303139
 377
 378                 ipsec spigrp $gw2 0x113 \
 379                         $gw2 0x115 \
 380                         $gw2 0x116
 381                 ;;
 382         proc)
 383                 cat /proc/net/ipsec_*
 384                 ;;
 385 esac
 386
 387
 388 #
 389 # $Log: 105,v $
 390 # Revision 1.8  1999/04/06 04:54:34  rgb
 391 # Fix/Add RCSID Id: and Log: bits to make PHMDs happy.  This includes
 392 # patch shell fixes.
 393 #
 394 #