freeswan/klips/test/west/magellan

   1 #!/bin/sh
   2 #
   3 # RCSID $Id: magellan,v 1.7 1999/04/06 04:54:36 rgb Exp $
   4 #
   5
   6 hmask=255.255.255.255
   7 nmask0=0.0.0.0
   8 nmask16=255.255.0.0
   9 nmask24=255.255.255.0
  10 nmask25=255.255.255.128
  11 nmask28=255.255.255.240
  12 nmask29=255.255.255.248
  13
  14 sg1=209.157.90.146
  15 sg1a=209.157.90.150
  16 net1=209.157.90.160
  17 nmask1=$nmask29
  18
  19 sg2=207.236.55.216
  20 sg2a=207.236.55.1
  21 net2=192.168.2.0
  22 nmask2=$nmask24
  23
  24 sg3=209.157.90.146
  25 sg3a=209.157.90.150
  26 net3=0.0.0.0
  27 nmask3=$nmask0
  28
  29 sg4=207.236.55.216
  30 sg4a=207.236.55.1
  31 net4=209.157.90.192
  32 nmask4=$nmask29
  33
  34 ipsecdev=ipsec0
  35
  36 case "$1" in
  37         setup)
  38                 #depmod -a
  39                 #modprobe ipsec
  40
  41                 #tncfg attach $ipsecdev eth0
  42                 #ifconfig $ipsecdev $sg1 netmask $nmask29
  43         ;;
  44         # Transport mode
  45         tresp3desmd5)
  46                 spi --edst $sg1 --spi 0x225 --esp 3des-md5-96 \
  47                         --iv 0x1000000000000001 \
  48                         --enckey 0x00150016001700180019001a001b001c001d001e001f0020 \
  49                         --authkey 0x00210022002300240025002600270028
  50
  51                 route del $sg2
  52                 route add -host $sg2 dev $ipsecdev gw $sg1a
  53
  54                 eroute --add --src $sg1/$hmask \
  55                         --dst $sg2/$hmask \
  56                         --edst $sg2 --spi 0x235
  57                 spi --edst $sg2 --spi 0x235 --esp 3des-md5-96 \
  58                         --iv 0x1000000000000001 \
  59                         --enckey 0x000100020003000400050006000700080009000a000b000c \
  60                         --authkey 0x000d000e000f00100011001200130014
  61         ;;
  62         tresp3desmd5del)
  63                 spi --edst $sg1 --spi 0x225 --del
  64
  65                 eroute --del --src $sg1/$hmask \
  66                         --dst $sg2/$hmask
  67
  68                 route del $net2
  69
  70                 spi --edst $sg2 --spi 0x235 --del
  71         ;;
  72         trahmd5)
  73                 spi --edst $sg1 --spi 0x225 --ah md5 \
  74                         --authkey 0x66306630663031326630663066303146
  75
  76                 route del $sg2
  77                 route add -host $sg2 dev $ipsecdev gw $sg1a
  78
  79                 eroute --add --src $sg1/$hmask \
  80                         --dst $sg2/$hmask \
  81                         --edst $sg2 --spi 0x235
  82                 spi --edst $sg2 --spi 0x235 --ah md5 \
  83                         --authkey 0x66306630663031326630663066303147
  84         ;;
  85         trahmd5del)
  86                 spi --edst $sg1 --spi 0x225 --del
  87
  88                 route del $sg2
  89
  90                 eroute --del --src $sg1/$hmask \
  91                         --dst $sg2/$hmask
  92
  93                 spi --edst $sg2 --spi 0x235 --del
  94         ;;
  95         trespdes)
  96                 spi --edst $sg1 --spi 0x225 --esp des \
  97                         --iv 0x6630663066306631 \
  98                         --enckey 0x6630663066303144
  99
 100                 route del $sg2
 101                 route add -host $sg2 dev $ipsecdev gw $sg1a
 102
 103                 eroute --add --src $sg1/$hmask \
 104                         --dst $sg2/$hmask \
 105                         --edst $sg2 --spi 0x235
 106                 spi --edst $sg2 --spi 0x235 --esp des \
 107                         --iv 0x6630663066306631 \
 108                         --enckey 0x6630663066303145
 109         ;;
 110         trespdesdel)
 111                 spi --edst $sg1 --spi 0x225 --del
 112
 113                 route del $sg2
 114
 115                 eroute --del --src $sg1/$hmask \
 116                         --dst $sg2/$hmask
 117                 spi --edst $sg2 --spi 0x235 --del
 118         ;;
 119         trtu)
 120                 route del $sg2
 121                 route add -host $sg2 dev $ipsecdev gw $sg1a
 122
 123                 eroute --add --src $sg1/$hmask \
 124                         --dst $sg2/$hmask \
 125                         --edst $sg2 --spi 0x235
 126                 spi --edst $sg2 --spi 0x235 --ip4 \
 127                         --src $sg1 --dst $sg2
 128         ;;
 129         # Tunnel mode
 130         tuespdesahmd5)
 131                 # return path
 132                 spi --edst $sg1 --spi 0x205 --esp des \
 133                         --iv 0x6630663066306631 \
 134                         --enckey 0x6630663066303142
 135                 spi --edst $sg1 --spi 0x206 --ah md5 \
 136                         --authkey 0x66306630663031326630663066303142
 137
 138                 # forward path
 139                 route del $net2
 140                 route add -net $net2 netmask $nmask2 dev $ipsecdev gw $sg1a
 141                 eroute --add --src $net1/$nmask1 \
 142                         --dst $net2/$nmask2 \
 143                         --edst $sg2 --spi 0x213
 144                 spi --edst $sg2 --spi 0x213 --ip4 \
 145                         --src $sg1 --dst $sg2
 146                 spi --edst $sg2 --spi 0x215 --esp des \
 147                         --iv 0x6630663066306631 \
 148                         --enckey 0x6630663066303143
 149                 spi --edst $sg2 --spi 0x216 --ah md5 \
 150                         --authkey 0x66306630663031326630663066303143
 151
 152                 spigrp $sg2 0x213 \
 153                         $sg2 0x215 \
 154                         $sg2 0x216
 155         ;;
 156         tuespdesahmd5del)
 157                 # return path
 158                 spi --edst $sg1 --spi 0x205 --del
 159
 160                 route del $net2
 161                 eroute --del --src $net1/$nmask1 \
 162                         --dst $net2/$nmask2
 163                 spi --edst $sg2 --spi 0x213 --del
 164         ;;
 165         tuesp3desmd5)
 166                 # return path
 167                 spi --edst $sg1 --spi 0x205 --esp 3des-md5-96 \
 168                         --iv 0x1000000000000001  \
 169                         --enckey 0x003d003e003f004000410042004300440045004600470048 \
 170                         --authkey 0x0049004a004b004c004d004e004f0050
 171
 172                 route del $net2
 173                 route add -net $net2 dev $ipsecdev gw $sg1a
 174
 175                 # forward path
 176                 eroute --add --src $net1/$nmask1 \
 177                         --dst $net2/$nmask2 \
 178                         --edst $sg2 --spi 0x213
 179
 180                 spi --edst $sg2 --spi 0x213 --ip4 \
 181                         --src $sg1 --dst $sg2
 182                 spi --edst $sg2 --spi 0x215 --esp 3des-md5-96 \
 183                         --iv 0x1000000000000001  \
 184                         --enckey 0x0029002a002b002c002d002e002f00300031003200330034 \
 185                         --authkey 0x00350036003700380039003a003b003c
 186
 187                 spigrp $sg2 0x213 \
 188                         $sg2 0x215
 189         ;;
 190         tuesp3desmd5del)
 191                 # return path
 192                 spi --edst $sg1 --spi 0x205 --del
 193
 194                 route del $net2
 195
 196                 eroute --del --src $net1/$nmask1 \
 197                         --dst $net2/$nmask2
 198
 199                 spi --edst $sg2 --spi 0x213 --del
 200         ;;
 201         turoadyou)
 202                 # return path
 203                 spi --edst $sg1 --spi 0x205 --esp 3des-md5-96 \
 204                         --iv 0x1000000000000001
 205                         --enckey 0x00650066006700680069006a006b006c006d006e006f0070 \
 206                         --authkey 0x00710072007300740075007600770078
 207
 208                 # forward path
 209                 route del $sg2
 210                 route add -host $sg2 dev $ipsecdev gw $sg1a
 211                 eroute --add --src $net1/$nmask1 \
 212                         --dst $sg2/$hmask \
 213                         --edst $sg2 --spi 0x213
 214                 spi --edst $sg2 --spi 0x213 --ip4 \
 215                         --src $sg1 --dst $sg2
 216                 spi --edst $sg2 --spi 0x215 --esp 3des-md5-96 \
 217                         --iv 0x1000000000000001
 218                         --enckey 0x005100520053005400550056005700580059005a005b005c \
 219                         --authkey 0x005d005e005f00600061006200630064
 220
 221                 spigrp $sg2 0x213 \
 222                         $sg2 0x215
 223         ;;
 224         turoadyoudel)
 225                 # return path
 226                 spi --edst $sg1 --spi 0x205 --del
 227
 228                 # forward path
 229                 route del $sg2
 230                 eroute --del --src $net1/$nmask1 \
 231                         --dst $sg2/$hmask
 232                 spi --edst $sg2 --spi 0x213 --del
 233         ;;
 234         turoadme)
 235                 # return path
 236                 spi --edst $sg1 --spi 0x205 --esp 3des-md5-96 \
 237                         --iv 0x1000000000000001 \
 238                         --enckey 0x00650066006700680069006a006b006c006d006e006f0070 \
 239                         --authkey 0x00710072007300740075007600770078
 240
 241                 # forward path
 242                 route del $net2
 243                 route add -net $net2 netmask $nmask2 dev $ipsecdev gw $sg1a
 244
 245                 eroute --add --src $sg1/$hmask \
 246                         --dst $net2/$nmask2 \
 247                         --edst $sg2 --spi 0x213
 248                 spi --edst $sg2 --spi 0x213 --ip4 \
 249                         --src $sg1 --dst $sg2
 250                 spi --edst $sg2 --spi 0x215 --esp 3des-md5-96 \
 251                         --iv 0x1000000000000001
 252                         --enckey 0x005100520053005400550056005700580059005a005b005c \
 253                         --authkey 0x005d005e005f00600061006200630064
 254
 255                 spigrp $sg2 0x213 \
 256                         $sg2 0x215
 257         ;;
 258         turoadmedel)
 259                 # return path
 260                 spi --edst $sg1 --spi 0x205 --del
 261
 262                 route del $net2
 263
 264                 # forward path
 265                 eroute --del --src $sg1/$hmask \
 266                         --dst $net2/$nmask2
 267                 spi --edst $sg2 --spi 0x213 --del
 268         ;;
 269         tusgespdesahmd5)
 270                 # return path
 271                 spi --edst $sg1 --spi 0x205 --esp des \
 272                         --iv 0x6630663066306631 \
 273                         --enckey 0x6630663066303148
 274                 spi --edst $sg1 --spi 0x206 --ah md5 \
 275                         --authkey 0x66306630663031326630663066303148
 276
 277                 # forward path
 278                 route del $sg2
 279                 route add -host $sg2 dev $ipsecdev gw $sg1a
 280                 eroute --add --src $sg1/$hmask \
 281                         --dst $sg2/$hmask \
 282                         --edst $sg2 --spi 0x213
 283                 spi --edst $sg2 --spi 0x213 --ip4 \
 284                         --src $sg1 --dst $sg2
 285                 spi --edst $sg2 --spi 0x215 --esp des \
 286                         --iv 0x6630663066306631 \
 287                         --enckey 0x6630663066303149
 288                 spi --edst $sg2 --spi 0x216 --ah md5 \
 289                         --authkey 0x66306630663031326630663066303149
 290
 291                 spigrp $sg2 0x213 \
 292                         $sg2 0x215 \
 293                         $sg2 0x216
 294         ;;
 295         tusgespdesahmd5del)
 296                 # return path
 297                 spi --edst $sg1 --spi 0x205 --del
 298
 299                 eroute --del --src $sg1/$hmask \
 300                         --dst $sg2/$hmask
 301
 302                 route del $net2
 303
 304                 spi --edst $sg2 --spi 0x213 --del
 305         ;;
 306         tusgesp3desmd5)
 307                 # return path
 308                 spi --edst $sg1 --spi 0x205 --esp 3des-md5-96 \
 309                         --iv 0x1000000000000001
 310                         --enckey 0x00650066006700680069006a006b006c006d006e006f0070 \
 311                         --authkey 0x00710072007300740075007600770078
 312
 313                 # forward path
 314                 route del $sg2
 315                 route add -host $sg2 dev $ipsecdev gw $sg1a
 316                 eroute --add --src $sg1/$hmask \
 317                         --dst $sg2/$hmask \
 318                         --edst $sg2 --spi 0x213
 319                 spi --edst $sg2 --spi 0x213 --ip4 \
 320                         --src $sg1 --dst $sg2
 321                 spi --edst $sg2 --spi 0x215 --esp 3des-md5-96 \
 322                         --iv 0x1000000000000001
 323                         --enckey 0x005100520053005400550056005700580059005a005b005c \
 324                         --authkey 0x005d005e005f00600061006200630064
 325
 326                 spigrp $sg2 0x213 \
 327                         $sg2 0x215
 328         ;;
 329         tusgesp3desmd5del)
 330                 # return path
 331                 spi --edst $sg1 --spi 0x205 --del
 332
 333                 eroute --del --src $sg1/$hmask \
 334                         --dst $sg2/$hmask
 335
 336                 route del $net2
 337
 338                 spi --edst $sg2 --spi 0x213 --del
 339         ;;
 340         turealips)
 341                 # forward path
 342                 # if it needs it to avoid conflict with the next incantation
 343                 route del $net4
 344                 route add -net $net4 netmask $nmask4 dev $ipsecdev gw $sg3a
 345
 346                 eroute --add --src $net3/$nmask3 \
 347                         --dst $net4/$nmask4 \
 348                         --edst $sg4 --spi 1500
 349
 350                 spi --edst $sg4 --spi 1500 --ip4 \
 351                         --src $sg3 --dst $sg4
 352                 spi --edst $sg4 --spi 1501 --esp 3des-md5-96 \
 353                         --iv 0xAC38429489A4CAC2  \
 354                         --enckey 0xAC89ACE248107DA856C46EEA820A947313436C80B89043C2 \
 355                         --authkey 0xACF3DDD9A182E95D1384E1391322CAC2
 356
 357                 spigrp $sg4 1500 \
 358                         $sg4 1501
 359
 360                 # return path
 361                 spi --edst $sg3 --spi 1503 --esp 3des-md5-96 \
 362                         --iv 0xAC38429489A4CAC2  \
 363                         --enckey 0xAC89ACE248107DA856C46EEA820A947313436C80B89043C2 \
 364                         --authkey 0xACF3DDD9A182E95D1384E1391322CAC2
 365         ;;
 366         turealipsdel)
 367                 route del $net4
 368                 # Don't forget to replace original deleted route if it existed
 369
 370                 eroute --del --src $net3/$nmask3 \
 371                         --dst $net4/$nmask4
 372                 spi --edst $sg4 --spi 1501 --del
 373
 374                 # return path
 375                 spi --edst $sg3 --spi 1503 --del
 376         ;;
 377         proc)
 378                 cat /proc/net/ipsec_*
 379         ;;
 380 esac
 381
 382 #
 383 # $Log: magellan,v $
 384 # Revision 1.7  1999/04/06 04:54:36  rgb
 385 # Fix/Add RCSID Id: and Log: bits to make PHMDs happy.  This includes
 386 # patch shell fixes.
 387 #
 388 #