Project

General

Profile

IKEv2 Configuration Examples » History » Version 26

Andreas Steffen, 19.06.2013 22:23
Fixed links to NAT examples

1 8 Andreas Steffen
h1. IKEv2 Configuration Examples
2 1 Martin Willi
3 1 Martin Willi
4 1 Martin Willi
5 8 Andreas Steffen
h2. Remote Access
6 1 Martin Willi
7 1 Martin Willi
8 26 Andreas Steffen
|RSA authentication with X.509 certificates    |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/rw-cert               |"IPv6":http://www.strongswan.org/uml/testresults/ipv6/rw-ikev2 |"NAT":http://www.strongswan.org/uml/testresults/ikev2/nat-rw |
9 26 Andreas Steffen
|PSK authentication with pre-shared keys       |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/rw-psk-ipv4           |"IPv6":http://www.strongswan.org/uml/testresults/ipv6/rw-psk-ikev2|"NAT":http://www.strongswan.org/uml/testresults/ikev2/nat-rw-psk|
10 16 Andreas Steffen
|EAP_AKA authentication                        |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-aka-rsa        | | |
11 16 Andreas Steffen
|EAP_AKA authentication with EAP identity      |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-aka-identity   | | |
12 16 Andreas Steffen
|EAP_SIM authentication                        |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-sim-rsa        | |"RADIUS":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-sim-radius |
13 16 Andreas Steffen
|EAP_SIM authentication with EAP identity      | | |"RADIUS":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-sim-id-radius |
14 16 Andreas Steffen
|EAP_SIM only authentication                   | | |"RADIUS":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-sim-only-radius |
15 16 Andreas Steffen
|EAP_MSCHAPv2 authentication with EAP identity |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-mschapv2-id-rsa| | |
16 16 Andreas Steffen
|EAP_MD5 authentication                        |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-md5-rsa        | |"RADIUS":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-md5-radius |
17 16 Andreas Steffen
|EAP_MD5 authentication with EAP identity      | | |"RADIUS":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-md5-id-radius |
18 21 Andreas Steffen
|EAP_TLS authentication                        |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-tls-only | |"RADIUS":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-tls-radius |
19 21 Andreas Steffen
|EAP_TTLS with EAP_MD5 client authentication  |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-ttls-only | |"RADIUS":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-ttls-radius |
20 25 Andreas Steffen
|EAP_TTLS with EAP_MD5 client authentication and EAP_TNC with allow/isolate |"IPv4":http://www.strongswan.org/uml/testresults/tnc/tnccs-dynamic | |"RADIUS":http://www.strongswan.org/uml/testresults/tnc/tnccs-11-radius |
21 25 Andreas Steffen
|EAP_TTLS with EAP_MD5 client authentication and EAP_TNC with allow/block |"IPv4":http://www.strongswan.org/uml/testresults/tnc/tnccs-20-block | |"RADIUS":http://www.strongswan.org/uml/testresults/tnc/tnccs-11-radius-block |
22 25 Andreas Steffen
|EAP_TTLS with EAP_TLS client authentication and EAP_TNC with allow/isolate |"IPv4":http://www.strongswan.org/uml/testresults/tnc/tnccs-20-tls | ||
23 24 Andreas Steffen
|EAP_PEAP with EAP_MD5 client authentication  |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-peap-md5 | |"RADIUS":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-peap-radius |
24 24 Andreas Steffen
|EAP_PEAP with EAP_MSCHAPv2 client authentication  |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/rw-eap-peap-mschapv2 | ||
25 1 Martin Willi
26 1 Martin Willi
27 8 Andreas Steffen
h2. Remote Access with Virtual IP Adresses
28 1 Martin Willi
29 1 Martin Willi
30 16 Andreas Steffen
| RAM-based server-side virtual IP pool      |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/ip-pool         |
31 16 Andreas Steffen
| DB-based server-side virtual IP pool       |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/ip-pool-db      |
32 16 Andreas Steffen
| Static server-side virtual IP addresses    |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/config-payload  |
33 16 Andreas Steffen
| Static client-side virtual IP addresses    |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/virtual-ip      |
34 16 Andreas Steffen
| Two RAM-based server-side virtual IP pools |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/ip-two-pools    |
35 16 Andreas Steffen
| Two DB-based server-side virtual IP pools  |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/ip-two-pools-db |
36 1 Martin Willi
37 8 Andreas Steffen
38 8 Andreas Steffen
h2. Site-to-Site
39 8 Andreas Steffen
40 8 Andreas Steffen
41 16 Andreas Steffen
|RSA authentication with X.509 certificates |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/net2net-cert |"IPv6":http://www.strongswan.org/uml/testresults/ipv6/net2net-ikev2 |
42 16 Andreas Steffen
|PSK authentication with pre-shared keys    |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/net2net-psk | |
43 8 Andreas Steffen
44 8 Andreas Steffen
45 8 Andreas Steffen
h2. Host-to-Host
46 8 Andreas Steffen
47 8 Andreas Steffen
48 16 Andreas Steffen
|IPsec tunnel mode with X.509 certificates    |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/host2host-cert      |"IPv6":http://www.strongswan.org/uml/testresults/ipv6/host2host-ikev2 |
49 16 Andreas Steffen
|IPsec transport mode with X.509 certificates |"IPv4":http://www.strongswan.org/uml/testresults/ikev2/host2host-transport |"IPv6":http://www.strongswan.org/uml/testresults/ipv6/transport-ikev2 |
50 8 Andreas Steffen
51 8 Andreas Steffen
52 8 Andreas Steffen
h2. Complete List
53 8 Andreas Steffen
54 8 Andreas Steffen
55 16 Andreas Steffen
"All IKEv2 test scenarios":http://www.strongswan.org/uml/testresults/ikev2