xref: /openbsd/regress/sbin/ipsecctl/ike59.ok (revision fe0dc84e)
11a80f382ShshoexerC set [Phase 1]:1.2.3.4=peer-1.2.3.4 force
21a80f382ShshoexerC set [peer-1.2.3.4]:Phase=1 force
31a80f382ShshoexerC set [peer-1.2.3.4]:Address=1.2.3.4 force
4befd40c8SbluhmC set [peer-1.2.3.4]:Configuration=phase1-peer-1.2.3.4 force
5befd40c8SbluhmC set [phase1-peer-1.2.3.4]:EXCHANGE_TYPE=ID_PROT force
6*fe0dc84eSmikebC add [phase1-peer-1.2.3.4]:Transforms=phase1-transform-peer-1.2.3.4-RSA_SIG-SHA-AES128-MODP_3072 force
7*fe0dc84eSmikebC set [phase1-transform-peer-1.2.3.4-RSA_SIG-SHA-AES128-MODP_3072]:AUTHENTICATION_METHOD=RSA_SIG force
8*fe0dc84eSmikebC set [phase1-transform-peer-1.2.3.4-RSA_SIG-SHA-AES128-MODP_3072]:HASH_ALGORITHM=SHA force
9*fe0dc84eSmikebC set [phase1-transform-peer-1.2.3.4-RSA_SIG-SHA-AES128-MODP_3072]:ENCRYPTION_ALGORITHM=AES_CBC force
10*fe0dc84eSmikebC set [phase1-transform-peer-1.2.3.4-RSA_SIG-SHA-AES128-MODP_3072]:KEY_LENGTH=128,128:256 force
11*fe0dc84eSmikebC set [phase1-transform-peer-1.2.3.4-RSA_SIG-SHA-AES128-MODP_3072]:GROUP_DESCRIPTION=MODP_3072 force
12*fe0dc84eSmikebC set [phase1-transform-peer-1.2.3.4-RSA_SIG-SHA-AES128-MODP_3072]:Life=LIFE_MAIN_MODE force
13befd40c8SbluhmC set [from-10.0.0.1/32-to-10.0.0.2/32]:Phase=2 force
14befd40c8SbluhmC set [from-10.0.0.1/32-to-10.0.0.2/32]:ISAKMP-peer=peer-1.2.3.4 force
15befd40c8SbluhmC set [from-10.0.0.1/32-to-10.0.0.2/32]:Configuration=phase2-from-10.0.0.1/32-to-10.0.0.2/32 force
16befd40c8SbluhmC set [from-10.0.0.1/32-to-10.0.0.2/32]:Local-ID=from-10.0.0.1/32 force
17befd40c8SbluhmC set [from-10.0.0.1/32-to-10.0.0.2/32]:Remote-ID=to-10.0.0.2/32 force
18befd40c8SbluhmC set [phase2-from-10.0.0.1/32-to-10.0.0.2/32]:EXCHANGE_TYPE=QUICK_MODE force
1902cf1b84SmarkusC set [phase2-from-10.0.0.1/32-to-10.0.0.2/32]:Suites=phase2-suite-from-10.0.0.1/32-to-10.0.0.2/32 force
2002cf1b84SmarkusC set [phase2-suite-from-10.0.0.1/32-to-10.0.0.2/32]:Protocols=phase2-protocol-from-10.0.0.1/32-to-10.0.0.2/32 force
2102cf1b84SmarkusC set [phase2-protocol-from-10.0.0.1/32-to-10.0.0.2/32]:PROTOCOL_ID=IPSEC_ESP force
22*fe0dc84eSmikebC set [phase2-protocol-from-10.0.0.1/32-to-10.0.0.2/32]:Transforms=phase2-transform-from-10.0.0.1/32-to-10.0.0.2/32-AES128-SHA2_256-MODP_3072-TUNNEL force
23*fe0dc84eSmikebC set [phase2-transform-from-10.0.0.1/32-to-10.0.0.2/32-AES128-SHA2_256-MODP_3072-TUNNEL]:TRANSFORM_ID=AES force
24*fe0dc84eSmikebC set [phase2-transform-from-10.0.0.1/32-to-10.0.0.2/32-AES128-SHA2_256-MODP_3072-TUNNEL]:KEY_LENGTH=128,128:256 force
25*fe0dc84eSmikebC set [phase2-transform-from-10.0.0.1/32-to-10.0.0.2/32-AES128-SHA2_256-MODP_3072-TUNNEL]:ENCAPSULATION_MODE=TUNNEL force
26*fe0dc84eSmikebC set [phase2-transform-from-10.0.0.1/32-to-10.0.0.2/32-AES128-SHA2_256-MODP_3072-TUNNEL]:AUTHENTICATION_ALGORITHM=HMAC_SHA2_256 force
27*fe0dc84eSmikebC set [phase2-transform-from-10.0.0.1/32-to-10.0.0.2/32-AES128-SHA2_256-MODP_3072-TUNNEL]:GROUP_DESCRIPTION=MODP_3072 force
28*fe0dc84eSmikebC set [phase2-transform-from-10.0.0.1/32-to-10.0.0.2/32-AES128-SHA2_256-MODP_3072-TUNNEL]:Life=LIFE_QUICK_MODE force
292414ad2fShshoexerC set [from-10.0.0.1/32]:ID-type=IPV4_ADDR_SUBNET force
302414ad2fShshoexerC set [from-10.0.0.1/32]:Network=10.0.0.1 force
312414ad2fShshoexerC set [from-10.0.0.1/32]:Netmask=255.255.255.255 force
322414ad2fShshoexerC set [to-10.0.0.2/32]:ID-type=IPV4_ADDR_SUBNET force
332414ad2fShshoexerC set [to-10.0.0.2/32]:Network=10.0.0.2 force
342414ad2fShshoexerC set [to-10.0.0.2/32]:Netmask=255.255.255.255 force
35befd40c8SbluhmC add [Phase 2]:Connections=from-10.0.0.1/32-to-10.0.0.2/32
36