xref: /openbsd/regress/sbin/ipsecctl/ike13.ok (revision 404b540a) 
1FROM = "{ 2.2.2.0/24, 3.3.3.0/24, 4.4.4.0/24 }"
2C set [Phase 1]:1.1.1.1=peer-1.1.1.1 force
3C set [peer-1.1.1.1]:Phase=1 force
4C set [peer-1.1.1.1]:Address=1.1.1.1 force
5C set [peer-1.1.1.1]:Configuration=phase1-peer-1.1.1.1 force
6C set [phase1-peer-1.1.1.1]:EXCHANGE_TYPE=ID_PROT force
7C add [phase1-peer-1.1.1.1]:Transforms=AES-SHA-RSA_SIG force
8C set [from-2.2.2.0/24-to-1.1.1.1]:Phase=2 force
9C set [from-2.2.2.0/24-to-1.1.1.1]:ISAKMP-peer=peer-1.1.1.1 force
10C set [from-2.2.2.0/24-to-1.1.1.1]:Configuration=phase2-from-2.2.2.0/24-to-1.1.1.1 force
11C set [from-2.2.2.0/24-to-1.1.1.1]:Local-ID=from-2.2.2.0/24 force
12C set [from-2.2.2.0/24-to-1.1.1.1]:Remote-ID=to-1.1.1.1 force
13C set [phase2-from-2.2.2.0/24-to-1.1.1.1]:EXCHANGE_TYPE=QUICK_MODE force
14C set [phase2-from-2.2.2.0/24-to-1.1.1.1]:Suites=QM-ESP-AES-SHA2-256-PFS-SUITE force
15C set [from-2.2.2.0/24]:ID-type=IPV4_ADDR_SUBNET force
16C set [from-2.2.2.0/24]:Network=2.2.2.0 force
17C set [from-2.2.2.0/24]:Netmask=255.255.255.0 force
18C set [to-1.1.1.1]:ID-type=IPV4_ADDR force
19C set [to-1.1.1.1]:Address=1.1.1.1 force
20C add [Phase 2]:Connections=from-2.2.2.0/24-to-1.1.1.1
21C set [Phase 1]:1.1.1.1=peer-1.1.1.1 force
22C set [peer-1.1.1.1]:Phase=1 force
23C set [peer-1.1.1.1]:Address=1.1.1.1 force
24C set [peer-1.1.1.1]:Configuration=phase1-peer-1.1.1.1 force
25C set [phase1-peer-1.1.1.1]:EXCHANGE_TYPE=ID_PROT force
26C add [phase1-peer-1.1.1.1]:Transforms=AES-SHA-RSA_SIG force
27C set [from-3.3.3.0/24-to-1.1.1.1]:Phase=2 force
28C set [from-3.3.3.0/24-to-1.1.1.1]:ISAKMP-peer=peer-1.1.1.1 force
29C set [from-3.3.3.0/24-to-1.1.1.1]:Configuration=phase2-from-3.3.3.0/24-to-1.1.1.1 force
30C set [from-3.3.3.0/24-to-1.1.1.1]:Local-ID=from-3.3.3.0/24 force
31C set [from-3.3.3.0/24-to-1.1.1.1]:Remote-ID=to-1.1.1.1 force
32C set [phase2-from-3.3.3.0/24-to-1.1.1.1]:EXCHANGE_TYPE=QUICK_MODE force
33C set [phase2-from-3.3.3.0/24-to-1.1.1.1]:Suites=QM-ESP-AES-SHA2-256-PFS-SUITE force
34C set [from-3.3.3.0/24]:ID-type=IPV4_ADDR_SUBNET force
35C set [from-3.3.3.0/24]:Network=3.3.3.0 force
36C set [from-3.3.3.0/24]:Netmask=255.255.255.0 force
37C set [to-1.1.1.1]:ID-type=IPV4_ADDR force
38C set [to-1.1.1.1]:Address=1.1.1.1 force
39C add [Phase 2]:Connections=from-3.3.3.0/24-to-1.1.1.1
40C set [Phase 1]:1.1.1.1=peer-1.1.1.1 force
41C set [peer-1.1.1.1]:Phase=1 force
42C set [peer-1.1.1.1]:Address=1.1.1.1 force
43C set [peer-1.1.1.1]:Configuration=phase1-peer-1.1.1.1 force
44C set [phase1-peer-1.1.1.1]:EXCHANGE_TYPE=ID_PROT force
45C add [phase1-peer-1.1.1.1]:Transforms=AES-SHA-RSA_SIG force
46C set [from-4.4.4.0/24-to-1.1.1.1]:Phase=2 force
47C set [from-4.4.4.0/24-to-1.1.1.1]:ISAKMP-peer=peer-1.1.1.1 force
48C set [from-4.4.4.0/24-to-1.1.1.1]:Configuration=phase2-from-4.4.4.0/24-to-1.1.1.1 force
49C set [from-4.4.4.0/24-to-1.1.1.1]:Local-ID=from-4.4.4.0/24 force
50C set [from-4.4.4.0/24-to-1.1.1.1]:Remote-ID=to-1.1.1.1 force
51C set [phase2-from-4.4.4.0/24-to-1.1.1.1]:EXCHANGE_TYPE=QUICK_MODE force
52C set [phase2-from-4.4.4.0/24-to-1.1.1.1]:Suites=QM-ESP-AES-SHA2-256-PFS-SUITE force
53C set [from-4.4.4.0/24]:ID-type=IPV4_ADDR_SUBNET force
54C set [from-4.4.4.0/24]:Network=4.4.4.0 force
55C set [from-4.4.4.0/24]:Netmask=255.255.255.0 force
56C set [to-1.1.1.1]:ID-type=IPV4_ADDR force
57C set [to-1.1.1.1]:Address=1.1.1.1 force
58C add [Phase 2]:Connections=from-4.4.4.0/24-to-1.1.1.1
59