xref: /openbsd/regress/sbin/ipsecctl/ike62.ok (revision d89ec533) 
1C set [Phase 1]:2.2.2.2=peer-2.2.2.2 force
2C set [peer-2.2.2.2]:Phase=1 force
3C set [peer-2.2.2.2]:Address=2.2.2.2 force
4C set [peer-2.2.2.2]:Configuration=phase1-peer-2.2.2.2 force
5C set [phase1-peer-2.2.2.2]:EXCHANGE_TYPE=ID_PROT force
6C add [phase1-peer-2.2.2.2]:Transforms=phase1-transform-peer-2.2.2.2-RSA_SIG-SHA-AES128-MODP_3072 force
7C set [phase1-transform-peer-2.2.2.2-RSA_SIG-SHA-AES128-MODP_3072]:AUTHENTICATION_METHOD=RSA_SIG force
8C set [phase1-transform-peer-2.2.2.2-RSA_SIG-SHA-AES128-MODP_3072]:HASH_ALGORITHM=SHA force
9C set [phase1-transform-peer-2.2.2.2-RSA_SIG-SHA-AES128-MODP_3072]:ENCRYPTION_ALGORITHM=AES_CBC force
10C set [phase1-transform-peer-2.2.2.2-RSA_SIG-SHA-AES128-MODP_3072]:KEY_LENGTH=128,128:256 force
11C set [phase1-transform-peer-2.2.2.2-RSA_SIG-SHA-AES128-MODP_3072]:GROUP_DESCRIPTION=MODP_3072 force
12C set [phase1-transform-peer-2.2.2.2-RSA_SIG-SHA-AES128-MODP_3072]:Life=LIFE_MAIN_MODE force
13C set [from-1.1.1.1-to-2.2.2.2]:Phase=2 force
14C set [from-1.1.1.1-to-2.2.2.2]:ISAKMP-peer=peer-2.2.2.2 force
15C set [from-1.1.1.1-to-2.2.2.2]:Configuration=phase2-from-1.1.1.1-to-2.2.2.2 force
16C set [from-1.1.1.1-to-2.2.2.2]:Local-ID=from-1.1.1.1 force
17C set [from-1.1.1.1-to-2.2.2.2]:Remote-ID=to-2.2.2.2 force
18C set [phase2-from-1.1.1.1-to-2.2.2.2]:EXCHANGE_TYPE=QUICK_MODE force
19C set [phase2-from-1.1.1.1-to-2.2.2.2]:Suites=phase2-suite-from-1.1.1.1-to-2.2.2.2 force
20C set [phase2-suite-from-1.1.1.1-to-2.2.2.2]:Protocols=phase2-protocol-from-1.1.1.1-to-2.2.2.2 force
21C set [phase2-protocol-from-1.1.1.1-to-2.2.2.2]:PROTOCOL_ID=IPSEC_ESP force
22C set [phase2-protocol-from-1.1.1.1-to-2.2.2.2]:Transforms=phase2-transform-from-1.1.1.1-to-2.2.2.2-AES128-SHA2_256-MODP_3072-TUNNEL force
23C set [phase2-transform-from-1.1.1.1-to-2.2.2.2-AES128-SHA2_256-MODP_3072-TUNNEL]:TRANSFORM_ID=AES force
24C set [phase2-transform-from-1.1.1.1-to-2.2.2.2-AES128-SHA2_256-MODP_3072-TUNNEL]:KEY_LENGTH=128,128:256 force
25C set [phase2-transform-from-1.1.1.1-to-2.2.2.2-AES128-SHA2_256-MODP_3072-TUNNEL]:ENCAPSULATION_MODE=TUNNEL force
26C set [phase2-transform-from-1.1.1.1-to-2.2.2.2-AES128-SHA2_256-MODP_3072-TUNNEL]:AUTHENTICATION_ALGORITHM=HMAC_SHA2_256 force
27C set [phase2-transform-from-1.1.1.1-to-2.2.2.2-AES128-SHA2_256-MODP_3072-TUNNEL]:GROUP_DESCRIPTION=MODP_3072 force
28C set [phase2-transform-from-1.1.1.1-to-2.2.2.2-AES128-SHA2_256-MODP_3072-TUNNEL]:Life=LIFE_QUICK_MODE force
29C set [from-1.1.1.1]:ID-type=IPV4_ADDR force
30C set [from-1.1.1.1]:Address=1.1.1.1 force
31C set [to-2.2.2.2]:ID-type=IPV4_ADDR force
32C set [to-2.2.2.2]:Address=2.2.2.2 force
33C add [Phase 2]:Connections=from-1.1.1.1-to-2.2.2.2
34C set [Phase 1]:Default=peer-default force
35C set [peer-default]:Phase=1 force
36C set [peer-default]:Configuration=phase1-peer-default force
37C set [phase1-peer-default]:EXCHANGE_TYPE=ID_PROT force
38C add [phase1-peer-default]:Transforms=phase1-transform-peer-default-RSA_SIG-SHA-AES128-MODP_3072 force
39C set [phase1-transform-peer-default-RSA_SIG-SHA-AES128-MODP_3072]:AUTHENTICATION_METHOD=RSA_SIG force
40C set [phase1-transform-peer-default-RSA_SIG-SHA-AES128-MODP_3072]:HASH_ALGORITHM=SHA force
41C set [phase1-transform-peer-default-RSA_SIG-SHA-AES128-MODP_3072]:ENCRYPTION_ALGORITHM=AES_CBC force
42C set [phase1-transform-peer-default-RSA_SIG-SHA-AES128-MODP_3072]:KEY_LENGTH=128,128:256 force
43C set [phase1-transform-peer-default-RSA_SIG-SHA-AES128-MODP_3072]:GROUP_DESCRIPTION=MODP_3072 force
44C set [phase1-transform-peer-default-RSA_SIG-SHA-AES128-MODP_3072]:Life=LIFE_MAIN_MODE force
45C set [from-3.3.3.3-to-4.4.4.4]:Phase=2 force
46C set [from-3.3.3.3-to-4.4.4.4]:ISAKMP-peer=peer-default force
47C set [from-3.3.3.3-to-4.4.4.4]:Configuration=phase2-from-3.3.3.3-to-4.4.4.4 force
48C set [from-3.3.3.3-to-4.4.4.4]:Local-ID=from-3.3.3.3 force
49C set [from-3.3.3.3-to-4.4.4.4]:Remote-ID=to-4.4.4.4 force
50C set [phase2-from-3.3.3.3-to-4.4.4.4]:EXCHANGE_TYPE=QUICK_MODE force
51C set [phase2-from-3.3.3.3-to-4.4.4.4]:Suites=phase2-suite-from-3.3.3.3-to-4.4.4.4 force
52C set [phase2-suite-from-3.3.3.3-to-4.4.4.4]:Protocols=phase2-protocol-from-3.3.3.3-to-4.4.4.4 force
53C set [phase2-protocol-from-3.3.3.3-to-4.4.4.4]:PROTOCOL_ID=IPSEC_ESP force
54C set [phase2-protocol-from-3.3.3.3-to-4.4.4.4]:Transforms=phase2-transform-from-3.3.3.3-to-4.4.4.4-AES128-SHA2_256-MODP_3072-TUNNEL force
55C set [phase2-transform-from-3.3.3.3-to-4.4.4.4-AES128-SHA2_256-MODP_3072-TUNNEL]:TRANSFORM_ID=AES force
56C set [phase2-transform-from-3.3.3.3-to-4.4.4.4-AES128-SHA2_256-MODP_3072-TUNNEL]:KEY_LENGTH=128,128:256 force
57C set [phase2-transform-from-3.3.3.3-to-4.4.4.4-AES128-SHA2_256-MODP_3072-TUNNEL]:ENCAPSULATION_MODE=TUNNEL force
58C set [phase2-transform-from-3.3.3.3-to-4.4.4.4-AES128-SHA2_256-MODP_3072-TUNNEL]:AUTHENTICATION_ALGORITHM=HMAC_SHA2_256 force
59C set [phase2-transform-from-3.3.3.3-to-4.4.4.4-AES128-SHA2_256-MODP_3072-TUNNEL]:GROUP_DESCRIPTION=MODP_3072 force
60C set [phase2-transform-from-3.3.3.3-to-4.4.4.4-AES128-SHA2_256-MODP_3072-TUNNEL]:Life=LIFE_QUICK_MODE force
61C set [from-3.3.3.3]:ID-type=IPV4_ADDR force
62C set [from-3.3.3.3]:Address=3.3.3.3 force
63C set [to-4.4.4.4]:ID-type=IPV4_ADDR force
64C set [to-4.4.4.4]:Address=4.4.4.4 force
65C add [Phase 2]:Connections=from-3.3.3.3-to-4.4.4.4
66C set [Phase 1]:9.9.9.9=peer-9.9.9.9 force
67C set [peer-9.9.9.9]:Phase=1 force
68C set [peer-9.9.9.9]:Address=9.9.9.9 force
69C set [peer-9.9.9.9]:Configuration=phase1-peer-9.9.9.9 force
70C set [phase1-peer-9.9.9.9]:EXCHANGE_TYPE=ID_PROT force
71C add [phase1-peer-9.9.9.9]:Transforms=phase1-transform-peer-9.9.9.9-RSA_SIG-SHA-AES128-MODP_3072 force
72C set [phase1-transform-peer-9.9.9.9-RSA_SIG-SHA-AES128-MODP_3072]:AUTHENTICATION_METHOD=RSA_SIG force
73C set [phase1-transform-peer-9.9.9.9-RSA_SIG-SHA-AES128-MODP_3072]:HASH_ALGORITHM=SHA force
74C set [phase1-transform-peer-9.9.9.9-RSA_SIG-SHA-AES128-MODP_3072]:ENCRYPTION_ALGORITHM=AES_CBC force
75C set [phase1-transform-peer-9.9.9.9-RSA_SIG-SHA-AES128-MODP_3072]:KEY_LENGTH=128,128:256 force
76C set [phase1-transform-peer-9.9.9.9-RSA_SIG-SHA-AES128-MODP_3072]:GROUP_DESCRIPTION=MODP_3072 force
77C set [phase1-transform-peer-9.9.9.9-RSA_SIG-SHA-AES128-MODP_3072]:Life=LIFE_MAIN_MODE force
78C set [from-5.5.5.5-to-6.6.6.6]:Phase=2 force
79C set [from-5.5.5.5-to-6.6.6.6]:ISAKMP-peer=peer-9.9.9.9 force
80C set [from-5.5.5.5-to-6.6.6.6]:Configuration=phase2-from-5.5.5.5-to-6.6.6.6 force
81C set [from-5.5.5.5-to-6.6.6.6]:Local-ID=from-5.5.5.5 force
82C set [from-5.5.5.5-to-6.6.6.6]:Remote-ID=to-6.6.6.6 force
83C set [phase2-from-5.5.5.5-to-6.6.6.6]:EXCHANGE_TYPE=QUICK_MODE force
84C set [phase2-from-5.5.5.5-to-6.6.6.6]:Suites=phase2-suite-from-5.5.5.5-to-6.6.6.6 force
85C set [phase2-suite-from-5.5.5.5-to-6.6.6.6]:Protocols=phase2-protocol-from-5.5.5.5-to-6.6.6.6 force
86C set [phase2-protocol-from-5.5.5.5-to-6.6.6.6]:PROTOCOL_ID=IPSEC_ESP force
87C set [phase2-protocol-from-5.5.5.5-to-6.6.6.6]:Transforms=phase2-transform-from-5.5.5.5-to-6.6.6.6-AES128-SHA2_256-MODP_3072-TUNNEL force
88C set [phase2-transform-from-5.5.5.5-to-6.6.6.6-AES128-SHA2_256-MODP_3072-TUNNEL]:TRANSFORM_ID=AES force
89C set [phase2-transform-from-5.5.5.5-to-6.6.6.6-AES128-SHA2_256-MODP_3072-TUNNEL]:KEY_LENGTH=128,128:256 force
90C set [phase2-transform-from-5.5.5.5-to-6.6.6.6-AES128-SHA2_256-MODP_3072-TUNNEL]:ENCAPSULATION_MODE=TUNNEL force
91C set [phase2-transform-from-5.5.5.5-to-6.6.6.6-AES128-SHA2_256-MODP_3072-TUNNEL]:AUTHENTICATION_ALGORITHM=HMAC_SHA2_256 force
92C set [phase2-transform-from-5.5.5.5-to-6.6.6.6-AES128-SHA2_256-MODP_3072-TUNNEL]:GROUP_DESCRIPTION=MODP_3072 force
93C set [phase2-transform-from-5.5.5.5-to-6.6.6.6-AES128-SHA2_256-MODP_3072-TUNNEL]:Life=LIFE_QUICK_MODE force
94C set [from-5.5.5.5]:ID-type=IPV4_ADDR force
95C set [from-5.5.5.5]:Address=5.5.5.5 force
96C set [to-6.6.6.6]:ID-type=IPV4_ADDR force
97C set [to-6.6.6.6]:Address=6.6.6.6 force
98C add [Phase 2]:Connections=from-5.5.5.5-to-6.6.6.6
99