testing/tests/ikev2-stroke-bye/force-udp-encaps/description.txt

   1 The roadwarrior <b>alice</b> sitting behind the NAT router <b>moon</b> sets up a tunnel to
   2 gateway <b>sun</b>. Since the firewall on <b>sun</b> blocks the ESP protocol, enforced UDP
   3 encapsulation (<b>forceencaps=yes</b>) is used by <b>alice</b> to punch through this hurdle.
   4 <b>leftfirewall=yes</b> automatically inserts iptables-based firewall rules that let pass
   5 the tunneled traffic. In order to test the tunnel, host <b>alice</b> pings the
   6 client <b>bob</b> behind the gateway <b>sun</b>.