testing/tests/ikev2/reauth-mbb-virtual-ip/description.txt

   1 This scenario tests <b>make-before-break reauthentication</b> using overlapping
   2 IKE_SAs by setting the <i>make_before_break</i> strongswan.conf option for
   3 clients using an assigned virtual IP. The initiator <b>carol</b> reauthenticates
   4 the IKE_SA with host <b>moon</b> using <b>ikelifetime=10s</b>, but does not
   5 close the old IKE_SA before the replacement CHILD_SA using the same virtual IP
   6 is in place. A constant ping from <b>carol</b> to client <b>alice</b>
   7 hiding in the subnet behind <b>moon</b> tests if the CHILD_SA works during the
   8 whole procedure.