/testing/guestbin/swan-prep --x509
Preparing X.509 files
east #
 # confirm that the network is alive
east #
 ipsec start
Redirecting to: [initsystem]
east #
 ../../guestbin/wait-until-pluto-started
east #
 ipsec whack --impair suppress_retransmits
east #
 ipsec auto --add roadnet-eastnet-ipv4-psk-ikev1
"roadnet-eastnet-ipv4-psk-ikev1": added IKEv1 connection
east #
 echo "initdone"
initdone
east #
 ../../guestbin/wait-for-pluto.sh '^".*#2: IPsec SA established'
"roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254 #2: IPsec SA established tunnel mode {ESPinUDP=>0xESPESP <0xESPESP xfrm=AES_CBC_128-HMAC_SHA1_96 NATD=192.1.2.254:4500 DPD=passive username=use3}
east #
 ../../guestbin/wait-for-pluto.sh '^".*#8: IPsec SA established'
"roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254 #8: IPsec SA established tunnel mode {ESPinUDP=>0xESPESP <0xESPESP xfrm=AES_CBC_128-HMAC_SHA1_96 NATD=192.1.2.254:4500 DPD=passive username=use3}
east #
 ipsec showstates
#1: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254:4500 STATE_MAIN_R3 (ISAKMP SA established); REPLACE in XXs; lastdpd=-1s(seq in:0 out:0); idle;
#2: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254:4500 STATE_QUICK_R2 (IPsec SA established); REPLACE in XXs; ISAKMP SA #1; idle;
#2: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254 esp.ESPSPIi@192.1.2.254 esp.ESPSPIi@192.1.2.23 tun.0@192.1.2.254 tun.0@192.1.2.23 Traffic: ESPin=84B ESPout=84B ESPmax=2^63B username=use3
#3: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254:4500 STATE_MAIN_R3 (ISAKMP SA established); REPLACE in XXs; lastdpd=-1s(seq in:0 out:0); idle;
#4: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254:4500 STATE_QUICK_R2 (IPsec SA established); REPLACE in XXs; ISAKMP SA #3; idle;
#4: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254 esp.ESPSPIi@192.1.2.254 esp.ESPSPIi@192.1.2.23 tun.0@192.1.2.254 tun.0@192.1.2.23 Traffic: ESPin=0B ESPout=0B ESPmax=2^63B username=use3
#5: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254:4500 STATE_MAIN_R3 (ISAKMP SA established); REPLACE in XXs; lastdpd=-1s(seq in:0 out:0); idle;
#6: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254:4500 STATE_QUICK_R2 (IPsec SA established); REPLACE in XXs; ISAKMP SA #5; idle;
#6: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254 esp.ESPSPIi@192.1.2.254 esp.ESPSPIi@192.1.2.23 tun.0@192.1.2.254 tun.0@192.1.2.23 Traffic: ESPin=0B ESPout=0B ESPmax=2^63B username=use3
#7: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254:4500 STATE_MAIN_R3 (ISAKMP SA established); REPLACE in XXs; newest; lastdpd=-1s(seq in:0 out:0); idle;
#8: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254:4500 STATE_QUICK_R2 (IPsec SA established); REPLACE in XXs; newest; eroute owner; ISAKMP SA #7; idle;
#8: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254 esp.ESPSPIi@192.1.2.254 esp.ESPSPIi@192.1.2.23 tun.0@192.1.2.254 tun.0@192.1.2.23 Traffic: ESPin=168B ESPout=168B ESPmax=2^63B username=use3
east #
 ipsec _kernel policy
src 192.0.2.1/32 dst 192.1.2.23/32
	dir fwd priority PRIORITY ptype main
	tmpl src 192.1.2.254 dst 192.1.2.23
		proto esp reqid REQID mode tunnel
src 192.0.2.1/32 dst 192.1.2.23/32
	dir in priority PRIORITY ptype main
	tmpl src 192.1.2.254 dst 192.1.2.23
		proto esp reqid REQID mode tunnel
src 192.1.2.23/32 dst 192.0.2.1/32
	dir out priority PRIORITY ptype main
	tmpl src 192.1.2.23 dst 192.1.2.254
		proto esp reqid REQID mode tunnel
east #
