road:~#
 hostname road.uml.freeswan.org
road:~#
 ifconfig eth0 inet 192.1.3.213
road:~#
 route delete -net default 
SIOCDELRT: No such process
road:~#
 route add -net default gw 192.1.3.254
road:~#
 netstat -rne
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.1.3.0       0.0.0.0         255.255.255.0   U     0      0        0 eth0
0.0.0.0         192.1.3.254     0.0.0.0         UG    0      0        0 eth0
road:~#
 named
road:~#
 sleep 2
road:~#
 /testing/pluto/bin/look-for-txt 213.3.1.192.in-addr.arpa. AQNxbOBmD
LOOK-FOR-TXT FOUND AQNxbOBmD
road:~#
 TESTNAME=myid-road-04
road:~#
 source /testing/pluto/bin/roadlocal.sh
road:~#
 ipsec setup start
ipsec_setup: Starting Libreswan IPsec VERSION
road:~#
 /testing/pluto/oe-road-01/policy-wait.sh
road:~#
 echo done
done
road:~#
 : turn on debugging
road:~#
 ipsec whack --debug-control --debug-oppo --debug-dns
road:~#
 : check out config
road:~#
 ipsec eroute
0          0.0.0.0/0          -> 0.0.0.0/0          => %trap
0          192.1.3.213/32     -> 0.0.0.0/0          => %trap
0          192.1.3.213/32     -> 192.0.2.2/32       => %trap
0          192.1.3.213/32     -> 192.1.2.129/32     => %pass
0          192.1.3.213/32     -> 192.1.2.130/32     => %pass
0          192.1.3.213/32     -> 192.1.2.254/32     => %pass
road:~#
 ping -c 4 -n 192.0.2.2
PING 192.0.2.2 (192.0.2.2): 56 data bytes
64 bytes from 192.0.2.2: icmp_seq=0 ttl=257 time=999 ms
64 bytes from 192.0.2.2: icmp_seq=1 ttl=257 time=999 ms
64 bytes from 192.0.2.2: icmp_seq=2 ttl=257 time=999 ms
64 bytes from 192.0.2.2: icmp_seq=3 ttl=257 time=999 ms

--- 192.0.2.2 ping statistics ---
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max = 3.1/4.5/9.26 ms
road:~#
 : transfer some data
road:~#
 nc -w 5 192.0.2.2 2 | wc -l
    831
road:~#
 ipsec eroute | grep -l tun
(standard input)
road:~#
 : check if eroute owner is the same as newest IPSEC
road:~#
 if ipsec whack --status | grep 'newest IPSEC' | grep 'eroute owner' >/dev/null;  then echo newest is eroute owner; else echo two SAs alive; fi
newest is eroute owner
road:~#
 

road:~#
 : check out the myid that I concluded with
road:~#
 ipsec auto --status | grep '%myid ='
000 %myid = 192.1.3.213
road:~#
road:~#

