/testing/guestbin/swan-prep
west #
 ipsec start
Redirecting to: [initsystem]
west #
 ../../guestbin/wait-until-pluto-started
west #
 ipsec addconn --verbose west
opening file: /etc/ipsec.conf
debugging mode enabled
end of file /etc/ipsec.conf
Loading default conn
Loading conn west
Loading conn west-bogus
Loading conn east
loading named conns: west
resolving src = %eth1 gateway = <not-set> peer 192.1.2.23
  seeking nothing
resolving src = 192.1.2.23 gateway = <not-set> peer %eth1
  seeking nothing
conn: "west" modecfgdns=<unset>
conn: "west" modecfgdomains=<unset>
conn: "west" modecfgbanner=<unset>
conn: "west" mark=<unset>
conn: "west" mark-in=<unset>
conn: "west" mark-out=<unset>
conn: "west" vti_iface=<unset>
conn: "west" redirect-to=<unset>
conn: "west" accept-redirect-to=<unset>
conn: "west" esp=<unset>
conn: "west" ike=<unset>
002 "west": added IKEv2 connection
west #
 ipsec addconn --verbose west-bogus
opening file: /etc/ipsec.conf
debugging mode enabled
end of file /etc/ipsec.conf
Loading default conn
Loading conn west
Loading conn west-bogus
Loading conn east
loading named conns: west-bogus
resolving src = %bogus1 gateway = <not-set> peer 192.1.2.23
  seeking nothing
resolving src = 192.1.2.23 gateway = <not-set> peer %bogus1
  seeking nothing
conn: "west-bogus" modecfgdns=<unset>
conn: "west-bogus" modecfgdomains=<unset>
conn: "west-bogus" modecfgbanner=<unset>
conn: "west-bogus" mark=<unset>
conn: "west-bogus" mark-in=<unset>
conn: "west-bogus" mark-out=<unset>
conn: "west-bogus" vti_iface=<unset>
conn: "west-bogus" redirect-to=<unset>
conn: "west-bogus" accept-redirect-to=<unset>
conn: "west-bogus" esp=<unset>
conn: "west-bogus" ike=<unset>
002 "west-bogus": added IKEv2 connection
west #
 echo "initdone"
initdone
west #
 ipsec auto --up west
1v2 "west" #1: initiating IKEv2 connection
1v2 "west" #1: sent IKE_SA_INIT request
1v2 "west" #1: sent IKE_AUTH request {cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048}
003 "west" #1: established IKE SA; authenticated using authby=secret and peer ID_FQDN '@west'
004 "west" #2: established Child SA using #1; IPsec tunnel [192.1.2.45-192.1.2.45:0-65535 0] -> [192.1.2.23-192.1.2.23:0-65535 0] {ESP/ESN=>0xESPESP <0xESPESP xfrm=AES_GCM_16_256-NONE DPD=passive}
west #
 echo done
done
west #
 
