/testing/guestbin/swan-prep
east #
 ip tunnel add eth3 mode gre local 192.1.2.23 remote 192.1.2.45
east #
 ip addr add 192.1.3.1/24 dev eth3
east #
 ip link set dev eth3 up
east #
 ipsec start
Redirecting to: [initsystem]
east #
 ../../guestbin/wait-until-pluto-started
east #
 ipsec auto --add test1
002 "test1": added IKEv2 connection
east #
 ipsec auto --add test2
002 "test2": added IKEv2 connection
east #
 ipsec auto --add test3
002 "test3": added IKEv2 connection
east #
 ipsec auto --ready
002 listening for IKE messages
002 forgetting secrets
002 loading secrets from "/etc/ipsec.secrets"
east #
 ipsec auto --status | grep interface
000 using kernel interface: xfrm
000 interface lo UDP 127.0.0.1:4500
000 interface lo UDP 127.0.0.1:500
000 interface eth0 UDP 192.0.2.254:4500
000 interface eth0 UDP 192.0.2.254:500
000 interface eth1 UDP 192.1.2.23:4500
000 interface eth1 UDP 192.1.2.23:500
000 interface eth3 UDP 192.1.3.1:4500
000 interface eth3 UDP 192.1.3.1:500
000 "test1":   conn_prio: 32,32; interface: eth3; metric: 0; mtu: unset; sa_prio:auto; sa_tfc:none;
000 "test2":   conn_prio: 32,32; interface: eth3; metric: 0; mtu: unset; sa_prio:auto; sa_tfc:none;
000 "test3":   conn_prio: 32,32; interface: ; metric: 0; mtu: unset; sa_prio:auto; sa_tfc:none;
east #
 ipsec auto --status | grep orient
000 "test1":     oriented; my_ip=unset; their_ip=unset; my_updown=ipsec _updown;
000 "test2":     oriented; my_ip=unset; their_ip=unset; my_updown=ipsec _updown;
000 "test3":     unoriented; my_ip=unset; their_ip=unset; my_updown=ipsec _updown;
east #
 ip addr add 192.1.3.3/24 dev eth3
east #
 ipsec auto --ready
002 listening for IKE messages
002 adding UDP interface eth3 192.1.3.3:500
002 adding UDP interface eth3 192.1.3.3:4500
003 two interfaces match "test2" (eth3 192.1.3.3, eth3 192.1.3.1)
002 "test2": terminating SAs using this connection
005 "test2" #4: ESP traffic information: in=84B out=84B
002 "test2" #3: deleting state (STATE_V2_ESTABLISHED_IKE_SA) and sending notification
002 forgetting secrets
002 loading secrets from "/etc/ipsec.secrets"
east #
 ipsec auto --status | grep orient
000 "test1":     oriented; my_ip=unset; their_ip=unset; my_updown=ipsec _updown;
000 "test2":     unoriented; my_ip=unset; their_ip=unset; my_updown=ipsec _updown;
000 "test3":     oriented; my_ip=unset; their_ip=unset; my_updown=ipsec _updown;
east #
 ipsec auto --ready
002 listening for IKE messages
002 forgetting secrets
002 loading secrets from "/etc/ipsec.secrets"
east #
 ipsec auto --status | grep orient
000 "test1":     oriented; my_ip=unset; their_ip=unset; my_updown=ipsec _updown;
000 "test2":     unoriented; my_ip=unset; their_ip=unset; my_updown=ipsec _updown;
000 "test3":     oriented; my_ip=unset; their_ip=unset; my_updown=ipsec _updown;
east #
 ipsec whack --shutdown
east #
 ip link set dev eth3 down
east #
 ip tunnel del eth3
east #
 
