/testing/guestbin/swan-prep --userland strongswan
west #
 ../../pluto/bin/strongswan-start.sh
west #
 echo "initdone"
initdone
west #
 #sleep 15 seconds,  east is bring up the tunnel
west #
 sleep 15
west #
 strongswan status
Shunted Connections:
Bypass LAN 192.0.1.0/24:  192.0.1.0/24 === 192.0.1.0/24 PASS
Bypass LAN 192.1.2.0/24:  192.1.2.0/24 === 192.1.2.0/24 PASS
Security Associations (1 up, 0 connecting):
westnet-eastnet-ikev2[1]: ESTABLISHED XXX second ago, 192.1.2.45[west]...192.1.2.23[east]
westnet-eastnet-ikev2{1}:  INSTALLED, TUNNEL, reqid 1, ESP SPIs: SPISPI_i SPISPI_o
westnet-eastnet-ikev2{1}:   192.0.1.0/24 === 192.0.2.0/24
west #
 ping -n -s 80 -c  8 -I 192.0.1.254 192.0.2.254
PING 192.0.2.254 (192.0.2.254) from 192.0.1.254 : 80(108) bytes of data.
88 bytes from 192.0.2.254: icmp_seq=1 ttl=64 time=0.XXX ms
88 bytes from 192.0.2.254: icmp_seq=2 ttl=64 time=0.XXX ms
88 bytes from 192.0.2.254: icmp_seq=3 ttl=64 time=0.XXX ms
88 bytes from 192.0.2.254: icmp_seq=4 ttl=64 time=0.XXX ms
88 bytes from 192.0.2.254: icmp_seq=5 ttl=64 time=0.XXX ms
88 bytes from 192.0.2.254: icmp_seq=6 ttl=64 time=0.XXX ms
88 bytes from 192.0.2.254: icmp_seq=7 ttl=64 time=0.XXX ms
88 bytes from 192.0.2.254: icmp_seq=8 ttl=64 time=0.XXX ms
--- 192.0.2.254 ping statistics ---
8 packets transmitted, 8 received, 0% packet loss, time XXXX
rtt min/avg/max/mdev = 0.XXX/0.XXX/0.XXX/0.XXX ms
west #
 # this should have something like westnet-eastnet-ikev2{3} and no packet loss.
west #
 sleep 10 # give strongswan change to remove DELETED, TUNNEL state
west #
 strongswan status | grep -v libcurl
Shunted Connections:
Bypass LAN 192.0.1.0/24:  192.0.1.0/24 === 192.0.1.0/24 PASS
Bypass LAN 192.1.2.0/24:  192.1.2.0/24 === 192.1.2.0/24 PASS
Security Associations (1 up, 0 connecting):
westnet-eastnet-ikev2[1]: ESTABLISHED XXX second ago, 192.1.2.45[west]...192.1.2.23[east]
westnet-eastnet-ikev2{3}:  INSTALLED, TUNNEL, reqid 1, ESP SPIs: SPISPI_i SPISPI_o
westnet-eastnet-ikev2{3}:   192.0.1.0/24 === 192.0.2.0/24
west #
 echo done
done
west #
 if [ -f /var/run/pluto/pluto.pid ]; then ipsec whack --trafficstatus ; fi
west #
 if [ -f /var/run/charon.pid -o -f /var/run/strongswan/charon.pid ]; then strongswan status ; fi
Shunted Connections:
Bypass LAN 192.0.1.0/24:  192.0.1.0/24 === 192.0.1.0/24 PASS
Bypass LAN 192.1.2.0/24:  192.1.2.0/24 === 192.1.2.0/24 PASS
Security Associations (1 up, 0 connecting):
westnet-eastnet-ikev2[1]: ESTABLISHED XXX second ago, 192.1.2.45[west]...192.1.2.23[east]
westnet-eastnet-ikev2{3}:  INSTALLED, TUNNEL, reqid 1, ESP SPIs: SPISPI_i SPISPI_o
westnet-eastnet-ikev2{3}:   192.0.1.0/24 === 192.0.2.0/24
west #
 ../bin/check-for-core.sh
west #
 if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
west #
 
