/testing/guestbin/swan-prep --x509
Preparing X.509 files
east #
 # confirm that the network is alive
east #
 ipsec start
Redirecting to: [initsystem]
east #
 /testing/pluto/bin/wait-until-pluto-started
east #
 ipsec auto --add rw
002 added IKEv2 connection "rw"
east #
 echo "initdone"
initdone
east #
 # should show two full sets of policies on both road and east
east #
 ip xfrm policy
src 192.0.2.0/24 dst 100.64.0.2/32 
	dir out priority 2084799 ptype main 
	tmpl src 192.1.2.23 dst 192.1.3.210
		proto esp reqid REQID mode tunnel
src 100.64.0.2/32 dst 192.0.2.0/24 
	dir fwd priority 2084799 ptype main 
	tmpl src 192.1.3.210 dst 192.1.2.23
		proto esp reqid REQID mode tunnel
src 100.64.0.2/32 dst 192.0.2.0/24 
	dir in priority 2084799 ptype main 
	tmpl src 192.1.3.210 dst 192.1.2.23
		proto esp reqid REQID mode tunnel
src 192.0.2.0/24 dst 100.64.0.1/32 
	dir out priority 2084799 ptype main 
	tmpl src 192.1.2.23 dst 192.1.3.209
		proto esp reqid REQID mode tunnel
src 100.64.0.1/32 dst 192.0.2.0/24 
	dir fwd priority 2084799 ptype main 
	tmpl src 192.1.3.209 dst 192.1.2.23
		proto esp reqid REQID mode tunnel
src 100.64.0.1/32 dst 192.0.2.0/24 
	dir in priority 2084799 ptype main 
	tmpl src 192.1.3.209 dst 192.1.2.23
		proto esp reqid REQID mode tunnel
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket out priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket in priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket out priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket in priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket out priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket in priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket out priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket in priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket out priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket in priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket out priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket in priority 0 ptype main 
east #
 ../bin/check-for-core.sh
east #
 if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
east #
 
