/testing/guestbin/swan-prep --userland strongswan west # strongswan starter --debug-all Starting strongSwan X.X.X IPsec [starter]... Loading config setup Loading conn 'westnet-eastnet-ikev2' left=192.1.2.45 leftid=@west right=192.1.2.23 rightid=@east rightsubnet=192.0.2.0/24 leftsubnet=192.0.1.0/24 authby=secret keyexchange=ikev2 auto=add esp=aes128-sha2_512 ike=3des-md5-modp2048 found netkey IPsec stack west # echo "initdone" initdone west # strongswan up westnet-eastnet-ikev2 initiating IKE_SA westnet-eastnet-ikev2[1] to 192.1.2.23 generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ] sending packet: from 192.1.2.45[500] to 192.1.2.23[500] (XXX bytes) received packet: from 192.1.2.23[500] to 192.1.2.45[500] (XXX bytes) parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) CERTREQ N(MULT_AUTH) ] received 1 cert requests for an unknown ca authentication of 'west' (myself) with pre-shared key establishing CHILD_SA westnet-eastnet-ikev2 generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr AUTH SA TSi TSr N(MOBIKE_SUP) N(ADD_4_ADDR) N(ADD_4_ADDR) N(MULT_AUTH) N(EAP_ONLY) ] sending packet: from 192.1.2.45[4500] to 192.1.2.23[4500] (XXX bytes) received packet: from 192.1.2.23[4500] to 192.1.2.45[4500] (XXX bytes) parsed IKE_AUTH response 1 [ IDr AUTH SA TSi TSr N(AUTH_LFT) N(MOBIKE_SUP) N(ADD_4_ADDR) N(ADD_4_ADDR) ] authentication of 'east' with pre-shared key successful IKE_SA westnet-eastnet-ikev2[1] established between 192.1.2.45[west]...192.1.2.23[east] scheduling reauthentication in XXXs maximum IKE_SA lifetime XXXs connection 'westnet-eastnet-ikev2' established successfully west # ping -n -c 4 -I 192.0.1.254 192.0.2.254 PING 192.0.2.254 (192.0.2.254) from 192.0.1.254 : 56(84) bytes of data. 64 bytes from 192.0.2.254: icmp_seq=1 ttl=64 time=0.XXX ms 64 bytes from 192.0.2.254: icmp_seq=2 ttl=64 time=0.XXX ms 64 bytes from 192.0.2.254: icmp_seq=3 ttl=64 time=0.XXX ms 64 bytes from 192.0.2.254: icmp_seq=4 ttl=64 time=0.XXX ms --- 192.0.2.254 ping statistics --- 4 packets transmitted, 4 received, 0% packet loss, time XXXX rtt min/avg/max/mdev = 0.XXX/0.XXX/0.XXX/0.XXX ms west # echo done done west # if [ -f /var/run/pluto/pluto.pid ]; then ipsec look ; fi west # if [ -f /var/run/charon.pid ]; then strongswan status ; fi Security Associations (1 up, 0 connecting): westnet-eastnet-ikev2[1]: ESTABLISHED XXX seconds ago, 192.1.2.45[west]...192.1.2.23[east] westnet-eastnet-ikev2{1}: INSTALLED, TUNNEL, ESP SPIs: SPISPI_i SPISPI_o westnet-eastnet-ikev2{1}: 192.0.1.0/24 === 192.0.2.0/24 west # west # if [ -n "`ls /tmp/core* 2>/dev/null`" ]; then echo CORE FOUND; mv /tmp/core* OUTPUT/; fi west # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi