/testing/guestbin/swan-prep west # ipsec start Redirecting to: [initsystem] west # /testing/pluto/bin/wait-until-pluto-started west # ipsec whack --impair delete-on-retransmit west # ipsec auto --add westnet-eastnet-ah 002 added connection description "westnet-eastnet-ah" west # echo "initdone" initdone west # ipsec auto --up westnet-eastnet-ah 002 "westnet-eastnet-ah" #1: initiating Main Mode 1v1 "westnet-eastnet-ah" #1: STATE_MAIN_I1: initiate 1v1 "westnet-eastnet-ah" #1: STATE_MAIN_I2: sent MI2, expecting MR2 1v1 "westnet-eastnet-ah" #1: STATE_MAIN_I3: sent MI3, expecting MR3 002 "westnet-eastnet-ah" #1: Peer ID is ID_FQDN: '@east' 003 "westnet-eastnet-ah" #1: Authenticated using RSA 004 "westnet-eastnet-ah" #1: STATE_MAIN_I4: ISAKMP SA established {auth=RSA_SIG cipher=AES_CBC_256 integ=HMAC_SHA2_256 group=MODP2048} 002 "westnet-eastnet-ah" #2: initiating Quick Mode RSASIG+AUTHENTICATE+TUNNEL+PFS+UP+IKEV1_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO 1v1 "westnet-eastnet-ah" #2: STATE_QUICK_I1: initiate 002 "westnet-eastnet-ah" #2: IMPAIR: retransmit so deleting SA 002 "westnet-eastnet-ah" #2: deleting state (STATE_QUICK_I1) and NOT sending notification west # echo done done west # ../bin/check-for-core.sh west # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi