--- west.console.txt 2019-08-24 18:12:56.124679177 +0000 +++ OUTPUT/west.console.txt 2019-08-26 13:25:20.561590198 +0000 @@ -13,23 +13,19 @@ sleep 30 west # ipsec whack --trafficstatus -006 #3: "west-east-auto", type=ESP, add_time=1234567890, inBytes=0, outBytes=0, id='@east' -006 #2: "west-east-auto2", type=ESP, add_time=1234567890, inBytes=0, outBytes=0, id='@east' +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # # delete instead of down so it won't re-establish due to east auto=start west # ipsec auto --delete west-east-auto -002 "west-east-auto": terminating SAs using this connection -002 "west-east-auto" #3: deleting state (STATE_QUICK_R2) and sending notification -005 "west-east-auto" #3: ESP traffic information: in=0B out=0B +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # sleep 2 west # # We should still have the ISAKMP SA for west-east-auto2 west # ipsec status |grep west-east | grep STATE_ -000 #1: "west-east-auto2":500 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_REPLACE in XXs; newest ISAKMP; lastdpd=-1s(seq in:0 out:0); idle; -000 #2: "west-east-auto2":500 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_REPLACE in XXs; newest IPSEC; eroute owner; isakmp#1; idle; +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # # one IPsec SA should be up and one ISAKMP SA should be there west # @@ -38,11 +34,10 @@ # should be an attempt for the deleted IPsec SA to be restarted west # ipsec whack --trafficstatus -006 #2: "west-east-auto2", type=ESP, add_time=1234567890, inBytes=0, outBytes=0, id='@east' +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # ipsec status |grep west-east |grep STATE_ -000 #1: "west-east-auto2":500 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_REPLACE in XXs; newest ISAKMP; lastdpd=-1s(seq in:0 out:0); idle; -000 #2: "west-east-auto2":500 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_REPLACE in XXs; newest IPSEC; eroute owner; isakmp#1; idle; +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # west # ../bin/check-for-core.sh