/testing/guestbin/swan-prep west # ipsec start Redirecting to: [initsystem] west # /testing/pluto/bin/wait-until-pluto-started west # echo "initdone" initdone west # # wait for east to initiate to us west # sleep 30 west # ipsec whack --trafficstatus whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # # use delete, not down - because east has auto=start west # ipsec auto --delete west-east-auto whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # # give Delete/Notify some time west # sleep 5 west # # no IPsec SA should be there. No ISAKMP SA should be there either west # ipsec whack --trafficstatus whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # ipsec status |grep west-east whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # # wait over one minute to ensure no EVENT_SA_REPLACE lingered and started something west # sleep 45 west # sleep 30 west # # There should be no IKE SA and no IPsec SA west # ipsec whack --trafficstatus whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # # east howvever, should be attempting to connect to west because it has auto=start west # ipsec status |grep EVENT_RETRANSMIT | sed "s/EVENT_RETRANSMIT in .*$/EVENT_RETRANSMIT in .../" whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # west # ../bin/check-for-core.sh west # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi