/testing/guestbin/swan-prep west # ipsec start Redirecting to: [initsystem] west # /testing/pluto/bin/wait-until-pluto-started west # ipsec auto --add westnet-eastnet-aggr 002 added connection description "westnet-eastnet-aggr" west # echo "initdone" initdone west # # create a partial state on east, don't hold the hack for retransmit west # ipsec whack --impair impair-drop-i2 --impair delete-on-retransmit --impair revival west # ipsec auto --up westnet-eastnet-aggr 002 "westnet-eastnet-aggr" #1: initiating Aggressive Mode 1v1 "westnet-eastnet-aggr" #1: STATE_AGGR_I1: initiate 002 "westnet-eastnet-aggr" #1: IMPAIR: retransmit so deleting SA 002 "westnet-eastnet-aggr" #1: deleting state (STATE_AGGR_I1) and NOT sending notification 002 "westnet-eastnet-aggr" #1: IMPAIR: skipping revival of connection 'westnet-eastnet-aggr' that is supposed to remain up west # # we are waiting for east to expire the partial IKE state in 1+1+2+4+8+16+32 secs west # sleep 30 west # sleep 30 west # sleep 10 west # echo done done west # # on east, we should see no more partial state west # ipsec status | grep STATE_ west # west # ../bin/check-for-core.sh west # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi