--- east.console.txt 2019-08-24 18:12:56.167677661 +0000 +++ OUTPUT/east.console.txt 2019-08-26 13:13:02.176442192 +0000 @@ -15,29 +15,7 @@ ../../pluto/bin/ipsec-look.sh east NOW XFRM state: -src 192.1.2.254 dst 192.1.2.23 - proto esp spi 0xSPISPI reqid REQID mode tunnel - replay-window 32 flag af-unspec - aead rfc4106(gcm(aes)) 0xENCAUTHKEY 128 - encap type espinudp sport 3500 dport 4500 addr 0.0.0.0 -src 192.1.2.23 dst 192.1.2.254 - proto esp spi 0xSPISPI reqid REQID mode tunnel - replay-window 32 flag af-unspec - aead rfc4106(gcm(aes)) 0xENCAUTHKEY 128 - encap type espinudp sport 4500 dport 3500 addr 0.0.0.0 XFRM policy: -src 0.0.0.0/0 dst 192.0.2.100/32 - dir out priority 1048543 ptype main - tmpl src 192.1.2.23 dst 192.1.2.254 - proto esp reqid REQID mode tunnel -src 192.0.2.100/32 dst 0.0.0.0/0 - dir fwd priority 1048543 ptype main - tmpl src 192.1.2.254 dst 192.1.2.23 - proto esp reqid REQID mode tunnel -src 192.0.2.100/32 dst 0.0.0.0/0 - dir in priority 1048543 ptype main - tmpl src 192.1.2.254 dst 192.1.2.23 - proto esp reqid REQID mode tunnel XFRM done IPSEC mangle TABLES NEW_IPSEC_CONN mangle TABLES @@ -45,7 +23,6 @@ default via 192.1.2.254 dev eth1 192.0.1.0/24 via 192.1.2.45 dev eth1 192.0.2.0/24 dev eth0 proto kernel scope link src 192.0.2.254 -192.0.2.100 dev eth1 scope link 192.1.2.0/24 dev eth1 proto kernel scope link src 192.1.2.23 NSS_CERTIFICATES Certificate Nickname Trust Attributes