--- north.console.txt 2019-08-25 09:10:16.792972403 +0000 +++ OUTPUT/north.console.txt 2019-08-26 13:10:24.963946433 +0000 @@ -15,6 +15,7 @@ initdone north # ipsec auto --status | grep northnet-eastnets +whack: log line missing NNN prefix: north # ipsec auto --up northnet-eastnet 000 initiating all conns with alias='northnet-eastnet' @@ -62,27 +63,58 @@ ip xfrm state src 192.1.2.23 dst 192.1.3.33 proto esp spi 0xSPISPI reqid REQID mode tunnel + replay-window 32 flag af-unspec aead rfc4106(gcm(aes)) 0xENCAUTHKEY 128 src 192.1.3.33 dst 192.1.2.23 proto esp spi 0xSPISPI reqid REQID mode tunnel + replay-window 32 flag af-unspec aead rfc4106(gcm(aes)) 0xENCAUTHKEY 128 src 192.1.2.23 dst 192.1.3.33 proto esp spi 0xSPISPI reqid REQID mode tunnel + replay-window 32 flag af-unspec aead rfc4106(gcm(aes)) 0xENCAUTHKEY 128 src 192.1.3.33 dst 192.1.2.23 proto esp spi 0xSPISPI reqid REQID mode tunnel + replay-window 32 flag af-unspec aead rfc4106(gcm(aes)) 0xENCAUTHKEY 128 north # ip xfrm policy src 192.0.3.0/24 dst 192.0.2.0/24 dir out priority 1042407 ptype main tmpl src 192.1.3.33 dst 192.1.2.23 + proto esp reqid REQID mode tunnel src 192.0.2.0/24 dst 192.0.3.0/24 dir fwd priority 1042407 ptype main tmpl src 192.1.2.23 dst 192.1.3.33 + proto esp reqid REQID mode tunnel src 192.0.2.0/24 dst 192.0.3.0/24 dir in priority 1042407 ptype main tmpl src 192.1.2.23 dst 192.1.3.33 + proto esp reqid REQID mode tunnel +src 0.0.0.0/0 dst 0.0.0.0/0 + socket out priority 0 ptype main +src 0.0.0.0/0 dst 0.0.0.0/0 + socket in priority 0 ptype main +src 0.0.0.0/0 dst 0.0.0.0/0 + socket out priority 0 ptype main +src 0.0.0.0/0 dst 0.0.0.0/0 + socket in priority 0 ptype main +src 0.0.0.0/0 dst 0.0.0.0/0 + socket out priority 0 ptype main +src 0.0.0.0/0 dst 0.0.0.0/0 + socket in priority 0 ptype main +src 0.0.0.0/0 dst 0.0.0.0/0 + socket out priority 0 ptype main +src 0.0.0.0/0 dst 0.0.0.0/0 + socket in priority 0 ptype main +src 0.0.0.0/0 dst 0.0.0.0/0 + socket out priority 0 ptype main +src 0.0.0.0/0 dst 0.0.0.0/0 + socket in priority 0 ptype main +src 0.0.0.0/0 dst 0.0.0.0/0 + socket out priority 0 ptype main +src 0.0.0.0/0 dst 0.0.0.0/0 + socket in priority 0 ptype main north # north # ../bin/check-for-core.sh