/testing/guestbin/swan-prep east # ipsec start Redirecting to: [initsystem] east # /testing/pluto/bin/wait-until-pluto-started east # ipsec auto --add replay 002 added connection description "replay" east # ipsec auto --status | grep replay_window 000 "replay": ike_life: 3600s; ipsec_life: 28800s; replay_window: 32; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; east # echo "initdone" initdone east # # replay-window will show up as 0 when ESN is enabled due to kernel bug. east # ip xfrm state |grep replay-window replay-window 0 flag af-unspec esn replay-window 0 flag af-unspec esn east # grep "enabling ESN" /tmp/pluto.log | netlink: enabling ESN | netlink: enabling ESN east # east # ../bin/check-for-core.sh east # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi