--- west.console.txt 2019-08-24 18:12:56.196676639 +0000 +++ OUTPUT/west.console.txt 2019-08-26 13:25:24.851440003 +0000 @@ -13,15 +13,12 @@ sleep 30 west # ipsec whack --trafficstatus -006 #2: "west-east-auto", type=ESP, add_time=1234567890, inBytes=0, outBytes=0, id='@east' +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # # use delete, not down - because east has auto=start west # ipsec auto --delete west-east-auto -002 "west-east-auto": terminating SAs using this connection -002 "west-east-auto" #2: deleting state (STATE_V2_IPSEC_R) and sending notification -005 "west-east-auto" #2: ESP traffic information: in=0B out=0B -002 "west-east-auto" #1: deleting state (STATE_PARENT_R2) and sending notification +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # # give Delete/Notify some time west # @@ -30,8 +27,10 @@ # no IPsec SA should be there. No ISAKMP SA should be there either west # ipsec whack --trafficstatus +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # ipsec status |grep west-east +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # echo done done @@ -39,10 +38,12 @@ # There should be no established IKE SA and no established IPsec SA west # ipsec whack --trafficstatus +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # # only on east, pluto should be attempting to connect to west because it has auto=start west # ipsec status |grep STATE_ +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # # confirm the revive conn code triggered west #