/testing/guestbin/swan-prep east # ipsec start Redirecting to: [initsystem] east # /testing/pluto/bin/wait-until-pluto-started east # # connection is loaded and initiated via auto=start east # echo "initdone" initdone east # # There should be no established IKE SA and no established IPsec SA east # ipsec whack --trafficstatus east # # only on east, pluto should be attempting to connect to west because it has auto=start east # ipsec status |grep STATE_ 000 #4: "west-east-auto":500 STATE_PARENT_I1 (sent v2I1, expected v2R1); EVENT_RETRANSMIT in XXs; idle; east # # confirm the revive conn code triggered east # hostname | grep east > /dev/null && grep -e 'but must remain up per local policy' -e '^[^|].*EVENT_REVIVE_CONNS' /tmp/pluto.log "west-east-auto" #1: deleting IKE SA for connection 'west-east-auto' but connection is supposed to remain up; schedule EVENT_REVIVE_CONNS Initiating connection west-east-auto which received a Delete/Notify but must remain up per local policy east # east # ../bin/check-for-core.sh east # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi