/testing/guestbin/swan-prep --46 --x509 --x509name key4096 Preparing X.509 files west # ipsec start Redirecting to: [initsystem] west # /testing/pluto/bin/wait-until-pluto-started west # ipsec auto --add v6-tunnel 002 added connection description "v6-tunnel" west # ipsec whack --impair suppress-retransmits west # echo "initdone" initdone west # ipsec auto --up v6-tunnel 022 "v6-tunnel": We cannot identify ourselves with either end of this connection. 2001:db8:1:2::45 or 2001:db8:1:2::23 are not usable 036 failed to initiate v6-tunnel west # grep "fragment number" /tmp/pluto.log west # echo done done west # ../../pluto/bin/ipsec-look.sh west NOW XFRM state: XFRM policy: src ::/0 dst ::/0 proto ipv6-icmp type 135 dir fwd priority 1 ptype main src ::/0 dst ::/0 proto ipv6-icmp type 135 dir in priority 1 ptype main src ::/0 dst ::/0 proto ipv6-icmp type 135 dir out priority 1 ptype main src ::/0 dst ::/0 proto ipv6-icmp type 136 dir fwd priority 1 ptype main src ::/0 dst ::/0 proto ipv6-icmp type 136 dir in priority 1 ptype main src ::/0 dst ::/0 proto ipv6-icmp type 136 dir out priority 1 ptype main XFRM done IPSEC mangle TABLES NEW_IPSEC_CONN mangle TABLES ROUTING TABLES default via 192.1.2.254 dev eth1 192.0.1.0/24 dev eth0 proto kernel scope link src 192.0.1.254 192.0.2.0/24 via 192.1.2.23 dev eth1 192.1.2.0/24 dev eth1 proto kernel scope link src 192.1.2.45 fe80::/64 dev eth0 proto kernel metric 256 fe80::/64 dev eth1 proto kernel metric 256 NSS_CERTIFICATES Certificate Nickname Trust Attributes SSL,S/MIME,JAR/XPI Libreswan test CA for mainca - Libreswan CT,, east P,, east-ec P,, hashsha1 P,, key4096 u,u,u nic P,, north P,, road P,, west # west # ../bin/check-for-core.sh west # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi