/testing/guestbin/swan-prep --x509
Preparing X.509 files
east #
 # confirm that the network is alive
east #
 ipsec start
Redirecting to: [initsystem]
east #
 /testing/pluto/bin/wait-until-pluto-started
east #
 ipsec auto --add roadnet-eastnet-ipv4-psk-ikev2
002 added connection description "roadnet-eastnet-ipv4-psk-ikev2"
east #
 echo "initdone"
initdone
east #
 ipsec status | grep STATE_
000 #1: "roadnet-eastnet-ipv4-psk-ikev2"[1] 192.1.2.254:4500 STATE_PARENT_R2 (received v2I2, PARENT SA established); EVENT_SA_REKEY in XXs; idle;
000 #2: "roadnet-eastnet-ipv4-psk-ikev2"[1] 192.1.2.254:4500 STATE_V2_IPSEC_R (IPsec SA established); EVENT_SA_REKEY in XXs; isakmp#1; idle;
000 #3: "roadnet-eastnet-ipv4-psk-ikev2"[1] 192.1.2.254:4500 STATE_PARENT_R2 (received v2I2, PARENT SA established); EVENT_SA_REKEY in XXs; idle;
000 #4: "roadnet-eastnet-ipv4-psk-ikev2"[1] 192.1.2.254:4500 STATE_V2_IPSEC_R (IPsec SA established); EVENT_SA_REKEY in XXs; isakmp#3; idle;
000 #5: "roadnet-eastnet-ipv4-psk-ikev2"[1] 192.1.2.254:4500 STATE_PARENT_R2 (received v2I2, PARENT SA established); EVENT_SA_REKEY in XXs; idle;
000 #6: "roadnet-eastnet-ipv4-psk-ikev2"[1] 192.1.2.254:4500 STATE_V2_IPSEC_R (IPsec SA established); EVENT_SA_REKEY in XXs; isakmp#5; idle;
000 #7: "roadnet-eastnet-ipv4-psk-ikev2"[1] 192.1.2.254:4500 STATE_PARENT_R2 (received v2I2, PARENT SA established); EVENT_SA_REKEY in XXs; newest ISAKMP; idle;
000 #8: "roadnet-eastnet-ipv4-psk-ikev2"[1] 192.1.2.254:4500 STATE_V2_IPSEC_R (IPsec SA established); EVENT_SA_REKEY in XXs; newest IPSEC; eroute owner; isakmp#7; idle;
east #
 ip xfrm policy
src 192.1.2.23/32 dst 192.0.2.1/32 
	dir out priority 1040351 ptype main 
	tmpl src 192.1.2.23 dst 192.1.2.254
		proto esp reqid REQID mode tunnel
src 192.0.2.1/32 dst 192.1.2.23/32 
	dir fwd priority 1040351 ptype main 
	tmpl src 192.1.2.254 dst 192.1.2.23
		proto esp reqid REQID mode tunnel
src 192.0.2.1/32 dst 192.1.2.23/32 
	dir in priority 1040351 ptype main 
	tmpl src 192.1.2.254 dst 192.1.2.23
		proto esp reqid REQID mode tunnel
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket out priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket in priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket out priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket in priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket out priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket in priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket out priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket in priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket out priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket in priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket out priority 0 ptype main 
src 0.0.0.0/0 dst 0.0.0.0/0 
	socket in priority 0 ptype main 
east #
east #
 ../bin/check-for-core.sh
east #
 if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi