/testing/guestbin/swan-prep --x509 Preparing X.509 files east # ip route del 192.0.1.0/24 east # ipsec start Redirecting to: [initsystem] east # /testing/pluto/bin/wait-until-pluto-started east # ipsec auto --add east-any 002 added connection description "east-any" east # echo initdone initdone east # sleep 2 east # # both clients should be connected now east # ipsec whack --trafficstatus 006 #2: "east-any"[1] 192.1.3.209, type=ESP, add_time=1234567890, inBytes=336, outBytes=336, id='C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=road.testing.libreswan.org, E=user-road@testing.libreswan.org', lease=192.0.2.101/32 006 #4: "east-any"[2] 192.1.3.33, type=ESP, add_time=1234567890, inBytes=0, outBytes=0, id='C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=north.testing.libreswan.org, E=user-north@testing.libreswan.org', lease=192.0.2.102/32 east # # send REDIRECT in informational to north east # ipsec whack --redirect --peer-ip 192.1.3.33 --gateway 192.1.2.45 002 redirecting of peer 192.1.3.33 successful east # # give north time to be redirected east # sleep 2 east # # only road should be left connected to east. north has gone to west east # ipsec whack --trafficstatus 006 #2: "east-any"[1] 192.1.3.209, type=ESP, add_time=1234567890, inBytes=1208, outBytes=1242, id='C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=road.testing.libreswan.org, E=user-road@testing.libreswan.org', lease=192.0.2.101/32 east # east # ../bin/check-for-core.sh east # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi