--- west.console.txt 2019-08-24 18:12:56.279673714 +0000 +++ OUTPUT/west.console.txt 2019-08-26 13:27:58.211070645 +0000 @@ -3,14 +3,7 @@ # confirm that the network is alive west # ping6 -n -c 4 -I 2001:db8:0:1::254 2001:db8:0:2::254 -PING 2001:db8:0:2::254(2001:db8:0:2::254) from 2001:db8:0:1::254 : 56 data bytes -64 bytes from 2001:db8:0:2::254: icmp_seq=1 ttl=64 time=0.XXX ms -64 bytes from 2001:db8:0:2::254: icmp_seq=2 ttl=64 time=0.XXX ms -64 bytes from 2001:db8:0:2::254: icmp_seq=3 ttl=64 time=0.XXX ms -64 bytes from 2001:db8:0:2::254: icmp_seq=4 ttl=64 time=0.XXX ms ---- 2001:db8:0:2::254 ping statistics --- -4 packets transmitted, 4 received, 0% packet loss, time XXXX -rtt min/avg/max/mdev = 0.XXX/0.XXX/0.XXX/0.XXX ms +ping: bind icmp socket: Cannot assign requested address west # # ensure that clear text does not get through west # @@ -21,9 +14,7 @@ # confirm clear text does not get through west # ping6 -n -c 4 -I 2001:db8:0:1::254 2001:db8:0:2::254 -PING 2001:db8:0:2::254(2001:db8:0:2::254) from 2001:db8:0:1::254 : 56 data bytes ---- 2001:db8:0:2::254 ping statistics --- -4 packets transmitted, 0 received, 100% packet loss, time XXXX +ping: bind icmp socket: Cannot assign requested address west # ipsec start Redirecting to: [initsystem] @@ -67,20 +58,13 @@ 004 "westnet-eastnet-6in4" #2: STATE_V2_IPSEC_I: IPsec SA established tunnel mode {ESP=>0xESPESP <0xESPESP xfrm=AES_GCM_16_256-NONE NATOA=none NATD=none DPD=passive} west # ping6 -n -c 4 -I 2001:db8:0:1::254 2001:db8:0:2::254 -PING 2001:db8:0:2::254(2001:db8:0:2::254) from 2001:db8:0:1::254 : 56 data bytes -64 bytes from 2001:db8:0:2::254: icmp_seq=1 ttl=64 time=0.XXX ms -64 bytes from 2001:db8:0:2::254: icmp_seq=2 ttl=64 time=0.XXX ms -64 bytes from 2001:db8:0:2::254: icmp_seq=3 ttl=64 time=0.XXX ms -64 bytes from 2001:db8:0:2::254: icmp_seq=4 ttl=64 time=0.XXX ms ---- 2001:db8:0:2::254 ping statistics --- -4 packets transmitted, 4 received, 0% packet loss, time XXXX -rtt min/avg/max/mdev = 0.XXX/0.XXX/0.XXX/0.XXX ms +ping: bind icmp socket: Cannot assign requested address west # echo done done west # ipsec whack --trafficstatus -006 #2: "westnet-eastnet-6in4", type=ESP, add_time=1234567890, inBytes=416, outBytes=416, id='@east' +006 #2: "westnet-eastnet-6in4", type=ESP, add_time=1234567890, inBytes=0, outBytes=0, id='@east' west # ip xfrm state src 192.1.2.23 dst 192.1.2.45 @@ -108,14 +92,6 @@ src ::/0 dst ::/0 socket out priority 0 ptype main src ::/0 dst ::/0 - socket in priority 0 ptype main -src ::/0 dst ::/0 - socket out priority 0 ptype main -src ::/0 dst ::/0 - socket in priority 0 ptype main -src ::/0 dst ::/0 - socket out priority 0 ptype main -src ::/0 dst ::/0 socket in priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket out priority 0 ptype main