--- east.console.txt 2019-08-24 18:12:56.320672268 +0000 +++ OUTPUT/east.console.txt 2019-08-26 13:20:45.213230566 +0000 @@ -22,7 +22,7 @@ # only east should show 1 tunnel, as road was restarted east # ipsec whack --trafficstatus -006 #2: "authenticated"[1] 192.1.3.209, type=ESP, add_time=1234567890, inBytes=168, outBytes=168, id='@road' +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) east # # east shows the authnull is matched on preferred non-null connection, east # @@ -31,13 +31,12 @@ # additional 'authenticated' partial state lingers east # ipsec status | grep STATE_ -000 #1: "authenticated"[1] 192.1.3.209:500 STATE_PARENT_R2 (received v2I2, PARENT SA established); EVENT_SA_REKEY in XXs; newest ISAKMP; idle; -000 #2: "authenticated"[1] 192.1.3.209:500 STATE_V2_IPSEC_R (IPsec SA established); EVENT_SA_REKEY in XXs; newest IPSEC; eroute owner; isakmp#1; idle; -000 #3: "authenticated"[1] 192.1.3.209:500 STATE_PARENT_R1 (received v2I1, sent v2R1); EVENT_SO_DISCARD in XXs; idle; +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) east # # verify no packets were dropped due to missing SPD policies east # grep -v -P "\t0$" /proc/net/xfrm_stat +XfrmOutNoStates 11 east # east # ../bin/check-for-core.sh