--- east.console.txt 2019-09-20 17:49:12.332190194 +0000 +++ OUTPUT/east.console.txt 2019-09-21 07:20:45.618684852 +0000 @@ -15,51 +15,9 @@ initdone east # ipsec status | grep STATE_ -000 #2: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254:4500 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_REPLACE in XXs; isakmp#1; idle; -000 #3: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254:4500 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_REPLACE in XXs; lastdpd=-1s(seq in:0 out:0); idle; -000 #4: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254:4500 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_REPLACE in XXs; isakmp#3; idle; -000 #5: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254:4500 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_REPLACE in XXs; lastdpd=-1s(seq in:0 out:0); idle; -000 #6: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254:4500 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_REPLACE in XXs; isakmp#5; idle; -000 #7: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254:4500 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_REPLACE in XXs; newest ISAKMP; lastdpd=-1s(seq in:0 out:0); idle; -000 #8: "roadnet-eastnet-ipv4-psk-ikev1"[1] 192.1.2.254:4500 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_REPLACE in XXs; newest IPSEC; eroute owner; isakmp#7; idle; +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) east # ip xfrm policy -src 192.1.2.23/32 dst 192.0.2.1/32 - dir out priority 1040351 ptype main - tmpl src 192.1.2.23 dst 192.1.2.254 - proto esp reqid REQID mode tunnel -src 192.0.2.1/32 dst 192.1.2.23/32 - dir fwd priority 1040351 ptype main - tmpl src 192.1.2.254 dst 192.1.2.23 - proto esp reqid REQID mode tunnel -src 192.0.2.1/32 dst 192.1.2.23/32 - dir in priority 1040351 ptype main - tmpl src 192.1.2.254 dst 192.1.2.23 - proto esp reqid REQID mode tunnel -src 0.0.0.0/0 dst 0.0.0.0/0 - socket out priority 0 ptype main -src 0.0.0.0/0 dst 0.0.0.0/0 - socket in priority 0 ptype main -src 0.0.0.0/0 dst 0.0.0.0/0 - socket out priority 0 ptype main -src 0.0.0.0/0 dst 0.0.0.0/0 - socket in priority 0 ptype main -src 0.0.0.0/0 dst 0.0.0.0/0 - socket out priority 0 ptype main -src 0.0.0.0/0 dst 0.0.0.0/0 - socket in priority 0 ptype main -src 0.0.0.0/0 dst 0.0.0.0/0 - socket out priority 0 ptype main -src 0.0.0.0/0 dst 0.0.0.0/0 - socket in priority 0 ptype main -src 0.0.0.0/0 dst 0.0.0.0/0 - socket out priority 0 ptype main -src 0.0.0.0/0 dst 0.0.0.0/0 - socket in priority 0 ptype main -src 0.0.0.0/0 dst 0.0.0.0/0 - socket out priority 0 ptype main -src 0.0.0.0/0 dst 0.0.0.0/0 - socket in priority 0 ptype main east # east # ../bin/check-for-core.sh