/testing/guestbin/swan-prep west # ip tunnel add test0 mode gre local 192.1.2.45 remote 192.1.2.23 west # ip addr add 172.29.1.1/24 dev test0 west # ip link set dev test0 up west # ipsec start Redirecting to: [initsystem] west # /testing/pluto/bin/wait-until-pluto-started west # ipsec auto --add test1 002 "test1": terminating SAs using this connection 002 added IKEv1 connection "test1" west # ipsec auto --add test2 002 "test2": terminating SAs using this connection 002 added IKEv1 connection "test2" west # ipsec auto --add test3 002 "test3": terminating SAs using this connection 002 added IKEv1 connection "test3" west # # should establish west # ipsec auto --up test1 002 "test1" #1: initiating IKEv1 Main Mode connection 1v1 "test1" #1: sent Main Mode request 1v1 "test1" #1: sent Main Mode I2 1v1 "test1" #1: sent Main Mode I3 004 "test1" #1: IKE SA established {auth=PRESHARED_KEY cipher=AES_CBC_256 integ=HMAC_SHA2_256 group=MODP2048} 002 "test1" #2: initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV1_ALLOW+IKE_FRAG_ALLOW+ESN_NO 1v1 "test1" #2: sent Quick Mode request 004 "test1" #2: IPsec SA established tunnel mode {ESP=>0xESPESP <0xESPESP xfrm=AES_CBC_128-HMAC_SHA1_96 NATOA=none NATD=none DPD=passive} west # ip addr add 172.29.1.3/24 dev test0 west # ipsec auto --ready 002 listening for IKE messages 002 adding UDP interface test0 172.29.1.3:500 002 adding UDP interface test0 172.29.1.3:4500 003 two interfaces match "test2" (test0 172.29.1.3, test0 172.29.1.1) 002 "test2": terminating SAs using this connection 002 forgetting secrets 002 loading secrets from "/etc/ipsec.secrets" west # ipsec auto --up test2 022 "test2": we cannot identify ourselves with either end of this connection. 172.29.1.1 or 172.29.1.3 are not usable 036 failed to initiate test2 west # ip addr del 172.29.1.3/24 dev test0 west # # not read issuing --ready west #