1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
|
carol::swanctl --list-sas 2> /dev/null::home: #1, ESTABLISHED, IKEv2::YES
dave:: swanctl --list-sas 2> /dev/null::home: #1, ESTABLISHED, IKEv2::YES
moon:: swanctl --list-sas --ike-id 1 2> /dev/null::rw: #1, ESTABLISHED, IKEv2::YES
moon:: swanctl --list-sas --ike-id 2 2> /dev/null::rw: #2, ESTABLISHED, IKEv2::YES
carol::swanctl --list-sas 2> /dev/null::local.*carol@strongswan.org.*192.168.0.100::YES
carol::swanctl --list-sas 2> /dev/null::remote.*moon.strongswan.org.*192.168.0.1::YES
dave:: swanctl --list-sas 2> /dev/null::local.*dave@strongswan.org.*192.168.0.200::YES
dave:: swanctl --list-sas 2> /dev/null::remote.*moon.strongswan.org.*192.168.0.1::YES
moon:: swanctl --list-sas --ike-id 1 2> /dev/null::local.*moon.strongswan.org.*192.168.0.1::YES
moon:: swanctl --list-sas --ike-id 1 2> /dev/null::remote.*carol@strongswan.org.*192.168.0.100::YES
moon:: swanctl --list-sas --ike-id 2 2> /dev/null::local.*moon.strongswan.org.*192.168.0.1::YES
moon:: swanctl --list-sas --ike-id 2 2> /dev/null::remote.*dave@strongswan.org.*192.168.0.200::YES
moon:: cat /var/log/daemon.log::assigning virtual IP 10.3.0.1 to peer.*carol@strongswan.org::YES
moon:: cat /var/log/daemon.log::assigning virtual IP 10.3.0.2 to peer.*dave@strongswan.org::YES
moon:: ipsec pool --status 2> /dev/null::big_pool.*10.3.0.1.*10.3.3.232.*static.*2::YES
moon:: ipsec pool --leases --filter pool=big_pool,addr=10.3.0.1,id=carol@strongswan.org 2> /dev/null::online::YES
moon:: ipsec pool --leases --filter pool=big_pool,addr=10.3.0.2,id=dave@strongswan.org 2> /dev/null::online::YES
carol::cat /var/log/daemon.log::installing new virtual IP 10.3.0.1::YES
carol::cat /var/log/daemon.log::installing DNS server PH_IP_WINNETOU::YES
carol::cat /var/log/daemon.log::installing DNS server PH_IP_VENUS::YES
carol::cat /var/log/daemon.log::handling INTERNAL_IP4_NBNS attribute failed::YES
dave:: cat /var/log/daemon.log::installing new virtual IP 10.3.0.2::YES
dave:: cat /var/log/daemon.log::installing DNS server PH_IP_WINNETOU::YES
dave:: cat /var/log/daemon.log::installing DNS server PH_IP_VENUS::YES
dave:: cat /var/log/daemon.log::handling INTERNAL_IP4_NBNS attribute failed::YES
carol::swanctl --list-sas 2> /dev/null::home: #1, INSTALLED, TUNNEL, ESP:AES_GCM_16-128::YES
dave:: swanctl --list-sas 2> /dev/null::home: #1, INSTALLED, TUNNEL, ESP:AES_GCM_16-128::YES
moon:: swanctl --list-sas --ike-id 1 2> /dev/null::net: #1, INSTALLED, TUNNEL, ESP:AES_GCM_16-128::YES
moon:: swanctl --list-sas --ike-id 2 2> /dev/null::net: #2, INSTALLED, TUNNEL, ESP:AES_GCM_16-128::YES
carol::swanctl --list-sas 2> /dev/null::local.*10.3.0.1/32::YES
carol::swanctl --list-sas 2> /dev/null::remote 10.1.0.0/16::YES
dave:: swanctl --list-sas 2> /dev/null::local.*10.3.0.2/32::YES
dave:: swanctl --list-sas 2> /dev/null::remote 10.1.0.0/16::YES
moon:: swanctl --list-sas --ike-id 1 2> /dev/null::local.*10.1.0.0/16::YES
moon:: swanctl --list-sas --ike-id 1 2> /dev/null::remote 10.3.0.1/32::YES
moon:: swanctl --list-sas --ike-id 2 2> /dev/null::local.*10.1.0.0/16::YES
moon:: swanctl --list-sas --ike-id 2 2> /dev/null::remote 10.3.0.2/32::YES
alice::ping -c 1 10.3.0.1::64 bytes from 10.3.0.1: icmp_req=1::YES
alice::ping -c 1 10.3.0.2::64 bytes from 10.3.0.2: icmp_req=1::YES
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
moon::tcpdump::IP moon.strongswan.org > dave.strongswan.org: ESP::YES
moon::tcpdump::IP dave.strongswan.org > moon.strongswan.org: ESP::YES
|
