/testing/guestbin/swan-prep --nokeys
Creating empty NSS database
east #
 ipsec start
Redirecting to: [initsystem]
east #
 ../../guestbin/wait-until-pluto-started
east #
 ipsec status |grep "ikev1-policy"
ddos-cookies-threshold=25000, ddos-max-halfopen=50000, ddos-mode=auto, ikev1-policy=reject
east #
 # should fail
east #
 ipsec auto --add ikev1
ipsec addconn: /etc/ipsec.conf:13: warning: overriding earlier 'config setup' keyword with new value: ikev1-policy=reject
"ikev1": failed to add connection: global ikev1-policy does not allow IKEv1 connections
east #
 # should work but unused
east #
 ipsec auto --add ikev2
ipsec addconn: /etc/ipsec.conf:13: warning: overriding earlier 'config setup' keyword with new value: ikev1-policy=reject
"ikev2": added IKEv2 connection
east #
 echo "initdone"
initdone
east #
 hostname | grep east > /dev/null && grep "sending notification INVALID_MAJOR_VERSION" /tmp/pluto.log
packet from 192.1.2.45:500: sending notification INVALID_MAJOR_VERSION to 192.1.2.45:500
east #
 
