/testing/guestbin/swan-prep --userland strongswan
east #
 ../../guestbin/strongswan-start.sh
east #
 echo "initdone"
initdone
east #
 if [ -f /var/run/pluto/pluto.pid ]; then ../../guestbin/ipsec-kernel-state.sh ; fi
east #
 if [ -f /var/run/pluto/pluto.pid ]; then ../../guestbin/ipsec-kernel-policy.sh ; fi
east #
 if [ -f /var/run/charon.pid -o -f /var/run/strongswan/charon.pid ]; then strongswan statusall ; fi
Status of IKE charon daemon (strongSwan VERSION):
  uptime: XXX second, since YYY
  malloc sbrk XXXXXX,mmap X, used XXXXXX, free XXXXX
Listening IP addresses:
  192.0.2.254
  192.1.2.23
Connections:
westnet-eastnet-ikev2-esp-null:  192.1.2.23...192.1.2.45  IKEv2
westnet-eastnet-ikev2-esp-null:   local:  [east] uses pre-shared key authentication
westnet-eastnet-ikev2-esp-null:   remote: [west] uses pre-shared key authentication
westnet-eastnet-ikev2-esp-null:   child:  192.0.2.0/24 === 192.0.1.0/24 TUNNEL
Shunted Connections:
Bypass LAN 192.0.2.0/24:  192.0.2.0/24 === 192.0.2.0/24 PASS
Bypass LAN 192.1.2.0/24:  192.1.2.0/24 === 192.1.2.0/24 PASS
Security Associations (1 up, 0 connecting):
westnet-eastnet-ikev2-esp-null[3]: ESTABLISHED XXX second ago, 192.1.2.23[east]...192.1.2.45[west]
westnet-eastnet-ikev2-esp-null[3]: IKEv2 SPIs: SPISPI_i SPISPI_r*, pre-shared key reauthentication in 2 hours
westnet-eastnet-ikev2-esp-null[3]: IKE proposal: AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
westnet-eastnet-ikev2-esp-null{3}:  INSTALLED, TUNNEL, reqid 1, AH SPIs: SPISPI_i SPISPI_o
westnet-eastnet-ikev2-esp-null{3}:  HMAC_SHA1_96, XXX bytes_i (XX pkts, XXs ago), XXX bytes_o (XX pkts, XXs ago), rekeying in XX minutes
westnet-eastnet-ikev2-esp-null{3}:   192.0.2.0/24 === 192.0.1.0/24
westnet-eastnet-ikev2-esp-null{4}:  INSTALLED, TUNNEL, reqid 1, AH SPIs: SPISPI_i SPISPI_o
westnet-eastnet-ikev2-esp-null{4}:  HMAC_SHA1_96/MODP_2048, XXX bytes_i (XX pkts, XXs ago), XXX bytes_o (XX pkts, XXs ago), rekeying in XX minutes
westnet-eastnet-ikev2-esp-null{4}:   192.0.2.0/24 === 192.0.1.0/24
east #
 
