ping -n -q -c 2 -I 192.1.3.209 192.1.2.23
ipsec whack --shuntstatus
sleep 10
# send a ping that still hits negotiationshunt=hold and fails
# wait on OE retransmits and rekeying
ping -n -q -c 2 -I 192.1.3.209 192.1.2.23
ipsec whack --shuntstatus
sleep 10
ipsec whack --shuntstatus
# sleep to let timers install failureshunt=pass
sleep 30
ipsec whack --shuntstatus
sleep 30
ipsec whack --shuntstatus
# ping should go out in the clear now and get a reply
../../guestbin/ping-once.sh --up -I 192.1.3.209 192.1.2.23
ipsec whack --trafficstatus
ipsec whack --shuntstatus
../../guestbin/ipsec-kernel-state.sh
../../guestbin/ipsec-kernel-policy.sh
killall ip > /dev/null 2> /dev/null
cp /tmp/xfrm-monitor.out OUTPUT/road.xfrm-monitor.txt
echo done
