/testing/guestbin/swan-prep --46
road #
 ipsec start
Redirecting to: [initsystem]
road #
 ../../guestbin/wait-until-pluto-started
road #
 ../../guestbin/ip-route.sh -4
default via 192.1.3.254 dev eth0
192.1.3.0/24 dev eth0 proto kernel scope link src 192.1.3.209
road #
 ../../guestbin/ip-route.sh -6
2001:db8:1:3::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
default via 2001:db8:1:3::254 dev eth0
road #
 # %any
road #
 ../../guestbin/ip-route.sh -4 get to 0.0.0.0
local 0.0.0.0 dev lo src 127.0.0.1 uid 0
    cache <local>
road #
 ../../guestbin/ip-route.sh -6 get to ::
:: from :: via 2001:db8:1:3::254 dev eth0 src fe80::1000:ff:feab:cd02 metric 1024 pref medium
road #
 # gateway
road #
 ../../guestbin/ip-route.sh -4 get to 192.1.3.254
192.1.3.254 dev eth0 src 192.1.3.209 uid 0
    cache
road #
 ../../guestbin/ip-route.sh -6 get to 2001:db8:1:3::254
2001:db8:1:3::254 from :: dev eth0 proto kernel src 2001:db8:1:3::209 metric 256 pref medium
road #
 # peer
road #
 ../../guestbin/ip-route.sh -4 get to 192.1.2.23
192.1.2.23 via 192.1.3.254 dev eth0 src 192.1.3.209 uid 0
    cache
road #
 ../../guestbin/ip-route.sh -6 get to 2001:db8:1:2::23
2001:db8:1:2::23 from :: via 2001:db8:1:3::254 dev eth0 src 2001:db8:1:3::209 metric 1024 pref medium
road #
 # simple case, peer known
road #
 ./run.sh left=%defaultroute right=192.1.2.23
 ipsec add defaultroute-ipv4
"defaultroute-ipv4": added oriented IKEv2 connection
road #
 ipsec connectionstatus defaultroute-ipv4 | grep ' host: '
"defaultroute-ipv4":   host: oriented; local: 192.1.3.209; nexthop: 192.1.3.254; remote: 192.1.2.23;
road #
 ./run.sh left=%defaultroute right=2001:db8:1:2::23
 ipsec add defaultroute-ipv6
"defaultroute-ipv6": added oriented IKEv2 connection
road #
 ipsec connectionstatus defaultroute-ipv6 | grep ' host: '
"defaultroute-ipv6":   host: oriented; local: 2001:db8:1:3::209; nexthop: 2001:db8:1:3::254; remote: 2001:db8:1:2::23;
road #
 # simple case but with clash
road #
 ./run.sh left=%defaultroute4 right=2001:db8:1:2::23 # fail
 ipsec add defaultroute4-ipv6
"defaultroute4-ipv6": failed to add connection: host address family IPv4 from left=%defaultroute4 conflicts with right=2001:db8:1:2::23
road #
 ./run.sh left=%defaultroute6 right=192.1.2.23       # fail
 ipsec add defaultroute6-ipv4
"defaultroute6-ipv4": failed to add connection: host address family IPv6 from left=%defaultroute6 conflicts with right=192.1.2.23
road #
 # defaultroute-direct-ip
road #
 ./run.sh left=%defaultroute leftnexthop=%direct right=192.1.2.23
 ipsec add defaultroute-direct-ipv4
"defaultroute-direct-ipv4": added oriented IKEv2 connection
road #
 ipsec connectionstatus defaultroute-direct-ipv4 | grep ' host: '
"defaultroute-direct-ipv4":   host: oriented; local: 192.1.3.209; remote: 192.1.2.23;
road #
 ./run.sh left=%defaultroute leftnexthop=%direct right=2001:db8:1:2::23
 ipsec add defaultroute-direct-ipv6
"defaultroute-direct-ipv6": added oriented IKEv2 connection
road #
 ipsec connectionstatus defaultroute-direct-ipv6 | grep ' host: '
"defaultroute-direct-ipv6":   host: oriented; local: 2001:db8:1:3::209; remote: 2001:db8:1:2::23;
road #
 # simple case, peer unknown
road #
 ./run.sh left=%defaultroute right=%any
 ipsec add defaultroute-any
"defaultroute-any": added oriented IKEv2 connection
road #
 ipsec connectionstatus defaultroute-any | grep ' host: '
"defaultroute-any":   host: oriented; local: 192.1.3.209; nexthop: 192.1.3.254; remote: %any;
road #
 ./run.sh hostaddrfamily=ipv4 left=%defaultroute right=%any
 ipsec add hostaddrfamily-ipv4-defaultroute-any
"hostaddrfamily-ipv4-defaultroute-any": added oriented IKEv2 connection
road #
 ipsec connectionstatus hostaddrfamily-ipv4-defaultroute-any | grep ' host: '
"hostaddrfamily-ipv4-defaultroute-any":   host: oriented; local: 192.1.3.209; nexthop: 192.1.3.254; remote: %any;
road #
 ./run.sh hostaddrfamily=ipv6 left=%defaultroute right=%any
 ipsec add hostaddrfamily-ipv6-defaultroute-any
"hostaddrfamily-ipv6-defaultroute-any": added unoriented IKEv2 connection (neither left=%defaultroute nor right=%any match an interface)
road #
 ipsec connectionstatus hostaddrfamily-ipv6-defaultroute-any | grep ' host: '
"hostaddrfamily-ipv6-defaultroute-any":   host: unoriented; left: fe80::1000:ff:feab:cd02; leftnexthop: 2001:db8:1:3::254; right: %any;
road #
 # simple case, can't load as to-any
road #
 ./run.sh left=%any right=%any
 ipsec add any-any
"any-any": failed to add connection: neither 'left=%any' nor 'right=%any' specify the local host's IP address
road #
 ./run.sh hostaddrfamily=ipv4 left=%any right=%any
 ipsec add hostaddrfamily-ipv4-any-any
"hostaddrfamily-ipv4-any-any": failed to add connection: neither 'left=%any' nor 'right=%any' specify the local host's IP address
road #
 ./run.sh hostaddrfamily=ipv4 left=%any right=%any
 ipsec add hostaddrfamily-ipv4-any-any
"hostaddrfamily-ipv4-any-any": failed to add connection: neither 'left=%any' nor 'right=%any' specify the local host's IP address
road #
 # peer unknown (failing in libreswan up to 3.21 in specific scenarios)
road #
 ./run.sh left=%defaultroute leftnexthop=%defaultroute right=%any
 ipsec add defaultroute-defaultroute-any
"defaultroute-defaultroute-any": added oriented IKEv2 connection
road #
 ipsec connectionstatus defaultroute-defaultroute-any | grep ' host: '
"defaultroute-defaultroute-any":   host: oriented; local: 192.1.3.209; nexthop: 192.1.3.254; remote: %any;
road #
 ./run.sh hostaddrfamily=ipv4 left=%defaultroute leftnexthop=%defaultroute right=%any
 ipsec add hostaddrfamily-ipv4-defaultroute-defaultroute-any
"hostaddrfamily-ipv4-defaultroute-defaultroute-any": added oriented IKEv2 connection
road #
 ipsec connectionstatus hostaddrfamily-ipv4-defaultroute-defaultroute-any | grep ' host: '
"hostaddrfamily-ipv4-defaultroute-defaultroute-any":   host: oriented; local: 192.1.3.209; nexthop: 192.1.3.254; remote: %any;
road #
 ./run.sh hostaddrfamily=ipv6 left=%defaultroute leftnexthop=%defaultroute right=%any
 ipsec add hostaddrfamily-ipv6-defaultroute-defaultroute-any
"hostaddrfamily-ipv6-defaultroute-defaultroute-any": added unoriented IKEv2 connection (neither left=%defaultroute nor right=%any match an interface)
road #
 ipsec connectionstatus hostaddrfamily-ipv6-defaultroute-defaultroute-any | grep ' host: '
"hostaddrfamily-ipv6-defaultroute-defaultroute-any":   host: unoriented; left: fe80::1000:ff:feab:cd02; leftnexthop: 2001:db8:1:3::254; right: %any;
road #
 # newoe case, peer is group (see newoe-20-ipv6)
road #
 ./run.sh hostaddrfamily=ipv4 left=%defaultroute right=%group
 ipsec add hostaddrfamily-ipv4-defaultroute-group
"hostaddrfamily-ipv4-defaultroute-group": added oriented IKEv2 connection
road #
 ipsec connectionstatus hostaddrfamily-ipv4-defaultroute-group | grep ' host: '
"hostaddrfamily-ipv4-defaultroute-group":   host: oriented; local: 192.1.3.209; nexthop: 192.1.3.254; remote: %group;
road #
 ./run.sh hostaddrfamily=ipv6 left=%defaultroute right=%group
 ipsec add hostaddrfamily-ipv6-defaultroute-group
"hostaddrfamily-ipv6-defaultroute-group": added oriented IKEv2 connection
road #
 ipsec connectionstatus hostaddrfamily-ipv6-defaultroute-group | grep ' host: '
"hostaddrfamily-ipv6-defaultroute-group":   host: oriented; local: 2001:db8:1:3::209; nexthop: 2001:db8:1:3::254; remote: %group;
road #
 # re-adding while route is up (see ikev1-hostpair-02)
road #
 ip -4 address add dev eth0     192.0.2.1/32
road #
 ip -6 address add dev eth0  2001:db8:0:2::1 nodad
road #
 ../../guestbin/ip-route.sh -4   add dev eth0       192.1.2.23 via       192.1.3.254 src       192.0.2.1
road #
 ../../guestbin/ip-route.sh -6   add dev eth0 2001:db8:1:2::23 via 2001:db8:1:3::254 src 2001:db8:0:2::1
road #
 ../../guestbin/ip-route.sh -4
default via 192.1.3.254 dev eth0
192.1.2.23 via 192.1.3.254 dev eth0 src 192.0.2.1
192.1.3.0/24 dev eth0 proto kernel scope link src 192.1.3.209
road #
 ../../guestbin/ip-route.sh -6
2001:db8:0:2::1 dev eth0 proto kernel metric 256 pref medium
2001:db8:1:2::23 via 2001:db8:1:3::254 dev eth0 src 2001:db8:0:2::1 metric 1024 pref medium
2001:db8:1:3::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
default via 2001:db8:1:3::254 dev eth0
road #
 ./run.sh hostaddrfamily=ipv4 left=%defaultroute right=%group
 ipsec add hostaddrfamily-ipv4-defaultroute-group
"hostaddrfamily-ipv4-defaultroute-group": added oriented IKEv2 connection
road #
 ipsec connectionstatus hostaddrfamily-ipv4-defaultroute-group | grep ' host: '
"hostaddrfamily-ipv4-defaultroute-group":   host: oriented; local: 192.1.3.209; nexthop: 192.1.3.254; remote: %group;
road #
 ./run.sh hostaddrfamily=ipv6 left=%defaultroute right=%group
 ipsec add hostaddrfamily-ipv6-defaultroute-group
"hostaddrfamily-ipv6-defaultroute-group": added oriented IKEv2 connection
road #
 ipsec connectionstatus hostaddrfamily-ipv6-defaultroute-group | grep ' host: '
"hostaddrfamily-ipv6-defaultroute-group":   host: oriented; local: 2001:db8:1:3::209; nexthop: 2001:db8:1:3::254; remote: %group;
road #
 ../../guestbin/ip-route.sh -4   del dev eth0       192.1.2.23 via       192.1.3.254 src       192.0.2.1
road #
 ../../guestbin/ip-route.sh -6   del dev eth0 2001:db8:1:2::23 via 2001:db8:1:3::254 src 2001:db8:0:2::1
road #
 ip -4 address del dev eth0     192.0.2.1/32
road #
 ip -6 address del dev eth0  2001:db8:0:2::1
road #
 ../../guestbin/ip-route.sh -4
default via 192.1.3.254 dev eth0
192.1.3.0/24 dev eth0 proto kernel scope link src 192.1.3.209
road #
 ../../guestbin/ip-route.sh -6
2001:db8:1:3::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
default via 2001:db8:1:3::254 dev eth0
road #
 # messed up default (see ipv6-addresspool-05-dual-stack)
road #
 ../../guestbin/ip-route.sh -6 del default
road #
 ../../guestbin/ip-route.sh -6 add default dev eth0 via fe80::1000:ff:fe32:64ba
road #
 ../../guestbin/ip-route.sh -6
2001:db8:1:3::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
default via fe80::1000:ff:fe32:64ba dev eth0
road #
 ./run.sh left=%defaultroute right=2001:db8:1:2::23
 ipsec add defaultroute-ipv6
"defaultroute-ipv6": added oriented IKEv2 connection
road #
 ipsec connectionstatus defaultroute-ipv6 | grep ' host: '
"defaultroute-ipv6":   host: oriented; local: 2001:db8:1:3::209; nexthop: fe80::1000:ff:fe32:64ba; remote: 2001:db8:1:2::23;
road #
