/testing/guestbin/swan-prep
west #
 ipsec start
Redirecting to: [initsystem]
west #
 ../../guestbin/wait-until-pluto-started
west #
 ipsec add negotiationshunt=
"negotiationshunt=": added oriented IKEv2 connection
west #
 ipsec add negotiationshunt=passthrough
"negotiationshunt=passthrough": added oriented IKEv2 connection
west #
 ipsec add negotiationshunt=drop
"negotiationshunt=drop": added oriented IKEv2 connection
west #
 ipsec add negotiationshunt=hold
warning: "negotiationshunt=hold": "negotiationshunt=hold" implemented as "drop"
"negotiationshunt=hold": added oriented IKEv2 connection
west #
 ipsec add failureshunt=
"failureshunt=": added oriented IKEv2 connection
west #
 ipsec add failureshunt=none
"failureshunt=none": added oriented IKEv2 connection
west #
 ipsec add failureshunt=passthrough
"failureshunt=passthrough": added oriented IKEv2 connection
west #
 ipsec add failureshunt=drop
"failureshunt=drop": added oriented IKEv2 connection
west #
 ipsec add failureshunt=hold
warning: "failureshunt=hold": "failureshunt=hold" implemented as "drop"
"failureshunt=hold": added oriented IKEv2 connection
west #
 ipsec add failureshunt=reject
warning: "failureshunt=reject": "failureshunt=reject" implemented as "drop"
"failureshunt=reject": added oriented IKEv2 connection
west #
 ipsec add type=drop
"type=drop": added oriented drop connection
west #
 ipsec add type=reject
warning: "type=reject": "type=reject" implemented as "drop"
"type=reject": added oriented drop connection
west #
 ipsec add type=passthrough
"type=passthrough": added oriented passthrough connection
west #
 ipsec connectionstatus | sed -n -e 's/\(.* policy:\) .*\(DROP\).*/\1 \2/p' | sort -u
"failureshunt=drop":   policy: DROP
"failureshunt=hold":   policy: DROP
"failureshunt=reject":   policy: DROP
"type=drop":   policy: DROP
"type=reject":   policy: DROP
west #
 ipsec connectionstatus | sed -n -e 's/\(.* policy:\) .*\(PASS\).*/\1 \2/p' | sort -u
"failureshunt=passthrough":   policy: PASS
"negotiationshunt=passthrough":   policy: PASS
"type=passthrough":   policy: PASS
west #
 ipsec connectionstatus | sed -n -e 's/\(.* policy:\) .*\(NEGO_[_A-Z]*\).*/\1 \2/p' | sort -u
"negotiationshunt=passthrough":   policy: NEGO_PASS
west #
 ipsec connectionstatus | sed -n -e 's/\(.* policy:\) .*\(failure[_A-Z]*\).*/\1 \2/p' | sort -u
"failureshunt=drop":   policy: failureDROP
"failureshunt=hold":   policy: failureDROP
"failureshunt=passthrough":   policy: failurePASS
"failureshunt=reject":   policy: failureDROP
west #
