prep.sh
west #
 ifconfig ipsec1 create reqid 100
west #
 ../../guestbin/tcpdump.sh --start -i ipsec1
tcpdump started
west #
 ifconfig ipsec1 inet tunnel 192.1.2.45         192.1.2.23
west #
 ifconfig ipsec1 inet      198.18.45.45/32    198.18.23.23
west #
 ifconfig ipsec1 inet6 2001:db8:45::45/128 2001:db8:23::23
west #
 ifconfig ipsec1
ipsec1: flags=1008151<UP,POINTOPOINT,RUNNING,PROMISC,MULTICAST,LOWER_UP> metric 0 mtu 1400
	options=0
	tunnel inet 192.1.2.45 --> 192.1.2.23
	inet 198.18.45.45 --> 198.18.23.23 netmask 0xffffffff
	inet6 2001:db8:45::45 --> 2001:db8:23::23 prefixlen 128
	inet6 fe80::d84f:53:a5c1:3882%ipsec1 prefixlen 64 tentative scopeid 0x5
	groups: ipsec
	reqid: 100
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
west #
 ipsec _kernel state
No SAD entries.
west #
 ipsec _kernel policy
0.0.0.0/0[any] 0.0.0.0/0[any] any
	in ipsec
	esp/tunnel/192.1.2.23-192.1.2.45/unique:100
	spid=1 seq=3 pid=PID scope=ifnet ifname=ipsec1
	refcnt=1
::/0[any] ::/0[any] any
	in ipsec
	esp/tunnel/192.1.2.23-192.1.2.45/unique:100
	spid=3 seq=2 pid=PID scope=ifnet ifname=ipsec1
	refcnt=1
0.0.0.0/0[any] 0.0.0.0/0[any] any
	out ipsec
	esp/tunnel/192.1.2.45-192.1.2.23/unique:100
	spid=2 seq=1 pid=PID scope=ifnet ifname=ipsec1
	refcnt=1
::/0[any] ::/0[any] any
	out ipsec
	esp/tunnel/192.1.2.45-192.1.2.23/unique:100
	spid=4 seq=0 pid=PID scope=ifnet ifname=ipsec1
	refcnt=1
west #
 echo 'add 192.1.2.45 192.1.2.23 esp 4523 -m tunnel -u 100 -E rijndael-cbc "45-----Key----23" -A hmac-sha1 "45------Hash------23" ;' | setkey -c
west #
 echo 'add 192.1.2.23 192.1.2.45 esp 2345 -m tunnel -u 100 -E rijndael-cbc "23-----Key----45" -A hmac-sha1 "23------Hash------45" ;' | setkey -c
west #
 ifconfig ipsec1
ipsec1: flags=1008151<UP,POINTOPOINT,RUNNING,PROMISC,MULTICAST,LOWER_UP> metric 0 mtu 1400
	options=0
	tunnel inet 192.1.2.45 --> 192.1.2.23
	inet 198.18.45.45 --> 198.18.23.23 netmask 0xffffffff
	inet6 2001:db8:45::45 --> 2001:db8:23::23 prefixlen 128
	inet6 fe80::d84f:53:a5c1:3882%ipsec1 prefixlen 64 tentative scopeid 0x5
	groups: ipsec
	reqid: 100
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
west #
 ipsec _kernel state
192.1.2.23 192.1.2.45
	esp mode=tunnel spi=SPISPI(0xSPISPI) reqid=100(0x00000064)
	E: aes-cbc  XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX
	A: hmac-sha1  XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX
	seq=0x00000000 replay=0 flags=0x00000040 state=mature 
	created: TIMESTAMP	current: TIMESTAMP
	diff: N(s)	hard: 0(s)	soft: 0(s)
	last:                     	hard: 0(s)	soft: 0(s)
	current: 0(bytes)	hard: 0(bytes)	soft: 0(bytes)
	allocated: 0	hard: 0	soft: 0
	sadb_seq=1 pid=PID refcnt=1
192.1.2.45 192.1.2.23
	esp mode=tunnel spi=SPISPI(0xSPISPI) reqid=100(0x00000064)
	E: aes-cbc  XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX
	A: hmac-sha1  XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX
	seq=0x00000001 replay=0 flags=0x00000040 state=mature 
	created: TIMESTAMP	current: TIMESTAMP
	diff: N(s)	hard: 0(s)	soft: 0(s)
	last: TIMESTAMP	hard: 0(s)	soft: 0(s)
	current: 136(bytes)	hard: 0(bytes)	soft: 0(bytes)
	allocated: 1	hard: 0	soft: 0
	sadb_seq=0 pid=PID refcnt=1
west #
 ipsec _kernel policy
0.0.0.0/0[any] 0.0.0.0/0[any] any
	in ipsec
	esp/tunnel/192.1.2.23-192.1.2.45/unique:100
	spid=1 seq=3 pid=PID scope=ifnet ifname=ipsec1
	refcnt=1
::/0[any] ::/0[any] any
	in ipsec
	esp/tunnel/192.1.2.23-192.1.2.45/unique:100
	spid=3 seq=2 pid=PID scope=ifnet ifname=ipsec1
	refcnt=1
0.0.0.0/0[any] 0.0.0.0/0[any] any
	out ipsec
	esp/tunnel/192.1.2.45-192.1.2.23/unique:100
	spid=2 seq=1 pid=PID scope=ifnet ifname=ipsec1
	refcnt=1
::/0[any] ::/0[any] any
	out ipsec
	esp/tunnel/192.1.2.45-192.1.2.23/unique:100
	spid=4 seq=0 pid=PID scope=ifnet ifname=ipsec1
	refcnt=1
west #
 sleep 10 # give broken ping a chance
west #
 sleep 5
west #
 ping-once.sh --up    198.18.23.23
up
west #
 ping-once.sh --up 2001:db8:23::23
up
west #
 sleep 5
west #
 ../../guestbin/tcpdump.sh --stop -i ipsec1
reading from file OUTPUT/west.ipsec-interface-00-ipv46-ikev2-freebsd-setkey.ipsec1.tcpdump.pcap, link-type NULL (BSD loopback)
IP 198.18.23.23 > 198.18.45.45: ICMP echo request, id XXXX, seq 0, length 64
IP 198.18.45.45 > 198.18.23.23: ICMP echo reply, id XXXX, seq 0, length 64
IP 198.18.45.45 > 198.18.23.23: ICMP echo request, id XXXX, seq 0, length 64
IP 198.18.23.23 > 198.18.45.45: ICMP echo reply, id XXXX, seq 0, length 64
west #
