/testing/guestbin/swan-prep
east #
 ipsec start
Redirecting to: systemctl start ipsec.service
east #
 /testing/pluto/bin/wait-until-pluto-started
east #
 ipsec auto --add replay
002 added connection description "replay"
east #
 ipsec auto --status | grep replay_window
000 "replay":   ike_life: 3600s; ipsec_life: 28800s; replay_window: 64; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0;
east #
 echo "initdone"
initdone
east #
 # replay-window will show up as 0 when ESN is enabled due to kernel bug.
east #
 ip xfrm state |grep replay-window
	replay-window 0 flag af-unspec esn
	replay-window 0 flag af-unspec esn
east #
east #
 ../bin/check-for-core.sh
east #
 if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi

