/testing/guestbin/swan-prep
west #
 ipsec start
Redirecting to: systemctl start ipsec.service
west #
 /testing/pluto/bin/wait-until-pluto-started
west #
 ipsec auto --add westnet-eastnet-aggr
002 added connection description "westnet-eastnet-aggr"
west #
 echo "initdone"
initdone
west #
 # create a partial state on east, don't hold the hack for retransmit
west #
 ipsec whack --impair impair-drop-i2 --impair delete-on-retransmit --impair revival
west #
 ipsec auto --up  westnet-eastnet-aggr
002 "westnet-eastnet-aggr" #1: initiating Aggressive Mode
1v1 "westnet-eastnet-aggr" #1: STATE_AGGR_I1: initiate
002 "westnet-eastnet-aggr" #1: IMPAIR: retransmit so deleting SA
002 "westnet-eastnet-aggr" #1: deleting state (STATE_AGGR_I1) and NOT sending notification
002 "westnet-eastnet-aggr" #1: IMPAIR: skipping revival of connection 'westnet-eastnet-aggr' that is supposed to remain up
west #
 # we are waiting for east to expire the partial IKE state in 1+1+2+4+8+16+32 secs
west #
 sleep 30
west #
 sleep 30
west #
 sleep 10
west #
 echo done
done
west #
 # on east, we should see no more partial state
west #
 ipsec status | grep STATE_
west #
west #
 ../bin/check-for-core.sh
west #
 if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi

