/testing/guestbin/swan-prep --userland strongswan
east #
 ../../pluto/bin/strongswan-start.sh
east #
 echo "initdone"
initdone
east #
 ip xfrm state
src 192.1.2.23 dst 192.1.2.45
	proto esp spi 0xSPISPI reqid REQID mode transport
	enc cbc(aes) 0xENCKEY
src 192.1.2.23 dst 192.1.2.45
	proto comp spi 0xSPISPI reqid REQID mode tunnel
	comp deflate 
src 192.1.2.23 dst 192.1.2.45
	proto 4 spi 0xSPISPI reqid REQID mode tunnel
src 192.1.2.45 dst 192.1.2.23
	proto esp spi 0xSPISPI reqid REQID mode transport
	enc cbc(aes) 0xENCKEY
src 192.1.2.45 dst 192.1.2.23
	proto comp spi 0xSPISPI reqid REQID mode tunnel
	comp deflate 
src 192.1.2.45 dst 192.1.2.23
	proto 4 spi 0xSPISPI reqid REQID mode tunnel
east #
 ip xfrm pol
src 192.0.2.0/24 dst 192.0.1.0/24 
	dir out priority 375423 ptype main 
	tmpl src 192.1.2.23 dst 192.1.2.45
		proto comp spi 0xSPISPI reqid 1 mode tunnel
	tmpl src 0.0.0.0 dst 0.0.0.0
		proto esp spi 0xSPISPI reqid 1 mode transport
src 192.0.1.0/24 dst 192.0.2.0/24 
	dir fwd priority 375423 ptype main 
	tmpl src 192.1.2.45 dst 192.1.2.23
		proto comp reqid 1 mode tunnel
		level use 
	tmpl src 0.0.0.0 dst 0.0.0.0
src 192.0.1.0/24 dst 192.0.2.0/24 
	dir in priority 375423 ptype main 
	tmpl src 192.1.2.45 dst 192.1.2.23
		proto comp reqid 1 mode tunnel
		level use 
	tmpl src 0.0.0.0 dst 0.0.0.0
east #
east #
 ../bin/check-for-core.sh
east #
 if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi

