/testing/guestbin/swan-prep
west #
 ./ips.sh
Global routes 572
west #
 ipsec start
Redirecting to: [initsystem]
west #
 ../../guestbin/wait-until-pluto-started
west #
 ipsec addconn --verbose test
opening file: /etc/ipsec.conf
debugging mode enabled
end of file /etc/ipsec.conf
Loading conn test
starter: left is KH_DEFAULTROUTE
loading named conns: test
resolving family=IPv4 src=<defaultroute> gateway=<defaultroute> peer <any>
  seeking GATEWAY
    query GETROUTE+REQUEST+ROOT+MATCH
    query returned 34872 bytes
  processing response
    parsing route entry (RTA payloads)
      RTA_TABLE=254
      RTA_GATEWAY=192.1.2.254
      using src=<unset-address> prefsrc=<unset-address> gateway=192.1.2.254 dst=<unset-address> dev='eth1' priority=-1 pref=-1 table=254
    found gateway(host_nexthop): 192.1.2.254
  please-call-again: src=<defaultroute> gateway=192.1.2.254
resolving family=IPv4 src=<defaultroute> gateway=192.1.2.254 peer <any>
  seeking PREFSRC
    query GETROUTE+REQUEST
    add RTA_DST 192.1.2.254 (host->nexthop)
    query returned 104 bytes
  processing response
    parsing route entry (RTA payloads)
      RTA_TABLE=254
      RTA_DST=192.1.2.254
      RTA_PREFSRC=192.1.2.45
      using src=<unset-address> prefsrc=192.1.2.45 gateway=<unset-address> dst=192.1.2.254 dev='eth1' priority=-1 pref=-1 table=254 +cacheinfo +uid
    found prefsrc(host_addr): 192.1.2.45
  success: src=192.1.2.45 gateway=192.1.2.254
resolving family=IPv4 src=<any> gateway=<not-set> peer 192.1.2.45
  seeking NOTHING
conn: "test" modecfgdns=<unset>
conn: "test" modecfgdomains=<unset>
conn: "test" modecfgbanner=<unset>
conn: "test" mark=<unset>
conn: "test" mark-in=<unset>
conn: "test" mark-out=<unset>
conn: "test" vti_iface=<unset>
conn: "test" redirect-to=<unset>
conn: "test" accept-redirect-to=<unset>
conn: "test" esp=<unset>
conn: "test" ike=<unset>
002 "test": added IKEv2 connection
west #
 # base line check - remove routes and try again
west #
 # systemctl restart network.service
west #
 # ipsec start
west #
 # C=`ip -o route show scope global |wc -l`; echo "Global routes $C"
west #
 # ipsec addconn --verbose test

