moon::iptables-restore < /etc/iptables.rules
sun::iptables-restore < /etc/iptables.rules
moon::rm /etc/swanctl/x509ca/*
sun::rm /etc/swanctl/x509ca/*
sun::systemctl start strongswan
moon::systemctl start strongswan
sun::expect-connection net-net
moon::expect-connection net-net
moon::swanctl --initiate --child net-net 2> /dev/null