Tobias Brunner
f519acd42f
By consistently using the `expect-connection` helper we can avoid pretty much all previously needed calls to sleep.
14 lines
843 B
Plaintext
14 lines
843 B
Plaintext
carol::ipsec status 2> /dev/null::home.*INSTALLED, TUNNEL::YES
|
|
moon:: ipsec status 2> /dev/null::rw.*INSTALLED, TUNNEL::YES
|
|
moon:: iptables -A INPUT -i eth0 -s PH_IP_CAROL -j DROP::no output expected::NO
|
|
carol::iptables -A INPUT -i eth0 -s PH_IP_MOON -j DROP::no output expected::NO
|
|
carol::sleep 16::no output expected::NO
|
|
carol::cat /var/log/daemon.log::sending DPD request::YES
|
|
carol::cat /var/log/daemon.log::DPD check timed out, enforcing DPD action::YES
|
|
carol::cat /var/log/daemon.log::restarting CHILD_SA home::YES
|
|
carol::iptables -D INPUT -i eth0 -s PH_IP_MOON -j DROP::no output expected::NO
|
|
moon:: iptables -D INPUT -i eth0 -s PH_IP_CAROL -j DROP::no output expected::NO
|
|
carol::sleep 2::no output expected::NO
|
|
carol::ipsec status 2> /dev/null::home.*INSTALLED, TUNNEL::YES
|
|
moon:: ipsec status 2> /dev/null::rw.*INSTALLED, TUNNEL::YES
|