Tobias Brunner
cbaafa03c7
With -W we reduce timeouts when we don't expect a response. With -i the interval between pings is reduced (mostly in case of auto=route where the first ping yields no reply).
15 lines
881 B
Plaintext
15 lines
881 B
Plaintext
carol::ipsec status 2> /dev/null::home.*INSTALLED, TUNNEL::YES
|
|
moon:: ipsec status 2> /dev/null::rw.*INSTALLED, TUNNEL::YES
|
|
moon:: iptables -A INPUT -i eth0 -s PH_IP_CAROL -j DROP::no output expected::NO
|
|
carol::iptables -A INPUT -i eth0 -s PH_IP_MOON -j DROP::no output expected::NO
|
|
carol::sleep 13::no output expected::NO
|
|
carol::cat /var/log/daemon.log::sending DPD request::YES
|
|
carol::cat /var/log/daemon.log::retransmit.*of request::YES
|
|
carol::cat /var/log/daemon.log::giving up after.*retransmits::YES
|
|
carol::iptables -D INPUT -i eth0 -s PH_IP_MOON -j DROP::no output expected::NO
|
|
moon:: iptables -D INPUT -i eth0 -s PH_IP_CAROL -j DROP::no output expected::NO
|
|
carol::ping -c 1 -W 1 PH_IP_ALICE::trigger route::NO
|
|
carol::sleep 1::no output expected::NO
|
|
carol::ipsec status 2> /dev/null::home.*INSTALLED, TUNNEL::YES
|
|
moon:: ipsec status 2> /dev/null::rw.*INSTALLED, TUNNEL::YES
|