Tobias Brunner
8f56bbc82b
The main difference is that ping now reports icmp_seq instead of icmp_req, so we match for icmp_.eq, which works with both releases. tcpdump now also reports port 4500 as ipsec-nat-t.
10 lines
729 B
Plaintext
10 lines
729 B
Plaintext
carol::ipsec status 2> /dev/null::home.*ESTABLISHED.*carol@strongswan.org.*moon.strongswan.org::YES
|
|
carol::ipsec status 2> /dev/null::home.*INSTALLED, TUNNEL::YES
|
|
moon:: ipsec status 2> /dev/null::rw.*ESTABLISHED.*moon.strongswan.org.*carol@strongswan.org::YES
|
|
moon:: ipsec status 2> /dev/null::rw.*INSTALLED, TUNNEL::YES
|
|
carol::cat /var/log/daemon.log::installing new virtual IP 10.3.0.1::YES
|
|
carol::cat /var/log/daemon.log::installing new virtual IP fec3:\:1::YES
|
|
carol::cat /var/log/daemon.log::TS 10.3.0.1/32 fec3:\:1/128 === 10.1.0.0/16 fec1:\:/16::YES
|
|
carol::ping -c 1 PH_IP_MOON::64 bytes from PH_IP_MOON: icmp_.eq=1::YES
|
|
carol::ping6 -c 1 ip6-alice.strongswan.org::64 bytes from ip6-alice.strongswan.org: icmp_seq=1::YES
|