1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
|
: confirm that my key is present in DNS
dig 2.1.0.192.in-addr.arpa. key
dig japan.uml.freeswan.org. key
ipsec setup $CFG start
sleep 2
ipsec eroute
/testing/pluto/co-terminal-02/eroutewait.sh trap
ipsec auto $CFG --delete packetdefault
ipsec auto $CFG --add japan--wavesec
ipsec whack --listen
ipsec auto $CFG --add clear
ipsec whack --listen
ipsec auto $CFG --route clear
/testing/pluto/co-terminal-02/eroutewait.sh pass
ipsec whack --debug-oppo --debug-control --debug-controlmore
ipsec auto $CFG --add private-or-clear
ipsec whack --listen
ipsec auto $CFG --route private-or-clear
sh /testing/pluto/co-terminal-02/eroutewait.sh trap
ipsec auto $CFG --up japan--wavesec
ipsec eroute | sed -e 's/^[0-9]* /n /' -e 's/tun0x..../tun0xABCD/'
ping -c 1 1.2.3.4
/testing/pluto/co-terminal-02/eroutewait.sh tun0
ipsec eroute | sed -e 's/^[0-9]* /n /' -e 's/tun0x..../tun0xABCD/'
ping -c 1 1.2.3.4
sleep 1
ping -c 1 192.0.2.2
/testing/pluto/co-terminal-02/eroutewait.sh 192.1.2.23
ping -c 1 192.0.2.2
ipsec eroute | sed -e 's/^[0-9]* /n /' -e 's/tun0x..../tun0xABCD/'
ipsec auto --up japan--wavesec
ipsec eroute | sed -e 's/^[0-9]* /n /' -e 's/tun0x..../tun0xABCD/'
echo done
|
