/testing/guestbin/swan-prep
west #
 ./ips.sh
Global routes 572
west #
 ipsec start
Redirecting to: [initsystem]
west #
 ../../guestbin/wait-until-pluto-started
west #
 ipsec addconn --verbose test
opening file: /etc/ipsec.conf
debugging mode enabled
end of file /etc/ipsec.conf
Loading conn test
starter: left is KH_DEFAULTROUTE
loading named conns: test
resolving src = <defaultroute> gateway = <defaultroute> peer <any>
  seeking gateway
  query getroute +REQUEST +ROOT +MATCH
  src <unset-address> prefsrc <unset-address> gateway 192.1.2.254 dst <unset-address> dev eth1 priority -1 pref -1 table 254
  found gateway (host_nexthop): 192.1.2.254
  please-call-again: src = <defaultroute> gateway = 192.1.2.254
resolving src = <defaultroute> gateway = 192.1.2.254 peer <any>
  seeking prefsrc
  query getroute +REQUEST
  add dst 192.1.2.254 (host->nexthop)
  src <unset-address> prefsrc 192.1.2.45 gateway <unset-address> dst 192.1.2.254 dev eth1 priority -1 pref -1 table 254 +cacheinfo +uid
  found prefsrc (host_addr): 192.1.2.45
  success: src = 192.1.2.45 gateway = 192.1.2.254
resolving src = <any> gateway = <not-set> peer 192.1.2.45
  seeking nothing
conn: "test" modecfgdns=<unset>
conn: "test" modecfgdomains=<unset>
conn: "test" modecfgbanner=<unset>
conn: "test" mark=<unset>
conn: "test" mark-in=<unset>
conn: "test" mark-out=<unset>
conn: "test" vti_iface=<unset>
conn: "test" redirect-to=<unset>
conn: "test" accept-redirect-to=<unset>
conn: "test" esp=<unset>
conn: "test" ike=<unset>
002 "test": added IKEv2 connection
west #
 # base line check - remove routes and try again
west #
 # systemctl restart network.service
west #
 # ipsec start
west #
 # C=`ip -o route show scope global |wc -l`; echo "Global routes $C"
west #
 # ipsec addconn --verbose test

