roadrun.sh

This a good VPN source

#!/bin/sh

: turn on debugging
ipsec whack --debug-control --debug-oppo --debug-dns

: check out config
ipsec eroute

ping -c 4 -n 192.0.2.2

: transfer some data
nc -w 5 192.0.2.2 2 | wc -l

if ! ipsec eroute | grep -q tun ; then echo 'no tunnel, as expected' ; else echo 'found UNEXPECTED TUNNEL' ; ipsec eroute ; ipsec auto --status ; fi