wi-log

来自「ipsec vpn」· 代码 · 共 65 行

whackwest --name reject --delete --host 127.95.7.1 --ikeport 8500 --nexthop 127.95.7.254 --updown silly --to --updown sally --host %group --ikeport 8500 --reject
002 added connection description "reject"
whackeast --name reject --delete --host 127.95.7.2 --ikeport 8500 --nexthop 127.95.7.254 --updown silly --to --updown sally --host %group --ikeport 8500 --reject
002 added connection description "reject"
whackwest --listen
002 listening for IKE messages
002 adding interface virtual127.95.7.1/lo:w 127.95.7.1:8500
002 loading secrets from "/tmp/ipsec.secrets/west"
002 loading group "/tmp/west/policies/reject"
whackeast --listen
002 listening for IKE messages
002 adding interface virtual127.95.7.2/lo:e 127.95.7.2:8500
002 loading secrets from "/tmp/ipsec.secrets/east"
002 loading group "/tmp/east/policies/reject"
whackwest --route --name reject
whackeast --route --name reject
whackwest --shutdown
002 shutting down
whackeast --shutdown
002 shutting down

>>>Initiator:
PLUTO --ctlbase pluto.west --interface lo:w --ikeport 8500 --secretsfile /tmp/ipsec.secrets/west --ipsecdir /tmp/west --noklips --uniqueids --stderrlog --debug-all --debug-private
Setting port floating to off
port floating activate 0/1
ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
starting up 1 cryptographic helpers
added connection description "reject"
listening for IKE messages
adding interface virtual127.95.7.1/lo:w 127.95.7.1:8500
loading secrets from "/tmp/ipsec.secrets/west"
loading group "/tmp/west/policies/reject"
shutting down
forgetting secrets
"reject#11.0.0.0/15" 0.0.0.0: deleting connection "reject#11.0.0.0/15" instance with peer 0.0.0.0
"reject#10.0.0.0/15" 0.0.0.0: deleting connection "reject#10.0.0.0/15" instance with peer 0.0.0.0
"reject#6.5.0.0/24" 0.0.0.0: deleting connection "reject#6.5.0.0/24" instance with peer 0.0.0.0
"reject#5.6.0.0/24" 0.0.0.0: deleting connection "reject#5.6.0.0/24" instance with peer 0.0.0.0
"reject#1.2.3.6/31" 0.0.0.0: deleting connection "reject#1.2.3.6/31" instance with peer 0.0.0.0
"reject#1.2.3.4/31" 0.0.0.0: deleting connection "reject#1.2.3.4/31" instance with peer 0.0.0.0
"reject": deleting connection
shutting down interface virtual127.95.7.1/lo:w 127.95.7.1:8500

>>>Responder:
PLUTO --ctlbase pluto.east --interface lo:e --ikeport 8500 --secretsfile /tmp/ipsec.secrets/east --ipsecdir /tmp/east --noklips --uniqueids --stderrlog --debug-all --debug-private
Setting port floating to off
port floating activate 0/1
ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
starting up 1 cryptographic helpers
added connection description "reject"
listening for IKE messages
adding interface virtual127.95.7.2/lo:e 127.95.7.2:8500
loading secrets from "/tmp/ipsec.secrets/east"
loading group "/tmp/east/policies/reject"
shutting down
forgetting secrets
"reject#11.0.0.0/15" 0.0.0.0: deleting connection "reject#11.0.0.0/15" instance with peer 0.0.0.0
"reject#10.0.0.0/15" 0.0.0.0: deleting connection "reject#10.0.0.0/15" instance with peer 0.0.0.0
"reject#6.5.0.0/24" 0.0.0.0: deleting connection "reject#6.5.0.0/24" instance with peer 0.0.0.0
"reject#5.6.0.0/24" 0.0.0.0: deleting connection "reject#5.6.0.0/24" instance with peer 0.0.0.0
"reject#1.2.3.6/31" 0.0.0.0: deleting connection "reject#1.2.3.6/31" instance with peer 0.0.0.0
"reject#1.2.3.4/31" 0.0.0.0: deleting connection "reject#1.2.3.4/31" instance with peer 0.0.0.0
"reject": deleting connection
shutting down interface virtual127.95.7.2/lo:e 127.95.7.2:8500