road-console.txt

openswan

road:~#
 ifconfig eth0 inet 192.1.3.211
road:~#
 route delete -net default 
SIOCDELRT: No such process
road:~#
 route add -net default gw 192.1.3.254
road:~#
 netstat -rne
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.1.3.0       0.0.0.0         255.255.255.0   U     0      0        0 eth0
0.0.0.0         192.1.3.254     0.0.0.0         UG    0      0        0 eth0
road:~#
 named
road:~#
 sleep 2
road:~#
 /testing/pluto/bin/look-for-txt roadbad.uml.freeswan.org AQNxbOBmD
LOOK-FOR-TXT FOUND AQNxbOBmD
road:~#
 mkdir -p /tmp/oe-road-03
road:~#
 cp /testing/pluto/oe-road-03/road.conf  /tmp/oe-road-03/ipsec.conf
road:~#
 cp /etc/ipsec.secrets                   /tmp/oe-road-03
road:~#
 mkdir -p /tmp/oe-road-03/ipsec.d/policies
road:~#
 cp /etc/ipsec.d/policies/* /tmp/oe-road-03/ipsec.d/policies
road:~#
 : make sure that target is in policy private!
road:~#
 echo 192.0.2.2/32	>>/tmp/oe-road-03/ipsec.d/policies/private
road:~#
 IPSEC_CONFS=/tmp/oe-road-03 export IPSEC_CONFS
road:~#
 ipsec setup start
ipsec_setup: Starting Openswan IPsec VERSION
road:~#
 /testing/pluto/oe-road-01/policy-wait.sh
road:~#
 echo done
done
road:~#
 : turn on debugging
road:~#
 ipsec whack --debug-control --debug-oppo --debug-dns
road:~#
 : check out config
road:~#
 ipsec eroute
0          0.0.0.0/0          -> 0.0.0.0/0          => %trap
0          192.1.3.211/32     -> 0.0.0.0/0          => %trap
0          192.1.3.211/32     -> 192.0.2.2/32       => %trap
0          192.1.3.211/32     -> 192.1.2.129/32     => %pass
0          192.1.3.211/32     -> 192.1.2.130/32     => %pass
0          192.1.3.211/32     -> 192.1.2.254/32     => %pass
road:~#
 ping -c 4 -n 192.0.2.2
PING 192.0.2.2 (192.0.2.2): 56 data bytes

--- 192.0.2.2 ping statistics ---
4 packets transmitted, 0 packets received, 100% packet loss
road:~#
 : transfer some data
road:~#
 nc -w 5 192.0.2.2 2 | wc -l
(UNKNOWN) [192.0.2.2] 2 (?) : Connection timed out
      0
road:~#
 if ! ipsec eroute | grep -q tun ; then echo 'no tunnel, as expected' ; else echo 'found UNEXPECTED TUNNEL' ; ipsec eroute ; ipsec auto --status ; fi
no tunnel, as expected
road:~#
 

road:~#
road:~#
 ipsec setup stop
IPSEC EVENT: KLIPS device ipsec0 shut down.
ipsec_setup: Stopping Openswan IPsec...
road:~#
 kill `cat /var/run/klogd.pid`; cat /tmp/klog.log
klogd 1.3-3#33.1, log source = /proc/kmsg started.
road:~#
 halt -p -f
Power down.