debugging mode enabled including file DIR/testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common' from line DIR/testing/pluto/esp-pluto-01/east.conf:22 end of file DIR/testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common, resuming DIR/testing/pluto/esp-pluto-01/east.conf line 22 end of file /lsw/v2.5.00/testing/pluto/esp-pluto-01/east.conf, resuming line -1 Loading conn westnet-eastnet-esp while loading conn 'westnet-eastnet-esp' also including 'west-east-base' while loading conn 'westnet-eastnet-esp' also including 'westnet' while loading conn 'westnet-eastnet-esp' also including 'eastnet' Loading conn us-to-anyone while loading conn 'us-to-anyone' also including 'us' while loading conn 'us-to-anyone' also including 'me-to-anyone' Loading conn me-to-anyone Loading conn us-clear while loading conn 'us-clear' also including 'clear' while loading conn 'us-clear' also including 'us' Loading conn us-let-my-dns-go while loading conn 'us-let-my-dns-go' also including 'let-my-dns-go' Loading conn let-my-dns-go Loading conn us-clear-or-private while loading conn 'us-clear-or-private' also including 'clear-or-private' while loading conn 'us-clear-or-private' also including 'us' Loading conn us-private-or-clear while loading conn 'us-private-or-clear' also including 'private-or-clear' while loading conn 'us-private-or-clear' also including 'us' Loading conn us-private-or-clear-all while loading conn 'us-private-or-clear-all' also including 'private-or-clear' while loading conn 'us-private-or-clear-all' also including 'us' Loading conn us-private while loading conn 'us-private' also including 'private' while loading conn 'us-private' also including 'us' Loading conn us-block while loading conn 'us-block' also including 'block' while loading conn 'us-block' also including 'us' Loading conn private-or-clear-all while loading conn 'private-or-clear-all' also including 'private-or-clear' Loading conn clear Loading conn clear-or-private Loading conn private-or-clear Loading conn private Loading conn block Loading conn west-east while loading conn 'west-east' also including 'west-east-base' Loading conn west-eastnet while loading conn 'west-eastnet' also including 'west-east-base' while loading conn 'west-eastnet' also including 'eastnet' Loading conn westnet-east while loading conn 'westnet-east' also including 'west-east-base' while loading conn 'westnet-east' also including 'westnet' Loading conn west-east-pass while loading conn 'west-east-pass' also including 'west-east-base' Loading conn westnet-east-pass while loading conn 'westnet-east-pass' also including 'west-east-base' while loading conn 'westnet-east-pass' also including 'westnet' Loading conn west-eastnet-pass while loading conn 'west-eastnet-pass' also including 'west-east-base' while loading conn 'west-eastnet-pass' also including 'eastnet' Loading conn westnet-eastnet-ipcomp while loading conn 'westnet-eastnet-ipcomp' also including 'westnet-eastnet' while processing section 'westnet-eastnet' added also=west-east-base while processing section 'westnet-eastnet' added also=westnet while processing section 'westnet-eastnet' added also=eastnet while loading conn 'westnet-eastnet-ipcomp' also including 'west-east-base' while loading conn 'westnet-eastnet-ipcomp' also including 'westnet' while loading conn 'westnet-eastnet-ipcomp' also including 'eastnet' Loading conn westnet-eastnet while loading conn 'westnet-eastnet' also including 'west-east-base' while loading conn 'westnet-eastnet' also including 'westnet' while loading conn 'westnet-eastnet' also including 'eastnet' Loading conn westnet-eastnet-pass while loading conn 'westnet-eastnet-pass' also including 'west-east-base' while loading conn 'westnet-eastnet-pass' also including 'westnet' while loading conn 'westnet-eastnet-pass' also including 'eastnet' Loading conn westnet-eastnet-drop while loading conn 'westnet-eastnet-drop' also including 'west-east-base' while loading conn 'westnet-eastnet-drop' also including 'westnet' while loading conn 'westnet-eastnet-drop' also including 'eastnet' Loading conn eastnet Loading conn westnet Loading conn west-east-base Loading conn road-east-base Loading conn westnet-eastnet-x509 while loading conn 'westnet-eastnet-x509' also including 'west-east-x509' Loading conn west-east-x509 Loading conn north-east-x509 Loading conn north-east Loading conn us Loading conn them opening file: DIR/testing/pluto/esp-pluto-01/east.conf #conn westnet-eastnet-esp loaded #conn us-to-anyone loaded #conn me-to-anyone loaded #conn us-clear loaded #conn us-let-my-dns-go loaded #conn let-my-dns-go loaded #conn us-clear-or-private loaded #conn us-private-or-clear loaded #conn us-private-or-clear-all loaded #conn us-private loaded #conn us-block loaded #conn private-or-clear-all loaded #conn clear loaded #conn clear-or-private loaded #conn private-or-clear loaded #conn private loaded #conn block loaded #conn west-east loaded #conn west-eastnet loaded #conn westnet-east loaded #conn west-east-pass loaded #conn westnet-east-pass loaded #conn west-eastnet-pass loaded #conn westnet-eastnet-ipcomp loaded #conn westnet-eastnet loaded #conn westnet-eastnet-pass loaded #conn westnet-eastnet-drop loaded #conn eastnet loaded #conn westnet loaded #conn west-east-base loaded #conn road-east-base loaded #conn westnet-eastnet-x509 loaded #conn west-east-x509 loaded #conn north-east-x509 loaded #conn north-east loaded #conn us loaded #conn them loaded version 2.0 config setup plutorestartoncrash=no plutostderrlog=/tmp/pluto.log dumpdir=/tmp # begin conn westnet-eastnet-esp conn westnet-eastnet-esp #also = west-east-base westnet eastnet left=192.1.2.45 leftid="@west" leftnexthop=192.1.2.23 leftsubnet=192.0.1.0/24 leftrsakey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 right=192.1.2.23 rightid="@east" rightnexthop=192.1.2.45 rightsubnet=192.0.2.0/24 rightrsakey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL salifetime=7200 ikelifetime=3600 auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn westnet-eastnet-esp # begin conn us-to-anyone conn us-to-anyone #also = us me-to-anyone left=%opportunistic right=%defaultroute rightnexthop=%defaultroute rightsubnet=192.0.2.0/24 failureshunt=drop auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn us-to-anyone # begin conn me-to-anyone conn me-to-anyone left=%opportunistic right=%defaultroute rightnexthop=%defaultroute failureshunt=drop auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn me-to-anyone # begin conn us-clear conn us-clear #also = clear us left=%group right=%defaultroute rightsubnet=192.0.2.0/24 authby=never auto=ignore type=passthrough # end conn us-clear # begin conn us-let-my-dns-go conn us-let-my-dns-go #also = let-my-dns-go left=%defaultroute leftprotoport=17/%any right=0.0.0.0 rightsubnet=0.0.0.0/0 rightprotoport=17/53 auto=ignore type=passthrough # end conn us-let-my-dns-go # begin conn let-my-dns-go conn let-my-dns-go left=%defaultroute leftprotoport=17/%any right=0.0.0.0 rightsubnet=0.0.0.0/0 rightprotoport=17/53 auto=ignore type=passthrough # end conn let-my-dns-go # begin conn us-clear-or-private conn us-clear-or-private #also = clear-or-private us left=%opportunisticgroup right=%defaultroute rightsubnet=192.0.2.0/24 failureshunt=passthrough auto=ignore type=passthrough # end conn us-clear-or-private # begin conn us-private-or-clear conn us-private-or-clear #also = private-or-clear us left=%opportunisticgroup right=%defaultroute rightsubnet=192.0.2.0/24 failureshunt=passthrough auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn us-private-or-clear # begin conn us-private-or-clear-all conn us-private-or-clear-all #also = private-or-clear us left=%opportunisticgroup right=%defaultroute rightsubnet=192.0.2.0/24 failureshunt=passthrough auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn us-private-or-clear-all # begin conn us-private conn us-private #also = private us left=%opportunisticgroup right=%defaultroute rightsubnet=192.0.2.0/24 failureshunt=drop auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn us-private # begin conn us-block conn us-block #also = block us left=%group right=%defaultroute rightsubnet=192.0.2.0/24 authby=never auto=ignore type=reject # end conn us-block # begin conn private-or-clear-all conn private-or-clear-all #also = private-or-clear left=%opportunisticgroup right=%defaultroute failureshunt=passthrough auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn private-or-clear-all # begin conn clear conn clear left=%group right=%defaultroute authby=never auto=ignore type=passthrough # end conn clear # begin conn clear-or-private conn clear-or-private left=%opportunisticgroup right=%defaultroute failureshunt=passthrough auto=ignore type=passthrough # end conn clear-or-private # begin conn private-or-clear conn private-or-clear left=%opportunisticgroup right=%defaultroute failureshunt=passthrough auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn private-or-clear # begin conn private conn private left=%opportunisticgroup right=%defaultroute failureshunt=drop auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn private # begin conn block conn block left=%group right=%defaultroute authby=never auto=ignore type=reject # end conn block # begin conn west-east conn west-east #also = west-east-base left=192.1.2.45 leftid="@west" leftnexthop=192.1.2.23 leftrsakey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 right=192.1.2.23 rightid="@east" rightnexthop=192.1.2.45 rightrsakey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn west-east # begin conn west-eastnet conn west-eastnet #also = west-east-base eastnet left=192.1.2.45 leftid="@west" leftnexthop=192.1.2.23 leftrsakey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 right=192.1.2.23 rightid="@east" rightnexthop=192.1.2.45 rightsubnet=192.0.2.0/24 rightrsakey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn west-eastnet # begin conn westnet-east conn westnet-east #also = west-east-base westnet left=192.1.2.45 leftid="@west" leftnexthop=192.1.2.23 leftsubnet=192.0.1.0/24 leftrsakey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 right=192.1.2.23 rightid="@east" rightnexthop=192.1.2.45 rightrsakey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn westnet-east # begin conn west-east-pass conn west-east-pass #also = west-east-base left=192.1.2.45 leftid="@west" leftnexthop=192.1.2.23 leftrsakey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 right=192.1.2.23 rightid="@east" rightnexthop=192.1.2.45 rightrsakey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL auto=ignore type=passthrough # end conn west-east-pass # begin conn westnet-east-pass conn westnet-east-pass #also = west-east-base westnet left=192.1.2.45 leftid="@west" leftnexthop=192.1.2.23 leftsubnet=192.0.1.0/24 leftrsakey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 right=192.1.2.23 rightid="@east" rightnexthop=192.1.2.45 rightrsakey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL auto=ignore type=passthrough # end conn westnet-east-pass # begin conn west-eastnet-pass conn west-eastnet-pass #also = west-east-base eastnet left=192.1.2.45 leftid="@west" leftnexthop=192.1.2.23 leftrsakey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 right=192.1.2.23 rightid="@east" rightnexthop=192.1.2.45 rightsubnet=192.0.2.0/24 rightrsakey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL auto=ignore type=passthrough # end conn west-eastnet-pass # begin conn westnet-eastnet-ipcomp conn westnet-eastnet-ipcomp #also = westnet-eastnet west-east-base westnet eastnet left=192.1.2.45 leftid="@west" leftnexthop=192.1.2.23 leftsubnet=192.0.1.0/24 leftrsakey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 right=192.1.2.23 rightid="@east" rightnexthop=192.1.2.45 rightsubnet=192.0.2.0/24 rightrsakey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL compress=yes auto=ignore type=tunnel compress=yes pfs=yes rekey=yes authby=rsasig phase2=esp # end conn westnet-eastnet-ipcomp # begin conn westnet-eastnet conn westnet-eastnet #also = west-east-base westnet eastnet left=192.1.2.45 leftid="@west" leftnexthop=192.1.2.23 leftsubnet=192.0.1.0/24 leftrsakey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 right=192.1.2.23 rightid="@east" rightnexthop=192.1.2.45 rightsubnet=192.0.2.0/24 rightrsakey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn westnet-eastnet # begin conn westnet-eastnet-pass conn westnet-eastnet-pass #also = west-east-base westnet eastnet left=192.1.2.45 leftid="@west" leftnexthop=192.1.2.23 leftsubnet=192.0.1.0/24 leftrsakey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 right=192.1.2.23 rightid="@east" rightnexthop=192.1.2.45 rightsubnet=192.0.2.0/24 rightrsakey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL auto=ignore type=passthrough # end conn westnet-eastnet-pass # begin conn westnet-eastnet-drop conn westnet-eastnet-drop #also = west-east-base westnet eastnet left=192.1.2.45 leftid="@west" leftnexthop=192.1.2.23 leftsubnet=192.0.1.0/24 leftrsakey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 right=192.1.2.23 rightid="@east" rightnexthop=192.1.2.45 rightsubnet=192.0.2.0/24 rightrsakey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL auto=ignore type=drop # end conn westnet-eastnet-drop # begin conn eastnet conn eastnet rightsubnet=192.0.2.0/24 auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn eastnet # begin conn westnet conn westnet leftsubnet=192.0.1.0/24 auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn westnet # begin conn west-east-base conn west-east-base left=192.1.2.45 leftid="@west" leftnexthop=192.1.2.23 leftrsakey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 right=192.1.2.23 rightid="@east" rightnexthop=192.1.2.45 rightrsakey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn west-east-base # begin conn road-east-base conn road-east-base leftid="@road.testing.libreswan.org" leftrsakey=0sAQNxbOBmDqiNrUmn5q4kzBQ6I6pW/g2c8iDh3Y/KDtELBC6G0dASaaa95lV0cZT2kla681hVLzRF4MUCmFkH5ih514Nrwc5aptte49/70WotqcbvAhXeBX0zbg78gUPaT7CcUEAYxHoqHubao4mmfWlSrOnpf4crE/q3J6zH+8Z3bfsTGnpThgfNCItHpH7jkHPUYDilHsk0Zfd5fxjVDbl8JbQoT3P1KrdmpK7M1sXQhug12ocq8HlrXa3smJIq5b4T0rF+MYrThrNytNIEn53phuj6S8qmONin4usCqpUw50i2VqaBNQSY++/B57AqThFZNqt7TjqqT0CQ7tPRELgXwRvWA04GDhqBHHWoOrLdsR0p right=192.1.2.23 rightid="@east" rightnexthop=192.1.2.45 rightrsakey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn road-east-base # begin conn westnet-eastnet-x509 conn westnet-eastnet-x509 #also = west-east-x509 left=192.1.2.45 leftid="C=ca/ST=Ontario/O=Libreswan/CN=west.testing.libreswan.org/Email=testing.libreswan.org" leftnexthop=192.1.2.23 leftsubnet=192.0.1.0/24 leftcert=west.crt right=192.1.2.23 rightid="C=ca/ST=Ontario/O=Libreswan/CN=east.testing.libreswan.org/Email=testing.libreswan.org" rightnexthop=192.1.2.45 rightsubnet=192.0.2.0/24 rightcert=east.crt auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn westnet-eastnet-x509 # begin conn west-east-x509 conn west-east-x509 left=192.1.2.45 leftid="C=ca/ST=Ontario/O=Libreswan/CN=west.testing.libreswan.org/Email=testing.libreswan.org" leftnexthop=192.1.2.23 leftcert=west.crt right=192.1.2.23 rightid="C=ca/ST=Ontario/O=Libreswan/CN=east.testing.libreswan.org/Email=testing.libreswan.org" rightnexthop=192.1.2.45 rightcert=east.crt auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn west-east-x509 # begin conn north-east-x509 conn north-east-x509 left=192.1.2.49 leftid="C=ca/ST=Ontario/O=Libreswan/CN=north.testing.libreswan.org/Email=testing.libreswan.org" leftnexthop=192.1.2.23 leftcert=north.crt right=192.1.2.23 rightid="C=ca/ST=Ontario/O=Libreswan/CN=east.testing.libreswan.org/Email=testing.libreswan.org" rightnexthop=192.1.2.49 rightcert=east.crt auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn north-east-x509 # begin conn north-east conn north-east left=%any leftid="@north" leftnexthop=192.2.3.254 leftrsakey=0sAQPwDB+4k65xvxQ3qtPV6rUucJovYeRGnfv6T7HaeK/5TcBXDyhEDrfNLS13p5cJYUu13LJbeLYS9MQZSZq7PRsg8DsG1oVeDmJbQM9CaVKs9REMnTiRbzye3mDnsQQRRr63BnU/IMDJrmO54ZenkQIbtEkFOX6vm2gtmf/s8C0lPvQk/cNXgkHx6fTq3sZs7pUiFvspj/CrZTx4ShhFNkyvv6RrUu728HspGZwseoZqC7ZbIqnsMqjPeG65qLl+IRYk4s8yT6JBYjYxX96LoHf9V8v0Qbjq4LJm7UpaqX4EJscDRGPByVZaiAwntCU3uzc/NAlgyZJN14yzwXfv1kQUJFLDGYNBF+z0dqON+0DfuCTR right=192.1.2.23 rightid="@east" rightnexthop=192.1.2.254 rightrsakey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn north-east # begin conn us conn us rightsubnet=192.0.2.0/24 auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn us # begin conn them conn them leftsubnet=192.0.1.0/24 auto=ignore type=tunnel compress=no pfs=yes rekey=yes authby=rsasig phase2=esp # end conn them # end of config