Swanctl

Aus xinux.net
Zur Navigation springen Zur Suche springen

(re-)load connection configuration

  • swanctl -c
loaded connection 'net-net'
successfully loaded 1 connections, 0 unloaded

initiate a connection

  • swanctl --initiate --child net
[ENC] generating QUICK_MODE request 661387916 [ HASH SA No KE ID ID ]
[NET] sending packet: from 10.84.252.40[500] to 10.84.252.32[500] (460 bytes)
[NET] received packet: from 10.84.252.32[500] to 10.84.252.40[500] (460 bytes)
[ENC] parsed QUICK_MODE response 661387916 [ HASH SA No KE ID ID ]
[IKE] CHILD_SA net{7} established with SPIs c7a4e05a_i c95bd1a5_o and TS 10.83.40.0/24 === 10.83.32.0/24
[ENC] generating QUICK_MODE request 661387916 [ HASH ]
[NET] sending packet: from 10.84.252.40[500] to 10.84.252.32[500] (76 bytes)
initiate completed successfully

terminate a connection

  • swanctl --terminate --child net
[IKE] closing CHILD_SA net{6} with SPIs c1ea2318_i (0 bytes) c3ede3a4_o (0 bytes) and TS 10.83.40.0/24 === 10.83.32.0/24
[IKE] sending DELETE for ESP CHILD_SA with SPI c1ea2318
[ENC] generating INFORMATIONAL_V1 request 2587432778 [ HASH D ]
[NET] sending packet: from 10.84.252.40[500] to 10.84.252.32[500] (92 bytes)
[IKE] closing CHILD_SA net{7} with SPIs c7a4e05a_i (0 bytes) c95bd1a5_o (0 bytes) and TS 10.83.40.0/24 === 10.83.32.0/24
[IKE] sending DELETE for ESP CHILD_SA with SPI c7a4e05a
[ENC] generating INFORMATIONAL_V1 request 1981643187 [ HASH D ]
[NET] sending packet: from 10.84.252.40[500] to 10.84.252.32[500] (92 bytes)
terminate completed successfully

rekey an SA

  • swanctl --rekey --child net
rekey completed successfully