/testing/guestbin/swan-prep road # ipsec start Redirecting to: [initsystem] road # ../../guestbin/wait-until-pluto-started road # ipsec auto --add road 002 "road": added IKEv1 connection road # echo "initdone" initdone road # ipsec auto --up road 002 "road" #1: initiating IKEv1 Main Mode connection 1v1 "road" #1: sent Main Mode request 1v1 "road" #1: sent Main Mode I2 1v1 "road" #1: sent Main Mode I3 002 "road" #1: Peer ID is ID_FQDN: '@east' 004 "road" #1: ISAKMP SA established {auth=PRESHARED_KEY cipher=3DES_CBC_192 integ=HMAC_SHA1 group=MODP2048} 002 "road" #2: initiating Quick Mode IKEv1+PSK+ENCRYPT+TUNNEL+PFS+UP+IKE_FRAG_ALLOW+ESN_NO+ESN_YES 1v1 "road" #2: sent Quick Mode request 031 "road" #2: STATE_QUICK_I1: 60 second timeout exceeded after 7 retransmits. No acceptable response to our first Quick Mode message: perhaps peer likes no proposal 002 "road" #2: deleting IPsec SA (QUICK_I1) and NOT sending notification road # echo done done road # ../../guestbin/ipsec-look.sh road NOW XFRM state: XFRM policy: XFRM done IPSEC mangle TABLES iptables filter TABLE Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination ROUTING TABLES default via 192.1.3.254 dev eth0 192.1.3.0/24 dev eth0 proto kernel scope link src 192.1.3.209 NSS_CERTIFICATES Certificate Nickname Trust Attributes SSL,S/MIME,JAR/XPI road #