Swanctl: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
Thomas (Diskussion | Beiträge) |
Thomas (Diskussion | Beiträge) |
||
| Zeile 31: | Zeile 31: | ||
*swanctl --rekey --child net | *swanctl --rekey --child net | ||
rekey completed successfully | rekey completed successfully | ||
| + | =log= | ||
| + | *swanctl --log | ||
| + | <pre> | ||
| + | 09[CFG] vici rekey CHILD_SA 'net' | ||
| + | 09[ENC] generating QUICK_MODE request 2013598800 [ HASH SA No KE ID ID ] | ||
| + | 09[NET] sending packet: from 10.84.252.40[500] to 10.84.252.32[500] (460 bytes) | ||
| + | 13[NET] received packet: from 10.84.252.32[500] to 10.84.252.40[500] (460 bytes) | ||
| + | 13[ENC] parsed QUICK_MODE response 2013598800 [ HASH SA No KE ID ID ] | ||
| + | 13[IKE] CHILD_SA net{23} established with SPIs c6c7ffed_i cf1d5f57_o and TS 10.83.40.0/24 === 10.83.32.0/24 | ||
| + | 13[ENC] generating QUICK_MODE request 2013598800 [ HASH ] | ||
| + | 13[NET] sending packet: from 10.84.252.40[500] to 10.84.252.32[500] (76 bytes) | ||
| + | </pre> | ||
Version vom 8. Dezember 2017, 21:47 Uhr
(re-)load connection configuration
- swanctl -c
loaded connection 'net-net' successfully loaded 1 connections, 0 unloaded
initiate a connection
- swanctl --initiate --child net
[ENC] generating QUICK_MODE request 661387916 [ HASH SA No KE ID ID ]
[NET] sending packet: from 10.84.252.40[500] to 10.84.252.32[500] (460 bytes)
[NET] received packet: from 10.84.252.32[500] to 10.84.252.40[500] (460 bytes)
[ENC] parsed QUICK_MODE response 661387916 [ HASH SA No KE ID ID ]
[IKE] CHILD_SA net{7} established with SPIs c7a4e05a_i c95bd1a5_o and TS 10.83.40.0/24 === 10.83.32.0/24
[ENC] generating QUICK_MODE request 661387916 [ HASH ]
[NET] sending packet: from 10.84.252.40[500] to 10.84.252.32[500] (76 bytes)
initiate completed successfully
terminate a connection
- swanctl --terminate --child net
[IKE] closing CHILD_SA net{6} with SPIs c1ea2318_i (0 bytes) c3ede3a4_o (0 bytes) and TS 10.83.40.0/24 === 10.83.32.0/24
[IKE] sending DELETE for ESP CHILD_SA with SPI c1ea2318
[ENC] generating INFORMATIONAL_V1 request 2587432778 [ HASH D ]
[NET] sending packet: from 10.84.252.40[500] to 10.84.252.32[500] (92 bytes)
[IKE] closing CHILD_SA net{7} with SPIs c7a4e05a_i (0 bytes) c95bd1a5_o (0 bytes) and TS 10.83.40.0/24 === 10.83.32.0/24
[IKE] sending DELETE for ESP CHILD_SA with SPI c7a4e05a
[ENC] generating INFORMATIONAL_V1 request 1981643187 [ HASH D ]
[NET] sending packet: from 10.84.252.40[500] to 10.84.252.32[500] (92 bytes)
terminate completed successfully
rekey an SA
- swanctl --rekey --child net
rekey completed successfully
log
- swanctl --log
09[CFG] vici rekey CHILD_SA 'net'
09[ENC] generating QUICK_MODE request 2013598800 [ HASH SA No KE ID ID ]
09[NET] sending packet: from 10.84.252.40[500] to 10.84.252.32[500] (460 bytes)
13[NET] received packet: from 10.84.252.32[500] to 10.84.252.40[500] (460 bytes)
13[ENC] parsed QUICK_MODE response 2013598800 [ HASH SA No KE ID ID ]
13[IKE] CHILD_SA net{23} established with SPIs c6c7ffed_i cf1d5f57_o and TS 10.83.40.0/24 === 10.83.32.0/24
13[ENC] generating QUICK_MODE request 2013598800 [ HASH ]
13[NET] sending packet: from 10.84.252.40[500] to 10.84.252.32[500] (76 bytes)