ipsec statusall

Connections:
     net-net:  192.168.0.1...192.168.0.2, dpddelay=30s
     net-net:   local:  [moon.strongswan.org] uses public key authentication
     net-net:   remote: [sun.strongswan.org] uses any authentication
       net-1:   child:  10.1.0.0/28 === 10.2.0.0/23 , dpdaction=restart
       net-2:   child:  10.1.0.16/28 === 10.2.0.0/23 , dpdaction=restart
       net-3:   child:  10.1.2.0/24 === 10.2.2.0/24 , dpdaction=restart
Security Associations:
     net-net[1]: ESTABLISHED 4 minutes ago, 192.168.0.1[moon.strongswan.org]...192.168.0.2[sun.strongswan.org]
     net-net[1]: IKE SPIs: 6c837b3d7e49d13e_i* caa46145c5913bfd_r, public key reauthentication in 49 minutes
     net-net[1]: IKE proposal: AES_CBC_128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048
       net-1{1}:  INSTALLED, TUNNEL, ESP SPIs: cbc12fe8_i ca881d36_o
       net-1{1}:  AES_GCM_16_128, 0 bytes_i, 0 bytes_o, rekeying in 11 minutes
       net-1{1}:   10.1.0.0/28 === 10.2.0.0/23 
       net-2{2}:  INSTALLED, TUNNEL, ESP SPIs: ca66368f_i c3c74dbe_o
       net-2{2}:  AES_GCM_16_192, 0 bytes_i, 0 bytes_o, rekeying in 12 minutes
       net-2{2}:   10.1.0.16/28 === 10.2.0.0/23 
       net-3{3}:  INSTALLED, TUNNEL, ESP SPIs: cbf50465_i cf708ace_o
       net-3{3}:  AES_GCM_16_192, 0 bytes_i, 0 bytes_o, rekeying in 10 minutes
       net-3{3}:   10.1.2.0/23 === 10.2.2.0/23 

ipsec down net-3      # does not work

Mar  1 15:49:55 moon charon: 04[CFG] received stroke: terminate 'net-3' 
Mar  1 15:49:55 moon charon: 04[CFG] no IKE_SA named 'net-3' found 

ipsec down net-3{3}   # works

Mar  1 15:50:23 moon charon: 15[CFG] received stroke: terminate 'net-3{3}' 
Mar  1 15:50:23 moon charon: 02[IKE] closing CHILD_SA net-3{3} with SPIs cbf50465_i (0 bytes) cf708ace_o (0 bytes) and TS 10.1.2.0/23 === 10.2.2.0/23  
Mar  1 15:50:23 moon charon: 02[IKE] sending DELETE for ESP CHILD_SA with SPI cbf50465 

ipsec statusall

Connections:
     net-net:  192.168.0.1...192.168.0.2, dpddelay=30s
     net-net:   local:  [moon.strongswan.org] uses public key authentication
     net-net:   remote: [sun.strongswan.org] uses any authentication
       net-1:   child:  10.1.0.0/28 === 10.2.0.0/23 , dpdaction=restart
       net-2:   child:  10.1.0.16/28 === 10.2.0.0/23 , dpdaction=restart
       net-3:   child:  10.1.2.0/24 === 10.2.2.0/24 , dpdaction=restart
Security Associations:
     net-net[1]: ESTABLISHED 5 minutes ago, 192.168.0.1[moon.strongswan.org]...192.168.0.2[sun.strongswan.org]
     net-net[1]: IKE SPIs: 6c837b3d7e49d13e_i* caa46145c5913bfd_r, public key reauthentication in 49 minutes
     net-net[1]: IKE proposal: AES_CBC_128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048
       net-1{1}:  INSTALLED, TUNNEL, ESP SPIs: cbc12fe8_i ca881d36_o
       net-1{1}:  AES_GCM_16_128, 0 bytes_i, 0 bytes_o, rekeying in 11 minutes
       net-1{1}:   10.1.0.0/28 === 10.2.0.0/23 
       net-2{2}:  INSTALLED, TUNNEL, ESP SPIs: ca66368f_i c3c74dbe_o
       net-2{2}:  AES_GCM_16_192, 0 bytes_i, 0 bytes_o, rekeying in 11 minutes
       net-2{2}:   10.1.0.16/28 === 10.2.0.0/23 

ipsec up net-3      # does not work

Mar  1 15:50:39 moon charon: 04[CFG] received stroke: initiate 'net-3' 
Mar  1 15:50:39 moon charon: 04[CFG] no config named 'net-3' 

