<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal>Hi,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I have 1 physical machine, a Hyper-V host, that runs a Slackware linux 14.1 guest.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The linux guest has a bridged NIC to the host and has IPv6 connectivity via a Sixxs AICCU (tun0) tunnel.<o:p></o:p></p><p class=MsoNormal>I use this as my ISP gives me dynamic IPv4 and no IPv6.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The strongswan host gets the ipv6 2604:8800:100:277::2/64 with the remote endpoint being 2604:8800:100:277::1<o:p></o:p></p><p class=MsoNormal>IPv6 Prefix 2604:8800:100:277::1/64<o:p></o:p></p><p class=MsoNormal>PoP IPv6 2604:8800:100:277::1<o:p></o:p></p><p class=MsoNormal>Your IPv6 2604:8800:100:277::2<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>IPv6 Them 2604:8800:100:277::2/64<o:p></o:p></p><p class=MsoNormal>Prefix 2604:8800:100:8277::/64<o:p></o:p></p><p class=MsoNormal>Reverse Zone 7.7.2.8.0.0.1.0.0.0.8.8.4.0.6.2.ip6.arpa.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>IPv6 connectivity on the strongswan host works fine.<o:p></o:p></p><p class=MsoNormal>Road warriors connecting via the IPsec tunnel cannot use IPv6.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I have setup strongSwan with a mobile android user and <u>everything over IPv4 works fine</u>.<o:p></o:p></p><p class=MsoNormal>In spite of the android getting an IPv6 address from strongSwan, it is unable to ping6 anyone but itself.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I have tried using <a href="http://www.strongswan.org/uml/testresults/ipv6/rw-ip6-in-ip4-ikev2/index.html">http://www.strongswan.org/uml/testresults/ipv6/rw-ip6-in-ip4-ikev2/index.html</a> and with some assistance from #strongswan@Freenode to no avail.<o:p></o:p></p><p class=MsoNormal>I am posting my long configuration below, what am I missing here?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The strongswan host is running a 4.0.1 kernel<o:p></o:p></p><p class=MsoNormal>The android host is using the strongSwan client and is running a 3.4.42-g77cbf41 kernl on armv7l GNU/Linux<o:p></o:p></p><p class=MsoNormal>You can view a network diagram here: <a href="http://i.imgur.com/0A85oJC.jpg">http://i.imgur.com/0A85oJC.jpg</a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~# uname -a<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Linux slack14 4.0.1 #1 SMP Mon May 4 20:54:28 IST 2015 x86_64 Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz GenuineIntel GNU/Linux<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~# cat /etc/ipsec.conf<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'># ipsec.conf - strongSwan IPsec configuration file<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>config setup<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'># uniqueids=yes<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> charondebug="cfg 1, lib 1, dmn 1, ike 2, net 1, knl 1"<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>conn %default<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> keyexchange=ikev2<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> dpdaction=clear<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> dpddelay=300s<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rekey=no<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> leftsubnet=2000::/3,0.0.0.0/0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> leftcert=vpnHostCert.pem<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> leftid="C=CH, O=strongSwan, CN=slack14.wrtpoona.in"<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> right=%any<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rightid="C=CH, O=strongSwan, CN=android.wrtpoona.in"<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rightsourceip=%dhcp,2604:8800:100:277::4<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> leftfirewall=yes<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> forceencaps=yes<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> compress=yes<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> auto=start<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>conn IPSec-IKEv2<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> keyexchange=ikev2<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> auto=add<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>conn IPSec-IKEv2-EAP<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> also="IPSec-IKEv2"<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rightauth=eap-mschapv2<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rightsendcert=never<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> eap_identity=%any<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>conn CiscoIPSec<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> keyexchange=ikev1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> # forceencaps=yes<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rightauth=pubkey<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rightauth2=xauth<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> auto=add<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~# ipsec statusall<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Status of IKE charon daemon (strongSwan 5.3.0, Linux 4.0.1, x86_64):<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> uptime: 70 seconds, since May 05 16:27:10 2015<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> malloc: sbrk 1617920, mmap 0, used 457520, free 1160400<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 3<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> loaded plugins: charon pkcs11 aes des rc2 sha1 sha2 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem openssl gcrypt fips-prf gmp xcbc cmac hmac gcm ntru bliss attr kernel-pfkey kernel-netlink resolve socket-default connmark forecast farp stroke updown eap-identity eap-mschapv2 eap-radius eap-tls eap-ttls eap-peap xauth-generic dhcp lookip<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Virtual IP pools (size/online/offline):<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 2604:8800:100:277::4: 1/1/0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Listening IP addresses:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 192.168.1.44<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 2604:8800:100:277::2<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Connections:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rw: %any...%any IKEv2<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rw: local: [C=CH, O=strongSwan, CN=slack14.wrtpoona.in] uses public key authentication<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rw: cert: "C=CH, O=strongSwan, CN=slack14.wrtpoona.in"<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rw: remote: uses public key authentication<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rw: child: ::/0 === dynamic TUNNEL<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Security Associations (1 up, 0 connecting):<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rw[1]: ESTABLISHED 57 seconds ago, 192.168.1.44[C=CH, O=strongSwan, CN=slack14.wrtpoona.in]...106.221.210.5[C=CH, O=strongSwan, CN=android.wrtpoona.in]<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rw[1]: IKEv2 SPIs: a8b108ed7950a4a9_i d16590d42d1c59d8_r*, public key reauthentication in 54 minutes<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rw[1]: IKE proposal: AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rw{1}: INSTALLED, TUNNEL, reqid 1, ESP in UDP SPIs: c7fb6472_i 503949b6_o<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rw{1}: AES_CBC_128/HMAC_SHA1_96, 0 bytes_i, 0 bytes_o, rekeying in 13 minutes<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> rw{1}: ::/0 === 2604:8800:100:277::4/128<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~# ip6tables -vL<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain INPUT (policy ACCEPT 12 packets, 4708 bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0 0 ACCEPT all eth0 any 2604:8800:100:277::4 anywhere policy match dir in pol ipsec reqid 1 proto esp<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0 0 ACCEPT all any eth0 anywhere 2604:8800:100:277::4 policy match dir out pol ipsec reqid 1 proto esp<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain OUTPUT (policy ACCEPT 12 packets, 2993 bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~# sysctl net.ipv4.ip_forward<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>net.ipv4.ip_forward = 1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~# sysctl net.ipv6.conf.all.forwarding<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>net.ipv6.conf.all.forwarding = 1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~# sysctl net.ipv6.conf.eth0.accept_ra<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>net.ipv6.conf.eth0.accept_ra = 1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~# sysctl net.ipv6.conf.tun0.accept_ra<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>net.ipv6.conf.tun0.accept_ra = 1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~# iptables -vL<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain INPUT (policy ACCEPT 2624 packets, 853K bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 234 28708 ACCEPT all -- eth0 any 192.168.1.12 anywhere policy match dir in pol ipsec reqid 1 proto esp<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 280 31170 ACCEPT all -- any eth0 anywhere 192.168.1.12 policy match dir out pol ipsec reqid 1 proto esp<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain OUTPUT (policy ACCEPT 2284 packets, 690K bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~#<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~# ip r show table all<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>default via 192.168.1.1 dev eth0 metric 1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>127.0.0.0/8 dev lo scope link<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.44<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>broadcast 127.0.0.0 dev lo table local proto kernel scope link src 127.0.0.1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>broadcast 192.168.1.0 dev eth0 table local proto kernel scope link src 192.168.1.44<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local 192.168.1.44 dev eth0 table local proto kernel scope host src 192.168.1.44<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>broadcast 192.168.1.255 dev eth0 table local proto kernel scope link src 192.168.1.44<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>2604:8800:100:277::4 dev eth0 table 220 proto static metric 1024<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table unspec proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>2604:8800:100:277::/64 dev tun0 proto kernel metric 256<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>2000::/3 dev tun0 metric 100<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>fe80::/64 dev eth0 proto kernel metric 256<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>fe80::/64 dev tun0 proto kernel metric 256<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>default via 2604:8800:100:277::1 dev tun0 metric 1024<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table unspec proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local ::1 dev lo table local proto none metric 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local 2604:8800:100:277:: dev lo table local proto none metric 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local 2604:8800:100:277::2 dev lo table local proto none metric 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local fe80:: dev lo table local proto none metric 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local fe80:: dev lo table local proto none metric 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local fe80::215:5dff:fe01:206 dev lo table local proto none metric 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local fe80::8800:100:277:2 dev lo table local proto none metric 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>ff00::/8 dev eth0 table local metric 256<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>ff00::/8 dev tun0 table local metric 256<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table unspec proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~# ip -6 route list table 220<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>2604:8800:100:277::4 dev eth0 proto static metric 1024<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~# ip -s xfrm state<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src 192.168.1.44 dst 106.221.210.5<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> proto esp spi 0xee9419f4(4002683380) reqid 1(0x00000001) mode tunnel<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Segmentation fault<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~# ip xfrm state<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src 192.168.1.44 dst 106.221.210.5<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> proto esp spi 0xee9419f4 reqid 1 mode tunnel<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> replay-window 32<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> auth-trunc hmac(sha1) 0xXXXXXXXXXXXXXXXXXXXXXXXXX 96<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> enc cbc(aes) 0xXXXXXXXXXXXXXXXXXXXXXXXXXXXXX<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> encap type espinudp sport 4500 dport 61326 addr 0.0.0.0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> sel src 0.0.0.0/0 dst 0.0.0.0/0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src 106.221.210.5 dst 192.168.1.44<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> proto esp spi 0xc86e0c86 reqid 1 mode tunnel<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> replay-window 32<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> auth-trunc hmac(sha1) 0xXXXXXXXXXXXXXXXXXXXXXXXXXXXXX 96<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> enc cbc(aes) 0xXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> encap type espinudp sport 61326 dport 4500 addr 0.0.0.0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> sel src 0.0.0.0/0 dst 0.0.0.0/0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~# ip -s xfrm policy<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src 2604:8800:100:277::4/128 dst 2000::/3 uid 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> dir fwd action allow index 386 priority 2551 ptype main share any flag (0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime config:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(bytes), hard (INF)(bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(packets), hard (INF)(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire add: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire use: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime current:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0(bytes), 0(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> add 2015-05-05 16:37:22 use -<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> tmpl src 106.221.210.5 dst 192.168.1.44<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> proto esp spi 0x00000000(0) reqid 1(0x00000001) mode tunnel<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> level required share any<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> enc-mask 00000000 auth-mask 00000000 comp-mask 00000000<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src 2604:8800:100:277::4/128 dst 2000::/3 uid 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> dir in action allow index 376 priority 2551 ptype main share any flag (0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime config:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(bytes), hard (INF)(bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(packets), hard (INF)(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire add: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire use: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime current:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0(bytes), 0(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> add 2015-05-05 16:37:22 use -<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> tmpl src 106.221.210.5 dst 192.168.1.44<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> proto esp spi 0x00000000(0) reqid 1(0x00000001) mode tunnel<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> level required share any<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> enc-mask 00000000 auth-mask 00000000 comp-mask 00000000<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src 2000::/3 dst 2604:8800:100:277::4/128 uid 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> dir out action allow index 369 priority 2551 ptype main share any flag (0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime config:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(bytes), hard (INF)(bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(packets), hard (INF)(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire add: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire use: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime current:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0(bytes), 0(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> add 2015-05-05 16:37:22 use -<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> tmpl src 192.168.1.44 dst 106.221.210.5<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> proto esp spi 0x00000000(0) reqid 1(0x00000001) mode tunnel<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> level required share any<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> enc-mask 00000000 auth-mask 00000000 comp-mask 00000000<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src 192.168.1.12/32 dst 0.0.0.0/0 uid 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> dir fwd action allow index 362 priority 2947 ptype main share any flag (0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime config:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(bytes), hard (INF)(bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(packets), hard (INF)(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire add: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire use: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime current:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0(bytes), 0(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> add 2015-05-05 16:37:22 use 2015-05-05 16:40:53<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> tmpl src 106.221.210.5 dst 192.168.1.44<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> proto esp spi 0x00000000(0) reqid 1(0x00000001) mode tunnel<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> level required share any<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> enc-mask 00000000 auth-mask 00000000 comp-mask 00000000<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src 192.168.1.12/32 dst 0.0.0.0/0 uid 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> dir in action allow index 352 priority 2947 ptype main share any flag (0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime config:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(bytes), hard (INF)(bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(packets), hard (INF)(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire add: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire use: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime current:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0(bytes), 0(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> add 2015-05-05 16:37:22 use -<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> tmpl src 106.221.210.5 dst 192.168.1.44<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> proto esp spi 0x00000000(0) reqid 1(0x00000001) mode tunnel<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> level required share any<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> enc-mask 00000000 auth-mask 00000000 comp-mask 00000000<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src 0.0.0.0/0 dst 192.168.1.12/32 uid 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> dir out action allow index 345 priority 2947 ptype main share any flag (0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime config:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(bytes), hard (INF)(bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(packets), hard (INF)(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire add: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire use: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime current:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0(bytes), 0(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> add 2015-05-05 16:37:22 use 2015-05-05 16:40:54<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> tmpl src 192.168.1.44 dst 106.221.210.5<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> proto esp spi 0x00000000(0) reqid 1(0x00000001) mode tunnel<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> level required share any<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> enc-mask 00000000 auth-mask 00000000 comp-mask 00000000<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src 0.0.0.0/0 dst 0.0.0.0/0 uid 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> socket in action allow index 339 priority 0 ptype main share any flag (0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime config:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(bytes), hard (INF)(bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(packets), hard (INF)(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire add: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire use: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime current:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0(bytes), 0(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> add 2015-05-05 16:37:08 use 2015-05-05 16:40:53<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src 0.0.0.0/0 dst 0.0.0.0/0 uid 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> socket out action allow index 332 priority 0 ptype main share any flag (0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime config:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(bytes), hard (INF)(bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(packets), hard (INF)(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire add: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire use: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime current:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0(bytes), 0(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> add 2015-05-05 16:37:08 use 2015-05-05 16:40:29<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src 0.0.0.0/0 dst 0.0.0.0/0 uid 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> socket in action allow index 323 priority 0 ptype main share any flag (0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime config:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(bytes), hard (INF)(bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(packets), hard (INF)(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire add: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire use: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime current:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0(bytes), 0(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> add 2015-05-05 16:37:08 use 2015-05-05 16:37:20<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src 0.0.0.0/0 dst 0.0.0.0/0 uid 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> socket out action allow index 316 priority 0 ptype main share any flag (0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime config:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(bytes), hard (INF)(bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(packets), hard (INF)(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire add: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire use: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime current:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0(bytes), 0(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> add 2015-05-05 16:37:08 use 2015-05-05 16:37:20<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src ::/0 dst ::/0 uid 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> socket in action allow index 307 priority 0 ptype main share any flag (0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime config:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(bytes), hard (INF)(bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(packets), hard (INF)(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire add: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire use: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime current:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0(bytes), 0(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> add 2015-05-05 16:37:08 use -<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src ::/0 dst ::/0 uid 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> socket out action allow index 300 priority 0 ptype main share any flag (0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime config:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(bytes), hard (INF)(bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(packets), hard (INF)(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire add: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire use: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime current:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0(bytes), 0(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> add 2015-05-05 16:37:08 use -<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src ::/0 dst ::/0 uid 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> socket in action allow index 291 priority 0 ptype main share any flag (0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime config:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(bytes), hard (INF)(bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(packets), hard (INF)(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire add: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire use: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime current:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0(bytes), 0(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> add 2015-05-05 16:37:08 use -<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>src ::/0 dst ::/0 uid 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> socket out action allow index 284 priority 0 ptype main share any flag (0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime config:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(bytes), hard (INF)(bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> limit: soft (INF)(packets), hard (INF)(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire add: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> expire use: soft 0(sec), hard 0(sec)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> lifetime current:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0(bytes), 0(packets)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> add 2015-05-05 16:37:08 use -<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~#<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@slack14:~# tail -f /var/log/messages<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[DMN] Starting IKE charon daemon (strongSwan 5.3.0, Linux 4.0.1, x86_64)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[NET] using forecast interface eth0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] joining forecast multicast groups: 224.0.0.1,224.0.0.22,224.0.0.251,224.0.0.252,239.255.255.250<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] loaded ca certificate "C=CH, O=strongSwan, CN=strongSwan Root CA" from '/etc/ipsec.d/cacerts/strongswanCert.pem'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] loaded RSA private key from '/etc/ipsec.d/private/vpnHostKey.pem'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] loaded EAP secret for strykar<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] loaded EAP secret for strykar<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] loaded IKE secret for strykar<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] loaded IKE secret for 192.168.1.44 %any<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] loaded IKE secret for wrt.asuscomm.com %any<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] loaded EAP secret for strykar<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] loaded 0 RADIUS server configurations<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[CFG] no script for ext-auth script defined, disabled<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[LIB] loaded plugins: charon pkcs11 aes des rc2 sha1 sha2 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem openssl gcrypt fips-prf gmp xcbc cmac hmac gcm ntru bliss attr kernel-pfkey kernel-netlink resolve socket-default connmark forecast farp stroke updown eap-identity eap-mschapv2 eap-radius eap-tls eap-ttls eap-peap xauth-generic dhcp lookip<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 00[JOB] spawning 16 worker threads<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 11[CFG] received stroke: add connection 'IPSec-IKEv2'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 11[CFG] left nor right host is our side, assuming left=local<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 11[CFG] adding virtual IP address pool 2604:8800:100:277::4<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 11[CFG] loaded certificate "C=CH, O=strongSwan, CN=slack14.wrtpoona.in" from 'vpnHostCert.pem'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 11[CFG] added configuration 'IPSec-IKEv2'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 13[CFG] received stroke: add connection 'IPSec-IKEv2-EAP'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 13[CFG] left nor right host is our side, assuming left=local<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 13[CFG] reusing virtual IP address pool 2604:8800:100:277::4<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 13[CFG] loaded certificate "C=CH, O=strongSwan, CN=slack14.wrtpoona.in" from 'vpnHostCert.pem'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 13[CFG] added configuration 'IPSec-IKEv2-EAP'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 14[CFG] received stroke: add connection 'CiscoIPSec'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 14[CFG] left nor right host is our side, assuming left=local<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 14[CFG] reusing virtual IP address pool 2604:8800:100:277::4<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 14[CFG] loaded certificate "C=CH, O=strongSwan, CN=slack14.wrtpoona.in" from 'vpnHostCert.pem'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:36:51 slack14 charon: 14[CFG] added configuration 'CiscoIPSec'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:05 slack14 charon: 00[DMN] signal of type SIGINT received. Shutting down<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[DMN] Starting IKE charon daemon (strongSwan 5.3.0, Linux 4.0.1, x86_64)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[NET] using forecast interface eth0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] joining forecast multicast groups: 224.0.0.1,224.0.0.22,224.0.0.251,224.0.0.252,239.255.255.250<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] loaded ca certificate "C=CH, O=strongSwan, CN=strongSwan Root CA" from '/etc/ipsec.d/cacerts/strongswanCert.pem'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] loaded RSA private key from '/etc/ipsec.d/private/vpnHostKey.pem'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] loaded EAP secret for strykar<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] loaded EAP secret for strykar<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] loaded IKE secret for strykar<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] loaded IKE secret for 192.168.1.44 %any<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] loaded IKE secret for wrt.asuscomm.com %any<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] loaded EAP secret for strykar<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] loaded 0 RADIUS server configurations<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[CFG] no script for ext-auth script defined, disabled<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[LIB] loaded plugins: charon pkcs11 aes des rc2 sha1 sha2 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem openssl gcrypt fips-prf gmp xcbc cmac hmac gcm ntru bliss attr kernel-pfkey kernel-netlink resolve socket-default connmark forecast farp stroke updown eap-identity eap-mschapv2 eap-radius eap-tls eap-ttls eap-peap xauth-generic dhcp lookip<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 00[JOB] spawning 16 worker threads<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 09[CFG] received stroke: add connection 'IPSec-IKEv2'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 09[CFG] left nor right host is our side, assuming left=local<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 09[CFG] adding virtual IP address pool 2604:8800:100:277::4<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 09[CFG] loaded certificate "C=CH, O=strongSwan, CN=slack14.wrtpoona.in" from 'vpnHostCert.pem'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 09[CFG] added configuration 'IPSec-IKEv2'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 11[CFG] received stroke: add connection 'IPSec-IKEv2-EAP'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 11[CFG] left nor right host is our side, assuming left=local<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 11[CFG] reusing virtual IP address pool 2604:8800:100:277::4<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 11[CFG] loaded certificate "C=CH, O=strongSwan, CN=slack14.wrtpoona.in" from 'vpnHostCert.pem'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 11[CFG] added configuration 'IPSec-IKEv2-EAP'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 13[CFG] received stroke: add connection 'CiscoIPSec'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 13[CFG] left nor right host is our side, assuming left=local<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 13[CFG] reusing virtual IP address pool 2604:8800:100:277::4<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 13[CFG] loaded certificate "C=CH, O=strongSwan, CN=slack14.wrtpoona.in" from 'vpnHostCert.pem'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:08 slack14 charon: 13[CFG] added configuration 'CiscoIPSec'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:20 slack14 charon: 02[NET] received packet: from 106.221.210.5[45607] to 192.168.1.44[500] (996 bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:20 slack14 charon: 02[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) ]<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:20 slack14 charon: 02[IKE] 106.221.210.5 is initiating an IKE_SA<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:20 slack14 charon: 02[IKE] IKE_SA (unnamed)[1] state change: CREATED => CONNECTING<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:20 slack14 charon: 02[IKE] local host is behind NAT, sending keep alives<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:20 slack14 charon: 02[IKE] remote host is behind NAT<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:20 slack14 charon: 02[IKE] sending cert request for "C=CH, O=strongSwan, CN=strongSwan Root CA"<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:20 slack14 charon: 02[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) CERTREQ N(MULT_AUTH) ]<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:20 slack14 charon: 02[NET] sending packet: from 192.168.1.44[500] to 106.221.210.5[45607] (465 bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[NET] received packet: from 106.221.210.5[61326] to 192.168.1.44[4500] (1948 bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[ENC] parsed IKE_AUTH request 1 [ IDi CERT N(INIT_CONTACT) CERTREQ AUTH CPRQ(ADDR ADDR6 DNS DNS6) N(ESP_TFC_PAD_N) SA TSi TSr N(MOBIKE_SUP) N(NO_ADD_ADDR) N(MULT_AUTH) N(EAP_ONLY) ]<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] received cert request for "C=CH, O=strongSwan, CN=strongSwan Root CA"<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] received end entity cert "C=CH, O=strongSwan, CN=android.wrtpoona.in"<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[CFG] looking for peer configs matching 192.168.1.44[%any]...106.221.210.5[C=CH, O=strongSwan, CN=android.wrtpoona.in]<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[CFG] selected peer config 'IPSec-IKEv2'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[CFG] using certificate "C=CH, O=strongSwan, CN=android.wrtpoona.in"<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[CFG] using trusted ca certificate "C=CH, O=strongSwan, CN=strongSwan Root CA"<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[CFG] checking certificate status of "C=CH, O=strongSwan, CN=android.wrtpoona.in"<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[CFG] certificate status is not available<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[CFG] reached self-signed root ca with a path length of 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] authentication of 'C=CH, O=strongSwan, CN=android.wrtpoona.in' with RSA signature successful<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] processing INTERNAL_IP4_ADDRESS attribute<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] processing INTERNAL_IP6_ADDRESS attribute<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] processing INTERNAL_IP4_DNS attribute<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] processing INTERNAL_IP6_DNS attribute<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] peer supports MOBIKE<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] authentication of 'C=CH, O=strongSwan, CN=slack14.wrtpoona.in' (myself) with RSA signature successful<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] IKE_SA IPSec-IKEv2[1] established between 192.168.1.44[C=CH, O=strongSwan, CN=slack14.wrtpoona.in]...106.221.210.5[C=CH, O=strongSwan, CN=android.wrtpoona.in]<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] IKE_SA IPSec-IKEv2[1] state change: CONNECTING => ESTABLISHED<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] sending end entity cert "C=CH, O=strongSwan, CN=slack14.wrtpoona.in"<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] peer requested virtual IP %any<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[CFG] sending DHCP DISCOVER to 192.168.1.1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 12[CFG] received DHCP OFFER 192.168.1.12 from 192.168.1.1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[CFG] sending DHCP REQUEST for 192.168.1.12 to 192.168.1.1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 13[CFG] received DHCP ACK for 192.168.1.12<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] assigning virtual IP 192.168.1.12 to peer 'C=CH, O=strongSwan, CN=android.wrtpoona.in'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] peer requested virtual IP %any6<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[CFG] assigning new lease to 'C=CH, O=strongSwan, CN=android.wrtpoona.in'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] assigning virtual IP 2604:8800:100:277::4 to peer 'C=CH, O=strongSwan, CN=android.wrtpoona.in'<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] building INTERNAL_IP4_DNS attribute<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[IKE] CHILD_SA IPSec-IKEv2{1} established with SPIs c86e0c86_i ee9419f4_o and TS 0.0.0.0/0 2000::/3 === 192.168.1.12/32 2604:8800:100:277::4/128<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[ENC] generating IKE_AUTH response 1 [ IDr CERT AUTH CPRP(ADDR ADDR6 DNS) N(ESP_TFC_PAD_N) SA TSi TSr N(MOBIKE_SUP) N(ADD_6_ADDR) ]<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:22 slack14 charon: 10[NET] sending packet: from 192.168.1.44[4500] to 106.221.210.5[61326] (1788 bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:24 slack14 charon: 01[NET] received packet: from 106.221.210.5[61326] to 192.168.1.44[4500] (1948 bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:24 slack14 charon: 01[ENC] parsed IKE_AUTH request 1 [ IDi CERT N(INIT_CONTACT) CERTREQ AUTH CPRQ(ADDR ADDR6 DNS DNS6) N(ESP_TFC_PAD_N) SA TSi TSr N(MOBIKE_SUP) N(NO_ADD_ADDR) N(MULT_AUTH) N(EAP_ONLY) ]<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:24 slack14 charon: 01[IKE] received retransmit of request with ID 1, retransmitting response<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:24 slack14 charon: 01[NET] sending packet: from 192.168.1.44[4500] to 106.221.210.5[61326] (1788 bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:25 slack14 charon: 09[NET] received packet: from 106.221.210.5[61326] to 192.168.1.44[4500] (76 bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:25 slack14 charon: 09[ENC] parsed INFORMATIONAL request 2 [ N(NO_ADD_ADDR) ]<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:25 slack14 charon: 09[ENC] generating INFORMATIONAL response 2 [ ]<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>May 5 16:37:25 slack14 charon: 09[NET] sending packet: from 192.168.1.44[4500] to 106.221.210.5[61326] (76 bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Route on the android client(connection type=IKEv2 certificate):<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ # uname -a<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Linux localhost 3.4.42-g77cbf41 #1 SMP PREEMPT Fri Apr 17 13:33:28 PDT 2015 armv7l GNU/Linux<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ #<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ # ip6tables -vL<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain INPUT (policy ACCEPT 0 packets, 0 bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>23391 2432K bw_INPUT all any any anywhere anywhere<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>23391 2432K fw_INPUT all any any anywhere anywhere<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0 0 oem_fwd all any any anywhere anywhere<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0 0 fw_FORWARD all any any anywhere anywhere<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0 0 bw_FORWARD all any any anywhere anywhere<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0 0 natctrl_FORWARD all any any anywhere anywhere<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain OUTPUT (policy ACCEPT 1 packets, 76 bytes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>25385 2609K oem_out all any any anywhere anywhere<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>25385 2609K fw_OUTPUT all any any anywhere anywhere<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>25385 2609K bw_OUTPUT all any any anywhere anywhere<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain bw_FORWARD (1 references)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain bw_INPUT (1 references)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0 0 all any any anywhere anywhere ! quota globalAlert: 2097152 bytes<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0 0 bw_costly_rmnet0 all rmnet0 any anywhere anywhere<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0 0 all any any anywhere anywhere owner socket exists<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain bw_OUTPUT (1 references)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0 0 all any any anywhere anywhere ! quota globalAlert: 2097152 bytes<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0 0 bw_costly_rmnet0 all any rmnet0 anywhere anywhere<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>25385 2609K all any any anywhere anywhere owner socket exists<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain bw_costly_rmnet0 (2 references)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0 0 bw_penalty_box all any any anywhere anywhere<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0 0 REJECT all any any anywhere anywhere ! quota rmnet0: 2444906480 bytes reject-with icmp6-port-unreachable<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain bw_costly_shared (0 references)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> 0 0 bw_penalty_box all any any anywhere anywhere<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain bw_happy_box (0 references)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain bw_penalty_box (2 references)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain fw_FORWARD (1 references)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain fw_INPUT (1 references)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain fw_OUTPUT (1 references)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain natctrl_FORWARD (1 references)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain oem_fwd (1 references)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>Chain oem_out (1 references)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'> pkts bytes target prot opt in out source destination<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ #<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ # ip -6 route list table 220<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ #<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ # ip -s xfrm state<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ #<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ # ip xfrm state<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ #<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ # ip xfrm policy<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ #<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ # ipsec statusall<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>tmp-mksh: ipsec: not found<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ # ifconfig tun0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>tun0: ip 192.168.1.12 mask 255.255.255.255 flags [up point-to-point running]<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ # ip r show table all<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>0.0.0.0/1 dev tun0 table tun0 proto static scope link<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>128.0.0.0/1 dev tun0 table tun0 proto static scope link<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>default via 100.73.147.80 dev rmnet0 table rmnet0 proto static<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>100.73.147.64/27 dev rmnet0 proto kernel scope link src 100.73.147.79<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>broadcast 100.73.147.64 dev rmnet0 table local proto kernel scope link src 100.73.147.79<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local 100.73.147.79 dev rmnet0 table local proto kernel scope host src 100.73.147.79<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>broadcast 100.73.147.95 dev rmnet0 table local proto kernel scope link src 100.73.147.79<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>broadcast 127.0.0.0 dev lo table local proto kernel scope link src 127.0.0.1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local 192.168.1.12 dev tun0 table local proto kernel scope host src 192.168.1.12<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>2604:8800:100:277::4 dev tun0 table tun0 proto kernel metric 256<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>2000::/3 dev tun0 table tun0 proto static metric 1024<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>fe80::/64 dev tun0 table tun0 proto kernel metric 256<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>fe80::/64 dev rmnet0 table rmnet0 proto kernel metric 256<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local ::1 via :: dev lo table local proto none metric 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local 2604:8800:100:277::4 via :: dev lo table local proto none metric 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>local fe80::446c:c08b:4087:499e via :: dev lo table local proto none metric 0<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>ff00::/8 dev rmnet0 table local metric 256<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>ff00::/8 dev tun0 table local metric 256<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>unreachable default dev lo table 0 proto kernel metric 4294967295 error -101<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ #<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ # ping6 -c3 2604:8800:100:277::4<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>PING 2604:8800:100:277::4(2604:8800:100:277::4) 56 data bytes<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>64 bytes from 2604:8800:100:277::4: icmp_seq=1 ttl=64 time=1.82 ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>64 bytes from 2604:8800:100:277::4: icmp_seq=2 ttl=64 time=0.448 ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>64 bytes from 2604:8800:100:277::4: icmp_seq=3 ttl=64 time=0.576 ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>--- 2604:8800:100:277::4 ping statistics ---<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>3 packets transmitted, 3 received, 0% packet loss, time 2000ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>rtt min/avg/max/mdev = 0.448/0.948/1.821/0.619 ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ # ping6 -c3 2604:8800:100:277::2<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>PING 2604:8800:100:277::2(2604:8800:100:277::2) 56 data bytes<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>--- 2604:8800:100:277::2 ping statistics ---<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>3 packets transmitted, 0 received, 100% packet loss, time 2008ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>1|root@falcon_umtsds:/ # ping6 -c3 2604:8800:100:277::1<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>PING 2604:8800:100:277::1(2604:8800:100:277::1) 56 data bytes<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>--- 2604:8800:100:277::1 ping statistics ---<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>3 packets transmitted, 0 received, 100% packet loss, time 2006ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>1|root@falcon_umtsds:/ # ping6 ipv6.google.com<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>PING ipv6.google.com(bom05s05-in-x0e.1e100.net) 56 data bytes<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>^C<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>--- ipv6.google.com ping statistics ---<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>5 packets transmitted, 0 received, 100% packet loss, time 4001ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>1|root@falcon_umtsds:/ # ping 192.168.1.2<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>PING 192.168.1.2 (192.168.1.2) 56(84) bytes of data.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>64 bytes from 192.168.1.2: icmp_seq=2 ttl=127 time=156 ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>64 bytes from 192.168.1.2: icmp_seq=3 ttl=127 time=144 ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>64 bytes from 192.168.1.2: icmp_seq=4 ttl=127 time=144 ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>^C<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>--- 192.168.1.2 ping statistics ---<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>4 packets transmitted, 3 received, 25% packet loss, time 3007ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>rtt min/avg/max/mdev = 144.333/148.382/156.068/5.455 ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>root@falcon_umtsds:/ # ping 192.168.1.44<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>PING 192.168.1.44 (192.168.1.44) 56(84) bytes of data.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>64 bytes from 192.168.1.44: icmp_seq=1 ttl=64 time=151 ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>64 bytes from 192.168.1.44: icmp_seq=3 ttl=64 time=138 ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>64 bytes from 192.168.1.44: icmp_seq=4 ttl=64 time=147 ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>64 bytes from 192.168.1.44: icmp_seq=5 ttl=64 time=132 ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>^C<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>--- 192.168.1.44 ping statistics ---<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>5 packets transmitted, 4 received, 20% packet loss, time 4004ms<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas'>rtt min/avg/max/mdev = 132.981/142.527/151.587/7.328 ms<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>