Status of IKE charon daemon (strongSwan 5.5.3, Linux 3.10.0-693.5.2.el7.x86_64, x86_64): uptime: 67 seconds, since Nov 22 18:24:44 2017 malloc: sbrk 2854912, mmap 0, used 562704, free 2292208 worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 2 loaded plugins: charon aes des rc2 sha2 sha1 md4 md5 random nonce x509 revocation constraints acert pubkey pkcs1 pkcs8 pkcs12 pgp dnskey sshkey pem openssl gcrypt fips-prf gmp curve25519 xcbc cmac hmac ctr ccm gcm curl attr kernel-netlink resolve socket-default farp stroke vici updown eap-identity eap-md5 eap-gtc eap-mschapv2 eap-tls eap-ttls eap-peap xauth-generic xauth-eap xauth-pam xauth-noauth dhcp unity Listening IP addresses: 10.198.54.208 10.248.43.15 95.115.254.161 Connections: alconet: %any...ipsec.domena.sk IKEv2, dpddelay=30s alconet: local: [bmanovic] uses EAP authentication with EAP identity '%any' alconet: remote: [ipsec.domena.sk] uses public key authentication alconet: child: dynamic === 0.0.0.0/0 ::/0 TUNNEL, dpdaction=restart Security Associations (1 up, 0 connecting): alconet[1]: ESTABLISHED 67 seconds ago, 10.198.54.208[bmanovic]...95.115.254.165[ipsec.domena.sk] alconet[1]: IKEv2 SPIs: 6f13473e65cc0d68_i* 8b1aea928aa59f1e_r, rekeying disabled alconet[1]: IKE proposal: AES_CBC_128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/CURVE_25519 alconet{1}: INSTALLED, TUNNEL, reqid 1, ESP in UDP SPIs: c5b4c087_i c57212ba_o, IPCOMP CPIs: 86dd_i 2255_o alconet{1}: AES_CBC_128/HMAC_SHA2_256_128, 0 bytes_i, 5712 bytes_o (68 pkts, 0s ago), rekeying disabled alconet{1}: 95.115.254.161/32 === 0.0.0.0/0