/testing/guestbin/swan-prep
east #
 ipsec start
Redirecting to: [initsystem]
east #
 ../../guestbin/wait-until-pluto-started
east #
 ipsec auto --add east
"east": added IKEv2 connection
east #
 ipsec auto --status | grep replay_window
"east":   ike_life: 28800s; ipsec_life: 28800s; ipsec_max_bytes: 2^63B; ipsec_max_packets: 2^63; replay_window: 0; rekey_margin: 540s; rekey_fuzz: 100%;
east #
 ipsec auto --status | grep -E -i ESN
"east":   policy: IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+IKE_FRAG_ALLOW+ESN_NO;
east #
 echo "initdone"
initdone
east #
 # to make sure SADB is flushed by the kernel
east #
 sleep 2
east #
 # should be empty as the test is supposed to fail
east #
 ip xfrm state |grep replay
	replay-window 0 
east #
 grep "netlink response" OUTPUT/$(hostname).pluto.log
"east" #2: ERROR: netlink response for Add SA esp.ESPSPIi@192.1.2.45 included errno 22: Invalid argument
east #
 
