/testing/guestbin/swan-prep --hostkeys
Creating NSS database containing host keys
east #
 ipsec start
Redirecting to: [initsystem]
east #
 ../../guestbin/wait-until-pluto-started
east #
 ipsec auto --add tfc
"tfc": added IKEv2 connection
east #
 echo "initdone"
initdone
east #
 ipsec whack --trafficstatus
#2: "tfc", type=ESP, add_time=1234567890, inBytes=1446, outBytes=84, maxBytes=2^63B, id='@west'
east #
 # These should show TFC for west and east
east #
 grep "setting TFC to" /tmp/pluto.log
| netlink_add_sa() setting TFC to 1500 (up to PMTU)
east #
 grep "^[^|].* established Child SA" /tmp/pluto.log
"tfc" #2: responder established Child SA using #1; IPsec tunnel [192.0.2.0/24===192.0.1.0/24] {ESP/ESN/TFC=>0xESPESP <0xESPESP xfrm=AES_GCM_16_256-NONE DPD=passive}
east #
 
