API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Mar 21st, 2015
722
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.80 KB | None | 0 0
raw download clone embed print report
  1. [root@node1 ~]# ipsec status
  2. 000 using kernel interface: netkey
  3. 000 interface lo/lo ::1
  4. 000 interface lo/lo 127.0.0.1
  5. 000 interface lo/lo 127.0.0.1
  6. 000 interface eno16777736/eno16777736 172.17.0.101
  7. 000 interface eno16777736/eno16777736 172.17.0.101
  8. 000 interface eno33554992/eno33554992 172.18.0.101
  9. 000 interface eno33554992/eno33554992 172.18.0.101
  10. 000
  11. 000 fips mode=disabled;
  12. 000 SElinux=disabled
  13. 000
  14. 000 config setup options:
  15. 000
  16. 000 configdir=/etc, configfile=/etc/ipsec.conf, secrets=/etc/ipsec.secrets, ipsecdir=/etc/ipsec.d, dumpdir=/var/run/pluto/, statsbin=unset
  17. 000 sbindir=/usr/sbin, libdir=/usr/libexec/ipsec, libexecdir=/usr/libexec/ipsec
  18. 000 pluto_version=3.8, pluto_vendorid=OE-Libreswan-3.8
  19. 000 nhelpers=-1, uniqueids=yes, retransmits=yes, force_busy=no
  20. 000 ikeport=500, strictcrlpolicy=no, crlcheckinterval=0, listen=<any>
  21. 000 secctx_attr_value=32001
  22. 000 myid = (none)
  23. 000 debug none
  24. 000
  25. 000 nat_traversal=yes, keep_alive=20, nat_ikeport=4500, disable_port_floating=no
  26. 000 virtual_private (%priv):
  27. 000 - allowed 7 subnets: 10.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, 25.0.0.0/8, 100.64.0.0/10, fd00::/8, fe80::/10
  28. 000 - disallowed 0 subnets:
  29. 000 WARNING: Disallowed subnets in virtual_private= is empty. If you have
  30. 000 private address space in internal use, it should be excluded!
  31. 000
  32. 000 ESP algorithms supported:
  33. 000
  34. 000 algorithm ESP encrypt: id=2, name=ESP_DES, ivlen=8, keysizemin=64, keysizemax=64
  35. 000 algorithm ESP encrypt: id=3, name=ESP_3DES, ivlen=8, keysizemin=192, keysizemax=192
  36. 000 algorithm ESP encrypt: id=6, name=ESP_CAST, ivlen=8, keysizemin=40, keysizemax=128
  37. 000 algorithm ESP encrypt: id=7, name=ESP_BLOWFISH, ivlen=8, keysizemin=40, keysizemax=448
  38. 000 algorithm ESP encrypt: id=11, name=ESP_NULL, ivlen=0, keysizemin=0, keysizemax=0
  39. 000 algorithm ESP encrypt: id=12, name=ESP_AES, ivlen=8, keysizemin=128, keysizemax=256
  40. 000 algorithm ESP encrypt: id=13, name=ESP_AES_CTR, ivlen=8, keysizemin=160, keysizemax=288
  41. 000 algorithm ESP encrypt: id=14, name=ESP_AES_CCM_A, ivlen=8, keysizemin=128, keysizemax=256
  42. 000 algorithm ESP encrypt: id=15, name=ESP_AES_CCM_B, ivlen=8, keysizemin=128, keysizemax=256
  43. 000 algorithm ESP encrypt: id=16, name=ESP_AES_CCM_C, ivlen=8, keysizemin=128, keysizemax=256
  44. 000 algorithm ESP encrypt: id=18, name=ESP_AES_GCM_A, ivlen=8, keysizemin=128, keysizemax=256
  45. 000 algorithm ESP encrypt: id=19, name=ESP_AES_GCM_B, ivlen=12, keysizemin=128, keysizemax=256
  46. 000 algorithm ESP encrypt: id=20, name=ESP_AES_GCM_C, ivlen=16, keysizemin=128, keysizemax=256
  47. 000 algorithm ESP encrypt: id=22, name=ESP_CAMELLIA, ivlen=8, keysizemin=128, keysizemax=256
  48. 000 algorithm ESP encrypt: id=252, name=ESP_SERPENT, ivlen=8, keysizemin=128, keysizemax=256
  49. 000 algorithm ESP encrypt: id=253, name=ESP_TWOFISH, ivlen=8, keysizemin=128, keysizemax=256
  50. 000 algorithm ESP auth attr: id=1, name=AUTH_ALGORITHM_HMAC_MD5, keysizemin=128, keysizemax=128
  51. 000 algorithm ESP auth attr: id=2, name=AUTH_ALGORITHM_HMAC_SHA1, keysizemin=160, keysizemax=160
  52. 000 algorithm ESP auth attr: id=5, name=AUTH_ALGORITHM_HMAC_SHA2_256, keysizemin=256, keysizemax=256
  53. 000 algorithm ESP auth attr: id=6, name=AUTH_ALGORITHM_HMAC_SHA2_384, keysizemin=384, keysizemax=384
  54. 000 algorithm ESP auth attr: id=7, name=AUTH_ALGORITHM_HMAC_SHA2_512, keysizemin=512, keysizemax=512
  55. 000 algorithm ESP auth attr: id=8, name=AUTH_ALGORITHM_HMAC_RIPEMD, keysizemin=160, keysizemax=160
  56. 000 algorithm ESP auth attr: id=9, name=AUTH_ALGORITHM_AES_CBC, keysizemin=128, keysizemax=128
  57. 000 algorithm ESP auth attr: id=251, name=AUTH_ALGORITHM_NULL_KAME, keysizemin=0, keysizemax=0
  58. 000
  59. 000 IKE algorithms supported:
  60. 000
  61. 000 algorithm IKE encrypt: v1id=0, v1name=0??, v2id=20, v2name=AES_GCM_C, blocksize=16, keydeflen=128
  62. 000 algorithm IKE encrypt: v1id=0, v1name=0??, v2id=19, v2name=AES_GCM_B, blocksize=16, keydeflen=128
  63. 000 algorithm IKE encrypt: v1id=0, v1name=0??, v2id=18, v2name=AES_GCM_A, blocksize=16, keydeflen=128
  64. 000 algorithm IKE encrypt: v1id=0, v1name=0??, v2id=16, v2name=AES_CCM_C, blocksize=16, keydeflen=128
  65. 000 algorithm IKE encrypt: v1id=0, v1name=0??, v2id=15, v2name=AES_CCM_B, blocksize=16, keydeflen=128
  66. 000 algorithm IKE encrypt: v1id=0, v1name=0??, v2id=14, v2name=AES_CCM_A, blocksize=16, keydeflen=128
  67. 000 algorithm IKE encrypt: v1id=5, v1name=OAKLEY_3DES_CBC, v2id=3, v2name=3DES, blocksize=8, keydeflen=192
  68. 000 algorithm IKE encrypt: v1id=7, v1name=OAKLEY_AES_CBC, v2id=12, v2name=AES_CBC, blocksize=16, keydeflen=128
  69. 000 algorithm IKE encrypt: v1id=65004, v1name=OAKLEY_SERPENT_CBC, v2id=65004, v2name=SERPENT_CBC, blocksize=16, keydeflen=128
  70. 000 algorithm IKE encrypt: v1id=65005, v1name=OAKLEY_TWOFISH_CBC, v2id=65005, v2name=TWOFISH_CBC, blocksize=16, keydeflen=128
  71. 000 algorithm IKE encrypt: v1id=65289, v1name=OAKLEY_TWOFISH_CBC_SSH, v2id=65289, v2name=TWOFISH_CBC_SSH, blocksize=16, keydeflen=128
  72. 000 algorithm IKE hash: id=1, name=OAKLEY_MD5, hashsize=16
  73. 000 algorithm IKE hash: id=2, name=OAKLEY_SHA1, hashsize=20
  74. 000 algorithm IKE hash: id=4, name=OAKLEY_SHA2_256, hashsize=32
  75. 000 algorithm IKE hash: id=5, name=OAKLEY_SHA2_384, hashsize=48
  76. 000 algorithm IKE hash: id=6, name=OAKLEY_SHA2_512, hashsize=64
  77. 000 algorithm IKE dh group: id=2, name=OAKLEY_GROUP_MODP1024, bits=1024
  78. 000 algorithm IKE dh group: id=5, name=OAKLEY_GROUP_MODP1536, bits=1536
  79. 000 algorithm IKE dh group: id=14, name=OAKLEY_GROUP_MODP2048, bits=2048
  80. 000 algorithm IKE dh group: id=15, name=OAKLEY_GROUP_MODP3072, bits=3072
  81. 000 algorithm IKE dh group: id=16, name=OAKLEY_GROUP_MODP4096, bits=4096
  82. 000 algorithm IKE dh group: id=17, name=OAKLEY_GROUP_MODP6144, bits=6144
  83. 000 algorithm IKE dh group: id=18, name=OAKLEY_GROUP_MODP8192, bits=8192
  84. 000 algorithm IKE dh group: id=22, name=OAKLEY_GROUP_DH22, bits=1024
  85. 000 algorithm IKE dh group: id=23, name=OAKLEY_GROUP_DH23, bits=2048
  86. 000 algorithm IKE dh group: id=24, name=OAKLEY_GROUP_DH24, bits=2048
  87. 000
  88. 000 stats db_ops: {curr_cnt, total_cnt, maxsz} :context={0,0,0} trans={0,0,0} attrs={0,0,0}
  89. 000
  90. 000 Connection list:
  91. 000
  92. 000 "mysubnet": 172.18.0.0/24===172.17.0.101<172.17.0.101>[@node1]...172.17.0.102<172.17.0.102>[@node2]===172.19.0.0/24; erouted; eroute owner: #3
  93. 000 "mysubnet": oriented; my_ip=unset; their_ip=unset;
  94. 000 "mysubnet": xauth info: us:none, them:none, my_xauthuser=[any]; their_xauthuser=[any]; ;
  95. 000 "mysubnet": modecfg info: us:none, them:none, modecfg policy:push, dns1:unset, dns2:unset, domain:unset, banner:unset;
  96. 000 "mysubnet": labeled_ipsec:no, loopback:no;
  97. 000 "mysubnet": policy_label:unset;
  98. 000 "mysubnet": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0;
  99. 000 "mysubnet": sha2_truncbug:no; initial_contact:no; cisco_unity:no; send_vendorid:no;
  100. 000 "mysubnet": policy: RSASIG+ENCRYPT+TUNNEL+PFS+UP+IKEv2ALLOW+SAREFTRACK+IKE_FRAG;
  101. 000 "mysubnet": conn_prio: 24,24; interface: eno16777736; metric: 0; mtu: unset; sa_prio:auto;
  102. 000 "mysubnet": newest ISAKMP SA: #2; newest IPsec SA: #3;
  103. 000 "mysubnet": IKE algorithm newest: AES_CBC_128-SHA1-MODP2048
  104. 000 "mysubnet": ESP algorithm newest: AES_128-HMAC_SHA1; pfsgroup=<Phase1>
  105. 000
  106. 000 Total IPsec connections: loaded 1, active 1
  107. 000
  108. 000 State list:
  109. 000
  110. 000 #3: "mysubnet":500 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_REPLACE in 28526s; newest IPSEC; eroute owner; isakmp#2; idle; import:not set
  111. 000 #3: "mysubnet" [email protected] [email protected] [email protected] [email protected] ref=0 refhim=4294901761 Traffic: ESPin=0B ESPout=0B! ESPmax=4194303B
  112. 000 #2: "mysubnet":500 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_REPLACE in 3326s; newest ISAKMP; lastdpd=-1s(seq in:0 out:0); idle; import:not set
  113. 000 #1: "mysubnet":500 STATE_MAIN_I1 (sent MI1, expecting MR1); EVENT_RETRANSMIT in 3s; nodpd; idle; import:admin initiate
  114. 000 #1: pending Phase 2 for "mysubnet" replacing #0
  115. 000
  116. 000 Shunt list:
  117. 000
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!