<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Never mind. Figured it out. Apparently there is only one recognized "config setup" section in the base /etc/ipsec.conf file. I moved the listen directive in there and it worked exactly as expected.</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks,</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Scott<br>
</div>
<div>
<div id="appendonsend"></div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Swan <swan-bounces@lists.libreswan.org> on behalf of Scott A. Wozny <sawozny@hotmail.com><br>
<b>Sent:</b> September 18, 2020 8:11 PM<br>
<b>To:</b> swan@lists.libreswan.org <swan@lists.libreswan.org><br>
<b>Subject:</b> [Swan] How to force LibreSWAN to listen on a particular interface</font>
<div> </div>
</div>
<div dir="ltr">
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
By default when I start LibreSWAN's ipsec it binds to UDP/500 and UDP/4500 on all interfaces as shown:</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
[sawozny@vpnnj ~]$ sudo ipsec --status</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 using kernel interface: netkey</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface lo/lo 127.0.0.1@4500</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface lo/lo 127.0.0.1@500</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface eth0/eth0 192.168.1.214@4500</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface eth0/eth0 192.168.1.214@500</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface ens8/ens8 10.1.2.2@4500</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface ens8/ens8 10.1.2.2@500</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface ens9/ens9 10.1.3.2@4500</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface ens9/ens9 <a href="mailto:10.1.3.2@500">10.1.3.2@500</a></p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
[sawozny@vpnca ~]$ sudo ipsec --status</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 using kernel interface: netkey</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface lo/lo 127.0.0.1@4500</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface lo/lo 127.0.0.1@500</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface eth0/eth0 192.168.1.215@4500</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface eth0/eth0 192.168.1.215@500</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface ens8/ens8 10.1.5.2@4500</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface ens8/ens8 10.1.5.2@500</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface ens9/ens9 10.1.6.2@4500</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
000 interface ens9/ens9 <a href="mailto:10.1.6.2@500">10.1.6.2@500</a></p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
I’d like to only bind to the IP on interface ens8 on each machine. I tried adding this listen= parameter in a config setup section on both sides of my config, but ipsec still attaches to all interfaces available.
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
Note, there’s a NAT device in the middle converting 10.1.2.2 to 172.16.1.2 and 10.1.5.2 to 172.16.1.10 which is why the configs are asymetrical.</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
[sawozny@vpnnj ~]$ sudo cat /etc/ipsec.d/intersitetunnel.conf</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
# /etc/ipsec.d/intersitetunnel.conf</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
config setup</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
listen=10.1.2.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
conn intersitetunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
left=10.1.2.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
leftid=@vpnnj</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
leftsubnet=10.1.4.0/24</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
leftrsasigkey=0sAwEAAcQQa4wVLATC […] </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
right=172.16.1.10</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
rightid=@vpnca</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
rightsubnet=10.1.7.0/24</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
rightrsasigkey=0sAwEAAcp4iq2wyRG […] </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
authby=rsasig</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
auto=start</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
[sawozny@vpnca ~]$ sudo cat /etc/ipsec.d/intersitetunnel.conf</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
# /etc/ipsec.d/intersitetunnel.conf</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
config setup</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
listen=10.1.5.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
conn intersitetunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
left=10.1.5.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
leftid=@vpnca</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
leftsubnet=10.1.7.0/24</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
leftrsasigkey=0sAwEAAcp4iq2wyRG […] </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
right=172.16.1.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
rightid=@vpnnj</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
rightsubnet=10.1.4.0/24</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
rightrsasigkey=0sAwEAAcQQa4wVLATC […] </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
authby=rsasig</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
auto=start</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
The tunnel itself comes up (although it doesn’t yet pass traffic which I’m troubleshooting now).</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
[sawozny@vpnnj ~]$ sudo ip xfrm policy</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
[sudo] password for sawozny: </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 10.1.4.0/24 dst 10.1.7.0/24 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
dir out priority 1042407 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
tmpl src 10.1.2.2 dst 172.16.1.10</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
proto esp reqid 16389 mode tunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 10.1.7.0/24 dst 10.1.4.0/24 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
dir fwd priority 1042407 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
tmpl src 172.16.1.10 dst 10.1.2.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
proto esp reqid 16389 mode tunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 10.1.7.0/24 dst 10.1.4.0/24 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
dir in priority 1042407 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
tmpl src 172.16.1.10 dst 10.1.2.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
proto esp reqid 16389 mode tunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
[sawozny@vpnnj ~]$ sudo ip xfrm state</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 172.16.1.10 dst 10.1.2.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
proto esp spi 0x092a9183 reqid 16389 mode tunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
replay-window 32 flag af-unspec</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
auth-trunc hmac(sha1) 0x3298b10af98c345c36d1ec645571cb33fc364d20 96</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
enc cbc(aes) 0x87961e26af97aec8fa83b40d444648e5</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
encap type espinudp sport 4500 dport 4500 addr 0.0.0.0</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 10.1.2.2 dst 172.16.1.10</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
proto esp spi 0x691db0b7 reqid 16389 mode tunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
replay-window 32 flag af-unspec</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
auth-trunc hmac(sha1) 0x00208346d158ea51312b9f948cf321dc77aa51e0 96</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
enc cbc(aes) 0x7c3d3ceae35c4d8b97399a1bd5487765</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
encap type espinudp sport 4500 dport 4500 addr 0.0.0.0</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 172.16.1.10 dst 10.1.2.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
proto esp spi 0xbfa41218 reqid 16389 mode tunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
replay-window 32 flag af-unspec</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
auth-trunc hmac(sha1) 0x4cd4572e7f291034a70a6095671d5a212c3da06b 96</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
enc cbc(aes) 0x631d0eac41849e5be9a3d99031cc22be</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
encap type espinudp sport 4500 dport 4500 addr 0.0.0.0</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 10.1.2.2 dst 172.16.1.10</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
proto esp spi 0x9096b70e reqid 16389 mode tunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
replay-window 32 flag af-unspec</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
auth-trunc hmac(sha1) 0xb40d645fb2f5d7aa159f8a855a2072baba29ec80 96</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
enc cbc(aes) 0xccd88264c98caf121a062be207618210</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
encap type espinudp sport 4500 dport 4500 addr 0.0.0.0</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
[sawozny@vpnca ~]$ sudo ip xfrm policy</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
[sudo] password for sawozny: </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 10.1.7.0/24 dst 10.1.4.0/24 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
dir out priority 1042407 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
tmpl src 10.1.5.2 dst 172.16.1.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
proto esp reqid 16389 mode tunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 10.1.4.0/24 dst 10.1.7.0/24 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
dir fwd priority 1042407 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
tmpl src 172.16.1.2 dst 10.1.5.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
proto esp reqid 16389 mode tunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 10.1.4.0/24 dst 10.1.7.0/24 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
dir in priority 1042407 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
tmpl src 172.16.1.2 dst 10.1.5.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
proto esp reqid 16389 mode tunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket out priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 0.0.0.0/0 dst 0.0.0.0/0 </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
socket in priority 0 ptype main </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
[sawozny@vpnca ~]$ sudo ip xfrm state</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 172.16.1.2 dst 10.1.5.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
proto esp spi 0x691db0b7 reqid 16389 mode tunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
replay-window 32 flag af-unspec</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
auth-trunc hmac(sha1) 0x00208346d158ea51312b9f948cf321dc77aa51e0 96</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
enc cbc(aes) 0x7c3d3ceae35c4d8b97399a1bd5487765</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
encap type espinudp sport 4500 dport 4500 addr 0.0.0.0</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 10.1.5.2 dst 172.16.1.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
proto esp spi 0x092a9183 reqid 16389 mode tunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
replay-window 32 flag af-unspec</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
auth-trunc hmac(sha1) 0x3298b10af98c345c36d1ec645571cb33fc364d20 96</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
enc cbc(aes) 0x87961e26af97aec8fa83b40d444648e5</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
encap type espinudp sport 4500 dport 4500 addr 0.0.0.0</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 172.16.1.2 dst 10.1.5.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
proto esp spi 0x9096b70e reqid 16389 mode tunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
replay-window 32 flag af-unspec</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
auth-trunc hmac(sha1) 0xb40d645fb2f5d7aa159f8a855a2072baba29ec80 96</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
enc cbc(aes) 0xccd88264c98caf121a062be207618210</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
encap type espinudp sport 4500 dport 4500 addr 0.0.0.0</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
src 10.1.5.2 dst 172.16.1.2</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
proto esp spi 0xbfa41218 reqid 16389 mode tunnel</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
replay-window 32 flag af-unspec</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
auth-trunc hmac(sha1) 0x4cd4572e7f291034a70a6095671d5a212c3da06b 96</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
enc cbc(aes) 0x631d0eac41849e5be9a3d99031cc22be</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
encap type espinudp sport 4500 dport 4500 addr 0.0.0.0</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
But both devices are still binding ipsec to all interfaces:</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
[sawozny@vpnnj ~]$ sudo ss -tulpn</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 *:60859 *:* users:(("snmpd",pid=1045,fd=7))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 *:161 *:* users:(("snmpd",pid=1045,fd=6))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 127.0.0.1:323 *:* users:(("chronyd",pid=723,fd=5))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 127.0.0.1:4500 *:* users:(("pluto",pid=30415,fd=23))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 192.168.1.214:4500 *:* users:(("pluto",pid=30415,fd=21))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 10.1.2.2:4500 *:* users:(("pluto",pid=30415,fd=19))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 10.1.3.2:4500 *:* users:(("pluto",pid=30415,fd=17))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 127.0.0.1:500 *:* users:(("pluto",pid=30415,fd=22))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 192.168.1.214:500 *:* users:(("pluto",pid=30415,fd=20))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 10.1.2.2:500 *:* users:(("pluto",pid=30415,fd=18))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 10.1.3.2:500 *:* users:(("pluto",pid=30415,fd=16))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 [::1]:323 [::]:* users:(("chronyd",pid=723,fd=6))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
tcp LISTEN 0 128 *:22 *:* users:(("sshd",pid=1044,fd=3))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
tcp LISTEN 0 100 127.0.0.1:25 *:* users:(("master",pid=1127,fd=13))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
tcp LISTEN 0 128 127.0.0.1:199 *:* users:(("snmpd",pid=1045,fd=8))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
[sawozny@vpnca ~]$ sudo ss -tulpn</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port </p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 *:51169 *:* users:(("snmpd",pid=1047,fd=7))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 *:161 *:* users:(("snmpd",pid=1047,fd=6))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 127.0.0.1:323 *:* users:(("chronyd",pid=739,fd=5))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 127.0.0.1:4500 *:* users:(("pluto",pid=20234,fd=23))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 192.168.1.215:4500 *:* users:(("pluto",pid=20234,fd=21))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 10.1.5.2:4500 *:* users:(("pluto",pid=20234,fd=19))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 10.1.6.2:4500 *:* users:(("pluto",pid=20234,fd=17))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 127.0.0.1:500 *:* users:(("pluto",pid=20234,fd=22))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 192.168.1.215:500 *:* users:(("pluto",pid=20234,fd=20))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 10.1.5.2:500 *:* users:(("pluto",pid=20234,fd=18))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 10.1.6.2:500 *:* users:(("pluto",pid=20234,fd=16))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
udp UNCONN 0 0 [::1]:323 [::]:* users:(("chronyd",pid=739,fd=6))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
tcp LISTEN 0 128 *:22 *:* users:(("sshd",pid=1044,fd=3))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
tcp LISTEN 0 100 127.0.0.1:25 *:* users:(("master",pid=1130,fd=13))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
tcp LISTEN 0 128 127.0.0.1:199 *:* users:(("snmpd",pid=1047,fd=8))</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
Any ideas what I’m doing wrong?</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
Thanks,</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
<br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-bottom:0.1in; line-height:115%; margin-bottom:0in; line-height:100%">
Scott</p>
<br>
</div>
</div>
</div>
</body>
</html>