000 interface eth0/eth0 fec2::10:500
000 interface lo/lo ::1:500
000 interface lo/lo 127.0.0.1:4500
000 interface lo/lo 127.0.0.1:500
000 interface eth0/eth0 10.2.0.10:4500
000 interface eth0/eth0 10.2.0.10:500
000 %myid = (none)
000 debug control
000  
000 "nat-t": 10.2.0.0/16===10.2.0.10[bob@strongswan.org]---10.2.0.1...%any==={10.1.0.0/16}; unrouted; eroute owner: #0
000 "nat-t":   CAs: 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA'...'%any'
000 "nat-t":   ike_life: 3600s; ipsec_life: 1200s; rekey_margin: 180s; rekey_fuzz: 100%; keyingtries: 1
000 "nat-t":   policy: RSASIG+ENCRYPT+TUNNEL+PFS; prio: 16,16; interface: eth0; 
000 "nat-t":   newest ISAKMP SA: #0; newest IPsec SA: #0; 
000 "nat-t":   IKE algorithms wanted: 5_000-2-5, 5_000-2-2, 5_000-1-5, 5_000-1-2, 
000 "nat-t":   IKE algorithms found:  5_192-2_160-5, 5_192-2_160-2, 5_192-1_128-5, 5_192-1_128-2, 
000 "nat-t":   ESP algorithms wanted: 3_000-2, 3_000-1, 
000 "nat-t":   ESP algorithms loaded: 3_192-2_160, 3_192-1_128, 
000 "nat-t"[2]: 10.2.0.0/16===10.2.0.10:4500[bob@strongswan.org]---10.2.0.1...192.168.0.1:1024[alice@strongswan.org]===10.1.0.10/32; erouted; eroute owner: #2
000 "nat-t"[2]:   CAs: 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA'...'%any'
000 "nat-t"[2]:   ike_life: 3600s; ipsec_life: 1200s; rekey_margin: 180s; rekey_fuzz: 100%; keyingtries: 1
000 "nat-t"[2]:   policy: RSASIG+ENCRYPT+TUNNEL+PFS; prio: 16,16; interface: eth0; 
000 "nat-t"[2]:   newest ISAKMP SA: #1; newest IPsec SA: #2; 
000 "nat-t"[2]:   IKE algorithms wanted: 5_000-2-5, 5_000-2-2, 5_000-1-5, 5_000-1-2, 
000 "nat-t"[2]:   IKE algorithms found:  5_192-2_160-5, 5_192-2_160-2, 5_192-1_128-5, 5_192-1_128-2, 
000 "nat-t"[2]:   IKE algorithm newest: 3DES_CBC_192-SHA-MODP1536
000 "nat-t"[2]:   ESP algorithms wanted: 3_000-2, 3_000-1, 
000 "nat-t"[2]:   ESP algorithms loaded: 3_192-2_160, 3_192-1_128, 
000 "nat-t"[2]:   ESP algorithm newest: 3DES_0-HMAC_SHA1; pfsgroup=<Phase1>
000  
000 #2: "nat-t"[2] 192.168.0.1:1024 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_REPLACE in 1107s; newest IPSEC; eroute owner
000 #2: "nat-t"[2] 192.168.0.1:1024 esp.d8c73577@192.168.0.1 (84 bytes, 2s ago) esp.5275cce6@10.2.0.10 (84 bytes, 2s ago); tunnel
000 #1: "nat-t"[2] 192.168.0.1:1024 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_REPLACE in 3505s; newest ISAKMP
000