000 interface eth1/eth1 fec1::1:500 000 interface eth0/eth0 fec0::1:500 000 interface lo/lo ::1:500 000 interface lo/lo 127.0.0.1:500 000 interface eth0/eth0 192.168.0.1:500 000 interface eth1/eth1 10.1.0.1:500 000 %myid = (none) 000 debug control 000 000 "host-host": fec0::1[@moon.strongswan.org]...fec0::2[@sun.strongswan.org]; erouted; eroute owner: #2 000 "host-host": CAs: 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA'...'%any' 000 "host-host": ike_life: 3600s; ipsec_life: 1200s; rekey_margin: 180s; rekey_fuzz: 100%; keyingtries: 1 000 "host-host": policy: RSASIG+ENCRYPT+TUNNEL+PFS+UP+MOBIKE; prio: 128,128; interface: eth0; 000 "host-host": newest ISAKMP SA: #1; newest IPsec SA: #2; 000 "host-host": IKE algorithms wanted: 7_128-2-14, 000 "host-host": IKE algorithms found: 7_128-2_160-14, 000 "host-host": IKE algorithm newest: AES_CBC_128-SHA-MODP2048 000 "host-host": ESP algorithms wanted: 12_128-2, 3_000-1, 000 "host-host": ESP algorithms loaded: 12_128-2_160, 3_192-1_128, 000 "host-host": ESP algorithm newest: AES_128-HMAC_SHA1; pfsgroup= 000 "net-net": fec1::/16===fec0::1[@moon.strongswan.org]...fec0::2[@sun.strongswan.org]===fec2::/16; unrouted; eroute owner: #0 000 "net-net": CAs: 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA'...'%any' 000 "net-net": ike_life: 3600s; ipsec_life: 1200s; rekey_margin: 180s; rekey_fuzz: 100%; keyingtries: 1 000 "net-net": policy: RSASIG+ENCRYPT+TUNNEL+PFS+MOBIKE; prio: 16,16; interface: eth0; 000 "net-net": newest ISAKMP SA: #0; newest IPsec SA: #0; 000 "net-net": IKE algorithms wanted: 7_128-2-14, 000 "net-net": IKE algorithms found: 7_128-2_160-14, 000 "net-net": ESP algorithms wanted: 12_128-2, 3_000-1, 000 "net-net": ESP algorithms loaded: 12_128-2_160, 3_192-1_128, 000 000 #2: "host-host" STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 892s; newest IPSEC; eroute owner 000 #2: "host-host" esp:e21baa20@fec0::2 (104 bytes, 1s ago) esp:163fc466@fec0::1 (104 bytes, 1s ago); tunnel 000 #1: "host-host" STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 3325s; newest ISAKMP 000