Status of IKE charon daemon (strongSwan 6.0.1, Linux 6.13.6, x86_64): uptime: 2 seconds, since Mar 10 19:05:29 2025 malloc: sbrk 5255168, mmap 0, used 4625296, free 629872 worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 9 loaded plugins: charon random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown stroke Virtual IP pools (size/online/offline): 10.3.0.1: 1/1/0 10.3.0.2: 1/1/0 Listening IP addresses: 192.168.0.1 fec0::1 10.1.0.1 fec1::1 Connections: rw-carol: 192.168.0.1...%any IKEv1 rw-carol: local: [moon.strongswan.org] uses public key authentication rw-carol: cert: "C=CH, O=strongSwan Project, CN=moon.strongswan.org" rw-carol: remote: [carol@strongswan.org] uses public key authentication rw-carol: remote: uses XAuth authentication: any rw-carol: child: 10.1.0.0/16 === dynamic TUNNEL rw-dave: 192.168.0.1...%any IKEv1 rw-dave: local: [moon.strongswan.org] uses public key authentication rw-dave: cert: "C=CH, O=strongSwan Project, CN=moon.strongswan.org" rw-dave: remote: [dave@strongswan.org] uses public key authentication rw-dave: remote: uses XAuth authentication: any rw-dave: child: 10.1.0.0/16 === dynamic TUNNEL Security Associations (2 up, 0 connecting): rw-dave[2]: ESTABLISHED 1 second ago, 192.168.0.1[moon.strongswan.org]...192.168.0.200[dave@strongswan.org] rw-dave[2]: Remote XAuth identity: dave rw-dave[2]: IKEv1 SPIs: 48602c25c353b5eb_i 3ef807f830882211_r*, public key reauthentication in 55 minutes rw-dave[2]: IKE proposal: AES_CBC_128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/ECP_256 rw-dave{2}: INSTALLED, TUNNEL, reqid 2, ESP SPIs: cb5424b9_i c75ad75d_o rw-dave{2}: AES_CBC_128/HMAC_SHA2_256_128, 84 bytes_i (1 pkt, 0s ago), 84 bytes_o (1 pkt, 0s ago), rekeying in 14 minutes rw-dave{2}: 10.1.0.0/16 === 10.3.0.2/32 rw-carol[1]: ESTABLISHED 1 second ago, 192.168.0.1[moon.strongswan.org]...192.168.0.100[carol@strongswan.org] rw-carol[1]: Remote XAuth identity: carol rw-carol[1]: IKEv1 SPIs: 6eeba5000594d405_i 224970c1760a588a_r*, public key reauthentication in 55 minutes rw-carol[1]: IKE proposal: AES_CBC_128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/ECP_256 rw-carol{1}: INSTALLED, TUNNEL, reqid 1, ESP SPIs: cbb61c6c_i c952332e_o rw-carol{1}: AES_CBC_128/HMAC_SHA2_256_128, 84 bytes_i (1 pkt, 0s ago), 84 bytes_o (1 pkt, 0s ago), rekeying in 15 minutes rw-carol{1}: 10.1.0.0/16 === 10.3.0.1/32