moon::swanctl --list-sas --raw 2> /dev/null::net-net.*version=2 state=ESTABLISHED local-host=fec0:\:1 local-port=500 local-id=moon.strongswan.org remote-host=fec0:\:2 remote-port=500 remote-id=sun.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net-net.*reqid=1 state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128.*local-ts=\[fec1:\:/16] remote-ts=\[fec2:\:20/124]::YES
sun ::swanctl --list-sas --raw 2> /dev/null::net-net.*version=2 state=ESTABLISHED local-host=fec0:\:2 local-port=500 local-id=sun.strongswan.org remote-host=fec0:\:1 remote-port=500 remote-id=moon.strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net-net.*reqid=1 state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128.*local-ts=\[fec2:\:20/124] remote-ts=\[fec1:\:/16]::YES
moon::swanctl --list-sas --raw 2> /dev/null::venus.*version=2 state=ESTABLISHED local-host=fec1:\:1 local-port=500 local-id=moon.strongswan.org remote-host=fec1:\:20 remote-port=500 remote-id=venus.strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net-net.*reqid=2 state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128.*local-ts=\[fec2:\:10/124] remote-ts=\[fec1:\:20/128]::YES
venus::swanctl --list-sas --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=fec1:\:20 local-port=500 local-id=venus.strongswan.org remote-host=fec1:\:1 remote-port=500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*rw.*reqid=1 state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128.*local-ts=\[fec1:\:20/128] remote-ts=\[fec2:\:10/124]::YES
alice::ping6 -c 1 -W 4 -p deadbeef fec2:\:25::From fec0:\:2 icmp_seq=1 Destination unreachable: Address unreachable::YES
moon::ping6 -c 1 -W 4 -p deadbeef fec2:\:22::From fec2:\:10 icmp_seq=1 Destination unreachable: Address unreachable::YES
# test other types of ICMPs with venus
venus::ping6 -c 1 fec2:\:10::64 bytes from fec2:\:10: icmp_.eq=1::YES
venus::ping6 -t 2 -c 1 fec2:\:10::From fec0:\:2.*Time exceeded: Hop limit::YES
venus::ping6 -M do -s 1320 -c 1 fec2:\:10::From fec0:\:2.*Packet too big: mtu=1280::YES
sun::tcpdump::IP6 ip6-moon.strongswan.org > ip6-sun.strongswan.org: ESP::2
sun::tcpdump::IP6 ip6-sun.strongswan.org > ip6-moon.strongswan.org: ESP::2
sun::tcpdump::IP6 ip6-sun.strongswan.org > ip6-alice.strongswan.org: ICMP6, destination unreachable, unreachable address fec2:\:25::NO
sun::tcpdump::IP6 ip6-bob.strongswan.org > ip6-moon1.strongswan.org: ICMP6, destination unreachable, unreachable address fec2:\:22::NO
venus::tcpdump::IP6 ip6-venus.strongswan.org > ip6-moon1.strongswan.org: ESP::3
venus::tcpdump::IP6 ip6-moon1.strongswan.org > ip6-venus.strongswan.org: ESP::3