/testing/guestbin/swan-prep --hostkeys
Creating NSS database containing host keys
east #
 ipsec start
Redirecting to: [initsystem]
east #
 ../../guestbin/wait-until-pluto-started
east #
 ipsec auto --add replay
"replay": added IKEv2 connection
east #
 ipsec auto --status | grep replay_window
"replay":   ike_life: 28800s; ipsec_life: 28800s; ipsec_max_bytes: 2^63B; ipsec_max_packets: 2^63; replay_window: 128; rekey_margin: 540s; rekey_fuzz: 100%;
east #
 echo "initdone"
initdone
east #
 # replay-window will show up as 0 when ESN is enabled, while replay_window shows the real value
east #
 ip xfrm state |grep replay
	replay-window 0 flag af-unspec esn
	anti-replay esn context:
	 replay_window 0, bitmap-length 0
	replay-window 0 flag af-unspec esn
	anti-replay esn context:
	 replay_window 128, bitmap-length 4
east #
 
