Openswan ×?Linux ipsec vpn ·t???÷(?t)(3)

 Pluto listening for IKE on udp 500                                 [OK]

 Pluto listening for NAT-T on udp 4500                             [OK]

Two or more interfaces found, checking IP forwarding           [OK]

Checking NAT and MASQUERADEing                             

Checking for 'ip' command                                           [OK]

Checking /bin/sh is not /bin/dash                                 [OK]

Checking for 'iptables' command                               [OK]

Opportunistic Encryption Support                              [DISABLED]

  #ipsec  auto  --up  net-to-net

    è?1?×?oóμ?ê?3?DD?D3???IPsec SA established￡??μ?÷á??ó3é1|

  6  2aê?á??ó

       ?ú×ó2àμ??úí??Dμ?clinet ping

     ping 172.16.1.2

?ú×ó2àí?1?é??′DD??áD?üá?

  #tcpdump  -I  eth1 –n  host  1.1.1.1 and  1.1.1.2

  20:13:32.485925 IP 1.1.1.2 > 1.1.1.1: ESP(spi=0x5dd784dd,seq=0x16b), length

100

20:13:33.484953 IP 1.1.1.1 > 1.1.1.2: ESP(spi=0x6b26c2e7,seq=0x16c), length

100

20:13:33.487009 IP 1.1.1.2 > 1.1.1.1: ESP(spi=0x5dd784dd,seq=0x16c), length

100

20:13:34.486172 IP 1.1.1.1 > 1.1.1.2: ESP(spi=0x6b26c2e7,seq=0x16d), length

100

20:13:34.488086 IP 1.1.1.2 > 1.1.1.1: ESP(spi=0x5dd784dd,seq=0x16d), length

100

20:13:35.487436 IP 1.1.1.1 > 1.1.1.2: ESP(spi=0x6b26c2e7,seq=0x16e), length

100

20:13:35.489995 IP 1.1.1.2 > 1.1.1.1: ESP(spi=0x5dd784dd,seq=0x16e), length

100

20:13:36.488668 IP 1.1.1.1 > 1.1.1.2: ESP(spi=0x6b26c2e7,seq=0x16f), length