../../guestbin/tcpdump.sh --start -i eth1
tcpdump started
nic #
 ../../guestbin/nic-nat.sh 192.1.3.0/24 192.1.2.254 40000 1
192.1.3.0/24:500 -udp-> 192.1.2.254:40500-40500
192.1.3.0/24:500 -tcp-> 192.1.2.254:40500-40500
192.1.3.0/24:4500 -udp-> 192.1.2.254:44500-44500
192.1.3.0/24:4500 -tcp-> 192.1.2.254:44500-44500
192.1.3.0/24 -> 192.1.2.254
nic #
 ../../guestbin/tcpdump.sh --stop -i eth1
reading from file OUTPUT/nic.ikev2-mobike-08-nat-expire-liveness-east.eth1.tcpdump.pcap, link-type EN10MB (Ethernet)
IP 192.1.2.254.40500 > 192.1.2.23.isakmp: isakmp: parent_sa ikev2_init[I]
IP 192.1.2.23.isakmp > 192.1.2.254.40500: isakmp: parent_sa ikev2_init[R]
IP 192.1.2.254.44500 > 192.1.2.23.ipsec-nat-t: NONESP-encap: isakmp: child_sa  ikev2_auth[I]
IP 192.1.2.254.44500 > 192.1.2.23.ipsec-nat-t: NONESP-encap: isakmp: child_sa  ikev2_auth[I]
IP 192.1.2.254.44500 > 192.1.2.23.ipsec-nat-t: NONESP-encap: isakmp: child_sa  ikev2_auth[I]
IP 192.1.2.254.44500 > 192.1.2.23.ipsec-nat-t: NONESP-encap: isakmp: child_sa  ikev2_auth[I]
IP 192.1.2.254.44500 > 192.1.2.23.ipsec-nat-t: NONESP-encap: isakmp: child_sa  ikev2_auth[I]
IP 192.1.2.254.44500 > 192.1.2.23.ipsec-nat-t: NONESP-encap: isakmp: child_sa  ikev2_auth[I]
nic #
 ../../guestbin/nic-nat.sh 192.1.3.0/24 192.1.2.254 50000 1
192.1.3.0/24:500 -udp-> 192.1.2.254:50500-50500
192.1.3.0/24:500 -tcp-> 192.1.2.254:50500-50500
192.1.3.0/24:4500 -udp-> 192.1.2.254:54500-54500
192.1.3.0/24:4500 -tcp-> 192.1.2.254:54500-54500
192.1.3.0/24 -> 192.1.2.254
nic #
 ../../guestbin/tcpdump.sh --start -i eth1
tcpdump started
nic #
 ../../guestbin/tcpdump.sh --stop -i eth1
reading from file OUTPUT/nic.ikev2-mobike-08-nat-expire-liveness-east.eth1.tcpdump.pcap, link-type EN10MB (Ethernet)
IP 192.1.2.254.54500 > 192.1.2.23.ipsec-nat-t: UDP-encap: ESP(spi=0xSPISPI,seq=0x2), length XXX
IP 192.1.2.23.ipsec-nat-t > 192.1.2.254.44500: UDP-encap: ESP(spi=0xSPISPI,seq=0x2), length XXX
IP 192.1.2.254 > 192.1.2.23: ICMP 192.1.2.254 udp port 44500 unreachable, length 156
nic #
