...
Ya disponemos de la configuración necesaria, vamos a proceder a cargar dicha configuración (recordad, siempre como root o con sudo):
swanctl --load-all all
Podremos ver algo similar a esto, no hay problema si no sale exactamente lo mismo pero si debe indicar que se ha cargado una conexión:
...
Podemos comprobarlo listando las conexiones configuradas en el sistema:
swanctl --list-conns conns
root@UbuntuPVNTest:/etc/swanctl# swanctl --list-sas
ALUMNO: #120, CONNECTING, IKEv2, 8ed555d12eeb427a_i* 7ab40febe95a28ae_r
local 'ALUMNO' @ X.X.X.X[4500]
remote 'ALUMNO' @ X.X.X.X[4500]
AES_CBC-256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048
active: IKE_AUTH IKE_CERT_POST IKE_CONFIG IKE_AUTH_LIFETIME IKE_MOBIKE IKE_ESTABLISH CHILD_CREATE
...
swanctl --initiate --child net net
root@UbuntuPVNTest:/etc/swanctl# swanctl --initiate --child net
[IKE] initiating IKE_SA ALUMNO[123] to X.X.X.X
[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
[ENC] parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) ]
[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048
[IKE] remote host is behind NAT
[IKE] establishing CHILD_SA net{16}
[ENC] generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr CPRQ(ADDR DNS) SA TSi TSr N(MOBIKE_SUP) N(NO_ADD_ADDR) N(EAP_ONLY) N(MSG_ID_SYN_SUP) ]
[ENC] parsed IKE_AUTH response 1 [ IDr AUTH EAP/REQ/ID ]
[IKE] authentication of 'ALUMNO' with pre-shared key successful
[IKE] server requested EAP_IDENTITY (id 0xDB), sending 'xxxx@upvnet.upv.es'[.....]
[IKE] IKE_SA ALUMNO[123] established between X.X.X.X[ALUMNO]...X.X.X.X[ALUMNO]
[IKE] scheduling rekeying in 13867s
[IKE] maximum IKE_SA lifetime 15307s
[CFG] selected proposal: ESP:AES_CBC_256/HMAC_SHA2_256_128/NO_EXT_SEQ
[IKE] CHILD_SA net{16} established with SPIs c8fb653c_i a4c841e6_o and TS X.X.X.X/32 === 10.0.0.0/8 158.42.0.0/16 172.16.0.0/12 192.168.0.0/16
initiate completed successfully
...