Status of IKE charon daemon (strongSwan 5.7.1, FreeBSD 11.2-RELEASE-p6, amd64): uptime: 2 days, since Feb 08 17:26:30 2019 worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 8 loaded plugins: charon unbound aes des blowfish rc2 sha2 sha1 md4 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey ipseckey pem openssl fips-prf curve25519 xcbc cmac hmac curl attr kernel-pfkey kernel-pfroute resolve socket-default stroke vici updown eap-identity eap-sim eap-md5 eap-mschapv2 eap-dynamic eap-radius eap-tls eap-ttls eap-peap xauth-generic xauth-eap whitelist addrblock counters Listening IP addresses: 62.146.xx.xx51 62.146.xx.xx 62.146.139.3 172.16.1.253 172.16.1.1 10.12.0.1 10.11.0.253 10.11.0.1 10.200.1.2 10.200.1.6 Connections: con1000: 62.146.xx.xx...95.130.xx.xx IKEv2, dpddelay=10s con1000: local: [62.146.xx.xx] uses pre-shared key authentication con1000: remote: [95.130.xx.xx] uses pre-shared key authentication con1000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con2000: 62.146.xx.xx...18.185.xx.xx IKEv2, dpddelay=10s con2000: local: [62.146.xx.xx] uses pre-shared key authentication con2000: remote: [18.185.xx.xx] uses pre-shared key authentication con2000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart Security Associations (2 up, 0 connecting): con2000[23]: ESTABLISHED 3 hours ago, 62.146.xx.xx[62.146.xx.xx]...18.185.xx.xx[18.185.xx.xx] con2000[23]: IKEv2 SPIs: 906877690e23dfd2_i* 198978bc6cdc350d_r, pre-shared key reauthentication in 3 hours con2000[23]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con2000{445}: INSTALLED, TUNNEL, reqid 2000, ESP in UDP SPIs: c39866d5_i cdfe8083_o con2000{445}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 69555481 bytes_i, 18115180 bytes_o, rekeying in 20 minutes con2000{445}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con2000{446}: INSTALLED, TUNNEL, reqid 2000, ESP in UDP SPIs: c08e3a0c_i ca1d2efb_o con2000{446}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 466015447 bytes_i, 127119380 bytes_o, rekeying in 25 minutes con2000{446}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con1000[22]: ESTABLISHED 7 hours ago, 62.146.xx.xx[62.146.xx.xx]...95.130.xx.xx[95.130.xx.xx] con1000[22]: IKEv2 SPIs: 072f661f4b84b6d9_i* ff99bbd70650afe5_r, pre-shared key reauthentication in 36 minutes con1000[22]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con1000{443}: INSTALLED, TUNNEL, reqid 1000, ESP SPIs: cc36ca56_i cc5ae188_o con1000{443}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 115813410 bytes_i, 37083112 bytes_o, rekeying in 27 minutes con1000{443}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con1000{444}: INSTALLED, TUNNEL, reqid 1000, ESP SPIs: c7eb3a2a_i c2d8b0c3_o con1000{444}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 1850668727 bytes_i, 1212812140 bytes_o, rekeying in 29 minutes con1000{444}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0