east:~#
 TESTING=${TESTING:-/testing}
east:~#
 PATH=${TESTING}/pluto/bin:$PATH export PATH
east:~#
 TESTNAME=aggr-unit-01
east:~#
 export PLUTO="ipsec pluto"
east:~#
 export WHACK="ipsec whack"
east:~#
 ${TESTING}/pluto/bin/ifconfigs up
east:~#
 . CONFIG
east:~#
 cd /tmp
east:/tmp# mkdir -p $TESTNAME
east:/tmp# cd $TESTNAME
east:/tmp/aggr-unit-01# export HELPERS="--nhelpers 0 "
east:/tmp/aggr-unit-01# mkdir -p log.ref
east:/tmp/aggr-unit-01# mkdir -p log
east:/tmp/aggr-unit-01# LD=log
east:/tmp/aggr-unit-01# ln -s ${TESTING}/pluto/$TESTNAME/isakmp-aggr-psk-east.txt log.ref/pr-log
east:/tmp/aggr-unit-01# ln -s ${TESTING}/pluto/$TESTNAME/isakmp-aggr-psk-west.txt log.ref/pi-log
east:/tmp/aggr-unit-01# ln -s ${TESTING}/pluto/$TESTNAME/isakmp-aggr-psk-whack.txt log.ref/wi-log
east:/tmp/aggr-unit-01# ln -s ${TESTING}/pluto/ipsec.secrets .
east:/tmp/aggr-unit-01# ln -s ${TESTING}/pluto/ipsec.d/west .
east:/tmp/aggr-unit-01# ln -s ${TESTING}/pluto/ipsec.d/east .
east:/tmp/aggr-unit-01# ulimit -c unlimited
east:/tmp/aggr-unit-01# export HELPERS="--nhelpers 0 "
east:/tmp/aggr-unit-01# $DOPLUTO west >$LD/pi-log 2>&1
east:/tmp/aggr-unit-01# $DOPLUTO east >$LD/pr-log 2>&1
east:/tmp/aggr-unit-01# $DOWHACK listen
whackwest --listen
002 listening for IKE messages
002 adding interface virtual127.95.7.1/lo:w 127.95.7.1:8500
002 loading secrets from "/tmp/aggr-unit-01/ipsec.secrets/west"
whackeast --listen
002 listening for IKE messages
002 adding interface virtual127.95.7.2/lo:e 127.95.7.2:8500
002 loading secrets from "/tmp/aggr-unit-01/ipsec.secrets/east"
east:/tmp/aggr-unit-01# sh $TESTING/pluto/$TESTNAME/dowhack.sh 
whackwest --name isakmp-aggr-psk --psk --aggrmode --ike 3des-sha1-modp1536 --host 127.95.7.2 --ikeport 8500 --updown silly --to --updown sally --host 127.95.7.1 --ikeport 8500 --rekeymargin 350 --ikelifetime 900 --ipseclifetime 800 --keyingtries 2
002 added connection description "isakmp-aggr-psk"
whackeast --name isakmp-aggr-psk --psk --aggrmode --ike 3des-sha1-modp1536 --host 127.95.7.2 --ikeport 8500 --updown silly --to --updown sally --host 127.95.7.1 --ikeport 8500 --rekeymargin 350 --ikelifetime 900 --ipseclifetime 800 --keyingtries 2
002 added connection description "isakmp-aggr-psk"
whackwest --name isakmp-aggr-psk --initiate
002 "isakmp-aggr-psk" #1: initiating Aggressive Mode #1, connection "isakmp-aggr-psk"
112 "isakmp-aggr-psk" #1: STATE_AGGR_I1: initiate
003 "isakmp-aggr-psk" #1: received Vendor ID payload [Dead Peer Detection]
002 "isakmp-aggr-psk" #1: Aggressive mode peer ID is ID_IPV4_ADDR: '127.95.7.2'
002 "isakmp-aggr-psk" #1: Aggressive mode peer ID is ID_IPV4_ADDR: '127.95.7.2'
002 "isakmp-aggr-psk" #1: transition from state STATE_AGGR_I1 to state STATE_AGGR_I2
004 "isakmp-aggr-psk" #1: STATE_AGGR_I2: sent AI2, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1536}
east:/tmp/aggr-unit-01# $DOWHACK shutdown
whackwest --shutdown
002 shutting down
whackeast --shutdown
002 shutting down
east:/tmp/aggr-unit-01# : now try it with helpers enabled
east:/tmp/aggr-unit-01# export HELPERS="--nhelpers 1 "
east:/tmp/aggr-unit-01# $DOPLUTO west >$LD/pi-log 2>&1
east:/tmp/aggr-unit-01# $DOPLUTO east >$LD/pr-log 2>&1
east:/tmp/aggr-unit-01# $DOWHACK listen
whackwest --listen
002 listening for IKE messages
002 adding interface virtual127.95.7.1/lo:w 127.95.7.1:8500
002 loading secrets from "/tmp/aggr-unit-01/ipsec.secrets/west"
whackeast --listen
002 listening for IKE messages
002 adding interface virtual127.95.7.2/lo:e 127.95.7.2:8500
002 loading secrets from "/tmp/aggr-unit-01/ipsec.secrets/east"
east:/tmp/aggr-unit-01# sh $TESTING/pluto/$TESTNAME/dowhack.sh 
whackwest --name isakmp-aggr-psk --psk --aggrmode --ike 3des-sha1-modp1536 --host 127.95.7.2 --ikeport 8500 --updown silly --to --updown sally --host 127.95.7.1 --ikeport 8500 --rekeymargin 350 --ikelifetime 900 --ipseclifetime 800 --keyingtries 2
002 added connection description "isakmp-aggr-psk"
whackeast --name isakmp-aggr-psk --psk --aggrmode --ike 3des-sha1-modp1536 --host 127.95.7.2 --ikeport 8500 --updown silly --to --updown sally --host 127.95.7.1 --ikeport 8500 --rekeymargin 350 --ikelifetime 900 --ipseclifetime 800 --keyingtries 2
002 added connection description "isakmp-aggr-psk"
whackwest --name isakmp-aggr-psk --initiate
002 "isakmp-aggr-psk" #1: initiating Aggressive Mode #1, connection "isakmp-aggr-psk"
112 "isakmp-aggr-psk" #1: STATE_AGGR_I1: initiate
003 "isakmp-aggr-psk" #1: received Vendor ID payload [Dead Peer Detection]
002 "isakmp-aggr-psk" #1: Aggressive mode peer ID is ID_IPV4_ADDR: '127.95.7.2'
002 "isakmp-aggr-psk" #1: Aggressive mode peer ID is ID_IPV4_ADDR: '127.95.7.2'
002 "isakmp-aggr-psk" #1: transition from state STATE_AGGR_I1 to state STATE_AGGR_I2
004 "isakmp-aggr-psk" #1: STATE_AGGR_I2: sent AI2, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1536}
east:/tmp/aggr-unit-01# $DOWHACK shutdown
whackwest --shutdown
002 shutting down
whackeast --shutdown
002 shutting down

