swanctl listing wrong data about strongswan

[tobiasbrunner]

-l lists SAs, not shunt policies. You see the latter in -P.

[DineshReddyK]

It does list in other peer machine.

[root@host-3 /]# swanctl -l
host-host: #2, ESTABLISHED, IKEv2, 5ec3b2110cf79245_i* 7cfb30548a970e64_r
  local  '192.168.100.3' @ 192.168.100.3[500]
  remote '192.168.100.1' @ 192.168.100.1[500]
  AES_GCM_16-256/PRF_HMAC_SHA2_384/ECP_384
  established 182s ago, rekeying in 77301s
  udpTunnel: #5, reqid 1, INSTALLED, TUNNEL, ESP:AES_GCM_16-256
    installed 182s ago, rekeying in 25595s, expires in 28618s
    in  c83708fd,   5860 bytes,    23 packets,    14s ago
    out ce23a659,   4794 bytes,    23 packets,    14s ago
    local  192.168.100.3/32[udp]
    remote 192.168.100.1/32[udp]
  tcpTunnel: #6, reqid 2, INSTALLED, TUNNEL, ESP:AES_GCM_16-256
    installed 182s ago, rekeying in 25378s, expires in 28618s
    in  c9fac8fc,      0 bytes,     0 packets
    out cf3383e4,      0 bytes,     0 packets
    local  192.168.100.3/32[tcp]
    remote 192.168.100.1/32[tcp]
bypassConn: #1, ESTABLISHED, IKEv2, 74a6c598bb862706_i* aa84409eaf14cd33_r
  local  '192.168.100.3' @ 192.168.100.3[500]
  remote '192.168.100.1' @ 192.168.100.1[500]
  AES_GCM_16-256/PRF_HMAC_SHA2_384/ECP_384
  established 182s ago, rekeying in 13866s
  bypassDhcp: #3, reqid 3, INSTALLED, TUNNEL, ESP:AES_GCM_16-256
    installed 182s ago, rekeying in 3080s, expires in 3778s
    in  c39eed08,      0 bytes,     0 packets
    out c17bfe43,      0 bytes,     0 packets
    local  192.168.100.3/32[udp/bootpc]
    remote 192.168.100.1/32[udp/bootps]
  bypassSsh: #4, reqid 4, INSTALLED, TUNNEL, ESP:AES_GCM_16-256
    installed 182s ago, rekeying in 3114s, expires in 3778s
    in  cc61c49d,      0 bytes,     0 packets
    out c317bcdd,      0 bytes,     0 packets
    local  192.168.100.3/32[tcp/ssh]
    remote 192.168.100.1/32[tcp]

[tobiasbrunner]

You configured something differently there then. But anyway, you don't want to configure bypass policies together with actual policies in the same connection entry. See the examples in the docs.

[DineshReddyK]

Its exact same configuration file which I have attached in the question, but local and remote are exchanged. (And it’s not centos)
And I believe I have configured shunt polices separately in different connection.
Is there anything wrong in the configuration?