Comment 1 for bug 1440650

I guess I'm wondering why you're using host commands to manipulate the IPSec service/process. Can you elaborate on the intent of the test?

The IPSec process is run in a namespace. I don't know the impact of using the host "service ipsec stop" in that case (step 3 and 4). Step 5 makes sense and is expected. Step 6, I'm not sure of the interaction of stopping and starting the service, independent of the connection creation.

I don't think we can ensure that VPN operates correctly, if there is manipulation outside of openstack. Again, I'd like to understand the objective of this test, and how it could naturally occur with openstack setup.