=== STEP_033A POLICY INTEGRATION PLAN === timestamp=20260708-110136 mode=read-only / dry-run plan intent: inspect current legacy policy and prepare staged fwmark/pool policy design remote_changes=none === VM101 read-only policy/routing/firewall inventory === date=Wed Jul 8 11:01:37 UTC 2026 === ip -br addr === lo UNKNOWN 127.0.0.1/8 ::1/128 eth0 UP 95.165.105.4/20 fe80::be24:11ff:fe42:83cf/64 eth1 UP 10.200.0.2/24 fe80::be24:11ff:fe09:4e2c/64 eth2 UP 10.71.100.2/24 fe80::be24:11ff:fe4d:7a71/64 eth3 UP 10.201.0.2/24 fe80::be24:11ff:fec8:2ee1/64 vpn1 UNKNOWN 10.91.233.132/32 vpn3 UNKNOWN 10.104.58.24/32 vpn4 UNKNOWN 10.103.120.171/32 vpn5 UNKNOWN 10.97.189.145/32 === ip rule === 0: from all lookup local 10019: from all iif eth1 lookup 200 10020: from 10.200.0.0/24 lookup 200 32766: from all lookup main 32767: from all lookup default === route tables 200-205 === TABLE 200 default dev vpn1 scope link 10.200.0.0/24 dev eth1 scope link src 10.200.0.2 10.201.0.0/24 dev eth3 scope link src 10.201.0.2 TABLE 201 TABLE 202 TABLE 203 default dev vpn3 scope link TABLE 204 default dev vpn4 scope link TABLE 205 default dev vpn5 scope link === nft ruleset policy related === chain wg_guest_snat { type nat hook postrouting priority srcnat - 1; policy accept; iifname "eth0" oifname "eth2" ip daddr 192.168.30.189 udp dport 51821 counter packets 0 bytes 0 snat ip to 192.168.30.2 comment "WG_GUEST_51821_SNAT" iif "lo" accept comment "!fw4: Accept traffic from loopback" iifname "eth0" jump input_wan comment "!fw4: Handle wan IPv4/IPv6 input traffic" iifname "eth2" jump input_Management comment "!fw4: Handle Management IPv4/IPv6 input traffic" iifname "eth3" jump input_direct_in comment "!fw4: Handle direct_in IPv4/IPv6 input traffic" iifname "eth1" jump input_vpn_in comment "!fw4: Handle vpn_in IPv4/IPv6 input traffic" iifname { "vpn1", "vpn3", "vpn4", "vpn5" } jump input_vpn_out comment "!fw4: Handle vpn_out IPv4/IPv6 input traffic" iifname "eth0" jump forward_wan comment "!fw4: Handle wan IPv4/IPv6 forward traffic" iifname "eth2" jump forward_Management comment "!fw4: Handle Management IPv4/IPv6 forward traffic" iifname "eth3" jump forward_direct_in comment "!fw4: Handle direct_in IPv4/IPv6 forward traffic" iifname "eth1" jump forward_vpn_in comment "!fw4: Handle vpn_in IPv4/IPv6 forward traffic" iifname { "vpn1", "vpn3", "vpn4", "vpn5" } jump forward_vpn_out comment "!fw4: Handle vpn_out IPv4/IPv6 forward traffic" oifname "eth1" jump output_vpn_in comment "!fw4: Handle vpn_in IPv4/IPv6 output traffic" oifname { "vpn1", "vpn3", "vpn4", "vpn5" } jump output_vpn_out comment "!fw4: Handle vpn_out IPv4/IPv6 output traffic" iifname "eth3" jump helper_direct_in comment "!fw4: Handle direct_in IPv4/IPv6 helper assignment" iifname "eth1" jump helper_vpn_in comment "!fw4: Handle vpn_in IPv4/IPv6 helper assignment" icmpv6 type { destination-unreachable, time-exceeded, echo-request, echo-reply, nd-router-solicit, nd-router-advert } limit rate 1000/second burst 5 packets counter packets 0 bytes 0 accept comment "!fw4: Allow-ICMPv6-Input" ct status dnat accept comment "!fw4: Accept port redirections" icmpv6 type { destination-unreachable, time-exceeded, echo-request, echo-reply } limit rate 1000/second burst 5 packets counter packets 0 bytes 0 accept comment "!fw4: Allow-ICMPv6-Forward" ct status dnat accept comment "!fw4: Accept port forwards" meta nfproto ipv4 oifname "eth0" ct state invalid counter packets 0 bytes 0 drop comment "!fw4: Prevent NAT leakage" iifname "eth0" counter packets 109 bytes 5725 jump handle_reject comment "!fw4: reject wan IPv4/IPv6 traffic" ct status dnat accept comment "!fw4: Accept port redirections" ct status dnat accept comment "!fw4: Accept port forwards" iifname "eth2" counter packets 12 bytes 712 accept comment "!fw4: accept Management IPv4/IPv6 traffic" meta nfproto ipv4 oifname "eth2" ct state invalid counter packets 0 bytes 0 drop comment "!fw4: Prevent NAT leakage" iifname "eth3" counter packets 0 bytes 0 accept comment "!fw4: accept direct_in IPv4/IPv6 traffic" iifname "eth1" counter packets 0 bytes 0 accept comment "!fw4: accept vpn_in IPv4/IPv6 traffic" oifname "eth1" counter packets 0 bytes 0 accept comment "!fw4: accept vpn_in IPv4/IPv6 traffic" oifname "eth1" counter packets 0 bytes 0 jump handle_reject comment "!fw4: reject vpn_in IPv4/IPv6 traffic" meta nfproto ipv4 oifname { "vpn1", "vpn3", "vpn4", "vpn5" } ct state invalid counter packets 0 bytes 0 drop comment "!fw4: Prevent NAT leakage" oifname { "vpn1", "vpn3", "vpn4", "vpn5" } counter packets 9 bytes 756 accept comment "!fw4: accept vpn_out IPv4/IPv6 traffic" iifname { "vpn1", "vpn3", "vpn4", "vpn5" } counter packets 0 bytes 0 jump handle_reject comment "!fw4: reject vpn_out IPv4/IPv6 traffic" oifname { "vpn1", "vpn3", "vpn4", "vpn5" } counter packets 0 bytes 0 jump handle_reject comment "!fw4: reject vpn_out IPv4/IPv6 traffic" chain dstnat { type nat hook prerouting priority dstnat; policy accept; iifname "eth0" jump dstnat_wan comment "!fw4: Handle wan IPv4/IPv6 dstnat traffic" iifname "eth2" jump dstnat_Management comment "!fw4: Handle Management IPv4/IPv6 dstnat traffic" chain srcnat { type nat hook postrouting priority srcnat; policy accept; oifname "eth0" jump srcnat_wan comment "!fw4: Handle wan IPv4/IPv6 srcnat traffic" oifname "eth2" jump srcnat_Management comment "!fw4: Handle Management IPv4/IPv6 srcnat traffic" oifname { "vpn1", "vpn3", "vpn4", "vpn5" } jump srcnat_vpn_out comment "!fw4: Handle vpn_out IPv4/IPv6 srcnat traffic" chain dstnat_wan { meta nfproto ipv4 udp dport 51821 counter packets 0 bytes 0 dnat ip to 10.71.1.189:51821 comment "!fw4: WG_easy_51821_to_VM103" meta nfproto ipv4 udp dport 51820 counter packets 0 bytes 0 dnat ip to 10.71.100.1:51820 comment "!fw4: wg_remote_to_vm100" meta nfproto ipv4 udp dport 51830 counter packets 0 bytes 0 dnat ip to 10.71.100.1:51830 comment "!fw4: DNAT-WG-Paid-51830-to-VM100" chain srcnat_wan { meta nfproto ipv4 masquerade comment "!fw4: Masquerade IPv4 wan traffic" chain dstnat_Management { ip saddr 10.71.100.0/24 ip daddr 95.165.105.4 udp dport 51821 dnat ip to 10.71.1.189:51821 comment "!fw4: WG_easy_51821_to_VM103 (reflection)" ip saddr 10.71.100.0/24 ip daddr 95.165.105.4 udp dport 51820 dnat ip to 10.71.100.1:51820 comment "!fw4: wg_remote_to_vm100 (reflection)" ip saddr 10.71.100.0/24 ip daddr 95.165.105.4 udp dport 51830 dnat ip to 10.71.100.1:51830 comment "!fw4: DNAT-WG-Paid-51830-to-VM100 (reflection)" chain srcnat_Management { ip saddr 10.71.100.0/24 ip daddr 10.71.1.189 udp dport 51821 snat ip to 10.71.100.2 comment "!fw4: WG_easy_51821_to_VM103 (reflection)" ip saddr 10.71.100.0/24 ip daddr 10.71.100.1 udp dport 51820 snat ip to 10.71.100.2 comment "!fw4: wg_remote_to_vm100 (reflection)" ip saddr 10.71.100.0/24 ip daddr 10.71.100.1 udp dport 51830 snat ip to 10.71.100.2 comment "!fw4: DNAT-WG-Paid-51830-to-VM100 (reflection)" ip daddr 192.168.30.186 tcp dport 65000-65535 counter packets 0 bytes 0 masquerade comment "!fw4: OMR_SERVER_SNAT_TO_MGMT" ip daddr 192.168.30.186 udp dport 65000-65535 counter packets 0 bytes 0 masquerade comment "!fw4: OMR_SERVER_SNAT_TO_MGMT" meta nfproto ipv4 masquerade comment "!fw4: Masquerade IPv4 Management traffic" chain srcnat_vpn_out { meta nfproto ipv4 masquerade comment "!fw4: Masquerade IPv4 vpn_out traffic" oifname { "vpn1", "vpn3", "vpn4", "vpn5" } tcp flags & (fin | syn | rst) == syn tcp option maxseg size set rt mtu comment "!fw4: Zone vpn_out IPv4/IPv6 egress MTU fixing" iifname "eth0" tcp flags & (fin | syn | rst) == syn tcp option maxseg size set rt mtu comment "!fw4: Zone wan IPv4/IPv6 ingress MTU fixing" iifname { "vpn1", "vpn3", "vpn4", "vpn5" } tcp flags & (fin | syn | rst) == syn tcp option maxseg size set rt mtu comment "!fw4: Zone vpn_out IPv4/IPv6 ingress MTU fixing" === full nft table names === table inet fw4 === firewall vpn_out === vpn_out_index=4 firewall.cfg0ddc81=zone firewall.cfg0ddc81.name='vpn_out' firewall.cfg0ddc81.input='REJECT' firewall.cfg0ddc81.output='ACCEPT' firewall.cfg0ddc81.forward='REJECT' firewall.cfg0ddc81.masq='1' firewall.cfg0ddc81.mtu_fix='1' firewall.cfg0ddc81.network='vpn1' 'vpn2' 'vpn_user' 'vpn3' 'vpn4' 'vpn5' === network safe fields vpn1-vpn5/vpn_user === ### network.vpn1 proto=amneziawg auto=0 disabled=0 addresses=10.91.233.132/32 hmn_role=active_spare_slot hmn_endpoint=178.215.227.13:44408 hmn_source_config=/root/hmn/configs/awg1/latest/150-NL-Netherlands-Amsterdam-R5-178.215.227.13-awg1.conf hmn_loaded_at=2026-07-06T17:07:53+00:00 ### network.vpn2 proto=amneziawg auto=0 disabled=0 addresses=10.86.108.200/32 hmn_role=active_spare_slot hmn_endpoint=192.121.163.235:42530 hmn_source_config=/root/hmn/configs/awg1/latest/128-LV-Latvia-Riga-S1-192.121.163.235-awg1.conf hmn_loaded_at=2026-07-08T06:15:47+00:00 ### network.vpn3 proto=amneziawg auto=0 disabled=0 addresses=10.104.58.24/32 hmn_role=egress_pool_slot hmn_endpoint=95.211.68.119:45176 hmn_source_config=/root/hmn/configs/awg1/20260601-100614/075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf hmn_loaded_at=2026-07-08T10:34:48+00:00 ### network.vpn4 proto=amneziawg auto=0 disabled=0 addresses=10.103.120.171/32 hmn_role=egress_pool_slot hmn_endpoint=78.31.250.16:41729 hmn_source_config=/root/hmn/configs/awg1/20260708-042000/072-NL-Netherlands-Amsterdam-S8-78.31.250.16-awg1.conf hmn_loaded_at=2026-07-08T10:41:01+00:00 ### network.vpn5 proto=amneziawg auto=0 disabled=0 addresses=10.97.189.145/32 hmn_role=egress_pool_slot hmn_endpoint=157.173.27.69:41797 hmn_source_config=/root/hmn/configs/awg1/20260601-100614/049-DE-Germany-Berlin-S7-157.173.27.69-awg1.conf hmn_loaded_at=2026-07-08T10:42:57+00:00 ### network.vpn_user proto=amneziawg auto=0 disabled=0 addresses=10.90.235.244/32 hmn_role=user_select_slot hmn_endpoint=37.235.54.96:38971 hmn_source_config=/root/hmn/configs/awg1/latest/146-GB-United-Kingdom-London-S1-37.235.54.96-awg1.conf hmn_loaded_at=2026-07-06T17:41:02+00:00 === amneziawg concise === ### vpn1 interface: vpn1 endpoint: 178.215.227.13:44408 latest handshake: 1 minute, 10 seconds ago transfer: 181.77 KiB received, 254.34 KiB sent ### vpn2 ### vpn3 interface: vpn3 endpoint: 95.211.68.119:45176 latest handshake: 1 minute, 49 seconds ago transfer: 3.83 KiB received, 9.93 KiB sent ### vpn4 interface: vpn4 endpoint: 78.31.250.16:41729 latest handshake: 44 seconds ago transfer: 2.90 KiB received, 8.77 KiB sent ### vpn5 interface: vpn5 endpoint: 157.173.27.69:41797 latest handshake: 1 minute, 46 seconds ago transfer: 2.81 KiB received, 7.37 KiB sent ### vpn_user === explicit ping probes === ### ping -I vpn1 1.1.1.1 PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=57 time=54.408 ms 64 bytes from 1.1.1.1: seq=1 ttl=57 time=53.630 ms --- 1.1.1.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 53.630/54.019/54.408 ms PING_vpn1_RC=0 ### ping -I vpn3 1.1.1.1 PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=55 time=52.097 ms 64 bytes from 1.1.1.1: seq=1 ttl=55 time=52.153 ms --- 1.1.1.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 52.097/52.125/52.153 ms PING_vpn3_RC=0 ### ping -I vpn4 1.1.1.1 PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=57 time=50.188 ms 64 bytes from 1.1.1.1: seq=1 ttl=57 time=50.064 ms --- 1.1.1.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 50.064/50.126/50.188 ms PING_vpn4_RC=0 ### ping -I vpn5 1.1.1.1 PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=61 time=58.870 ms 64 bytes from 1.1.1.1: seq=1 ttl=61 time=58.857 ms --- 1.1.1.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 58.857/58.863/58.870 ms PING_vpn5_RC=0 === optional vpn2 probe === vpn2_runtime_absent=1 PING_vpn2_RC=absent === current production route get samples === 1.1.1.1 from 10.200.0.10 dev vpn1 table 200 cache iif eth1 8.8.8.8 from 10.200.0.10 dev vpn1 table 200 cache iif eth1 === mark route get samples, no rules expected yet === MARK 0x201 1.1.1.1 via 95.165.96.1 dev eth0 src 95.165.105.4 mark 0x201 uid 0 cache MARK 0x202 1.1.1.1 via 95.165.96.1 dev eth0 src 95.165.105.4 mark 0x202 uid 0 cache MARK 0x203 1.1.1.1 via 95.165.96.1 dev eth0 src 95.165.105.4 mark 0x203 uid 0 cache MARK 0x204 1.1.1.1 via 95.165.96.1 dev eth0 src 95.165.105.4 mark 0x204 uid 0 cache MARK 0x205 1.1.1.1 via 95.165.96.1 dev eth0 src 95.165.105.4 mark 0x205 uid 0 cache === files possibly related to policy === drwxr-xr-x 2 root root 4096 Jul 8 08:35 . drwxr-xr-x 10 root root 4096 Apr 20 11:42 .. -rw-r--r-- 1 root root 155 Jun 23 2025 00-netstate -rw-r--r-- 1 root root 498 Jun 23 2025 20-firewall /root/router-ops-disabled-hotplug/STEP_029C2_hotplug/99-vpn-egress-manager.disabled /root/router-ops-disabled-hotplug/STEP_029C2_hotplug/99-vpnin-policy-route.disabled /etc/config/openvpn /etc/config/openvpn_recipes /etc/config/pbr /etc/hotplug.d/openvpn/01-user /etc/init.d/openvpn /etc/init.d/pbr /etc/openvpn.user /etc/pbr.d/ru_to_wan.sh /root/client-hmn-audit-before-import.sh /root/clientize-vm101-backup-20260531-074653/vpn-egress-manager.sh /root/clientize-vm101-backup-20260531-074653/vpn-egress-switches.log /root/clientize-vm101-backup-20260531-081542/vpn-egress-manager.sh /root/clientize-vm101-backup-20260531-081542/vpn-egress-switches.log /root/disable-cloned-vpn-egress.sh /root/firewall.before-hmn-update.20260525-050529 /root/h42a-import-hmn-script-layer-client001.sh /root/hmn-test/candidates-20260601-094527.tsv /root/hmn-test/configs-working/Georgia-Tbilisi-45.136.124.112-awg1-20260601-094527.conf /root/hmn-test/configs-working/Hong-Kong-Central-District-S2-112.120.98.53-awg1-20260601-094527.conf /root/hmn-test/configs-working/Netherlands-Amsterdam-R5-178.215.227.13-awg1-20260601-094527.conf /root/hmn-test/configs-working/Russia-Moscow-S5-141.98.189.83-awg1-20260601-094527.conf /root/hmn-test/configs-working/USA-Ashburn-142.202.49.112-awg1-20260601-094527.conf /root/hmn-test/configs-working/USA-Utah-192.154.104.162-awg1-20260601-094527.conf /root/hmn-test/fail-awg1-20260601-094527.tsv /root/hmn-test/first-tunnel-awg1-20260601-093912.conf /root/hmn-test/h13-record.txt /root/hmn-test/hmn-extract-wg-candidates.sh /root/hmn-test/hmn-first-test.sh /root/hmn-test/hmn-first-test.sh.v1 /root/hmn-test/hmn-known-ip-test.sh /root/hmn-test/hmn-scan-awg.sh /root/hmn-test/hmn-scan-awg.sh.with-jq /root/hmn-test/known-ip-awg1-20260601-094048.conf /root/hmn-test/known-ip-awg1-20260601-095335.conf /root/hmn-test/known-ip-awg1-20260601-095423.conf /root/hmn-test/known-ip-awg1-20260601-100023.conf /root/hmn-test/serverlist-20260601-093912.json /root/hmn-test/serverlist-20260601-094527.json /root/hmn-test/wg-candidates-from-services.tsv /root/hmn-test/working-awg1-20260601-094527.tsv /root/hmn/backups/99-vpn-egress-manager.before-hotplug-lock-fix-20260601-123834 /root/hmn/backups/99-vpnin-policy-route.disabled-20260601-123640 /root/hmn/backups/client001-before-h42a-import-20260603-162047/client-script-files-before.tgz /root/hmn/backups/client001-before-h42a-import-20260603-162047/crontab.before /root/hmn/backups/client001-before-h42a-import-20260603-162047/firewall.uci.before /root/hmn/backups/client001-before-h42a-import-20260603-162047/iprule.before /root/hmn/backups/client001-before-h42a-import-20260603-162047/network.uci.before /root/hmn/backups/client001-before-h42a-import-20260603-162047/table200.before /root/hmn/backups/client001-before-h42c-load-slots-20260603-163645/network.uci.before /root/hmn/backups/client001-before-h42c-load-slots-20260603-163645/selected-awg1-latest.tsv.before /root/hmn/backups/client001-before-h42c-load-slots-20260603-163645/table200.before /root/hmn/backups/client001-before-h42d-selected-cache-20260603-163829/selected-awg1-latest.tsv.before /root/hmn/backups/failover-manager-before-fix-20260601-132034/99-vpn-egress-manager /root/hmn/backups/failover-manager-before-fix-20260601-132034/99-vpnin-policy-route /root/hmn/backups/failover-manager-before-fix-20260601-132034/active-slot /root/hmn/backups/failover-manager-before-fix-20260601-132034/network /root/hmn/backups/failover-manager-before-fix-20260601-132034/vpn-egress-manager.sh /root/hmn/backups/hmn-download-all-awg.before-quarantine-reset-20260601-135846.sh /root/hmn/backups/hmn-load-egress-slot.sh.before-step031b3-20260708-103114 /root/hmn/backups/hmn-load-egress-slot.sh.before-step031b4-20260708-103325 /root/hmn/backups/hmn-rank-awg.before-quarantine-20260601-135559.sh /root/hmn/backups/hmn.env.20260706-161014 /root/hmn/backups/network-before-egress-load-vpn3-20260708-103448 /root/hmn/backups/network-before-egress-load-vpn4-20260708-104101 /root/hmn/backups/network-before-egress-load-vpn5-20260708-104257 /root/hmn/backups/network-before-load-vpn1-20260601-111640 /root/hmn/backups/network-before-load-vpn1-20260601-130301 /root/hmn/backups/network-before-load-vpn1-20260601-143639 /root/hmn/backups/network-before-load-vpn1-20260601-143803 /root/hmn/backups/network-before-load-vpn1-20260601-145208 /root/hmn/backups/network-before-load-vpn1-20260603-163645 /root/hmn/backups/network-before-load-vpn1-20260603-164822 /root/hmn/backups/network-before-load-vpn1-20260603-171347 /root/hmn/backups/network-before-load-vpn1-20260603-203331 /root/hmn/backups/network-before-load-vpn1-20260605-054125 /root/hmn/backups/network-before-load-vpn1-20260605-150225 /root/hmn/backups/network-before-load-vpn1-20260606-054330 /root/hmn/backups/network-before-load-vpn1-20260606-091029 /root/hmn/backups/network-before-load-vpn1-20260606-161926 /root/hmn/backups/network-before-load-vpn1-20260606-185025 /root/hmn/backups/network-before-load-vpn1-20260606-204232 /root/hmn/backups/network-before-load-vpn1-20260607-102826 /root/hmn/backups/network-before-load-vpn1-20260607-112926 /root/hmn/backups/network-before-load-vpn1-20260607-114826 /root/hmn/backups/network-before-load-vpn1-20260607-115730 /root/hmn/backups/network-before-load-vpn1-20260607-140125 /root/hmn/backups/network-before-load-vpn1-20260607-143729 /root/hmn/backups/network-before-load-vpn1-20260607-161629 /root/hmn/backups/network-before-load-vpn1-20260607-180625 /root/hmn/backups/network-before-load-vpn1-20260608-104429 /root/hmn/backups/network-before-load-vpn1-20260706-160850 /root/hmn/backups/network-before-load-vpn1-20260706-170753 /root/hmn/backups/network-before-load-vpn2-20260601-110946 /root/hmn/backups/network-before-load-vpn2-20260603-163701 /root/hmn/backups/network-before-load-vpn2-20260603-170129 /root/hmn/backups/network-before-load-vpn2-20260603-191530 /root/hmn/backups/network-before-load-vpn2-20260604-063626 /root/hmn/backups/network-before-load-vpn2-20260605-143129 /root/hmn/backups/network-before-load-vpn2-20260605-161429 /root/hmn/backups/network-before-load-vpn2-20260606-082739 /root/hmn/backups/network-before-load-vpn2-20260606-160726 /root/hmn/backups/network-before-load-vpn2-20260606-175725 /root/hmn/backups/network-before-load-vpn2-20260606-191529 /root/hmn/backups/network-before-load-vpn2-20260606-215625 /root/hmn/backups/network-before-load-vpn2-20260607-112726 /root/hmn/backups/network-before-load-vpn2-20260607-114426 /root/hmn/backups/network-before-load-vpn2-20260607-115330 /root/hmn/backups/network-before-load-vpn2-20260607-135925 /root/hmn/backups/network-before-load-vpn2-20260607-142029 /root/hmn/backups/network-before-load-vpn2-20260607-144825 /root/hmn/backups/network-before-load-vpn2-20260607-175629 /root/hmn/backups/network-before-load-vpn2-20260607-205930 /root/hmn/backups/network-before-load-vpn2-20260706-101643 /root/hmn/backups/network-before-load-vpn2-20260706-165654 /root/hmn/backups/network-before-load-vpn2-20260708-061547 /root/hmn/backups/network-before-vpn_test-20260706-161434 /root/hmn/backups/network-before-vpn_test-20260706-161456 /root/hmn/backups/network-before-vpn_test-20260706-161529 /root/hmn/backups/network-before-vpn_test-20260706-161547 /root/hmn/backups/network-before-vpn_test-20260706-161606 /root/hmn/backups/network-before-vpn_test-20260706-161625 /root/hmn/backups/network-before-vpn_test-20260706-161644 /root/hmn/backups/network-before-vpn_test-20260706-161703 /root/hmn/backups/network-before-vpn_test-20260706-161722 /root/hmn/backups/network-before-vpn_test-20260706-161745 /root/hmn/backups/network-before-vpn_test-20260706-161803 /root/hmn/backups/network-before-vpn_test-20260706-161825 /root/hmn/backups/network-before-vpn_test-20260706-161847 /root/hmn/backups/network-before-vpn_test-20260706-161906 /root/hmn/backups/network-before-vpn_test-20260706-161925 /root/hmn/backups/network-before-vpn_test-20260706-161943 /root/hmn/backups/network-before-vpn_test-20260706-162005 /root/hmn/backups/network-before-vpn_test-20260706-162025 /root/hmn/backups/network-before-vpn_test-20260706-162047 /root/hmn/backups/network-before-vpn_test-20260706-162105 /root/hmn/backups/network-before-vpn_test-20260706-162124 /root/hmn/backups/network-before-vpn_test-20260706-162142 /root/hmn/backups/network-before-vpn_test-20260706-162200 /root/hmn/backups/network-before-vpn_test-20260706-162219 /root/hmn/backups/network-before-vpn_test-20260706-162237 /root/hmn/backups/network-before-vpn_test-20260706-162255 /root/hmn/backups/network-before-vpn_test-20260706-162314 /root/hmn/backups/network-before-vpn_test-20260706-162336 /root/hmn/backups/network-before-vpn_test-20260706-162355 /root/hmn/backups/network-before-vpn_test-20260707-042048 /root/hmn/backups/network-before-vpn_test-20260707-042110 /root/hmn/backups/network-before-vpn_test-20260707-042132 /root/hmn/backups/network-before-vpn_test-20260707-042151 /root/hmn/backups/network-before-vpn_test-20260707-042209 /root/hmn/backups/network-before-vpn_test-20260707-042228 /root/hmn/backups/network-before-vpn_test-20260707-042247 /root/hmn/backups/network-before-vpn_test-20260707-042307 /root/hmn/backups/network-before-vpn_test-20260707-042325 /root/hmn/backups/network-before-vpn_test-20260707-042353 /root/hmn/backups/network-before-vpn_test-20260707-042413 /root/hmn/backups/network-before-vpn_test-20260707-042432 /root/hmn/backups/network-before-vpn_test-20260707-042451 /root/hmn/backups/network-before-vpn_test-20260707-042513 /root/hmn/backups/network-before-vpn_test-20260707-042532 /root/hmn/backups/network-before-vpn_test-20260707-042554 /root/hmn/backups/network-before-vpn_test-20260707-042616 /root/hmn/backups/network-before-vpn_test-20260707-042634 /root/hmn/backups/network-before-vpn_test-20260707-042653 /root/hmn/backups/network-before-vpn_test-20260707-042711 /root/hmn/backups/network-before-vpn_test-20260707-042733 /root/hmn/backups/network-before-vpn_test-20260707-042752 /root/hmn/backups/network-before-vpn_test-20260707-042814 /root/hmn/backups/network-before-vpn_test-20260707-042833 /root/hmn/backups/network-before-vpn_test-20260707-042851 /root/hmn/backups/network-before-vpn_test-20260707-042909 /root/hmn/backups/network-before-vpn_test-20260707-042928 /root/hmn/backups/network-before-vpn_test-20260707-042946 /root/hmn/backups/network-before-vpn_test-20260707-043004 /root/hmn/backups/network-before-vpn_test-20260707-043023 /root/hmn/backups/network-before-vpn_test-20260707-043041 /root/hmn/backups/network-before-vpn_test-20260707-043103 /root/hmn/backups/network-before-vpn_test-20260707-043122 /root/hmn/backups/network-before-vpn_test-20260708-042045 /root/hmn/backups/network-before-vpn_test-20260708-042107 /root/hmn/backups/network-before-vpn_test-20260708-042129 /root/hmn/backups/network-before-vpn_test-20260708-042147 /root/hmn/backups/network-before-vpn_test-20260708-042209 /root/hmn/backups/network-before-vpn_test-20260708-042228 /root/hmn/backups/network-before-vpn_test-20260708-042246 /root/hmn/backups/network-before-vpn_test-20260708-042306 /root/hmn/backups/network-before-vpn_test-20260708-042325 /root/hmn/backups/network-before-vpn_test-20260708-042343 /root/hmn/backups/network-before-vpn_test-20260708-042412 /root/hmn/backups/network-before-vpn_test-20260708-042431 /root/hmn/backups/network-before-vpn_test-20260708-042450 /root/hmn/backups/network-before-vpn_test-20260708-042510 /root/hmn/backups/network-before-vpn_test-20260708-042532 /root/hmn/backups/network-before-vpn_test-20260708-042550 /root/hmn/backups/network-before-vpn_test-20260708-042612 /root/hmn/backups/network-before-vpn_test-20260708-042634 /root/hmn/backups/network-before-vpn_test-20260708-042653 /root/hmn/backups/network-before-vpn_test-20260708-042711 /root/hmn/backups/network-before-vpn_test-20260708-042729 /root/hmn/backups/network-before-vpn_test-20260708-042751 /root/hmn/backups/network-before-vpn_test-20260708-042811 /root/hmn/backups/network-before-vpn_test-20260708-042833 /root/hmn/backups/network-before-vpn_test-20260708-042851 /root/hmn/backups/network-before-vpn_test-20260708-042909 /root/hmn/backups/network-before-vpn_test-20260708-042928 /root/hmn/backups/network-before-vpn_test-20260708-042946 /root/hmn/backups/network-before-vpn_test-20260708-043004 /root/hmn/backups/network-before-vpn_test-20260708-043023 /root/hmn/backups/network-before-vpn_test-20260708-043041 === uci pending === === legacy processes === === STEP_033A RESULT === ping_vpn1_rc=0 ping_vpn2_rc=absent ping_vpn3_rc=0 ping_vpn4_rc=0 ping_vpn5_rc=0 table200_default_vpn1_lines=1 table203_default_vpn3_lines=1 table204_default_vpn4_lines=1 table205_default_vpn5_lines=1 rule203_205_lines=0 uci_pending_lines=0 package=/opt/router-ops/apply-packages/20260708-110136_step033a_policy_integration_plan decision=PASS_POLICY_PLAN_READY