[strongSwan-dev] IKE_SA address change and TRANSPORT mode CHILD_SAs

Timo Teras timo.teras at iki.fi
Wed May 20 12:39:08 CEST 2015


Hi,

It looks like that if IKE_SA (local) address is changed, the IKE_SAs
are properly migrated to use the new address. Also the CHILD_SAs are
moved over. But it appears that the traffic selectors and corresponding
SPDs for the CHILD_SAs are not updated anywhere.

Or did I misread something?

Thanks,
Timo


More information about the Dev mailing list