<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>Hi -</div>
<div><br>
</div>
<div>We have a Netscreen 5GT successfully establishing a VPN with StrongSwan 5.0.0 .. Nothing fancy , PSK … Proxy-ID , etc.. However, we see an odd behavior that we only see between Netscreen & StrongSwan. The tunnel will drop after a period of time
when there is no traffic (which is fine), but then, traffic generated from the Netscreen side of the VPN will not bring the tunnel back up. Traffic generated from the Strongswan side will immediately cause the tunnel to come back up. At that point, traffic
works in both directions again.</div>
<div><br>
</div>
<div>Any ideas why we would see that sort of behavior ?</div>
<div><br>
</div>
<div>The strongswan config is basic:</div>
<div><br>
</div>
<div>
<div> keyexchange=ikev1</div>
<div> leftsubnet=11.1.1.0/23</div>
<div> leftid=123.12.12.185</div>
<div> right=23.123.123.12</div>
<div> rightid=23.123.123.12</div>
<div> rightsubnet=192.168.1.0/24</div>
<div> ike=aes128-sha1-modp1024</div>
<div> esp=aes128-sha1-modp1024</div>
<div> authby=secret</div>
<div> type=tunnel</div>
<div> auto=start</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Curious if others have seen this and/or have an idea of why a perfectly working tunnel can go down, then only be re-established from one end.</div>
<div><br>
</div>
<div>Thanks!</div>
<div>Brian</div>
<div><br>
</div>
</body>
</html>