<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<font face="Georgia">I used to run into this when I was setting up
my first strongswan connection (to a Cisco router). I believe the
issue was occurring because I had my side </font>set up with
'auto=start' or 'auto=route'. It would conflict with the other
side's establishment phase when I was forcing the routing before the
ESP tunnel could be established. Using just 'auto=add' would let
sessions negotiate fully, then bring up the routes.<br>
<br>
I could be wrong, I'm by no means an expert on all this. I'm also
running on the 5.x branch, rather than 4 like you.<br>
<br>
<div class="moz-cite-prefix">On 8/15/13 1:41 AM, Aleksandar Petreski
wrote:<br>
</div>
<blockquote
cite="mid:CAPxjgs7DF5sfXzj-zurjS6hONf+XTkCnQKpHpuH3PS2rfX39Rg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>Hi,</div>
<div><br>
</div>
<div>I have a really strange fix to the issues i'm facing.</div>
<div><br>
</div>
<div>Sometimes ipsec reload (or ipsec update) brings down all
current connections. If i just do a simple ipsec stop and
ipsec start does not help. If i use some minutes between stop
and start everything (always) is back to normal.</div>
<div><br>
</div>
<div>Does anyone have an explanation why this is happening?</div>
<div><br>
</div>
<div>Setup: site-to-site (ikev1), several tunnels with same
endpoints, same configuration.</div>
OS: CentOS 5.7 64bit<br>
Strongswan: Linux strongSwan U4.5.2
<div>
<br>
</div>
<div>Thanks,<br clear="all">
<div><br>
</div>
-- <br>
Aleksandar Petreski<br>
<br>
RHCE #805008289536145
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a>
<a class="moz-txt-link-freetext" href="https://lists.strongswan.org/mailman/listinfo/users">https://lists.strongswan.org/mailman/listinfo/users</a></pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Paul Theodoropoulos
<a class="moz-txt-link-abbreviated" href="http://www.anastrophe.com">www.anastrophe.com</a></pre>
</body>
</html>