<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Calibri" size="2"><span style="font-size:11pt;">
<div>Hi,</div>
<div> </div>
<div>Recently during my testing of charon with strongswan version 4.3.1, I observed that after establishment of the tunnel if I flush the child_sa(or the phase 2 SA’s) using setkey –F the DELETE payload is not sent to the peer.</div>
<div>Due to this the peer doesn’t delete its child_sa and keeps on sending traffic with the old SA.</div>
<div> </div>
<div>I have gone through the RFC and found the flowing line </div>
<div> </div>
<div>“<i>If an IKE endpoint chooses to</i></div>
<div><i> delete CHILD_SAs, it MUST send Delete payloads to the other end</i></div>
<div><i> notifying it of the deletion</i>”</div>
<div> </div>
<div>Is the above statement applicable for this scenario?</div>
<div>Can anyone help on what might be wrong? </div>
<div> </div>
<div><font face="Arial" size="3"><span style="font-size:12pt;">Thanks,</span></font></div>
<div><font face="Arial" size="3"><span style="font-size:12pt;">Rohan</span></font></div>
<div><font face="Arial" size="3"><span style="font-size:12pt;"> </span></font></div>
<div> </div>
<div> </div>
</span></font>
</body>
</html>