<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">Hi ,</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">We use
load-tester plugin (strongswan 5.2.2) to create thousands of IPsec
connections/tunnels. Here is the network setup diagram.</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div id="yui_3_16_0_1_1432094129614_32173" style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div id="yui_3_16_0_1_1432094129614_32185" style="margin: 0in 0in 10pt;"><span id="yui_3_16_0_1_1432094129614_32184" style="line-height: 115%; font-size: 12pt;"><font id="yui_3_16_0_1_1432094129614_32183" face="Calibri">50.0.0.1/8 -----
| 10.20.20.1 | === | 10.20.20.2 | ------ 40.0.0.1/8</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>X<span style="mso-spacerun: yes;">
</span><span style="mso-tab-count: 1;"> </span><span style="mso-spacerun: yes;"> </span>GW-A<span style="mso-spacerun: yes;"> </span><span style="mso-tab-count: 1;"> </span><span style="mso-spacerun: yes;"> </span>GW-B<span style="mso-spacerun: yes;"> </span>Y</font></span></div><font face="Times New Roman">
</font><div id="yui_3_16_0_1_1432094129614_32176" style="margin: 0in 0in 10pt;"><span id="yui_3_16_0_1_1432094129614_32175" style="line-height: 115%; font-size: 12pt;"><font id="yui_3_16_0_1_1432094129614_32174" face="Calibri">In our
scenario two security gateways GW-A (IKE initiator) and GW-B (IKE responder)
connects subnets X and Host Y with each other through a VPN tunnel set up
between these two gateways. </font></span></div><font face="Times New Roman">
</font><div id="yui_3_16_0_1_1432094129614_32179" style="margin: 0in 0in 10pt;"><font id="yui_3_16_0_1_1432094129614_32178" face="Calibri"><span id="yui_3_16_0_1_1432094129614_32177" style="line-height: 115%; font-size: 12pt;">Each IKE
initiator requests a virtual IP and is being assigned with an unique IP address
by the IKE responder (with CFG_REPLY during the IKE_AUTH exchange) and CHILD SA
gets created using the same. </span>I have configured <span style="line-height: 115%; font-size: 12pt;">initiator_tsr to 40.0.0.1/8 (in load-tester section at
SEFP-121,) and leftsubnet parameter (in ipsec.conf at GW-B). Because at GW-A , all
CHILD SAs will have the same traffic selector (i.e., 40.0.0.1/8) on responder
side, as proposed by initiator.</span></font></div><font face="Times New Roman">
</font><div id="yui_3_16_0_1_1432094129614_32180" style="margin: 0in 0in 10pt;"><span id="yui_3_16_0_1_1432094129614_32182" style="line-height: 115%; font-size: 12pt;"><font id="yui_3_16_0_1_1432094129614_32181" face="Calibri">Is there any
way to specify/configure different initiator_tsr for each initiator?</font></span></div><font face="Times New Roman">
</font><div id="yui_3_16_0_1_1432094129614_32220" style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">Here goes my
configuration </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">GW-A (IKE
Initiator )</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">strongswan.conf</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">charon {</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;">
</span>threads = 32</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>replay_window = 32</font></span></div><font face="Times New Roman">
</font><div id="yui_3_16_0_1_1432094129614_32216" style="margin: 0in 0in 10pt;"><span id="yui_3_16_0_1_1432094129614_32215" style="line-height: 115%; font-size: 12pt;"><font id="yui_3_16_0_1_1432094129614_32214" face="Calibri"><span style="mso-spacerun: yes;"> </span>dos_protection = no</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>block_threshold=1000</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>cookie_threshold=1000</font></span></div><font face="Times New Roman">
</font><div id="yui_3_16_0_1_1432094129614_32226" style="margin: 0in 0in 10pt;"><span id="yui_3_16_0_1_1432094129614_32225" style="line-height: 115%; font-size: 12pt;"><font id="yui_3_16_0_1_1432094129614_32224" face="Calibri"><span id="yui_3_16_0_1_1432094129614_32223" style="mso-spacerun: yes;"> </span>init_limit_half_open=25000</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>init_limit_job_load=25000</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>retransmit_timeout=30</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>retransmit_tries=30</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>install_virtual_ip=no</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>install_routes=no</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>close_ike_on_child_failure=yes</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>ikesa_table_size = 73728</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>ikesa_table_segments = 16384</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>reuse_ikesa = no</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>plugins {</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>load-tester {</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>enable = yes</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>initiators = 5</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>iterations = 50000</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>delay = 5</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>responder = 10.20.20.2</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;"> </span>proposal = aes128-sha1-modp1024</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>initiator_auth = psk</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>responder_auth = psk</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>request_virtual_ip = yes</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>initiator_tsr=40.0.0.8/32<span style="mso-spacerun: yes;"> </span></font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;"> </span>ike_rekey = 0</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>child_rekey = 0</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>delete_after_established =
no</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>shutdown_when_complete = no</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;"> </span>} </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">filelog {</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>/var/log/charon.log {</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>time_format = %b %e %T</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>append = no</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>default = -1</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>flush_line = yes</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>stderr {</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>ike_name = yes</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">}</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">libstrongswan
{</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;"> </span>dh_exponent_ansi_x9_42 = no</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>processor {</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>priority_threads {</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>high = 8</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>medium = 8</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>critical=8</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">}</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">GW-B (IKE Responder)</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">Ipsec.conf</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">conn
%default</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>ikelifetime=24h</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>keylife=23h</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>rekeymargin=5m</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>keyingtries=1</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>keyexchange=ikev2</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>ike=aes128-sha1-modp1024!</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>mobike=no</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">conn gw-gw</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>left=10.20.20.2</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>leftsubnet=40.0.0.1/8</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>#leftsubnet=0.0.0.0/0</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>rightid=%any</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>leftauth=psk</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>rightsourceip=50.0.0.1/8</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>leftid=@srv.strongswan.org</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>rightauth=psk</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>type=tunnel</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>authby=secret</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>rekey=no</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>reauth=no</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>auto=add</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">strongswan.conf</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">charon {</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span># number of worker threads in charon</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>threads = 32</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>replay_window = 32</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>dos_protection = no</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>block_threshold=1000</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>cookie_threshold=1000</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>init_limit_half_open=25000</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>init_limit_job_load=25000</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;"> </span>half_open_timeout=1000</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>close_ike_on_child_failure=yes</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>ikesa_table_size = 73728</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>ikesa_table_segments = 16384</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>reuse_ikesa = no</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">plugins {</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><span style="mso-spacerun: yes;"><font face="Calibri"> </font></span></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>filelog {</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>/var/log/charon.log {</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;"> </span>time_format = %b %e %T<span style="mso-spacerun: yes;"> </span></font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;"> </span>append = no<span style="mso-spacerun: yes;"> </span></font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>default = -1</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span># flush each line to
disk</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>flush_line = yes</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>stderr {</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><span style="mso-spacerun: yes;"><font face="Calibri"> </font></span></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>ike_name = yes</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></span></div><font face="Times New Roman">
</font><div id="yui_3_16_0_1_1432094129614_32172" style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span># ...</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">}</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">libstrongswan
{</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;"> </span>dh_exponent_ansi_x9_42 = no</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>processor {</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>priority_threads {</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>high = 8</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>medium = 8</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>critical=8</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">}</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">Regards,</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt;" dir="ltr"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">Chinmaya</font></span></div><font face="Times New Roman">
</font></div></body></html>