<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 10.00.9200.17148"></HEAD>
<BODY style="FONT: 10pt Segoe UI; MARGIN: 4px 4px 1px">
<DIV>Hello,</DIV>
<DIV> </DIV>
<DIV>I just thought I'd point out that the documentation for ipsec.conf seems to be incorrect. Either that or I'm mis-reading it.</DIV>
<DIV> </DIV>
<DIV>It suggests that closeaction is only applicable to IKEv2. However, I've been testing it with IKEv1 using the hold action in the event that the peer sends a delete for the IKE SA due to idle timeout being reached. The connection is deleted but is listed under routed connections. When I comment out closeaction, the connection is deleted and not listed under routed connections.</DIV>
<DIV> </DIV>
<DIV>
<DIV><A href="https://wiki.strongswan.org/projects/strongswan/wiki/ConnSection">https://wiki.strongswan.org/projects/strongswan/wiki/ConnSection</A></DIV>
<DIV>
<P><EM>closeaction = <STRONG>none</STRONG> | clear | hold | restart</EM></P>
<P style="PADDING-LEFT: 2em">defines the action to take if the remote peer unexpectedly closes a CHILD_SA (IKEv2 only, see <EM>dpdaction</EM> for<BR>meaning of values). A <EM>closeaction</EM> should not be used if the peer uses reauthentication or uniqueids checking,<BR>as these events might trigger the defined action when not desired.</P>
<P style="PADDING-LEFT: 2em"> </P></DIV></DIV>
<DIV> </DIV>
<DIV>Regards,</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Tormod</DIV><BR>
<div>
<div>
<div>
<font face="Arial" size="2" color="#008000">Please consider the
environment before printing this email</font><font face="Arial" size="2">
</font> </div>
</div>
</div>
<div>
<font face="Arial" size="2">
</font> </div>
<span class="f133 controlstyle" id="F133"><font face="Arial" size="2">*********************************************************************
</font></span><font face="Arial" size="2"><br><span class="f133 controlstyle" id="F133"><br>This
e-mail and any attachments are confidential. If it is not for you, please
inform us and delete it immediately without disclosing, copying, or
distributing it.<br><br>If the content is not about the business of
PayWizard Group PLC or its clients, then it is neither from nor sanctioned
by PayWizard Group PLC. Use of this or any other PayWizard Group PLC
e-mail facility signifies consent to interception by PayWizard Group PLC.
The views expressed in this email or any attachments may not reflect the
views and opinions of PayWizard Group PLC.<br><br>This message has been
scanned for viruses and dangerous content by MailScanner, but PayWizard
Group PLC accepts no liability for any damage caused by the transmission
of any viruses.<br><br>PayWizard Group PLC is a public limited company
registered in Scotland (SC175703) with its registered office at Cluny
Court, John Smith Business Park, Kirkcaldy, Fife, KY2 6QJ.<br><br>*******************************************************************</span>*</font>
</BODY></HTML>