<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Calibri" size="2"><span style="font-size:11pt;">
<div>Hi,</div>
<div> </div>
<div>In strongswan version 4.3.6, for below client (2 clients) and server configuration :</div>
<div> </div>
<div> </div>
<div> </div>
<div>ipsec status on clients</div>
<div> </div>
<div>On doing ‘ipsec down r1~v1’ , below logs are seen at clients side :</div>
<div> </div>
<div>Sep 24 15:05:34.986953 info FZBU-0 charon: 10[KNL] getting address to reach (vr1)90.0.0.1</div>
<div>Sep 24 15:05:34.987122 info FZBU-0 charon: 10[KNL] getting address to reach 23.0.0.1</div>
<div>Sep 24 15:05:34.987324 info FZBU-0 charon: 10[IKE] reauthenticating IKE_SA due to address change</div>
<div> </div>
<div>And then r2~v2 (2<font size="1"><span style="font-size:7.3pt;"><sup>nd</sup></span></font> client) gets reauthenticated.</div>
<div> </div>
<div>When , “ip route list vrf 1 “clearly shows route to reach 90.0.0.1 via 33.0.0.1, why is address change considered and reauthentication triggered. It looks like, charon refers the ‘ip route list (default vrf) list’ for route lookup.</div>
<div>Is this a known issue?</div>
<div> </div>
<div> </div>
<div> </div>
<div>[root@FZBU-0(BCNBlr94) /root]</div>
<div># ip r l</div>
<div>90.0.0.1 via 23.0.0.1 dev v11 proto gated</div>
<div>23.0.0.0/24 dev v11 proto kernel scope link src 23.0.0.2</div>
<div>169.254.64.0/20 dev xaui0 proto kernel scope link src 169.254.64.5</div>
<div>169.254.0.0/19 dev internal proto kernel scope link src 169.254.0.6</div>
<div> </div>
<div>[root@FZBU-0(BCNBlr94) /root]</div>
<div># ip r l v 1</div>
<div>90.0.0.1 via 33.0.0.1 dev v12 vrfid 1 proto gated</div>
<div>33.0.0.0/24 dev v12 vrfid 1 proto kernel scope link src 33.0.0.2</div>
<div> </div>
<div> </div>
<div>Thanks</div>
<div>Sumit</div>
<div> </div>
</span></font>
</body>
</html>