<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hi, all.</p>
<p>The situation is next:<br>
</p>
<p>I make connection between two hosts with Strongswan 5.5.3 on both
sides. I use IKE v.2 To increase rekey events rate, I use short
lifetime params:</p>
<p> ikelifetime=6m<br>
lifetime=2m<br>
margintime=20s</p>
<p><span id="result_box" class="short_text" lang="en"><span class="">After
the connection is successfully established, I begin to send
data using iperf. After about 300 s. data transfer stops.
There are next records in log files:</span></span></p>
<p>07[MGR] checkin and destroy of IKE_SA successful<br>
01[JOB] got event, queuing job for execution<br>
01[JOB] next event in 226ms, waiting<br>
13[JOB] CHILD_SA {559} not found for delete<br>
01[JOB] got event, queuing job for execution<br>
01[JOB] next event in 184ms, waiting<br>
09[MGR] checkout IKEv2 SA with SPIs c7fdef6e163f293a_i
8e5d1a9aaf12f106_r<br>
09[MGR] IKE_SA checkout not successful<br>
01[JOB] got event, queuing job for execution<br>
01[JOB] next event in 287ms, waiting<br>
11[MGR] checkout IKEv2 SA with SPIs c7fdef6e163f293a_i
8e5d1a9aaf12f106_r<br>
11[MGR] IKE_SA checkout not successful<br>
..........................................................................</p>
<p>..........................................................................</p>
<p>03[JOB] IKE_SA to rekey not found<br>
</p>
<p>When I use old Strongswan 5.3 (with old rekey scheme), I don't
have such problem.</p>
<p>All config files are in attachments.</p>
<p><span id="result_box" class="short_text" lang="en"><span class="">Sincerely,</span></span></p>
<span id="result_box" class="short_text" lang="en"><span class="">Yuri
Gutnikov</span></span>
</body>
</html>