<div dir="ltr">Hi<div><br></div><div>Although mentioned in the wiki that IKEv1 always does reauthentication when rekeying IKEv1-SAs...</div><div><br></div><div>I still was getting some doubts...Can you please confirm that if i use the below config for ipsec (using Strongswan 5.5.x)...the use of "reauth=no" in the "conn default" will apply to all IKEv2 connections AND ONLY to IKEv2 connections</div><div><br></div><div>Can you clarify that this option will NOT have any effect on IKEv1 connections</div><div><br></div><div>======================</div><div><div>conn %default</div><div><span style="white-space:pre">   </span>ikelifetime=3h</div><div><span style="white-space:pre">        </span>keylife=1h</div><div><span style="white-space:pre">    </span>mobike=no</div><div><span style="white-space:pre">     </span>dpddelay=30s</div><div>        dpdtimeout=90s</div><div>        dpdaction=clear</div><div><span style="white-space:pre">       </span>fragmentation=yes</div><div><span style="white-space:pre">     </span>leftsendcert=always</div><div><span style="white-space:pre">   </span>reauth=no</div><div><br></div><div>conn tun1_V1</div><div>        left=172.31.32.201</div><div>        right=192.168.0.100</div><div>        ...</div><div>        ...</div><div>        type=tunnel</div><div>        keyexchange=ikev1</div><div><span style="white-space:pre">        </span>auto=route</div><div><br></div><div>conn tun2_V2</div><div>        left=172.31.32.201</div><div>        right=172.28.28.102</div><div>        ...</div><div>        ...</div><div>        type=tunnel</div><div>        keyexchange=ikev2</div><div><span style="white-space:pre">       </span>auto=route</div></div><div><br></div><div><div><div>conn tun3_V2</div><div>        left=172.31.32.201</div><div>        right=172.29.1.2</div><div>        ...</div><div>        ...</div><div>        type=tunnel</div><div>        keyexchange=ikev2</div><div><span style="white-space:pre">        </span>auto=route</div></div><div><br></div></div><div><br></div><div>======================</div><div><br></div><div><br></div><div>thanks & regards</div><div>Rajiv</div><div><br></div></div>