<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
Hello Tobias,
<div><br>
</div>
<div>Thank you for the link. I did have rekey=no before i changed my config and while i could see the tunnel rekeying, after a couple minutes the windows client would disconnect. I did only have rekey=no and not reauth though. These are the logs and config
-><br>
<br>
<br>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
conn VPN_XX _xxxx<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
keyexchange=ikev2<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
ike=aes256-sha1-modp1024,aes256-sha256-modp2048!<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
esp=aes256-sha1,aes256-sha256-modp2048!<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
dpdaction=clear<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
dpddelay=300s<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
rekey=no<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
left=1.1.1.1<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
leftsubnet=0.0.0.0/0<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
leftauth=pubkey<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
leftcert=VPN-gateway.pem.rsa<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
leftid="C=XX, ST=XXXX, L=XXXX, O=XXXXX., OU=XXX, CN=XXXX.XXXX.XXXX"<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
right=%any<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
rightdns=192.168.132.1,192.168.129.254<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
rightsourceip=192.168.148.64/27<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<a href="mailto:rightgroups=xxxx@xxxxx.xxxx" style="color: rgb(5, 99, 193);">rightgroups=xxxx@xxxxx.xxxx</a><o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
rightauth=eap-radius<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
eap_identity=%identity<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
auto=add<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:15:46 gateway charon: 10[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (348 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:15:46 gateway charon: 10[ENC] parsed CREATE_CHILD_SA request 23 [ N(REKEY_SA) SA No TSi TSr ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:15:46 gateway charon: 10[CFG] selected proposal: ESP:AES_CBC_256/HMAC_SHA1_96/NO_EXT_SEQ<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:15:46 gateway charon: 10[IKE] inbound CHILD_SA VPN_XX_xxxx{106878} established with SPIs cd654f29_i 499da7a6_o and TS 0.<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
0.0.0/0 === 192.168.148.65/32<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:15:46 gateway charon: 10[ENC] generating CREATE_CHILD_SA response 23 [ SA No TSi TSr ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:15:46 gateway charon: 10[NET] sending packet: from 1.1.1.1[4500] to 2.2.2.2[4500] (204 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:15:46 gateway charon: 13[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (76 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:15:46 gateway charon: 13[ENC] parsed INFORMATIONAL request 24 [ D ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:15:46 gateway charon: 13[IKE] received DELETE for ESP CHILD_SA with SPI b067bbf4<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:15:46 gateway charon: 13[IKE] closing CHILD_SA VPN_XX_xxxx{106779} with SPIs c1ce1b3a_i (<span dir="ltr" style="color: rgb(5, 99, 193); text-decoration: underline;">36620023</span> bytes) b067bbf4_o (192<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
63998 bytes) and TS 0.0.0.0/0 === 192.168.148.65/32<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:15:46 gateway charon: 13[IKE] sending DELETE for ESP CHILD_SA with SPI c1ce1b3a<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:15:46 gateway charon: 13[IKE] CHILD_SA closed<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:15:46 gateway charon: 13[IKE] outbound CHILD_SA VPN_XX_xxxx{106878} established with SPIs cd654f29_i 499da7a6_o and TS 0<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
.0.0.0/0 === 192.168.148.65/32<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:15:46 gateway charon: 13[ENC] generating INFORMATIONAL response 24 [ D ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:15:46 gateway charon: 13[NET] sending packet: from 1.1.1.1[4500] to 2.2.2.2[4500] (76 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:45 gateway charon: 07[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (576 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:45 gateway charon: 07[ENC] parsed CREATE_CHILD_SA request 25 [ EF(1/2) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:45 gateway charon: 07[ENC] received fragment #1 of 2, waiting for complete IKE message<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:45 gateway charon: 06[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (80 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:45 gateway charon: 06[ENC] parsed CREATE_CHILD_SA request 25 [ EF(2/2) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:45 gateway charon: 06[ENC] received fragment #2 of 2, reassembled fragmented IKE message (572 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:45 gateway charon: 06[ENC] parsed CREATE_CHILD_SA request 25 [ SA KE No N(FRAG_SUP) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:45 gateway charon: 06[IKE] 2.2.2.2 is initiating an IKE_SA<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:45 gateway charon: 06[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:45 gateway charon: 06[IKE] IKE_SA VPN_XX_xxxx[72723] rekeyed between 1.1.1.1[C=xx, ST=xxxx, L=xxxx, O=xxxx, OU=xx, CN=xxxx.xxxx.xxxx, E=xx@x]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<span dir="ltr" style="color: rgb(5, 99, 193); text-decoration: underline;">quaredfinancial.com</span>]...2.2.2.2[192.168.10.2]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:45 gateway charon: 06[ENC] generating CREATE_CHILD_SA response 25 [ SA No KE ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:45 gateway charon: 06[NET] sending packet: from 1.1.1.1[4500] to 2.2.2.2[4500] (300 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:46 gateway charon: 09[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (576 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:46 gateway charon: 09[ENC] parsed CREATE_CHILD_SA request 25 [ EF(1/2) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:46 gateway charon: 09[ENC] received fragment #1 of 2, waiting for complete IKE message<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:46 gateway charon: 05[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (80 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:46 gateway charon: 05[ENC] parsed CREATE_CHILD_SA request 25 [ EF(2/2) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:46 gateway charon: 05[ENC] received fragment #2 of 2, reassembled fragmented IKE message (572 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:46 gateway charon: 05[ENC] parsed CREATE_CHILD_SA request 25 [ SA KE No N(FRAG_SUP) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:46 gateway charon: 05[IKE] received retransmit of request with ID 25, retransmitting response<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:46 gateway charon: 05[NET] sending packet: from 1.1.1.1[4500] to 2.2.2.2[4500] (300 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:47 gateway charon: 04[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (576 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:47 gateway charon: 04[ENC] parsed CREATE_CHILD_SA request 25 [ EF(1/2) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:47 gateway charon: 04[ENC] received fragment #1 of 2, waiting for complete IKE message<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:47 gateway charon: 13[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (80 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:47 gateway charon: 13[ENC] parsed CREATE_CHILD_SA request 25 [ EF(2/2) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:47 gateway charon: 13[ENC] received fragment #2 of 2, reassembled fragmented IKE message (572 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:47 gateway charon: 13[ENC] parsed CREATE_CHILD_SA request 25 [ SA KE No N(FRAG_SUP) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:47 gateway charon: 13[IKE] received retransmit of request with ID 25, retransmitting response<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:47 gateway charon: 13[NET] sending packet: from 1.1.1.1[4500] to 2.2.2.2[4500] (300 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:50 gateway charon: 11[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (576 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:50 gateway charon: 11[ENC] parsed CREATE_CHILD_SA request 25 [ EF(1/2) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:50 gateway charon: 11[ENC] received fragment #1 of 2, waiting for complete IKE message<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:50 gateway charon: 15[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (80 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:50 gateway charon: 15[ENC] parsed CREATE_CHILD_SA request 25 [ EF(2/2) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:50 gateway charon: 15[ENC] received fragment #2 of 2, reassembled fragmented IKE message (572 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:50 gateway charon: 15[ENC] parsed CREATE_CHILD_SA request 25 [ SA KE No N(FRAG_SUP) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:50 gateway charon: 15[IKE] received retransmit of request with ID 25, retransmitting response<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:50 gateway charon: 15[NET] sending packet: from 1.1.1.1[4500] to 2.2.2.2[4500] (300 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:58 gateway charon: 08[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (576 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:58 gateway charon: 08[ENC] parsed CREATE_CHILD_SA request 25 [ EF(1/2) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:58 gateway charon: 08[ENC] received fragment #1 of 2, waiting for complete IKE message<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:58 gateway charon: 14[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (80 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:58 gateway charon: 14[ENC] parsed CREATE_CHILD_SA request 25 [ EF(2/2) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:58 gateway charon: 14[ENC] received fragment #2 of 2, reassembled fragmented IKE message (572 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:58 gateway charon: 14[ENC] parsed CREATE_CHILD_SA request 25 [ SA KE No N(FRAG_SUP) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:58 gateway charon: 14[IKE] received retransmit of request with ID 25, retransmitting response<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:25:58 gateway charon: 14[NET] sending packet: from 1.1.1.1[4500] to 2.2.2.2[4500] (300 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:12 gateway charon: 07[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (576 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:12 gateway charon: 07[ENC] parsed CREATE_CHILD_SA request 25 [ EF(1/2) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:12 gateway charon: 07[ENC] received fragment #1 of 2, waiting for complete IKE message<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:12 gateway charon: 06[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (80 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:12 gateway charon: 06[ENC] parsed CREATE_CHILD_SA request 25 [ EF(2/2) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:12 gateway charon: 06[ENC] received fragment #2 of 2, reassembled fragmented IKE message (572 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:12 gateway charon: 06[ENC] parsed CREATE_CHILD_SA request 25 [ SA KE No N(FRAG_SUP) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:12 gateway charon: 06[IKE] received retransmit of request with ID 25, retransmitting response<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:12 gateway charon: 06[NET] sending packet: from 1.1.1.1[4500] to 2.2.2.2[4500] (300 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:40 gateway charon: 04[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (576 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:40 gateway charon: 04[ENC] parsed CREATE_CHILD_SA request 25 [ EF(1/2) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:40 gateway charon: 04[ENC] received fragment #1 of 2, waiting for complete IKE message<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:40 gateway charon: 08[NET] received packet: from 2.2.2.2[4500] to 1.1.1.1[4500] (80 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:40 gateway charon: 08[ENC] parsed CREATE_CHILD_SA request 25 [ EF(2/2) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:40 gateway charon: 08[ENC] received fragment #2 of 2, reassembled fragmented IKE message (572 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:40 gateway charon: 08[ENC] parsed CREATE_CHILD_SA request 25 [ SA KE No N(FRAG_SUP) ]<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:40 gateway charon: 08[IKE] received retransmit of request with ID 25, retransmitting response<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:26:40 gateway charon: 08[NET] sending packet: from 1.1.1.1[4500] to 2.2.2.2[4500] (300 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:35:38 gateway charon: 04[IKE] retransmit 1 of request with message ID 0<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:35:38 gateway charon: 04[NET] sending packet: from 1.1.1.1[4500] to 2.2.2.2[4500] (76 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:35:45 gateway charon: 09[IKE] retransmit 2 of request with message ID 0<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:35:45 gateway charon: 09[NET] sending packet: from 1.1.1.1[4500] to 2.2.2.2[4500] (76 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:35:58 gateway charon: 14[IKE] retransmit 3 of request with message ID 0<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:35:58 gateway charon: 14[NET] sending packet: from 1.1.1.1[4500] to 2.2.2.2[4500] (76 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:36:22 gateway charon: 13[IKE] retransmit 4 of request with message ID 0<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:36:22 gateway charon: 13[NET] sending packet: from 1.1.1.1[4500] to 2.2.2.2[4500] (76 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:37:04 gateway charon: 12[IKE] retransmit 5 of request with message ID 0<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:37:04 gateway charon: 12[NET] sending packet: from 1.1.1.1[4500] to 2.2.2.2[4500] (76 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:38:19 gateway charon: 13[IKE] giving up after 5 retransmits<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:38:19 gateway charon: 13[IKE] proper IKE_SA delete failed, peer not responding<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Jan 18 14:38:19 gateway charon: 13[CFG] lease 192.168.148.65 by 'DOMAIN_X\user1' went offline<o:p></o:p></p>
<p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></p>
<br>
The weird thing is, if i force the rekey with stroke, it works ok..<br>
<br>
I added reauth=no to the config now. Lets see if it rekeys.</div>
<div><br>
</div>
<div>Thanks.</div>
<div><br>
<br>
<div dir="ltr">
<blockquote type="cite"><br>
On 17 Jan 2022, at 15:50, Tobias Brunner <tobias@strongswan.org> wrote:<br>
<br>
</blockquote>
</div>
<blockquote type="cite">
<div dir="ltr"><span>Hi Ed,</span><br>
<span></span><br>
<blockquote type="cite"><span>I did change ikelifetime to 360m (6 hrs) but i am still having issues. Could that still be the cipher?</span><br>
</blockquote>
<span></span><br>
<span>No, you want to disable reauthentication (reauth=no) so the IKE_SA is actually rekeyed to avoid this error:</span><br>
<span></span><br>
<blockquote type="cite"><span>These are the logs after modifying ikelifetime so thst the strongswan server initiates the rekey before windows -></span><br>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span> charon: 06[IKE] initiator did not reauthenticate as requested____</span><br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span> charon: 06[IKE] IKE_SA VPN_x_xxxx[71277] will timeout in 3 minutes____</span><br>
</blockquote>
</blockquote>
<span></span><br>
<span>A related ticket can be found at [1].</span><br>
<span></span><br>
<span>Regards,</span><br>
<span>Tobias</span><br>
<span></span><br>
<span>[1] https://wiki.strongswan.org/issues/3400</span><br>
</div>
</blockquote>
</div>
</body>
</html>