[strongSwan-dev] IKEv1 rekey issue

Tobias Brunner tobias at strongswan.org
Wed Dec 12 09:57:43 CET 2018


Hi Manju,

> However, are there known issues with IKEv1 with short rekey timers and
> how does IKEv2 overcome this problem?

IKEv1 has no exchange collision handling, so if both ends rekey
concurrently, all bets are off, IKEv2 has (except for reauthentication,
so use regular rekeying to avoid problems).

Regards,
Tobias


More information about the Dev mailing list