[strongSwan] Query on Child SA Creation

[shyamsundar.purkayastha at wipro.com]

Hi 

 

I have a query on Child SA creation.

 

I have a ipsec.conf configuration which has two very similar
configurations listed .The only difference between them is the protocol
(leftprotoport).

 

Here is my ipsec.conf entry with the two configurations

 

conn 211TO60Tunnel

    left=10.201.114.211

    leftcert=peerCert.der

    right=10.201.114.178

    rightid="C=CH, O=strongSwan, CN=178"

    keyexchange=ikev2

    type=tunnel

    auto=add

    auth=ah

    leftprotoport=udp

 

 

conn 211TO60TunnelICMP

    left=10.201.114.211

    leftcert=peerCert.der

    right=10.201.114.178

    rightid="C=CH, O=strongSwan, CN=178"

    keyexchange=ikev2

    type=tunnel

    auto=add

    auth=ah

    leftprotoport=icmp 

 

 

When I do a ipsec start , I see that the "211TO60TunnelICMP"
configuration is added as a child of "211TO60Tunnel" . But I actually
wanted this as a separate SA which can be enabled disabled separately. 

 

How can I achieve this in srongswan 4.3 ?

And just wanted to know what is the criteria for deciding that a config
should be a child of another one ?

 

Thanks in advance.

 

Regards

Shyam


Please do not print this email unless it is absolutely necessary. 

The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. 

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. 

www.wipro.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20100421/554d1c65/attachment.html>