[strongSwan] can update the ike/esp proposal during the reking process.

张元玄 yuanakumazhang at gmail.com
Tue Apr 26 08:34:11 CEST 2011


Hi all

1. Can I update the proposals used a SA.

for example:

I setup a sa used the proposal  as following and start the connection
ike=3des-md5-modp1024!

can I change the proposal to the other without stopping the connection.
ike=3des-md5-modp2048!

use the ipsec update or reload, can finish the work?

2. About lossless during rekey.
can anyone give some information about lossless of rekey?
I didn't find any information during the website.


Thanks,
Regards




More information about the Users mailing list