[strongSwan] Limit on Max Number of CHILD SA (VPN) under an IKE Tunnel

Sajal Malhotra sajalmalhotra at gmail.com
Mon Jun 13 12:37:54 CEST 2011


Hi Andreas,

Thanks a lot for the Quick Response.
We have a scenario where we might have around 20-30 CHILD SA's under 1 IKE
SA.

Hope that is not an issue and can be supported by strongswan stack.

BR
Sajal

On Mon, Jun 13, 2011 at 2:52 PM, Andreas Steffen <
andreas.steffen at strongswan.org> wrote:

> Hello Sajal,
>
> In the IKEv2 charon daemon there is no explicit limitation on the
> maximum number of CHILD_SAs since they are attached as a linked list
> to the corresponding IKE_SA.
>
> Best regards
>
> Andreas
>
>
> On 06/13/2011 10:49 AM, Sajal Malhotra wrote:
>
>> Hi,
>> In Strongswan, do we have a limit on the number of CHILD SAs that can be
>> created under a single IKE SA/Tunnel. If yes. Then what is the Max Number
>> Thanks and Regards
>> Sajal
>>
>
> ======================================================================
> Andreas Steffen                         andreas.steffen at strongswan.org
> strongSwan - the Linux VPN Solution!                www.strongswan.org
> Institute for Internet Technologies and Applications
> University of Applied Sciences Rapperswil
> CH-8640 Rapperswil (Switzerland)
> ===========================================================[ITA-HSR]==
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20110613/0006103f/attachment.html>


More information about the Users mailing list