[strongSwan] Multiple tunnels for the same policies

[vinay.prabhakar at wipro.com]

Hi,

  I am trying to create tunnels between two units with four policies. 2 policies are of IKEv1 and 2 policies are of IKEv2. But many times I face a situation where multiple tunnels are created for the same policies.

  I have attached the ipsec.conf files and "ipsec statusall" results along with mail.

  Had issues of similar type previously and it was my understanding that the configuration mainly the rekeying parameters were not correct. But now I am using a large values which should not cause such a scenario.
  Also I have used auto=start and auto=add on different PC .

  Please help me understand what is wrong here.
  Any help is highly appreciated.

Thanks & Regards,
Vinay


Please do not print this email unless it is absolutely necessary. 

The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. 

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. 

www.wipro.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120716/6e6cab3a/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ipsec_unit2.conf
Type: application/octet-stream
Size: 2800 bytes
Desc: ipsec_unit2.conf
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120716/6e6cab3a/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ipsec_unit1.conf
Type: application/octet-stream
Size: 2122 bytes
Desc: ipsec_unit1.conf
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120716/6e6cab3a/attachment-0001.obj>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: statusall_unit1.txt
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120716/6e6cab3a/attachment.txt>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: statusall_unit2.txt
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120716/6e6cab3a/attachment-0001.txt>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: messages_log_pc2.txt
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120716/6e6cab3a/attachment-0002.txt>