[strongSwan] what does multiple ESTABLISHED staet for a connection mean

[Martin Willi]

Hi,

> I am debugging an issue and was wondering what these multiple
> ESTABLISHED states mean and if they have any detrimental effect. I
> assume these imply there are multiple child SA’s ?

This means that you have two IKE_SAs established between your peers.
Might happen if both configurations use auto=start, or auto=route
triggers tunnels simultaneously. Have a look for the "uniqueids" option
in the ipsec.conf manpage to avoid multiple tunnels between the same
identities.

Regards
Martin