[strongSwan] [Strongswan] ipsec stop in Strongswan
saravanan.nagarajan87 at gmail.com
Sun Jun 24 18:14:36 CEST 2012
Thanks for your prompt reply. I have one more clarification from your
1) How Strongswan is classifying "delete payload coming for deleting Child
SA's, when the peer stops IPSec service and delete payload coming for
deleting old Child SA's in case of rekeying" ?
On Fri, Jun 22, 2012 at 10:32 AM, Andreas Steffen <
andreas.steffen at strongswan.org> wrote:
> With IKEv2, sending a delete notification for the IKE_SA implicitly
> means that all dependent CHILD_SAs are automatically deleted, too.
> On 06/22/2012 06:47 PM, SaRaVanAn wrote:
> > Hi all,
> > I have a formed a tunnel between Cisco Vpn Client and Strongswan VPN
> > server.
> > After some time, I stopped IPsec service in strongswan, its sending only
> > a delete
> > payload of protocol ID 1( IKE_SA),its not sending delete payload for
> > CHILD_SA of protocol ID 2, in case of Ikev2, but its working fine in
> > Please provide your input on this.
> > Regards,
> > Saravanan N
> Andreas Steffen andreas.steffen at strongswan.org
> strongSwan - the Linux VPN Solution! www.strongswan.org
> Institute for Internet Technologies and Applications
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Users