[strongSwan] Query on Strongswan Retranmsmission

peter.naveen at wipro.com peter.naveen at wipro.com
Wed May 23 13:00:47 CEST 2012


We have a peculiar issue after porting Strongswan version 4.6.2 to our target platform. Overall the functionality seems to be fine, except for some retransmission issues.

The retransmission of IKE_SA_INIT messages or periodic DPD polling does not happen at all. IKE_SA_INIT message is sent once and it is not retransmitted. Similarly DPD messages are not retransmitted at all. We opened up traces in scheduler.c. The job seems to be created and added. But it never seems to get fired at all.

All strongswan.conf parameters (including the 3 retransmission related parameters) are set to default values. We earlier suspected that there is some issue with the Job scheduler itself. But latter on we found that SA rekeying happens properly at the desired timeout values. So this eliminates any porting related issues or issues with the Job scheduler.

We have ported the same strongswan version to a Fedora Linux box and everything works fine there for the same ipsec configuration.

Any comments/help on this would be highly appreciated.


Please do not print this email unless it is absolutely necessary. 

The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. 

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120523/fd2cec1e/attachment.html>

More information about the Users mailing list