[strongSwan] time delay and UART die periodly

kenxin lau liuqixing2005 at gmail.com
Wed May 23 18:33:38 CEST 2012


Hi ,
    I used strongswan-4.5.2 and Linux-2.6.32 in an embed system with  the
PowerPC .After establishing  a IPSEC tunnel between the client( PowerPC)
and service (x86),I sent UDP packets from the client to service with 3 Mbps
bandwidth , aslo use the PING command to PING a PC which connected the
PowerPC directly without IPSEC.It  appeared about 20 second delay ,at the
same time the UART died and could not input any character . But it did not
loss any packets !
          Do you have any idea about this phenomena ? Does  it   the result
of   low-performance of  PowerPC  ?


config setup
	plutostart=no

conn %default
	ikelifetime=60m
	keylife=20m
	rekeymargin=3m
	keyingtries=1
	keyexchange=ikev2

conn home
	left=192.168.0.100
	leftid=carol at strongswan.org
	leftfirewall=yes
	leftauth=eap
	eap_identity=carol
	right=192.168.0.1
	rightid=@moon.strongswan.org
	rightsubnet=10.1.0.0/16
	auto=add

*strongswan.conf:*

charon {
  load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509
revocation hmac xcbc stroke kernel-netlink socket-default fips-prf
eap-aka eap-aka-3gpp2 eap-identity updown
}
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120524/c76d8991/attachment.html>


More information about the Users mailing list