[strongSwan] IKE_SA_INIT timeout management

Martin Willi martin at strongswan.org
Tue Oct 2 16:16:37 CEST 2012


Hi Mugur,

> Can be please confirmed that IKEv2 retransmission algorithm based on
>    charon.retransmit_base
>    charon.retransmit_timeout
>    charon.retransmit_tries
> applies as well to IKE_SA_INIT request?

Yes, those options apply to IKE_SA_INIT requests as well. However,
IKE_SA_INIT requests are additionally affected by the keyingries
ipsec.conf option. If you have keyingtries=3, the retransmission scheme
specified with the options above repeats three times before giving up.

Regards
Martin





More information about the Users mailing list