[strongSwan] IKE_SA_INIT timeout management
Martin Willi
martin at strongswan.org
Tue Oct 2 16:16:37 CEST 2012
Hi Mugur,
> Can be please confirmed that IKEv2 retransmission algorithm based on
> charon.retransmit_base
> charon.retransmit_timeout
> charon.retransmit_tries
> applies as well to IKE_SA_INIT request?
Yes, those options apply to IKE_SA_INIT requests as well. However,
IKE_SA_INIT requests are additionally affected by the keyingries
ipsec.conf option. If you have keyingtries=3, the retransmission scheme
specified with the options above repeats three times before giving up.
Regards
Martin
More information about the Users
mailing list