[strongSwan] IKE_SA_INIT timeout management

Martin Willi martin at strongswan.org
Tue Oct 2 16:47:34 CEST 2012


> Does 'keyingtries' always supersede 'retransmit_tries' or only
> when is smaller?

It doesn't. The retransmit_tries option defines the number of
retransmissions in a sequence, while keyingtries defines the number of
sequences. The total number of retransmissions sent is
retransmission_tries * keyingtries, where each sequence uses the
retransmission scheme defined with the retransmit_* options.

Regards
Martin





More information about the Users mailing list