[strongSwan] How Create multiple Child SA's in same IKE SA

SunilVasanta v.sunil at sawridgesystems.com
Tue Nov 19 14:10:49 CET 2013


Hi Martin,

very specific info on multiple child SA creation,  I tried right away 
and it worked.

Thanks for great support,

-Sunil


On 19-11-2013 16:12, Martin Willi wrote:
> Hi,
>
>> How can create more then one child SA in same IKE SA
> ipsec.conf connections get merged to the same configuration if they have
> common properties for an IKE_SA (peer addresses, identities etc.).
>
> You can, for example, define IKE_SA specific options in the %default
> section, and then provide CHILD_SA specifics in separate conn entries.
>
> Unless you set the charon.reuse_ikesa strongswan.conf option to "no",
> connection initiation reuses an existing IKE_SA to create the additional
> CHILD_SA.
>
> Regards
> Martin
>
>
>

-- 

Sunil Vasanta
Sawridgesystems





More information about the Users mailing list