[strongSwan] How Create multiple Child SA's in same IKE SA
SunilVasanta
v.sunil at sawridgesystems.com
Tue Nov 19 14:10:49 CET 2013
Hi Martin,
very specific info on multiple child SA creation, I tried right away
and it worked.
Thanks for great support,
-Sunil
On 19-11-2013 16:12, Martin Willi wrote:
> Hi,
>
>> How can create more then one child SA in same IKE SA
> ipsec.conf connections get merged to the same configuration if they have
> common properties for an IKE_SA (peer addresses, identities etc.).
>
> You can, for example, define IKE_SA specific options in the %default
> section, and then provide CHILD_SA specifics in separate conn entries.
>
> Unless you set the charon.reuse_ikesa strongswan.conf option to "no",
> connection initiation reuses an existing IKE_SA to create the additional
> CHILD_SA.
>
> Regards
> Martin
>
>
>
--
Sunil Vasanta
Sawridgesystems
More information about the Users
mailing list