[strongSwan] Multiple Child_SAs are causing traffic drop

[Joern Mewes]

Hi,

Again, thanks for your reply.

> Probably Checkpoint uses the "last SA rekeyed", while strongSwan uses
> the "last SA established".

That's the small piece I was missing and it fully explains the problem I am
observing.

Do you have any plans to make this configurable in one of the upcoming
releases (I can imagine that there are other implamentations available
which are behaving in the same way)? Or is the change you introduced with
5.1.0 the final solution?

Best regards,
Joern
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20131002/159bf72f/attachment.html>