[strongSwan] Multiple Child_SAs are causing traffic drop

Joern Mewes joern.mewes at gmx.net
Wed Oct 2 08:38:23 CEST 2013


Again, thanks for your reply.

> Probably Checkpoint uses the "last SA rekeyed", while strongSwan uses
> the "last SA established".

That's the small piece I was missing and it fully explains the problem I am

Do you have any plans to make this configurable in one of the upcoming
releases (I can imagine that there are other implamentations available
which are behaving in the same way)? Or is the change you introduced with
5.1.0 the final solution?

Best regards,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20131002/159bf72f/attachment.html>

More information about the Users mailing list