[strongSwan] Duplicate checking: duplicheck and uniqueids not working

Tobias Brunner tobias at strongswan.org
Mon Jul 27 11:32:34 CEST 2015


Hi Tiago,

>      charon {
> 	plugins {
> 	    duplicheck {
> 		enable = yes

Please read the description of the duplicheck plugin's behavior on its
wiki page  [1].  It's most likely not what you want.

> Why am I still getting duplicates?

Hard to tell without logs.  But since the daemon is multi-threaded, not
all duplicates are currently resolved.  If two peers concurrently
establish SAs to each other duplicate SAs are quite likely.  Due to the
reqid changes in 5.3.x such duplicates shouldn't be much of an issue
anymore though.

Regards,
Tobias

[1] https://wiki.strongswan.org/projects/strongswan/wiki/Duplicheck



More information about the Users mailing list