[strongSwan] closeaction

[Tormod Macleod]

Hello,
 
I just thought I'd point out that the documentation for ipsec.conf seems to be incorrect. Either that or I'm mis-reading it.
 
It suggests that closeaction is only applicable to IKEv2. However, I've been testing it with IKEv1 using the hold action in the event that the peer sends a delete for the IKE SA due to idle timeout being reached. The connection is deleted but is listed under routed connections. When I comment out closeaction, the connection is deleted and not listed under routed connections.
 
https://wiki.strongswan.org/projects/strongswan/wiki/ConnSection

closeaction = none | clear | hold | restart
defines the action to take if the remote peer unexpectedly closes a CHILD_SA (IKEv2 only, see dpdaction for
meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids checking,
as these events might trigger the defined action when not desired.
 
 
Regards,
 
 
Tormod


Please consider the environment before printing this email

*********************************************************************
  This e-mail and any attachments are confidential.  If it is not for you, please inform us and delete it immediately without disclosing, copying, or distributing it.  If the content is not about the business of PayWizard Group PLC or its clients, then it is neither from nor sanctioned by PayWizard Group PLC.  Use of this or any other PayWizard Group PLC e-mail facility signifies consent to interception by PayWizard Group PLC.  The views expressed in this email or any attachments may not reflect the views and opinions of PayWizard Group PLC.  This message has been scanned for viruses and dangerous content by MailScanner, but PayWizard Group PLC accepts no liability for any damage caused by the transmission of any viruses.  PayWizard Group PLC is a public limited company registered in Scotland (SC175703) with its registered office at Cluny Court, John Smith Business Park, Kirkcaldy, Fife, KY2 6QJ.  ********************************************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20150530/7078aa03/attachment.html>