[strongSwan] received MS_NOTIFY_STATUS notify error

[Harald Dunkel]

Hi folks,

I get these messages in the log file on my gateway:

:
Aug 10 08:56:49 srvl047 charon: 22[IKE] establishing CHILD_SA IPSec-IKEv2{271}
Aug 10 08:56:49 srvl047 charon: 22[ENC] generating CREATE_CHILD_SA request 190 [ N(REKEY_SA) SA No KE TSi TSr ]
Aug 10 08:56:49 srvl047 charon: 22[NET] sending packet: from 2001:db8::63[4500] to 2001:db8::fff0:947:2f4f:e0cd:1844[4500] (780 bytes)
Aug 10 08:56:49 srvl047 charon: 11[NET] received packet: from 2001:db8::fff0:947:2f4f:e0cd:1844[4500] to 2001:db8::63[4500] (76 bytes)
Aug 10 08:56:49 srvl047 charon: 11[ENC] parsed CREATE_CHILD_SA response 190 [ N(MS_STATUS(13816)) ]
Aug 10 08:56:49 srvl047 charon: 11[IKE] received MS_NOTIFY_STATUS notify error
Aug 10 08:56:49 srvl047 charon: 11[IKE] CHILD_SA rekeying failed, trying again in 9 seconds
Aug 10 08:56:50 srvl047 charon: 09[IKE] establishing CHILD_SA IPSec-IKEv2{271}
Aug 10 08:56:50 srvl047 charon: 09[ENC] generating CREATE_CHILD_SA request 191 [ N(REKEY_SA) SA No KE TSi TSr ]
Aug 10 08:56:50 srvl047 charon: 09[NET] sending packet: from 2001:db8::63[4500] to 2001:db8::fff0:947:2f4f:e0cd:1844[4500] (780 bytes)
Aug 10 08:56:50 srvl047 charon: 26[NET] received packet: from 2001:db8::fff0:947:2f4f:e0cd:1844[4500] to 2001:db8::63[4500] (76 bytes)
Aug 10 08:56:50 srvl047 charon: 26[ENC] parsed CREATE_CHILD_SA response 191 [ N(MS_STATUS(13816)) ]
Aug 10 08:56:50 srvl047 charon: 26[IKE] received MS_NOTIFY_STATUS notify error
Aug 10 08:56:50 srvl047 charon: 26[IKE] CHILD_SA rekeying failed, trying again in 9 seconds
Aug 10 08:56:58 srvl047 charon: 18[IKE] establishing CHILD_SA IPSec-IKEv2{271}
Aug 10 08:56:58 srvl047 charon: 18[ENC] generating CREATE_CHILD_SA request 192 [ N(REKEY_SA) SA No KE TSi TSr ]
Aug 10 08:56:58 srvl047 charon: 18[NET] sending packet: from 2001:db8::63[4500] to 2001:db8::fff0:947:2f4f:e0cd:1844[4500] (780 bytes)
Aug 10 08:56:58 srvl047 charon: 27[NET] received packet: from 2001:db8::fff0:947:2f4f:e0cd:1844[4500] to 2001:db8::63[4500] (76 bytes)
Aug 10 08:56:58 srvl047 charon: 27[ENC] parsed CREATE_CHILD_SA response 192 [ N(MS_STATUS(13816)) ]
Aug 10 08:56:58 srvl047 charon: 27[IKE] received MS_NOTIFY_STATUS notify error
Aug 10 08:56:58 srvl047 charon: 27[IKE] CHILD_SA rekeying failed, trying again in 15 seconds
Aug 10 08:56:59 srvl047 charon: 16[IKE] establishing CHILD_SA IPSec-IKEv2{271}
Aug 10 08:56:59 srvl047 charon: 16[ENC] generating CREATE_CHILD_SA request 193 [ N(REKEY_SA) SA No KE TSi TSr ]
Aug 10 08:56:59 srvl047 charon: 16[NET] sending packet: from 2001:db8::63[4500] to 2001:db8::fff0:947:2f4f:e0cd:1844[4500] (780 bytes)
Aug 10 08:56:59 srvl047 charon: 13[NET] received packet: from 2001:db8::fff0:947:2f4f:e0cd:1844[4500] to 2001:db8::63[4500] (76 bytes)
Aug 10 08:56:59 srvl047 charon: 13[ENC] parsed CREATE_CHILD_SA response 193 [ N(MS_STATUS(13816)) ]
Aug 10 08:56:59 srvl047 charon: 13[IKE] received MS_NOTIFY_STATUS notify error
Aug 10 08:56:59 srvl047 charon: 13[IKE] CHILD_SA rekeying failed, trying again in 13 seconds
:

The peer is running Windows 7. Of course I saw https://wiki.strongswan.org/projects/strongswan/wiki/Windows7.
The point here are the time stamps and the "trying again in" messages:
Doesn't it look like there are 2 rekeyeing jobs running in parallel
for the same peer?


Every helpful comment is highly appreciated
Harri