[strongSwan] StrongSwan not responding to DPD messages when modeconfig=push.

[Noel Kuntze]

On 19.10.2016 09:26, chaitanya vinnakota wrote:
> Sep 24 12:58:54 router6654A1 charon:<info> 12[NET] received packet:
> from 44.44.44.2[500] to 44.44.44.1[500] (84 bytes)
> Sep 24 12:58:54 router6654A1 charon:<info> 12[ENC] parsed
> INFORMATIONAL_V1 request 3103766190 [ HASH N(DPD) ]
> Sep 24 12:58:54 router6654A1 charon:<info> 12[IKE] queueing ISAKMP_DPD task
> Sep 24 12:58:54 router6654A1 charon:<info> 12[IKE] delaying task
> initiation, TRANSACTION exchange in progress
> Sep 24 12:58:55 router6654A1 charon:<info> 07[KNL] querying SAD entry
> with SPI cc9487a6

In the subject, you're writing about modeconfig=push, but you configured modeconfig=pull.
Please make sure you configured each side correctly.

The logs indicate that charon delayed the execution of the DPD task because
a transaction (mode config) is in progress.

-- 

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20161019/a4e32a39/attachment.sig>