[strongSwan] Data transfer stops

Yuri Е. Gutnikov gutnikov at rnd.stcnet.ru
Thu Aug 3 14:58:49 CEST 2017


Hi, all.

The situation is next:

I make connection between two hosts with Strongswan 5.5.3 on both sides. 
I use IKE v.2 To increase rekey events rate, I use short lifetime params:

         ikelifetime=6m
         lifetime=2m
         margintime=20s

After the connection is successfully established, I begin to send data 
using iperf. After about 300 s. data transfer stops. There are next 
records in log files:

07[MGR] checkin and destroy of IKE_SA successful
01[JOB] got event, queuing job for execution
01[JOB] next event in 226ms, waiting
13[JOB] CHILD_SA {559} not found for delete
01[JOB] got event, queuing job for execution
01[JOB] next event in 184ms, waiting
09[MGR] checkout IKEv2 SA with SPIs c7fdef6e163f293a_i 8e5d1a9aaf12f106_r
09[MGR] IKE_SA checkout not successful
01[JOB] got event, queuing job for execution
01[JOB] next event in 287ms, waiting
11[MGR] checkout IKEv2 SA with SPIs c7fdef6e163f293a_i 8e5d1a9aaf12f106_r
11[MGR] IKE_SA checkout not successful
..........................................................................

..........................................................................

03[JOB] IKE_SA to rekey not found

When I use old Strongswan 5.3 (with old rekey scheme), I don't have such 
problem.

All config  files are in attachments.

Sincerely,

Yuri Gutnikov
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170803/4be6b338/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: responder_charon.log.gz
Type: application/gzip
Size: 10786 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170803/4be6b338/attachment-0004.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: responder_configs.tar.bz2
Type: application/x-bzip
Size: 15301 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170803/4be6b338/attachment-0005.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: initiator_configs.tar.bz2
Type: application/x-bzip
Size: 15305 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170803/4be6b338/attachment-0006.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: initiator_charon.log.gz
Type: application/gzip
Size: 11690 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170803/4be6b338/attachment-0007.bin>


More information about the Users mailing list