[strongSwan] Data transfer stops
Yuri Е. Gutnikov
gutnikov at rnd.stcnet.ru
Thu Aug 3 14:58:49 CEST 2017
Hi, all.
The situation is next:
I make connection between two hosts with Strongswan 5.5.3 on both sides.
I use IKE v.2 To increase rekey events rate, I use short lifetime params:
ikelifetime=6m
lifetime=2m
margintime=20s
After the connection is successfully established, I begin to send data
using iperf. After about 300 s. data transfer stops. There are next
records in log files:
07[MGR] checkin and destroy of IKE_SA successful
01[JOB] got event, queuing job for execution
01[JOB] next event in 226ms, waiting
13[JOB] CHILD_SA {559} not found for delete
01[JOB] got event, queuing job for execution
01[JOB] next event in 184ms, waiting
09[MGR] checkout IKEv2 SA with SPIs c7fdef6e163f293a_i 8e5d1a9aaf12f106_r
09[MGR] IKE_SA checkout not successful
01[JOB] got event, queuing job for execution
01[JOB] next event in 287ms, waiting
11[MGR] checkout IKEv2 SA with SPIs c7fdef6e163f293a_i 8e5d1a9aaf12f106_r
11[MGR] IKE_SA checkout not successful
..........................................................................
..........................................................................
03[JOB] IKE_SA to rekey not found
When I use old Strongswan 5.3 (with old rekey scheme), I don't have such
problem.
All config files are in attachments.
Sincerely,
Yuri Gutnikov
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170803/4be6b338/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: responder_charon.log.gz
Type: application/gzip
Size: 10786 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170803/4be6b338/attachment-0004.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: responder_configs.tar.bz2
Type: application/x-bzip
Size: 15301 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170803/4be6b338/attachment-0005.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: initiator_configs.tar.bz2
Type: application/x-bzip
Size: 15305 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170803/4be6b338/attachment-0006.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: initiator_charon.log.gz
Type: application/gzip
Size: 11690 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170803/4be6b338/attachment-0007.bin>
More information about the Users
mailing list