[strongSwan] Data transfer stops
    Tobias Brunner 
    tobias at strongswan.org
       
    Mon Aug  7 11:03:45 CEST 2017
    
    
  
Hi Yuri,
> I've used lifetimes from my first mail.
That seems unlikely as the last logs show that the two peers rekey the
CHILD_SAs immediately after they got established.  With lifetime=2m and
margintime=20s, and the default rekeyfuzz=100% the rekeyings should
happen randomly between 80 and 100 seconds after a CHILD_SA got
established (see [1]).
Regards,
Tobias
[1]
https://wiki.strongswan.org/projects/strongswan/wiki/ExpiryRekey#ipsecconf-Formula
    
    
More information about the Users
mailing list