[strongSwan] Lots of reconnections for a rekey/reauth, and packet drops

[Hoggins!]

Hello Tobias,

Le 05/12/2017 à 15:54, Tobias Brunner a écrit :
> Using auto=start on both ends in combination with uniqueids=yes and
> closeaction=restart is a bad idea.  If a duplicate SA is created and
> that's detected and the duplicate is then closed this deletion will
> again trigger another SA, causing another duplicate and so on.
>
> Regards,
> Tobias
>

I see your point. The thing is now I have removed on both ends the
closeaction=restart.
In addition to that, should I use auto=route on both ends ?

My last experience with auto=route unfortunately showed that it was "not
working", meaning that no matter what I did to try to trigger tunnel
creation by sending traffic to the other peer, the tunnel was never
started automatically, hence the auto=start.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 191 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20171205/be22e529/attachment.sig>