[strongSwan] IKEv2 retransmission of Android app

Tobias Brunner tobias at strongswan.org
Wed Feb 15 12:19:22 CET 2017


Hi Piotr,

> But how can I control this on Android? Is it hardcoded somewhere? If
> yes, can somebody help me and point me to the right direction?

See [1] or [2].

> I'm trying to use OTP to authenticate IKEv2. So far, so good, but the
> main issue is to maintain the tunnel as long as possible - I don't want
> to put my OTP every time I loss of coverage occurs.

Why would that cause the IKE_SA to get reestablished?  MOBIKE should
take care of that, that is, there shouldn't be any packets sent and,
therefore, no retransmits while connectivity is down.  And afterwards
the existing SAs should simply get updated via MOBIKE.

Regards,
Tobias



More information about the Users mailing list