[strongSwan] make before break and default activation

Emeric POUPON emeric.poupon at stormshield.eu
Tue Jul 18 11:37:39 CEST 2017


Hello,

We are wondering why the make before break option is not enabled by default?
As far as I understand, it seems that the option does not prevent reauthentication if used with a remote peer that does not have it.

To be more specific:
- what happens exactly if it is enabled only on one side?
- what happens with other IKEv2 implementations?

Regards,

Emeric




More information about the Users mailing list