[strongSwan] terminate a partial connection

Modster, Anthony Anthony.Modster at Teledyne.com
Sat Mar 11 00:54:10 CET 2017


Hello

? how to terminate a partial connection

We're using VICI "initiate" to start the connection,
but we change the gateway address so the host would not connect.

Charon continuously retries to reach the gateway.

cant reach gateway, IP is invalid for fault injection test
2017 Mar 10 22:01:50+00:00 wglng-2249 charon [info] 16[IKE] retransmit 1 of request with message ID 0
2017 Mar 10 22:01:50+00:00 wglng-2249 charon [info] 16[NET] sending packet: from 192.168.1.253[500] to 76.232.248.220[500] (304 bytes)
2017 Mar 10 22:01:57+00:00 wglng-2249 charon [info] 07[IKE] retransmit 2 of request with message ID 0
2017 Mar 10 22:01:57+00:00 wglng-2249 charon [info] 07[NET] sending packet: from 192.168.1.253[500] to 76.232.248.220[500] (304 bytes)
2017 Mar 10 22:02:10+00:00 wglng-2249 charon [info] 14[IKE] retransmit 3 of request with message ID 0
2017 Mar 10 22:02:10+00:00 wglng-2249 charon [info] 14[NET] sending packet: from 192.168.1.253[500] to 76.232.248.220[500] (304 bytes)
2017 Mar 10 22:02:34+00:00 wglng-2249 charon [info] 11[IKE] retransmit 4 of request with message ID 0
2017 Mar 10 22:02:34+00:00 wglng-2249 charon [info] 11[NET] sending packet: from 192.168.1.253[500] to 76.232.248.220[500] (304 bytes)
2017 Mar 10 22:03:16+00:00 wglng-2249 charon [info] 06[IKE] retransmit 5 of request with message ID 0
2017 Mar 10 22:03:16+00:00 wglng-2249 charon [info] 06[NET] sending packet: from 192.168.1.253[500] to 76.232.248.220[500] (304 bytes)
2017 Mar 10 22:04:31+00:00 wglng-2249 charon [info] 15[IKE] giving up after 5 retransmits
2017 Mar 10 22:04:31+00:00 wglng-2249 charon [info] 15[IKE] peer not responding, trying again (2/0)
2017 Mar 10 22:04:31+00:00 wglng-2249 charon [info] 15[IKE] IKE_SA sgateway1-gldl[1] state change: CONNECTING => CREATED

I tried to terminate using "swanctl -t --child sgateway1-gldl".
But the error returned was it could not find the connection to terminate.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170310/d5292bcb/attachment.html>


More information about the Users mailing list