[strongSwan] bring up only IKE SA and not ipsec child SA

Tobias Brunner tobias at strongswan.org
Mon May 8 08:17:46 CEST 2017

Previous message: [strongSwan] bring up only IKE SA and not ipsec child SA
Next message: [strongSwan] split tunneling on android 5 & 7 (maybe 6) : no more access to "internet" when vpn launched
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi Justin,

> Is it possible to bring up only an IKE SA (and not any associated child ipsec
> SA)?

No, strongSwan currently doesn't support RFC 6023 [1].

Regards,
Tobias

[1] https://tools.ietf.org/html/rfc6023

Previous message: [strongSwan] bring up only IKE SA and not ipsec child SA
Next message: [strongSwan] split tunneling on android 5 & 7 (maybe 6) : no more access to "internet" when vpn launched
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the Users mailing list