[strongSwan] Lots of reconnections for a rekey/reauth, and packet drops

Tobias Brunner tobias at strongswan.org
Thu Nov 30 18:16:58 CET 2017


Hi,

Combining reauthentication with closeaction=restart is a bad idea.  Note
that reauth=no does not disable reauthentication if the other peer has
reauth=yes configured, see [1].

Regards,
Tobias

[1]
https://wiki.strongswan.org/projects/strongswan/wiki/ExpiryRekey#IKEv2-Responder-Behavior




More information about the Users mailing list