[strongSwan] multiple traffic selectors per child_sa

Volodymyr Litovka doka.ua at gmx.com
Wed Oct 3 09:11:43 CEST 2018

Hi Marco,

just FYI: if you've hit this problem with Cisco - then there is an issue 
with both ASA and IOS models: 

On 5/11/18 1:10 PM, Marco Berizzi wrote:
> Hello everyone,
> Kindly I would like to ask, if there is a way to
> know if a remote IKEv2 peer supports multiple
> traffic selectors per CHILD_SA.
> For example strongswan is going to log this kind
> of message when tfc is not supported by the other
> IKEv2 peer:
> received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding

Volodymyr Litovka
   "Vision without Execution is Hallucination." -- Thomas Edison

More information about the Users mailing list