[strongSwan] How to improve connection loss when moving from 4G to Wifi?

[Houman]

Hi Andreas,

Thank you for your reply.

I am programming the IKEv2 VPN client on iOS myself with the following
settings:

        ikev2.authenticationMethod = NEVPNIKEAuthenticationMethod.none

        ikev2.deadPeerDetectionRate = NEVPNIKEv2DeadPeerDetectionRate.medium

        ikev2.ikeSecurityAssociationParameters.encryptionAlgorithm = .
algorithmAES256

        ikev2.ikeSecurityAssociationParameters.integrityAlgorithm = .SHA256

        ikev2.ikeSecurityAssociationParameters.diffieHellmanGroup = .group14

        ikev2.ikeSecurityAssociationParameters.lifetimeMinutes = 1440

        ikev2.childSecurityAssociationParameters.encryptionAlgorithm = .
algorithmAES256

        ikev2.childSecurityAssociationParameters.integrityAlgorithm = .
SHA256

        ikev2.childSecurityAssociationParameters.diffieHellmanGroup = .
group14

        ikev2.childSecurityAssociationParameters.lifetimeMinutes = 1440

I have searched into MOBIKE and apparently, Apple's NEVPNManager is
supporting MOBIKE. Although it's unclear to me if I have to configure it
separately, or is it functioning out of the box. So far I haven't found
anything in the documentation.


Kind Regards,
Houman


On Sun, 10 Feb 2019 at 13:14, Andreas Steffen <
andreas.steffen at strongswan.org> wrote:

> Hi Houman,
>
> actually the IKEv2 MOBIKE mobility protocol does this automatically.
> Does your IPsec peer (VPN gateway) support MOBIKE since strongSwan
> enables it out of the box?
>
> Regards
>
> Andreas
>
> On 09.02.19 17:50, Houman wrote:
> > Hello,
> >
> > I've set up strongSwan U5.6.2/K4.15.0-43-generic on Ubuntu 18.04. It
> > works very well.
> >
> > However is there any way to improve connection or loss of when moving
> > from cellular 4G to WiFi / WiFi to 4G?
> >
> > I thought that IKEv2 could do that seamlessly?
> >
> > Many Thanks,
> >
>
> --
> ======================================================================
> Andreas Steffen                         andreas.steffen at strongswan.org
> strongSwan - the Open Source VPN Solution!          www.strongswan.org
> Institute for Networked Solutions
> HSR University of Applied Sciences Rapperswil
> CH-8640 Rapperswil (Switzerland)
> ===========================================================[INS-HSR]==
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20190210/5fc341d8/attachment.html>