[strongSwan] Sa not getting deleted

Tobias Brunner tobias at strongswan.org
Thu Jan 17 14:33:21 CET 2019


Hi Naveen,

> I see an issue where, when I unload a connection from the vici API, and
> reload a connection, the old Sa's are not getting deleted immediately,
> but I see a soft expire or 3077(sec).

Why should it?  Unless you have a start_action configured (which is
reversed if a config is unloaded/replaced), config changes don't
directly affect established SAs.

Regards,
Tobias


More information about the Users mailing list