[strongSwan] (Vici) How to disconnect a VPN connection on the server side?

Tobias Brunner tobias at strongswan.org
Tue Oct 15 14:04:22 CEST 2019

Hi Houman,

> What attributes *should* be in the Disconnect-Request beside User-Name? 

None, that's fine.  If you receive a NAK that means no IKE_SA was found
with a matching remote identity.  You should see something like this in
the strongSwan log:

> received RADIUS DAE Disconnect-Request for houman from
> no IKE_SA matches houman, sending Disconnect-NAK


More information about the Users mailing list