[strongSwan] ikev2: Tunnel established inspite of different phase 2 DH group

Tobias Brunner tobias at strongswan.org
Thu Apr 2 10:45:38 CEST 2020

Hi Makarand,

> Is the system behaving correctly? i.e. the DH group is used only during reneg after expiry of lifetime?

Yes, see [1].


[1] https://wiki.strongswan.org/projects/strongswan/wiki/ExpiryRekey#IKEv2

More information about the Users mailing list