[strongSwan] ikev2: Tunnel established inspite of different phase 2 DH group

Tobias Brunner tobias at strongswan.org
Thu Apr 2 17:54:47 CEST 2020

Hi Makarand,

> Is there a way I can force a CHILD_SA delete when the Proposal mismatch occurs?

No, but plugins can listen for alerts of type
ALERT_PROPOSAL_MISMATCH_CHILD, which is also possible via error-notify
plugin [1].


[1] https://wiki.strongswan.org/projects/strongswan/wiki/ErrorNotifyPlugin

More information about the Users mailing list