[strongSwan] forcing local termination

Modster, Anthony Anthony.Modster at Teledyne.com
Wed Jan 15 20:35:11 CET 2020


Which parameter controls the below ?

New options for vici<https://wiki.strongswan.org/projects/strongswan/wiki/Vici>/swanctl<https://wiki.strongswan.org/projects/strongswan/wiki/Swanctl> allow forcing the local termination of an IKE_SA. This might be useful in situations where it's known the other end is not reachable anymore, or that it already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would be pointless. Waiting only a certain amount of time for a response (i.e. shorter than all retransmits would be) before destroying the IKE_SA is also possible by additionally specifying a timeout in the forcedtermination request.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20200115/1225a577/attachment.html>

More information about the Users mailing list