[strongSwan] Duplicate IKE_SA?

Michael Schwartzkopff ms at sys4.de
Mon Jun 1 19:57:00 CEST 2020

On 01.06.20 19:23, Noel Kuntze wrote:
> Hello Michael,
> It might be that both sides use auto=route or auto=start and initiated in parallel and uniqueids=no is set, so duplicate SAs are not deleted.
> That is pure speculation though. ;)
> Kind regards
> Noel

side A has auto=start and reauth=no

side B had auto=route and rekey=no

From the logs that I have, I see that only side B starts negotiation.
But perhaps side A also started from the beginning. I don't have the logs.

Mit freundlichen Grüßen,


[*] sys4 AG
https://sys4.de, +49 (89) 30 90 46 64
Schleißheimer Straße 26/MG,80333 München
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief
Aufsichtsratsvorsitzender: Florian Kirstein

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20200601/fc8385ed/attachment.sig>

More information about the Users mailing list