[strongSwan] why multiple SAs for one peer?

Tobias Brunner tobias at strongswan.org
Wed Nov 18 11:53:13 CET 2020


Hi Victor,

> What's the reason for strongSwan to create (sometimes) multiple SAs for
> a single peer?

Could be a misconfiguration, like combining trap policies with
reauthentication (see [1]).  Without the information Noel requested we
really can't tell more, though.

Regards,
Tobias

[1] https://wiki.strongswan.org/projects/strongswan/wiki/ExpiryRekey


More information about the Users mailing list