[strongSwan] how to increase timeout for "deleting half open IKE_SA with <someIP> after timeout" ?

[Harald Dunkel]

On 5/14/21 9:21 PM, Thomas Egerer wrote:
> 
> What you're looking for is not a part of the swanctl.conf or ipsec.conf. It's part
> of the strongswan.conf (/etc/strongswan.conf) and documented at [1]. Use
> the keyword 'half_open_timeout' in the 'charon' section:
> 
> <snip>
> charon {
> 	half_open_timeout = 42
> }
> <snap>
> 

Found it, thanx very much

Harri