On Tue, Dec 02, 2008 at 01:09:23PM +0100, Rene Mayrhofer wrote:

> > charon: 08[IKE] reauthenticating IKE_SA due address change
> That's the first time I am reading this message. Hmm...

So am I. I never see it on the other machines. I have a look
into source: this is output of roam() function calling when
interface changed to renew connection. That is "mobike" feature.
I have there ppp interface as default route, but it never
changes as well as other interfaces. More over, when setting
mobike = no charon try to send message to internal interface of
its remote peer belonging to rightsubnet through out the
default gate.  This is nonsense. It is not accessible this way,
only via  tunnel. This is certainly bug, a hard bug.

I think, You should upgrade it to 4.2.9 version. There are
many fixes.

> > If this means ip address then it is not true: no address changed. I have
> > tried to reproduce this situation on the virtual machines with most close
> > network configuration without success. Changing interfaces and firewall and

> Can you reproduce this problem on another set of machines as well?

Do You read this few lines above? I can not. I have tried to do
so on virtual (kvm) machines with network configuration as close
as possible to real situation including ppp as default route.
But there are no such problem: vpn work in any configurations.

-- 

*********************************
****   Vladimir Stavrinov  ******
*******   [EMAIL PROTECTED]   *********
*********************************




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to