Martin Willi schrobtete: >> have experienced a growing number of queued IKE_INIT and IKE_NATD (one >> task for every reset of the ike_sa to be precise). > > Hm, not obvious to me why this happens, as these tasks should have gone > if we received the IKE_SA_INIT response. I'll have to test that. Behold ;), the peer is unreachable, I should have mentioned this. So each single time the ike_sa is restarted, it gets another two tasks queued that aren't removed since the response of the peer is not received.
Thomas _______________________________________________ Dev mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/dev
