Hi Shu, > 1. Can you help to explain how the IDi value is passed to Ike_auth.c's > build_i function?
As can be seen in the code, this value is contained in an auth_cfg_t object (line 420 of that file in the current master). If you use the default configuration backend (i.e. ipsec.conf) this value is read from the leftid/leftid2 options in the stroke plugin (stroke_config.c). > 2. During Ipsec negotiation, if there is no IPSec SA assigned, will > the IKE tunnel removed in this case? You mean if no CHILD_SA gets established successfully? That can be configured with the charon.close_ike_on_child_failure option in strongswan.conf (which defaults to no, i.e. IKE_SAs are not closed by default). > 3. Doe current implementation support both IPv4 and IPv6 address (dual > address)? Yes. Regards, Tobias _______________________________________________ Dev mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/dev
