On Wed, May 09, 2012 at 06:02:23PM +0200, Tobias Brunner wrote: > > It looks like charon does not use the updated IP address for path checking, > > nor does it resolve the peer's name again, which would also have provided > > the > > updated address. > > Please try the attached patch (should apply to 4.6.3) which uses the > source address of the current message instead of the cached address on > the IKE_SA.
With your patch applied, I can now change the external IP addresses of both gateways - the tunnel remains available as long as the current IKE SA is kept. Thanks, Mirko _______________________________________________ Dev mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/dev
