Thanks, I initiate the "terminate" command to clear the IKE connection.
This command will tear down the SAs as well. But there is retries mechanism
to tear down SA. When issued "terminate", I would like delete immediately
instead of going through retries mechanism.
Thanks,
Rajeev
On Fri, Apr 27, 2018 at 5:08 PM, Phil Frost wrote:
> Does dpdaction=clear do what you need?
>
>
> On Fri, Apr 27, 2018, 10:11 rajeev nohria wrote:
>
>> I am using Strongswan5.5.0 and using Davici interface. Is there way (any
>> options) to delete the SA immediately if peer goes down instead of going
>> through retries?
>>
>> Any help is appreciated. I could not find anything so far..
>>
>> Thanks,
>> Rajeev
>>
>