[strongSwan] Multiple SAs immediately after connection

2016-09-29 Thread Tom Rymes
I have occasionally seen this over the years, and I am not certain if it’s anything I should be concerned about. If I start a tunnel named mytunnel, this is what it looks like on the CLI: [root@mainoffice ~]# ipsec up mytunnel received packet: from XXX.XXX.XXX.XXX[4500] to YYY.YYY.YYY.YYY[4500]

Re: [strongSwan] Strongswan MOBIKE support

2016-09-29 Thread Tobias Brunner
Hi Amit, > Here I expect client to send UPDATE_SA_ADDRESS notification for new IP > address 85.1.96.159 before actually start using this new IP address. > However, client start sending DPD messages using new IP > to which CISCO GW is not responding (As GW is not aware of new IP > address) And