[strongSwan] Query on Child SA Creation

2010-04-21 Thread shyamsundar.purkayastha
Hi I have a query on Child SA creation. I have a ipsec.conf configuration which has two very similar configurations listed .The only difference between them is the protocol (leftprotoport). Here is my ipsec.conf entry with the two configurations conn 211TO60Tunnel

Re: [strongSwan] Query on Child SA Creation

2010-04-21 Thread Martin Willi
Hi, But I actually wanted this as a separate SA which can be enabled disabled separately. You can initiate/terminate specific CHILD_SAs using curly brackets, e.g. ipsec down connxy{}. And just wanted to know what is the criteria for deciding that a config should be a child of another one ?