Hi,
inside the function ikev2_ikesa_enable the atribute sa_eapid should
be copied to the new sa.
Regards,
Bernardo

Index: ikev2.c
===================================================================
RCS file: /cvs/src/sbin/iked/ikev2.c,v
retrieving revision 1.203
diff -u -p -r1.203 ikev2.c
--- ikev2.c     27 Mar 2020 12:20:48 -0000      1.203
+++ ikev2.c     27 Mar 2020 13:11:28 -0000
@@ -3860,7 +3860,10 @@ ikev2_ikesa_enable(struct iked *env, str
                nsa->sa_tag = sa->sa_tag;
                sa->sa_tag = NULL;
        }
-
+       if (sa->sa_eapid) {
+               nsa->sa_eapid = sa->sa_eapid;
+               sa->sa_eapid = NULL;
+       }
        log_debug("%s: activating new IKE SA", __func__);
        sa_state(env, nsa, IKEV2_STATE_ESTABLISHED);
        ikev2_enable_timer(env, nsa);

Reply via email to