Yes, the charon IKEv2 daemon starts the IPsec SA rekeying at least "rekeymargin" seconds before the expiration of the CHILD_SA. The "rekeyfuzz" parameter is used to randomize the rekeying times.
Regards Andreas tobias.gru...@uni-ulm.de wrote: > Hello, > > is the ike Rekeying also without a break with rekeyfuzz? > so does the tunnel like CHILD_SA rekeying without a break? > > Regards > Tobias ====================================================================== Andreas Steffen andreas.stef...@strongswan.org strongSwan - the Linux VPN Solution! www.strongswan.org Institute for Internet Technologies and Applications University of Applied Sciences Rapperswil CH-8640 Rapperswil (Switzerland) ===========================================================[ITA-HSR]== _______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users
