sorry for my wrong expression.

I mean that I setup a connection,
the sequence of message is following.


1. IKE_SA_INIT
2. IKE_SA_INIT
3. IKE_AUTH
4. IKE_AUTH

when the connection was rekeyed,
*I found the sequence of strongswan  is like this, w*hich will lost the
tunnel for a while.
to delete the exist connection

1. INFORMATIONAL (deleting IKE_SA)
2. INFORMATIONAL (deleting IKE_SA confirm)
to setup a new connection

3. IKE_SA_INIT
4. IKE_SA_INIT
5. IKE_AUTH
6. IKE_AUTH

but rfc 4306 is defined as this.
to setup a new connection

1. IKE_SA_INIT
2. IKE_SA_INIT
3. IKE_AUTH
4. IKE_AUTH
to delete the old one.

5. INFORMATIONAL (deleting IKE_SA)
6. INFORMATIONAL (deleting IKE_SA confirm)

I just want to know, the log which i got from strongswan is right or not.
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to