Hi,
Try use "uniqueids = never"
Noel Kuntze <[email protected]> написал(а):
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>Hello,
>
>Is there a solution for this problem? I'm experiencing this myself at
>the moment and am in need of a solution for this problem.
>
>Regards,
>Noel
>
>Am 09.05.2013 00:43, schrieb Andreas Ntaflos:
>> On 2013-05-03 10:36, Gerald Richter - ECOS wrote:
>>> Hi,
>>>
>>> during the debugging of IKEv1 rekeying I found out that the old
>>> IKE_SA gets deleted before the new on is fully established.
>> [...]
>>> So from my point of view the local deletion of the ike_sa needs
>>> to be delayed after the new ike_sa is fully established.
>>>
>>> Any comments?
>>
>> Hi,
>>
>> I can't comment much except that I believe I am seeing the same
>> problem. StrongSwan 5.0.3 with IKEv1 against a Cisco ASA (over
>> which I have no control at all).
>>
>> I tried setting "uniqueids = no" (as per the previous discussions
>> on the topic) but that doesn't seem to help much.
>>
>> In the logs this looks like this with "uniqueids = no":
>> http://pastie.org/pastes/7820117/text?key=rdfidtfi8cogiglommtoq
>>
>> With "uniqueids = yes":
>> http://pastie.org/pastes/7820136/text?key=rmcgqev4atibcsjipf5rfw
>>
>> In both cases I have to do "ipsec up theconnection" to start it
>> again.
>>
>> Andreas
>>
>>
>>
>> _______________________________________________ Users mailing list
>> [email protected]
>> https://lists.strongswan.org/mailman/listinfo/users
>>
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v2.0.20 (GNU/Linux)
>Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
>iQIcBAEBAgAGBQJR2KZFAAoJEDg5KY9j7GZYvBEP/2RxvVqvh5ov64zrGR6QQGn/
>Hnr4pkGnt42izcn1/XkWBxeoibcoAGv1Y+u+3oIZynRje731IQhvjDUCH4qgkqJ0
>tBa1KxnB5kD/os0H3R/IFHlVedVc7OPr2K9IjE/UwtQpU3LHDWyr0ji+f/U6H+Gv
>PnXU7xT8wfQu9fZr/eMGdl3NyUauiXi3YEahwY+i8kG4JTbG0TsfiyU/GqoNktwA
>OYfeGPcIzGPYxYMTp2xnCf8xi4U5Es6Wv5PXCnbwRSTP5EUzFDiEXxWMwVGnCunc
>yTWEMgWXnOpnYFk1gdGbOWZeHGrJyjiLE1SXjNsR0HtBa9LGgvSy/hB5GH6rOZQj
>Xp6DHQgIKqLIkIkalj6ykwHcut5L1OR3EExT7Zveoo9OnWDUNAcNGh+r0WDHLHtY
>tX0LA8Y3LyQe3Rv/dxG1nQD9UzVvT/cuigkXrRloS01Sc4vDGHlBt03GuqYZ5vHH
>QTkiigfopSaNJ3Rf43I1aqei9rAhqLt2hDYUoNIkfn3I2+VBNy2ydqLyVslGnWiH
>3jcCaZYYnm3RWiqD5uHt8/rk3I3/UWtiJTvV7q0Bd1aGi8htU1zymLCYPrMpSFzT
>iR1xdnavjZaAwVkIzGWIS/k7H8sVYzIiyCNU8GuvW2atBk9bPaOB3X5jKsSRjP3W
>+eSMyo3kzEiE6otf5dmr
>=T8U4
>-----END PGP SIGNATURE-----
>
>_______________________________________________
>Users mailing list
>[email protected]
>https://lists.strongswan.org/mailman/listinfo/users
--
Sent from my Android phone with K-9 Mail. Please excuse my brevity.
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users
