Mihai, 

I'm getting this behavior too, between strongswan and a
cisco device. The rekey is been doing every 20 seconds. 

Which one was
the "remote peer" you referred? Did you disabled DPD on strongswan with
dpdaction=none ? 

I did this but it doesn't solved. 

Em 2013-11-05
14:33, Mihai Maties escreveu: 

> On Thu, Oct 24, 2013 at 4:43 PM, Mihai
Maties <[email protected]> wrote:
> 
>> One issue that I noticed so far, is
that while on Juniper the tunnels seem stable (i.e. rekeying occurs only
when the SAs are about to expire), on strongSwan some tunnels go down
after a short while. According to the logs, the other peer is actually
triggering the deletion of SAs.
> 
> After disabling dead peer detection
on the remote peer the tunnels seem stable. Are there any known issues
with DPD between strongSwan and Juniper devices? Their end is running
JunOS 10.4S5.2. 
> 
> Best regards, 
> Mihai 
> 
>
_______________________________________________
> Users mailing list
>
[email protected]
>
https://lists.strongswan.org/mailman/listinfo/users [1]

-- 




Links:
------
[1] https://lists.strongswan.org/mailman/listinfo/users
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to