On 28.10.2016 10:28, Joe O wrote: > “Deleting half open IKE_SA after timeout message”
I don't see that message in the log you posted. It generally means that the other peer did not respond to an IKE message when it should have. You should add "fragmentation=yes" to all conns (or add it to a conn that you include in all others) to avoid problems with UDP fragmentation. -- Mit freundlichen Grüßen/Kind Regards, Noel Kuntze GPG Key ID: 0x63EC6658 Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
