Hi Chris, > What we are seeing is > the client sending a CREATE_CHILD request around 10 mins before disconnect:
Sounds like [1]. > Phase 1 negotiates with a lifetime of 86400 (24 hours): Lifetimes are not negotiated with IKEv2. > MS doesn't seem to understand what's going on, they > are keying in on the " 2020-04-29 08:07:48.412275 ike > 3:ikev2_vpn_0:109665: request msgid = 23, expected 24" error. Probably just a retransmit. Regards, Tobias [1] https://wiki.strongswan.org/issues/3400
