Tobias, Thanks for the nudge in the right direction. I have narrowed down my proposals to one, and am running a test.
Thanks, Chris. On Thu, May 7, 2020 at 11:15 AM Tobias Brunner <[email protected]> wrote: > Hi Chris, > > > What we are seeing is > > the client sending a CREATE_CHILD request around 10 mins before > disconnect: > > Sounds like [1]. > > > Phase 1 negotiates with a lifetime of 86400 (24 hours): > > Lifetimes are not negotiated with IKEv2. > > > MS doesn't seem to understand what's going on, they > > are keying in on the " 2020-04-29 08:07:48.412275 ike > > 3:ikev2_vpn_0:109665: request msgid = 23, expected 24" error. > > Probably just a retransmit. > > Regards, > Tobias > > [1] https://wiki.strongswan.org/issues/3400 >
