[prev in list] [next in list] [prev in thread] [next in thread] 

List:       strongswan-users
Subject:    Re: [strongSwan] INITIAL_CONTACT notify issue
From:       yordanos beyene <yordanosb () gmail ! com>
Date:       2013-09-19 17:51:44
Message-ID: CANosSwFnP5qYKVzUNAVDjzkKgmwc4FB_Oh7cw4=Wayd+WgiNmw () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Thank you very much Martin for clarifying how it works.

Jordan.

On Thu, Sep 19, 2013 at 12:07 AM, Martin Willi <martin@strongswan.org>wrote:

> Hi,
>
> > The old IKE_SA got deleted when the new and old IKE_SA use the same
> leftid
> > and rightid. The old IKE_SA did not get deleted when rightid is
> different.
>
> This is the intended behavior we have implemented in strongSwan.
>
> RFC 5996 says:
>
> > The INITIAL_CONTACT notification asserts that this IKE SA is the only
> > IKE SA currently active between the authenticated identities.
>
> Regards
> Martin
>
>

[Attachment #5 (text/html)]

<div>Thank you very much Martin for clarifying how it works.</div>
<div> </div>
<div>Jordan.<br><br></div>
<div class="gmail_quote">On Thu, Sep 19, 2013 at 12:07 AM, Martin Willi <span \
dir="ltr">&lt;<a href="mailto:martin@strongswan.org" \
target="_blank">martin@strongswan.org</a>&gt;</span> wrote:<br> <blockquote \
style="BORDER-LEFT:#ccc 1px solid;MARGIN:0px 0px 0px 0.8ex;PADDING-LEFT:1ex" \
class="gmail_quote">Hi,<br> <div class="im"><br>&gt; The old IKE_SA got deleted when \
the new and old IKE_SA use the same leftid<br>&gt; and rightid. The old IKE_SA did \
not get deleted when rightid is different.<br><br></div>This is the intended behavior \
we have implemented in strongSwan.<br> <br>RFC 5996 says:<br><br>&gt; The \
INITIAL_CONTACT notification asserts that this IKE SA is the only<br>&gt; IKE SA \
currently active between the authenticated identities.<br><br>Regards<br><span \
class="HOEnZb"><font color="#888888">Martin<br> \
<br></font></span></blockquote></div><br>



_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

[prev in list] [next in list] [prev in thread] [next in thread]