Project

General

Profile

Actions

Bug #4686

closed

Rekeyed SAs are not properly removed

Added by Florian Apolloner almost 9 years ago. Updated over 8 years ago.

Status:
Resolved
Priority:
Normal
Category:
IPsec
Target version:
Start date:
05/07/2015
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.2.x
Affected Architecture:

Description

I am getting weird behaviour on some IPSec connections since 2.2.2. It looks as if CHILD_SA are not cleaned up which sometimes seems to break the connection completely (ie no traffic flow, but connection still seen as up by pfsense). I can imagine that this is a StrongSwan problem itself (ie due to the 5.3 upgrade), but I am not really sure which modifications pfsense did… Any ideas which loglevels to increase etc?


Files

Selection_001.png (147 KB) Selection_001.png Florian Apolloner, 05/07/2015 03:24 PM
child_sa.jpg (185 KB) child_sa.jpg Ivo B, 05/19/2015 02:42 AM
Actions

Also available in: Atom PDF