[Openswan Users] netkey -- klips
h.scharf at nestec.at
Wed Apr 25 08:36:16 EDT 2007
Any idea what this could be?
I have an ipsec tunnel with one side on KLIPS and NETKEY on the other
Sometimes (twice a week), the tunnel breaks and the vpn subnet could not
be reached from
When I make an ipsec auto -up conn-name then I get an
117 "conn-name" #701: STATE_QUICK_I1: initiate
004 "conn-name" #701: STATE_QUICK_I2: sent QI2, IPsec SA established
So, I think, the tunnel is not really down. It seems, that the vpn
systems may use
different quick mode states. Could this be a timing problem on rekeying?
I did not set specific timing values in my cons, so the netkey and
The klips config are running with defaults for ike/ipsec lifetime.
When this is a timing problem, why does this not happen in a "pattern"
NESTEC - Die IT Security & Messaging Distribution mit Personlichkeit
GFi Software - BitDefender - NOD32 - BRICKS ISS - pdfMachine
2X Terminal & ThinClient Solutions -Accunetix
Besuchen sie uns: www.nestec.at
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Users