[Swan-dev] IKEv2 nhelpers == 0 failures
Antony Antony
antony at phenome.org
Fri May 30 21:59:25 EEST 2014
Good catch!
On Fri, May 30, 2014 at 03:34:34AM -0400, D. Hugh Redelmeier wrote:
> The fix should be that responder state transitions set an event at the
> limit of their patience for the next Initiator message. What event?
> Probably a new one so that an appropriate message is logged "v2 responder
> got tired of waiting for the next message and will declare failure".
some of the SMC entries, e.g STATE_PARENT_R1,
have timeout_event = EVENT_SA_REPLACE. So I imagined that will take care.
the timeout could be
maximum_retransmissions_initial + event_retransmit_delay_0 * maximum_retransmissions
-antony
More information about the Swan-dev
mailing list