[Swan-dev] IKEv2 nhelpers == 0 failures

Antony Antony antony at phenome.org
Fri May 30 21:59:25 EEST 2014


Good catch!

On Fri, May 30, 2014 at 03:34:34AM -0400, D. Hugh Redelmeier wrote:

> The fix should be that responder state transitions set an event at the 
> limit of their patience for the next Initiator message.  What event?  
> Probably a new one so that an appropriate message is logged "v2 responder
> got tired of waiting for the next message and will declare failure". 

some of the SMC entries, e.g STATE_PARENT_R1,
have timeout_event = EVENT_SA_REPLACE. So I imagined that will take care.

the timeout could be
maximum_retransmissions_initial + event_retransmit_delay_0 * maximum_retransmissions 

-antony


More information about the Swan-dev mailing list