[Swan] Addresspool code and "replace SA" versus "delete+add SA"

Paul Wouters paul at nohats.ca
Mon Mar 11 03:27:58 EET 2013


On Sun, 10 Mar 2013, D. Hugh Redelmeier wrote:

> Subject: Re: [Swan] Addresspool code and "replace SA" versus "delete+add SA"
> 
> | From: Paul Wouters <paul at nohats.ca>
>
> | When the same user (as identified by phase1 / cert) comes back while it
> | was still connected according to the server, it will receive a new IP
> | address.
>
> Why does libreswan give it a new IP address rather than the old one?

It would be better to give it back its old one. Although there might be
corner cases.

Paul


More information about the Swan mailing list