[Swan] V3.7 MacOS client problem

[Paul Wouters]

On Tue, 17 Dec 2013, Sven Schiwek wrote:

> I have a problem with the recent version of Mac OS and libreswan 2.7 (Kernel 3.11).
> After some time (approx. 2h) the VPN gets lost. Does anyone know what happened here?

You can try raising the limit with salifetime=24h and ikelifetime=24h.

The client is supposed to rekey in time, but if the libreswan timeout
it shorter then the mac client expects it might not start rekeying yet)

Paul