[Swan] Tunnels coming establishing and dropping quickly

Paul Wouters paul at nohats.ca
Thu May 18 15:30:13 UTC 2017


On Thu, 18 May 2017, Madden, Joe wrote:

> We ended up narrowing it down to a configuration where leftsubnets is used with more than one subnet - Libreswan and Strongswan doesn't like it

Likely because strongswan uses/expects CREATE_CHILD_SA and libreswan is
using individual IKE SA's.

Your best bet is to wait for 3.21 to be released. Or try one of the
release candidates we are trying to get out this/next week.
(or git master)

Paul




More information about the Swan mailing list