[Swan] multiple child SA

Mehboob Ansari mehboob.ansari at wavenetcorp.com
Fri Sep 4 07:43:27 UTC 2020

Hi Team Libreswan, 

Please provide information on how to use below parameters in Ipsec. 

1. extended sequence number (esn ) 
2. IPsecRekeylifetimeTime. 
3. PLMNID in IKESA Table, how to validate it. 

It would be lifesaver If you can share any working Ipsec.conf file containing above parameters. 


Mehboob Ansari 

From: "Mehboob Ansari" <mehboob.ansari at wavenetcorp.com> 
To: "swan" <swan at lists.libreswan.org> 
Sent: Monday, August 10, 2020 6:20:35 PM 
Subject: multiple child SA 

Hi team libreswan, 

Hope you all are doing good. 

I am doing some ipsec related configuration via libreswan and got stuck on one scenario. 

Can you please guide me how i can make 2 or more IPSEC CHILD SA which sharing one IKE SA. 

means : I need IKE SA: total 1) 

and IPSEC SA : total(2) 

please help me out. 

Thanks in advance. 

Mehboob Ansari 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20200904/6729e2f9/attachment.html>

More information about the Swan mailing list