Re: [strongSwan] Query on Child SA Creation

2010-04-21 Thread shyamsundar.purkayastha
: Martin Willi [mailto:mar...@strongswan.org] Sent: Wednesday, April 21, 2010 11:34 AM To: Shyamsundar Purkayastha (WT01 - Telecom Equipment) Cc: users@lists.strongswan.org Subject: Re: [strongSwan] Query on Child SA Creation Hi, > But I actually wanted this as a separate SA which can be enabled > disable

Re: [strongSwan] Query on Child SA Creation

2010-04-21 Thread Martin Willi
Hi, > But I actually wanted this as a separate SA which can be enabled > disabled separately. You can initiate/terminate specific CHILD_SAs using curly brackets, e.g. ipsec down connxy{}. > And just wanted to know what is the criteria for deciding that a > config should be a child of another on

[strongSwan] Query on Child SA Creation

2010-04-20 Thread shyamsundar.purkayastha
Hi I have a query on Child SA creation. I have a ipsec.conf configuration which has two very similar configurations listed .The only difference between them is the protocol (leftprotoport). Here is my ipsec.conf entry with the two configurations conn 211TO60Tunnel left=10.201.114.2