[strongSwan] can update the ike/esp proposal during the reking process.

2011-04-25 Thread 张元玄
Hi all 1. Can I update the proposals used a SA. for example: I setup a sa used the proposal as following and start the connection ike=3des-md5-modp1024! can I change the proposal to the other without stopping the connection. ike=3des-md5-modp2048! use the ipsec update or reload, can finish th

Re: [strongSwan] Windows Vista/7 issue

2011-04-25 Thread Nickola Kolev
Hello guys, On Thu, 21 Apr 2011 16:24:48 +0300 Nickola Kolev wrote: : Here's the problem: : : When a Windows Vista or 7 connects as a client, the connection is dropped after one hour : (sometimes more, but usually exactly one hour). I can't believe that I'm (almost) the only one with that pro

[strongSwan] How to deal with intermittent connection problems?

2011-04-25 Thread Andreas Ntaflos
Hi, at one of our sites we are experiencing intermittent connection problems thanks to our ISP (hosts unreachable, timeouts, etc). This has been going on for weeks now and it affects the stability of our established IPSec tunnels to client sites. We are using StrongSwan 4.3.2 on Ubuntu 10.04.