The output of `ipsec showstates` is:
000 #5: "MYCONN-ikev2-cp"[3] 94.253.211.1:4500
STATE_V2_ESTABLISHED_IKE_SA (established IKE SA); EXPIRE in 25923s;
newest ISAKMP; idle;
000 #9: "MYCONN-ikev2-cp"[3] 94.253.211.1:4500
STATE_V2_ESTABLISHED_CHILD_SA (established Child SA); EXPIRE in 28737s;
newest IPSEC; eroute owner; isakmp#5; idle;
000 #9: "MYCONN-ikev2-cp"[3] 94.253.211.1 [email protected]
[email protected] [email protected] [email protected] Traffic:
ESPin=396KB ESPout=23MB ESPmax=0B
What is the problem?
The Child SA is renegotiated every about 5 minutes despite saying EXPIRE
in 28800 s.
This renegotiation causes Internet TV to pause, requiring manual
intervention, and I suspect it could severe AnyDesk remote desktop used
by our accounting. Is there a workaround for this?
Kind regards,
Mirsad
--
Mirsad Goran Todorovac
CARNet sistem inženjer
Grafički fakultet | Akademija likovnih umjetnosti
Sveučilište u Zagrebu
--
CARNet system engineer
Faculty of Graphic Arts | Academy of Fine Arts
University of Zagreb, Republic of Croatia
tel. +385 (0)1 3711 451
mob. +385 91 57 88 355
_______________________________________________
Swan mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan
