> Hi Emeric, > >> To be more specific: >> - what happens exactly if it is enabled only on one side? > > It only has an effect on the peer that initiates the reauthentication. > Enabling it on a host that's always responder has no effect at all.
What happens on strongSwan>=5.3.0 if the peer that has the make-before-break option set initiates the reauthentication first? Regards, Emeric