Project

General

Profile

Issue #3453

Retransmission timeouts

Added by Jiri Zendulka 12 days ago. Updated 11 days ago.

Status:
Closed
Priority:
Normal
Category:
configuration
Affected version:
5.5.3
Resolution:
No change required

Description

Hello,

Is it any possibility to set "retransmit_timeout" indepedently for each ipsec tunnel (as DPDtimeout settings for IKEv1)? As I found at https://wiki.strongswan.org/projects/strongswan/wiki/Retransmission "retransmit_timeout" is only global settings.

I am wondering why DPDtimeout does not work for IKEv2. IKEv2 SA is deleted after "retransmit_timeout" only.

Many thanks.

History

#1 Updated by Tobias Brunner 11 days ago

  • Status changed from New to Feedback

Is it any possibility to set "retransmit_timeout" indepedently for each ipsec tunnel (as DPDtimeout settings for IKEv1)?

No, currently not.

I am wondering why DPDtimeout does not work for IKEv2. IKEv2 SA is deleted after "retransmit_timeout" only.

Because every exchange acts as DPD in IKEv2.

#2 Updated by Jiri Zendulka 11 days ago

OK, thanks a lot. You can close the issue.

#3 Updated by Tobias Brunner 11 days ago

  • Category set to configuration
  • Status changed from Feedback to Closed
  • Assignee set to Tobias Brunner
  • Resolution set to No change required

Also available in: Atom PDF