Re: Interoperation isakmpd and freeswan

isakmpd expects the other side to send a DELETE notification on shutdown. (for example, if you kill(SIGTERM) isakmpd it will send DELETEs to all  peers that it has active tunnels to).

I do not know if FreeS/WAN supports DELETEs, though.

Otherwise, while the old SAs are kept, the kernel should start using the new ones after the (re)negotiation. The old ones will stay around until they expire, but they should not be used anymore. (There has been some work in how the kernel selects SAs, but I do not think this has changed...)

/H

On Fri, 28 Feb 2003, Ralf Hornik wrote:

> Hi all,

--
Håkan Olsson         (+46) 708 437 337     Carlstedt Research
Unix, Networking, Security      (+46) 31 701 4264        & Technology AB