[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: isakmpd: phase-1 SA hangs around after DELETE received ... clients on a dial up - line down/up then reconnect fail...



...
> why on earth is the SA phase-1 hanging around.... it does NOT happen with
> PGPNet 7.03 (onnecting via aggressive mode, ufqd, acquire virtual id)...

Check the timeout values for that phase-1 SA, either later on in the
report, or via the debug output, and calculate back when it was generated.
I.e is it a brand new phase-1 SA with the same data, or the old one still
hanging around?

/H

--
Håkan Olsson <ho@crt.se>        (+46) 708 437 337     Carlstedt Research
Unix, Networking, Security      (+46) 31 701 4264        & Technology AB