ikev2: Only request reauth during IKE_AUTH if active reauth is not possible

If we can initiate the reauthentication ourselves, there is no reason to
explicitly request the peer to do so (at basically the same time).
This commit is contained in:
Tobias Brunner committed 2021-08-24 14:31:55 +02:00
1 parent 0d373e25e0
commit 23e46ea5ab
12 files changed
+62 -39

No files matched your search

@@ -4,6 +4,8 @@ connections {
local_addrs = PH_IP_CAROL
remote_addrs = PH_IP_MOON
vips = 0.0.0.0
# short lifetimes for testing purposes
reauth_time = 20s
over_time = 10s
@@ -3,6 +3,8 @@ connections {
rw {
local_addrs = PH_IP_MOON
pools = rw
# short lifetimes for testing purposes
reauth_time = 60m
over_time = 10s
@@ -28,3 +30,9 @@ connections {
proposals = aes128-sha256-x25519
}
}
pools {
rw {
addrs = 10.3.0.0/24
}
}