(racoon 835) Problems with racoon and generate_policy on
Joerg Platte <[email protected]> Sat, 23 Oct 2004 12:15:28 +0200
| Newsgroups | gmane.network.ipv6.kame.racoon |
|---|---|
| Message-ID | <[email protected]> |
Hi! I have a problem using linux kernel 2.6 and racoon 0.3.3 in a roadwarrior setup. The server is configured to generate the policy for the roadwarrior using "generate_policy on;". This works as expected for the first time. The lifetimes for the ISAKMP-SA is one minute and for the IPsec-SA 5 minutes (for testing purposes). After approx. 4 minutes both a new ISAKMP-SA and a new IPsec-SA are negotiated. But racoon does not generate a new or update the old policy. Therefore, the policy is deleted with the old and no longer valid IPsec-SA. This results in NO policy on the server and therefore a secure connection is no longer possible. How can I configure racoon to generate either a persistant policy or to alter the lifetime of the existing policy? regards, Joerg