(racoon 841) Re: Problems with racoon and generate_policy on

Am Montag, 25. Oktober 2004 07:29 schrieb Aidas Kasparas:
Hi!

> Lifetime of generated policy is equal to lifetime of SA negotiated
> (which in your case should be aproximately 4 minutes).

That's OK, if a newly negotiated SA updates the lifetime....

> If you want solution, look at (racoon 631). With patch there your
> generated policies will be regenerated.

I tried the patch but it doesn't work as expected. I got a log of errors like 
the following one:

racoon: INFO: respond new phase 2 negotiation: ...
racoon: INFO: IPsec-SA established: ESP/Tunnel ...
racoon: ERROR: pfkey ADD failed: File exists

regards,
Jörg